Privacy Policy

Last updated July 24, 2026

This Privacy Notice for Living Stones (“we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

Download and use our mobile application (Living Stones), or any other application of ours that links to this Privacy Notice
Use Living Stones — a mobile app for capturing, sharing, and reflecting on how God is showing up in the user’s life and the lives of their community members
Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@livingstones.app.

Summary of Key Points

This summary provides key points from our Privacy Notice. You can find out more details about any of these topics in the sections below.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
Do we process any sensitive personal information? Some information may be considered “special” or “sensitive” in certain jurisdictions — for example, your religious beliefs. We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law.
Do we collect any information from third parties? We do not collect any information from third parties.
How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
In what situations and with which types of parties do we share personal information? We may share information in specific situations and with specific categories of third parties.
How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet can be guaranteed to be 100% secure.
What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.
How do you exercise your rights? The easiest way to exercise your rights is by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

What Information Do We Collect?
How Do We Process Your Information?
When and With Whom Do We Share Your Personal Information?
What Is Our Stance on Third-Party Websites?
Do We Use Cookies and Other Tracking Technologies?
Do We Offer Artificial Intelligence-Based Products?
How Do We Handle Your Social Logins?
How Long Do We Keep Your Information?
How Do We Keep Your Information Safe?
What Are Your Privacy Rights?
Controls for Do-Not-Track Features
Do United States Residents Have Specific Privacy Rights?
Do We Make Updates to This Notice?
How Can You Contact Us About This Notice?
How Can You Review, Update, or Delete the Data We Collect From You?

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information we collect may include the following:

Names
Phone numbers
Email addresses
Passwords
Contact preferences
Contact or authentication data

Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:

Information revealing religious or philosophical beliefs

Third-Party Account Login Data. We may provide you with the option to register with us using your existing third-party account details, like your Apple ID, Google account, Facebook, X, or other third-party account. If you choose to register in this way, we will collect certain profile information about you from the third-party provider, as described in the section “How Do We Handle Your Social Logins?” below.

Application Data. If you use our application(s), we may also collect the following information if you choose to provide us with access or permission:

Geolocation Information. We may request access or permission to location-based information from your mobile device to provide certain location-based services. Today we use this for one purpose: when you ask us to show churches and ministries near you, your approximate location is used to order those search results at that moment. We do not build a location history from it and do not use it to target you. You can search by name instead, and you can change our access or permissions at any time in your device’s settings.
Mobile Device Access. We may request access or permission to certain features from your mobile device, including your mobile device’s camera, contacts, microphone, calendar, sensors, social media accounts, and other features. If you wish to change our access or permissions, you may do so in your device’s settings.
Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system and version information, device and application identification numbers, browser type and version, hardware model, Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server).
Push Notifications. We may request to send you push notifications regarding your account or certain features of the application(s). If you wish to opt out, you may turn them off in your device’s settings.

This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for our internal analytics and reporting purposes.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services.

Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Policy: livingstones.app/cookie-policy.

The information we collect includes:

Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services, including your IP address, device information, browser type, and activity in the Services.
Device Data. Information about your computer, phone, tablet, or other device you use to access the Services, including IP address, device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
Location Data. We collect location data such as information about your device’s location, which can be either precise or imprecise. You can opt out of allowing us to collect this information by refusing access to it or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

Google API

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

To facilitate account creation and authentication and otherwise manage user accounts.
To respond to user inquiries / offer support to users.
To send administrative information to you, such as details about our products and services, changes to our terms and policies, and other similar information.
To enable user-to-user communications.
To request feedback.
To send you marketing and promotional communications, in accordance with your marketing preferences. You can opt out at any time.
To post testimonials (which may contain personal information).
To protect our Services, including fraud monitoring and prevention.
To evaluate and improve our Services, products, marketing, and your experience.
To identify usage trends.
To determine the effectiveness of our marketing and promotional campaigns.
To comply with our legal obligations.
To personalize content for the user. User-generated content is processed by Artificial Intelligence (AI) models to generate personalized reflections, suggestions, and other unique content.

