Effective August 23, 2026

Privacy, in plain language.

Your Daily Grace is built for a private part of life. We collect only what helps deliver the service, protect it, and make a member’s devotional better fitted—with limits on what personalization may use or repeat.

What we collect

We keep your email address, account and delivery settings, session information, and membership status. Stripe processes billing; Your Daily Grace does not store your card number. If you share a season or reflection, we store the reflection encrypted and may derive bounded context such as a general theme or reading preference. Raw encrypted reflections are deleted after 90 days. Derived context has its own expiration, generally 30–180 days depending on its source.

We record Amen and feedback choices. Ask records limited metadata needed to operate and protect the feature; Ask questions are not used to shape later devotionals by default. Replies sent as prayer requests are stored for human review, and do not receive an automatic AI reply.

Who processes data

OpenRouter routes AI requests used to create and review devotional material and derive bounded personalization context. Raw reflection prose is not sent for devotional generation. Cloudflare provides hosting, email delivery and routing, D1 database, R2 storage, and security infrastructure. Stripe provides payment and billing services. Their handling is governed by their own policies.

How we use and retain it

We use data to authenticate you, send devotionals, provide membership, remember permitted preferences, answer product requests, prevent abuse, and improve reliability. The goal is to make a lapsed member’s personal service dormant after 90 days. Operational metadata may remain longer when needed for security and integrity. Stripe retains billing and transaction records as legally required.

Cookies and sessions

We use a secure, same-site session cookie to keep you signed in. The site may also use limited analytics cookies or similar browser storage to understand site use. You can block cookies, though sign-in may stop working.

Your choices

You can turn morning email off without ending membership, and turn it on again in Account settings. Signed-in readers can download a JSON copy of their account data and delete their account. Deletion removes local access and personal data immediately; if a paid subscription is active, renewal is stopped at the period end. Stripe payment records may remain where law requires.

Our commitments

We do not sell personal data. The service is not directed to children under 13. We use encryption, access controls, and data minimization, but no online system can promise perfect security. We may revise this policy as the service changes and will update the effective date or provide appropriate notice.

Contact

For access, export, deletion, privacy questions, or concerns, email pray@yourdailygrace.com.