Hedraios privacy policy

The short version. Hedraios apps and services do not collect, store, share or use information about you unless you have explicitly said yes to a specific purpose. Every such choice starts switched off. You can change your mind at any time, and when you do, the collection stops and you can have what we hold deleted. We do not sell information, we do not run advertising or tracking, and we treat anything you record about your faith or your life as sensitive. The rest of this page explains that in detail.

Who we are and what this covers

Hedraios makes purposeful apps and practical resources for Christian practice. This policy is written and published by Hedraios, the operator of the apps, services and website described here. It covers:

Every Hedraios mobile app, including Monuments.
Hedraios web services that link to this policy, including Ready to Preach.
This website at hedraios.now.

Each app's support area has a privacy page that summarises how this policy applies to that app and notes anything specific to it. Where an app page says something more specific than this policy, the app page applies to that app. Nothing on an app page may weaken the commitments below.

Our commitment: opt-in, always

We do not collect or use information about you unless you have explicitly permitted it. That is the rule, and everything else in this policy follows from it.

Off by default. No collection, backup, sync, diagnostics, analytics, notification or device permission is switched on when you install or open a Hedraios app. Each one is off until you turn it on.
Opt-in, never opt-out. We never rely on a pre-ticked box, a buried setting, continued use, or silence as permission. If we have not asked and you have not clearly said yes, we do not have permission.
One purpose at a time. Permission is asked for and given per purpose. Saying yes to one thing (for example, reminders) is not permission for another (for example, crash reports).
Withdrawable at any time. Every permission can be turned off as easily as it was turned on. Withdrawal stops the collection immediately and entitles you to deletion of what was collected.
No penalty for saying no. Refusing a permission never locks you out of the rest of the app. The only thing you lose is the specific feature that needs that data, and we say which feature that is.

What explicit permission means

When a Hedraios app or service asks for permission, the request will:

Say in plain language what information is involved, why it is needed, and where it goes.
Be presented on its own, at the moment it becomes relevant, not bundled into terms of use or onboarding.
Start in the off position and require a deliberate action from you to switch on.
Tell you how to switch it off again.
Ask again if the purpose changes or expands. A yes to the old purpose is not a yes to the new one.

Some things you do are permission by their nature: creating an account is permission to hold the account details, making a purchase is permission to process the payment, and sending us an email is permission to read and reply to it. Even then, we use the information only for that purpose, and you can withdraw by deleting the account, or asking us to delete the correspondence.

What we never do

We never sell, rent or trade information about you, to anyone, for any reason.
We never include advertising networks, ad identifiers or behavioural tracking SDKs in our apps or on this site.
We never track you across other apps, websites or devices.
We never build profiles of you for marketing, scoring or targeting.
We never use what you record about your faith, prayer or personal life for anything other than the feature you chose.
We never use your content to train machine learning models without a separate, explicit, withdrawable permission for that specific use.
We never collect information from children knowingly without a parent or guardian's verifiable permission.
We never ask for your password by email or in a support conversation.
We never keep collecting after you have withdrawn permission.

On your device by default

What you create in a Hedraios app is stored on your device. Unless you explicitly turn on a feature such as backup, sync or sharing, no copy of your content leaves your phone and none exists on our servers. When you do turn such a feature on, we tell you exactly what will be stored, where, and how to turn it off and have it removed.

Your phone's own backup (for example, iCloud or Google backup) may include app data. That is controlled by your platform account and its settings, not by us, and it is covered by the platform's policy.

Information we may ask permission for

The following are the only categories of information a Hedraios app or service may ask to collect. Each requires its own explicit permission, is off by default, and can be withdrawn at any time. An individual app may use none or some of these; its privacy page says which.

Category	Why we would ask	How to withdraw
Account details (such as an email address and a display name)	Only if you create an account, to sign you in and to let you recover it.	Delete the account in the app, or ask us.
Content you create (entries, notes, recordings, media)	Stored on your device by default. Stored by us only if you turn on backup, sync or sharing.	Turn the feature off; delete items in the app; ask us to delete server copies.
Device permissions (notifications, camera, photos, microphone, location)	Only for the specific feature that needs them, requested at the moment you use it.	Turn it off in the app or in your phone's settings.
Crash and diagnostic reports	To find and fix bugs. Contains technical details about the failure, never your content.	Turn diagnostics off in the app's settings.
Usage information (which features are used, how often)	To understand what helps and what does not. Aggregated, never tied to your content.	Turn usage sharing off in the app's settings.
Purchase and subscription status	Only if a product has paid features, to unlock what you bought. Payment details stay with the store or payment processor.	Cancel through the store or the service; ask us to delete records we hold.
Correspondence	When you email us, so we can reply and act on your request.	Ask us to delete the correspondence.

If an app ever needs something outside this list, this policy will be updated first and the app will ask for that new permission explicitly. It will not be assumed.

