1The short version
We sell nothing, we show no ads, and we do not track you around the internet. What you write in your group is readable by the men in your group. What you mark private stays on your device. You can delete all of it.
This section is a summary, not the agreement. The rest of the page is.
2Who we are
Watchfire is operated by [LEGAL ENTITY NAME], [MAILING ADDRESS]. We are the controller of the personal information described here. Contact us at [PRIVACY EMAIL].
3What we collect
What you give us
- Account — your first name and last initial, email address, and password. We do not ask for your full legal name, your address, or your phone number.
- Dates you choose to enter — your birthday, the day you were baptised, your wedding anniversary, your wife's birthday, your children's first names and birthdays. All optional. You decide which your group can see.
- What you write — check-ins, journal entries, group posts, prayer requests, and anything you upload.
- Habit and streak data — which habits you track and whether you marked them done.
- Church and group — the church you joined under and the group you are in.
What we collect automatically
- Device and browser type, operating system, and approximate region derived from your IP address.
- Basic usage needed to run the Service: when you logged in, which screens loaded, errors.
- Whether a devotional was marked done, marked as landing, or sent on. These are counted in aggregate to decide which devotionals stay in rotation.
We deliberately do not record how long you looked at a screen, how far you scrolled, or how fast you left. An app that measures attention ends up written to hold it, which is the thing this one exists to be the opposite of.
What we collect if you pay
Payments are handled by [PAYMENT PROCESSOR]. They receive your card details directly. We never see or store your full card number. We receive your subscription status, the last four digits, and the card brand.
4Health and fitness data
If you connect a watch or tracker, or type the numbers yourself, we may receive steps, workouts, calories, sleep, heart rate and weight.
This is health data, and we treat it as the most sensitive thing on the Service. It is never shown to your group, never shown on Glory, never sold, never shared with an advertiser, and never used to target anything at you.
Your group only ever sees whether you showed up — never a weight, a calorie count, a distance, or a dollar amount. You can disconnect a tracker at any time in Settings, and you can delete the health data we hold without deleting your account.
We are not a healthcare provider and this data is not a medical record. HIPAA does not apply to it. Some state laws, including Washington's My Health My Data Act, give you specific rights over it — see section 12.
5Why we have it
- To run the Service — show you the right devotional, keep your streak, put you in your group.
- To let your group see you showed up — the point of the thing.
- To tell your pastor a man has gone quiet — he sees that you have not opened it, never what you wrote.
- To decide which devotionals stay in rotation — counted in aggregate, never tied to your name.
- To take payment and prevent fraud.
- To keep people safe — reviewing flagged content and enforcing the Terms.
- To meet legal obligations.
Where the law requires a legal basis, ours is performing our contract with you, our legitimate interest in running and securing the Service, your consent where you gave it (connecting a tracker, sharing a date), and compliance with law.
6Who can see what
- Your group — your name as you set it, whether you checked in, your streak, what you wrote in the group, and whichever dates you chose to share.
- Your pastor and his staff — that you are in a group and whether you have gone quiet. Never what you wrote, unless you posted it where he can see it or someone flagged it.
- Everyone on Watchfire — only aggregate totals on Glory. No names, ever.
- Only you — your journal, anything you marked private, your health data, your financial numbers, and your private prayer list.
- Us — we can access content when investigating a flag, fixing a fault, or complying with a legal demand. Not otherwise, and not casually.
A closed group is private from the public. It is not confidential and not privileged. Every man in your group can read what you write and nothing stops him repeating it.
7What we never do
- We never sell your personal information, and we never share it for cross-context behavioural advertising. We have no advertisers.
- We never show your health, financial or journal entries to your group, your pastor, or anyone else.
- We never use what you write to train a machine learning model.
- We never put third-party advertising or analytics trackers in the app.
9Men aged 16 and 17
Nobody under 16 may use the Service. If we learn an account belongs to someone under 16 we close it and delete what we hold.
For 16 and 17 year olds, a parent or guardian must approve the account first. That parent can read everything in the group, can ask us for a copy of what we hold, and can require us to delete it. Under-18s are never grouped with adults, there is no private messaging, and no way for an adult to find or contact them through the Service.
We do not sell or share the personal information of anyone under 18 for any purpose, and we do not use it for targeted advertising.
10How long we keep it
- Your account and content — while your account is open.
- After you delete your account — removed from live systems within [30] days, and purged from backups within [90] days.
- Payment records — kept as long as tax and accounting law requires, typically seven years.
- Aggregate counts — the totals behind Glory and the devotional rankings are not tied to you and are kept indefinitely.
11Deleting your account
You can delete your account in Settings. It takes one confirmation and we do not make you email anyone or sit through an offer.
What you posted in a group may remain visible to that group unless you delete it first, so delete those posts before you close the account if that matters to you.
12Your rights
Depending on where you live you may have the right to:
- Know what we hold about you and get a copy.
- Correct it.
- Delete it.
- Opt out of sale or sharing — we do neither, so there is nothing to opt out of.
- Withdraw consent you gave, such as for a connected tracker.
- Not be discriminated against for exercising any of these.
- Appeal if we refuse a request.
Write to [PRIVACY EMAIL]. We will verify it is you and respond within the time the law allows, normally 45 days. You may use an authorised agent.
If you are in the UK or EU you may also object to processing, ask us to restrict it, ask for your data in a portable format, and complain to your local supervisory authority.
13How we protect it
Data is encrypted in transit and at rest. Access by our staff is limited to those who need it. We use the security features of our providers and review access periodically.
No system is perfectly secure, and we cannot guarantee the security of what you send us. If a breach affects your personal information we will notify you and the regulators as the law requires.
15Where your data lives
We store and process information in the United States. If you use the Service from elsewhere, you understand it will be transferred to and processed in the United States, where privacy law differs from your own. Where required, we rely on Standard Contractual Clauses for transfers out of the UK and EU.
16Changes to this policy
We may update this policy. If a change matters, we will tell you in the app or by email before it takes effect. The version and date at the top always say which one is current.
17How to reach us
[LEGAL ENTITY NAME]
[MAILING ADDRESS]
[PRIVACY EMAIL]
If you prefer to write rather than email, use the postal address above and mark it for the attention of privacy.