Christ Fields
Privacy Policy
Effective September 3, 2026
The short version
We collect only what we need to bring you Scripture and run the apps you choose to use. In GraceFlow, most of your activity stays on your own device. We never sell your information, we run no advertising trackers, and your faith and reflections belong to you. This page explains exactly what we gather, why, who helps us run the service, and the rights you have over your data.
1. Who we are
Christ Fields (“Christ Fields,” “we,” “us”) is a Christian technology company based in Colorado, United States. This policy covers the Christ Fields website (christfields2717.com), the GraceFlow app, the LearnFlow study tier, the FaithFlow community framework, and ScholarFlow. If you have any question about your privacy, write to us any time at proverbs@christfields2717.com.
2. The information we collect
Information you give us. When you create an account we collect your name, email address, and (if you sign in with a provider) your profile photo. When you fill out a form on our site we collect your name, email, and the message you send. When you subscribe to GraceFlow+ or LearnFlow, your payment is handled by Stripe; we receive your subscription status, never your full card number.
Content you create. Depending on the features you use, this can include journal entries, mood check-ins, prayer requests, memory verses, progress scores, reading progress, and anything you type into the scripture AI companion. Because this content can reveal your religious beliefs and your wellbeing, we treat it as sensitive and use it only to provide the service to you, with your consent.
Information collected automatically. Like almost every website, our servers record technical data such as your IP address, browser and device type, and timestamps. We use this to deliver the site, keep it secure, and limit abuse (for example, rate-limiting form submissions). We do not use it to build advertising profiles.
On your device (GraceFlow). When you use GraceFlow without an account, your journal, streaks, and progress are saved in your browser’s local storage and stay on your device. They are not sent to us unless you create an account and turn on cloud sync. You can clear them any time from your browser.
3. How we use your information
- To provide and operate the apps and features you choose to use.
- To sync your content across your devices when you sign in.
- To process subscriptions through Stripe.
- To send you the emails you ask for (a reply to your message, a welcome note).
- To generate a Scripture response when you use the AI companion.
- To keep the service secure, prevent abuse, and fix problems.
- To meet our legal obligations.
Where the law requires it, our basis for handling sensitive faith and wellbeing content is your consent. You can withdraw that consent at any time by closing your account or writing to us.
4. The AI companion
When you type into the Scripture companion in GraceFlow, the text you enter is sent to NVIDIA to generate a Scripture-grounded response. Please do not enter information you would not want processed by a third party, such as other people’s full names, or financial or medical details. We do not sell what you type, and we do not use it to train our own models. NVIDIA processes it under NVIDIA’s own terms. A daily limit applies to keep the feature free and available to everyone.
5. Who we share information with
We do not sell your personal information, and we do not share it with advertising networks. We use a small set of trusted service providers to run Christ Fields. Each handles only what it needs to:
- Clerk — accounts and sign-in.
- Supabase — secure storage of the content you save.
- Stripe — payment processing for subscriptions.
- Resend — sending the emails you request.
- NVIDIA — the AI model behind the Scripture companion.
- Netlify — website hosting and delivery.
- Google Calendar — only if you connect it yourself (see 5a).
- Apple, Google, and Mozilla push services — only if you turn on phone alerts.
- GoatCounter — optional, cookieless, privacy-friendly visit counting, only if we enable it.
FaithFlow groups (the schedule). If you join a FaithFlow group, the members of your group can see your first name and profile photo next to the plans you say you are coming to or are not sure about. Only your leaders can see when you say you cannot make it, whether you came, and the one-line plan you give before a gathering. If you tell us which times you are usually free, your leader sees only “free” or “busy” for a morning, afternoon, or evening, never what you are doing. Prayers you post on the group wall are visible to your group.
Phone alerts. If you turn on alerts, your browser gives us an address for your device (a push subscription) so we can tell you when a leader posts, changes, or calls off a plan, and remind you the day before. It contains no personal details, it is tied to your account, and we delete it when it stops working or you turn alerts off. Alerts are delivered through your browser maker’s push service (Apple, Google, or Mozilla).