Faith, prayer and other sensitive content

Much of what people record in Hedraios apps is personal: prayers, moments of God's faithfulness, struggles, reflections and relationships. We treat all of it as sensitive information, whatever the law in your country calls it. That means:

It stays on your device unless you explicitly choose to store it elsewhere.
If you do store it with us, it is used only to give you back your own content on your own devices, or to share it with people you chose.
It is never read by a person at Hedraios except when you ask for help with a specific item and give it to us for that purpose.
It is never used for analytics, advertising, profiling or model training.
Sharing it with anyone else, including a church or group, happens only when you choose to share a specific item with a specific recipient.

How we use permitted information

We use information only for the purpose you permitted it for. In practice that means:

To provide the feature you turned on, such as syncing your content between your devices.
To keep your account secure and let you recover it.
To fix bugs you have chosen to report to us.
To understand, in aggregate, whether a feature is useful, if you chose to share usage information.
To reply to you and act on your requests.
To meet a legal obligation we cannot avoid, in which case we will tell you unless the law prevents it.

Where privacy law asks for a legal basis, ours is your consent for everything above except the handling strictly required to deliver something you bought or requested, and the rare legal obligation.

We share information only as far as needed to deliver what you permitted:

Service providers that host, store or transmit data on our behalf (for example, a hosting provider for sync, a payment processor for purchases, an email provider for support). They act under our instructions, for the purpose you permitted, and may not use the data for their own ends.
People you choose, when you use a sharing feature to send a specific item to a specific person or group.
Authorities, only where a valid legal demand requires it and no lawful way to refuse exists.

Each app's privacy page names the providers that app actually uses, if any. We do not share information with advertisers, data brokers, analytics networks or anyone else.

How long we keep it

We keep information only as long as the feature you permitted needs it. Content stored with you for sync is kept until you delete it or withdraw permission. Account details are kept until you delete the account. Diagnostic and usage information is kept for a short, fixed period and then deleted or reduced to counts that cannot identify you. Correspondence is kept while it is useful for responding to you and then deleted. When you withdraw permission or ask for deletion, we delete promptly; copies in our own backups age out on a fixed schedule and are not restored.

Withdrawing permission and deleting data

You can withdraw any permission at any time, and you do not have to give a reason.

In the app. Turn the feature off in settings. Collection stops immediately.
On your device. Delete items inside the app, or delete the app to remove everything stored locally.
Your account. If an app offers accounts, it offers account deletion inside the app. Deleting the account deletes everything held with it.
By email. Write to the address on the app's support page or the contact below and tell us what to delete. We may ask you to confirm from the same email address or account so nobody else can delete your data. We will never ask for your password. We confirm by email when it is done.

Each app has its own delete-your-data page with the exact steps for that app. Deleting data does not cancel a store subscription; cancel that through the store.

Delete your Monuments data

Your rights

Wherever you live, we will honour these requests about information we hold about you: to know what we hold, to receive a copy in a usable format, to correct it, to delete it, to restrict or object to how it is used, and to withdraw consent. We will not treat you differently for exercising them. Depending on where you live (for example, the European Economic Area, the United Kingdom, or a US state with a privacy law) you may also have a right to complain to a supervisory authority. Write to us first and we will do our best to resolve it directly.

Security

Information stored on your device is protected by your device's own security. Information you permit us to hold is protected in transit and at rest, access is limited to what is needed to run the feature, and we review that access. No system is perfectly secure; if a breach affects information we hold about you, we will tell you and the relevant authorities as the law requires.

Children

Our apps are not directed at children under 13, and we do not knowingly collect information from them. If a Hedraios app is ever made for children or families, it will require a parent or guardian's verifiable permission before any collection, and this policy will say so. If you believe a child has given us information without that permission, contact us and we will delete it.

App stores and platforms

Apple, Google and your phone's operating system collect their own information when you install, update or pay for an app, under their own privacy policies. We do not receive that information from them beyond what is needed to deliver a purchase, and we do not control what they collect.

This website

This website is static. It has no accounts, no forms, no comments, no analytics and no cookies of its own. The two places where information can exist are:

Hosting logs. The site is served by Vercel, whose infrastructure may record standard request details (IP address, page requested, time, browser type) for security and reliability. We use these only to keep the site running and do not combine them with anything else to identify you.
Email you send us. Every contact route here is an email address. Writing to us is permission to read and reply. We keep correspondence only while it is useful and delete it on request.

Fonts are served from this site's own domain, so loading a page does not contact a third-party font service.

Ready to Preach and other services

Ready to Preach is a Hedraios marketplace for sermon resources that runs on its own site at readytopreach.com. This policy applies to it. Because it is a marketplace, creating an account and making a purchase are the explicit permissions that allow it to hold your account details and process payment; those are used for that purpose only, and account deletion is available there. Any additional service-specific detail is published on that site alongside a link to this policy.

Where information is processed

Hedraios operates from the United States, and service providers we use may process information there. If you use our apps or services from elsewhere, information you permit us to hold is transferred to and processed in the United States under this policy and the protections described here.

Changes to this policy

If this policy changes, the effective date at the top changes with it and the change is described on this page. A change will never reduce the opt-in commitment above. If a change would let us collect or use something new, the app will ask for that permission explicitly; it will not be assumed from the update.

Contact

Questions, requests and complaints about privacy:

A monitored address for this is being set up and will be published here once a test message has been received.

For help with a specific app, use the address on that app's support page.