Triad is a faith and wellness app that handles genuinely private things — prayers, moods, journal entries, and conversations with mentors. This policy explains exactly what we collect, what we never collect, and how to erase all of it.
1. What stays only on your device
The following is stored locally on your iPhone and is never transmitted to us:
- Journal entries and sticky notes.
- Daily mood check-ins and mood history.
- Saved verses and your avatar design.
- Your list of blocked accounts.
If you delete the app, this data is gone with it.
2. What we store on our servers
- An anonymous account identifier generated on your device. It is not linked to your name, email, or phone number unless you apply to be a mentor.
- Prayer requests and testimonies you choose to post publicly, plus their comments and reactions.
- Messages between you and a mentor you subscribe to, including voice notes, so they sync across your devices and the mentor can read them.
- Subscription and payment records — which mentor, which plan, and amounts.
- Reports you file about content, and moderation decisions.
- Mentor applications, if you apply: your real name, email, phone, church, credentials, references, and any credential photo you upload.
3. What we never collect
- Your card number or bank details — these go directly to Stripe and never touch our servers.
- Your contacts, photo library, or precise location. (If you enable location for finding nearby mentors, we use a coarse region and do not store your coordinates.)
- Advertising identifiers. Triad contains no ads and no third-party ad SDKs.
- Anything you type into the crisis-support flow. Crisis language is detected entirely on your device and is never transmitted, logged, or attached to a report.
- Call audio and video. Calls travel directly between the two phones. Nothing is recorded, stored, or routed through a server we could listen to. Section 6 covers the one narrow exception about relaying.
4. Camera and microphone
Triad asks for your microphone in two places: recording a voice note for a mentor, and taking part in a call. It asks for your camera only for a video call. Both prompts appear the first time you use that feature rather than at launch, and both are optional — decline the camera and you can still join a call with audio, and you can mute or stop your camera at any point during one. Nothing is captured while you are not in a call or actively holding the record button.
5. How your data is protected
- All network traffic uses TLS 1.3 encryption in transit.
- Call audio and video are encrypted end-to-end with DTLS-SRTP, the encryption WebRTC requires and does not allow to be switched off. Our servers pass along only the connection details two phones need in order to find each other — never the picture or sound, and never a key that could unlock them.
- Server data is stored encrypted at rest on Cloudflare's infrastructure.
- Sensitive credentials on your device are stored in the iOS Keychain, protected by the Secure Enclave.
- Administrative access requires a server-verified secret key that never ships inside the app, and every moderation action is recorded in an audit log.
6. Who else sees data
We share the minimum necessary with a small number of processors:
- Cloudflare — hosting, data storage, and the STUN/TURN network that lets two phones on a call reach each other. When a restrictive network blocks a direct connection, the call is relayed through Cloudflare while still encrypted end-to-end, so neither Cloudflare nor Triad can see or hear it.
- Stripe — payment processing and mentor payouts. Stripe's own privacy policy governs card data.
- Resend — sending email verification codes to mentor applicants.
- Anthropic (via the Rork AI gateway) — used in three narrow places, all optional and none of them member-facing chat: drafting a suggested reply for a mentor, drafting a mentor's group check-in message, and taking notes while you wait on a Help Center call. Only the text needed for that one task is sent. Your journal, moods, and saved verses are never sent anywhere. Nothing is used to train models.
We do not sell personal data, and we do not share it for advertising. We disclose data to law enforcement only where legally compelled, or where there is a credible threat to someone's life.
7. How long we keep things
- Mentor messages and public posts: until you delete them or delete your account.
- Rejected mentor applications: 90 days, then permanently erased.
- Moderation reports: 12 months, so repeat offenders can be identified.
- Payment records: 7 years, as tax law requires. On account deletion these are stripped of any link to you — what remains is an amount and a date.
8. Deleting your account
Settings → Safety & privacy → Delete my account. This erases your prayer requests, testimonies, comments, reactions, mentor messages, subscriptions, reports, and any mentor application — from our servers and from your device. It cannot be undone. The only thing retained is the anonymised payment record described above.
9. Children
Triad is rated 17+ and is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, email us and we will delete it.
10. Your rights
Depending on where you live, you may have the right to access, correct, export, or erase your personal data, and to object to processing. The in-app deletion tool satisfies the erasure right immediately. For anything else, email triad4022@gmail.com and we will respond within 30 days.
11. Data breach procedure
If a breach affects your personal data, we will notify affected users in the app and by email where we have one, and notify the relevant supervisory authority, within 72 hours of becoming aware.