A quiet question. Once a week the app offers one question you may answer in private. Your answer is stored encrypted; we do not read it, no leader can see it, only your signed-in account opens it, and you can delete it at any time. When you save it, the app looks for a theme word (such as “grief” or “work”) using a fixed word list on our own server; nothing you write is sent to any outside service or model. You confirm or correct that word. Your group’s leaders may then see theme words for the group as a whole, never your words, never your name, never a count, and only once at least three people have written that fortnight. You can switch even that off on the You page. One exception, for your safety: if what you write matches patterns about suicide, self-harm, or being harmed, the app shows you the 988 Suicide & Crisis Lifeline and sends the leaders of your groups, and Christ Fields, one private note that someone needs a person this week, with no words, no theme, and no name unless you choose to give it with one tap.
Calendar links you paste. If you paste a private calendar link so your busy times fill in automatically, we store that link encrypted, read it regularly (about twice a day), and keep only which mornings, afternoons, and evenings are busy for the next four weeks. Event titles, places, and people are read and discarded and never stored.
We may also disclose information if the law requires it, or to protect the safety and rights of people using our services.
5a. Google Calendar
You can choose to connect your Google Calendar in two separate ways, each with its own permission screen from Google, and neither is required to use Christ Fields.
- Put our events on your Google Calendar. With the Google permission to manage calendars this app creates, we create one calendar named “Christ Fields” in your Google account and place your group’s plans on it, updating them when a leader changes or calls something off. This permission does not let us see any other calendar or event of yours.
- Help your leader pick a time. With the Google permission to view your availability, we ask Google regularly (usually every hour) whether you are free or busy over the next four weeks and keep only “busy” marks for a morning, afternoon, or evening. Google never sends us titles, places, or attendees, and we store none.
We store the Google token that grants these permissions encrypted, use it only for the two purposes above, and never sell, share, or use Google user data for advertising, for training models, or for any other purpose. Tap Disconnect on your You page at any time: we remove the Christ Fields calendar from your Google account, revoke our access, and delete everything we held from Google. You can also remove Christ Fields under Security in your Google account. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
6. Cookies and local storage
When you sign in, Clerk sets cookies that are necessary to keep you logged in securely. GraceFlow uses your browser’s local storage to hold app data on your device. We do not use advertising cookies or cross-site tracking. If we ever turn on visit analytics, it is GoatCounter, which is cookieless and collects no personal data.
7. Children’s privacy
Christ Fields services are intended for people aged 13 and older. They are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has given us personal information, please contact us at proverbs@christfields2717.com and we will delete it promptly. If a younger child takes part through a church or family (for example, a youth group using FaithFlow), they should do so through a parent’s or leader’s account, not their own.
8. How long we keep it
We keep your information for as long as your account is active and as long as we need it to provide the service or to meet legal obligations. When you ask us to delete your account or your data, we do so, except for the limited records we are required to keep by law. On-device GraceFlow data stays until you clear it.
9. How we protect it
We protect your information with encryption in transit (HTTPS/TLS), access controls, server-side secret keys that never reach your browser, and a least-privilege approach to who and what can read your data. No method of storage or transmission is ever perfectly secure, but we work to hold your trust the way the mission deserves.
10. Your rights and choices
Depending on where you live, you have rights over your personal information. Residents of Colorado (under the Colorado Privacy Act), California, Virginia, and a growing number of other states have the right to access the data we hold about you, correct it, delete it, and receive a copy. Because we do not sell data, run targeted advertising, or profile you, there is nothing to opt out of on those fronts, but you may still ask us to confirm that.
To exercise any right, email proverbs@christfields2717.com. We will respond within the time the law allows (generally up to 45 days). We will never treat you differently for exercising your rights.
11. International users
Christ Fields is operated from the United States, and your information is processed in the United States. If you use our services from the European Union or the United Kingdom, you have rights under the GDPR and UK GDPR, including access, correction, erasure, restriction, portability, and objection. Where we handle sensitive faith or wellbeing content, our lawful basis is your explicit consent, which you can withdraw at any time.
12. Changes to this policy
As Christ Fields grows, we may update this policy. When we do, we will change the date at the top of this page, and for any significant change we will give clearer notice. Please check back from time to time.
13. Contact us
Christ Fields · Colorado, United States
proverbs@christfields2717.com
“Whatever you do, work at it with all your heart, as working for the Lord.”