Privacy

You choose how much is shown

Every Battle Signal has a disclosure level: status only, category, details, or full. People you share with see only what that level allows, and only if they are in the audience you chose (your circle, friends, a group, your church, or just you). Holding the church leader role gives no access to groups: only an accepted member can see who is in a group, and only the group's own leader can invite people. A Victory Report shared anonymously hides your name, the link to your battle and the sender; its category is shown only to people who could already see the category. People who prayed may still recognise the story from its timing or details. A Shield Circle report is shown only to accepted members of your own circle. Everyone who prayed is still told that a report was shared (without your name if you shared it anonymously). Only you are shown, on the battle page, whether a Victory Report exists for it; people who prayed are notified when one is published. If you are removed from a church, you are also removed from that church's groups and your signals are removed from them.

Churches, groups and leaving

You belong to at most one church. Anyone can start an invitation-only small group without a church and invite their connections; a church group invites members of that church. If you ask to join a church, its leaders and admins (unless blocked with you) see your request: your name, handle and the message you write. A decline is silent, so no notification is sent to you.

When a group leader hands over leadership, the new leader is told. The hand-over is also kept in an operator-only audit record; church leaders cannot see it, and cannot take or force a hand-over. Pending invitations sent by a leader who steps down stay valid.

If you leave a church, you are removed from its groups and prayer teams. Signals you shared with that church or its groups are no longer visible there, and prayer watches that depended on the church end, in both directions, whether you were the one watching or being watched. Your church-less groups are not affected.

If a church applies to be listed, we store the church name, city, region, website and message. Site reviewers, whom the operator designates, read the application and the applicant's name and handle. On approval the applicant becomes the church's admin. The note a reviewer writes is shown to the applicant.

Redaction happens on the server

Other people cannot read your signals directly from the database. They receive them only through the server, which sends just what their level allows, so hidden parts never reach their device. They are not merely hidden on screen. Live updates to a signal itself carry no content, only a notice that something changed, and the content is then fetched through the same server check. Blocks work the same way: if either of you blocks the other, shared access is removed in both directions.

Automated safety screening

Signal titles and notes are checked automatically for crisis wording so that help can be offered. The result is stored as a safety flag on the signal. People at category level or above may see a short care note if the signal is in a sensitive category or matches. Below that level everyone sees the same generic note, so it reveals nothing about the signal.

No ads, no selling

There are no advertisements and we do not sell or rent your information. Faith and suffering are never scored or ranked.

What is stored

When you have an account we store your name and handle, your email and sign-in details, your connections, circles, church membership, join requests and church applications, your signals (with their safety flag) and the prayers and Scripture sent in reply, your messages, notifications and preferences, reports and blocks involving you, and similar activity records (check-ins, watches, updates, Victory Reports, groups, saved verses, audit and rate-limit records).

If you share a church with the person, leaders of one church you both belong to (never the person you reported) see the report: your name, reason and details, and the parts of the signal you could already read. If no such leader exists, no leader receives it; blocking still works immediately, and if someone is in danger call emergency services. Leaders never see anyone's journal.

Minimum age

You must be 16 or older to have an account. When you register we ask for your date of birth. It is checked in your browser and is never sent to us or stored. We keep only the fact that you confirmed you are 16 or older, and when. That record is included in your data export and removed when you delete your account.

If the check shows you are under 16, nothing is sent to us. Your browser keeps a short note holding just a time, for 24 hours, so the form is not simply retried. You can clear it at any time by clearing your browser storage. We do not knowingly hold data about anyone under 16.

Services we use

The site runs on our own server and is reached through Cloudflare, which carries all traffic to and from it. Supabase provides the database, sign-in and account emails. Cloudflare Turnstile, when enabled, checks that sign-in, registration and password reset requests come from a person. If configured, an error webhook receives error records containing only the page route, error type and time, with no messages, ids or email addresses.

Your private journal

Private prayer journal entries can be read only by you. They are never shared, never trigger notifications, cannot be reported, and are not part of moderation. They are included when you export your data and removed when you delete your account.

Entries are encrypted at rest, but they are not end-to-end encrypted. This means the people who operate the database could technically access them. If that trade-off is not right for you, please do not write anything in the journal that you would not want them to be able to read.

Export and delete

In Settings you can download a copy of your data and delete your account. Deleting needs a recent sign-in as a safeguard. Your account link is removed from reports, but the report text remains.

Demo Mode

In Demo Mode everything you enter stays in your own browser (local storage). It is not sent to us. Clearing your browser data removes it.

Crisis help

Crisis resources are always available and never require an account. This app cannot call emergency services for you.

Contact

A contact address is coming soon.