Privacy Policy

Last updated 25 September 2026

1. Who we are

Cross provides a faith-based support app for churches and their congregants, operated from Singapore. This policy explains what we collect when you use Cross and what we do with it. See also our Terms of Service.

2. What we collect

Congregants

• Email address, to send your sign-in code and keep your account.
• Settings: language, Prayer Closet on/off, and the church whose tag you last opened.
• Heart check-ins: the mood you choose and your 1–10 ratings before and after, so you can see them on any phone.
• Conversations with the Faith Companion: sent to our AI provider to write replies. They are stored in your account only if you turn Prayer Closet off, and deleted when you turn it back on.
• Personal prayer requests: sent to our AI provider to write your prayer, then discarded. We keep only a count.
• Usage counts: which features were used (for example “a breathing session finished”) and how many AI messages an account sent, to show churches totals and to apply fair-use limits. Message counts are kept for up to 3 days.
• Safety alerts: if words about self-harm, abuse or danger are detected, we record that it happened and for which church, never the words, and show crisis resources.
• Tag taps: when a church’s tag or QR code is opened, we count the tap. No person or device is recorded.
• Cross Plus payments: handled by Stripe. We never see or store your card number.

Churches

• Account details (email, your name, church name; passwords are stored only as secure hashes), timezone, logo, colours, tag names.
• Plan and billing status from Stripe (not card numbers).

Website visitors

• Our public website and church dashboard use privacy-friendly page analytics (page views, referrer, country, device type) without cookies. The congregant app is not included.
• Server logs (such as error messages) kept by our hosting provider for a limited time to keep the service running.

3. What churches can see

Churches see totals only: numbers of check-ins, people, conversations, exercises, tag taps and safety alerts, and a mood breakdown once there are at least 5 check-ins in the period. They never see names, email addresses, or anything a congregant wrote.

4. Who we share data with

We use these service providers to run Cross, each only for its part of the service:

• Supabase: database, sign-in and file storage (data stored in Singapore).
• Vercel: website hosting and privacy-friendly analytics.
• Anthropic: the AI model that writes companion replies and prayers.
• Stripe: payments and tax.
• Our email provider, to send sign-in codes and account emails.

We don’t sell personal data. We will disclose information if the law requires it.

5. How long we keep it

• Accounts, settings and check-ins: until the account is deleted.
• Saved conversations: kept in your account only while Prayer Closet is off, until you turn it back on or delete your account.
• AI message counts: up to 3 days. Usage totals and tag taps: kept without identifying anyone.

6. Your choices and rights

• Turn Prayer Closet on at any time to delete saved conversations.
• Ask us for a copy of your data, to correct it, or to delete your account, using the contact details below.
• You can also contact your local data protection authority (in Singapore, the Personal Data Protection Commission).

7. Security

Data is encrypted in transit, access is limited by database rules so each person and church can reach only their own data, and payment details stay with Stripe.

8. Children

Cross is intended for people aged 13 and over. If you believe a younger child has created an account, contact us and we will delete it.

9. Changes

We will post updates here and tell account holders by email about important changes.

10. Contact

Privacy questions and requests: the contact form on our Help page.