In Short: We may share information in specific situations described in this section and/or with the following categories of third parties.

Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties designed to help safeguard your personal information. The categories of third parties we may share personal information with are:

AI Platforms
Church Management Systems
Cloud Computing Services
Data Analytics Services
Data Storage Service Providers
Email Delivery Services
Payment Processors
Performance Monitoring Tools
Sales & Marketing Tools
User Account Registration & Authentication Services

We also may need to share your personal information in the following situations:

AI Service Providers. When you use our AI-powered features (see Section 6), the content described there is shared with Google Cloud Vertex AI for processing on our behalf. This data is processed within Google Cloud and is not used to train the underlying models.
Payment Processors. We use RevenueCat to manage and validate Living Stones Plus subscription purchases. The actual payment is processed by the Apple App Store or Google Play; Living Stones does not receive or store your full payment card details.
Email Service Providers. We use Resend (Resend, Inc.) to deliver certain emails to you, including the monthly Month in Review recap email. Your email address and name are shared with Resend solely to send you these messages. You can opt out of non-essential emails at any time using the unsubscribe link in any such email or your in-app preferences.
Business Transfers. In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Affiliates. With our affiliates, in which case we will require those affiliates to honor this Privacy Notice.
Business Partners. With our business partners to offer you certain products, services, or promotions.
Other Users. When you share personal information or otherwise interact with public areas of the Services, such personal information may be viewed by all users and may be publicly available outside the Services in perpetuity.
Church Management Systems (Planning Center). If you join a church or ministry Organization on Living Stones — directly, or by joining or linking a Tribe that is connected to one — that organization’s leaders may connect Living Stones to their church management system, Planning Center. When they do, we share your name, email address, and profile photo with that organization’s own Planning Center account so your church can recognize you and follow up with you. This applies to current members and to members who joined before the connection was made, and new members are shared automatically as they join. We never share your Stones, prayers, comments, reflections, or any other content this way — only your name, email address, and profile photo. Short notices appear in the app at the moments you join, link, or request to join. If you leave the organization, we stop sharing your information going forward; information already added to the church’s system is controlled by that church, so contact them directly to have it removed. Planning Center’s own privacy practices are described at planningcenter.com.
Public Sharing Links. Living Stones lets you create a private link to an individual Stone so you can share that moment with people outside the app. When you create such a link, the Stone you selected — its title, text, photos or video, any Scripture references, its date, and your first name, last initial, and profile photo — becomes viewable by anyone who has the link, on a public web page, without a Living Stones account. Only you can create a link for your own Stones, only for the Stones you choose; other members cannot share your Stones this way. Links expire automatically after 30 days, and you can stop sharing at any time from the Stone. Content that was public while a link was active may have been viewed, saved, or copied by others. Your comments, reactions, Tribe or Organization identity, and any Stones you did not share are never included on these public pages.

4. What Is Our Stance on Third-Party Websites?

In Short: We are not responsible for the safety of any information that you share with third parties that we may link to or who advertise on our Services but are not affiliated with our Services.

The Services may link to third-party websites, online services, or mobile applications and/or contain advertisements from third parties that are not affiliated with us. We do not make any guarantee regarding any such third parties, and we will not be liable for any loss or damage caused by the use of such third-party websites, services, or applications. We are not responsible for the content or privacy and security practices and policies of any third parties. You should review the policies of such third parties and contact them directly to respond to your questions.

5. Do We Use Cookies and Other Tracking Technologies?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy: livingstones.app/cookie-policy.

6. Do We Offer Artificial Intelligence-Based Products?

In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.

As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (collectively, “AI Products”). The terms in this Privacy Notice govern your use of the AI Products within our Services.

Use of AI Technologies

We provide AI-powered features through Google Cloud Vertex AI, our AI service provider. Depending on the feature, the underlying language models may be developed by Google (Gemini) or Anthropic (Claude), in each case served within Google Cloud’s infrastructure. Content processed for these features is transmitted to and processed by Google Cloud Vertex AI; under Google Cloud’s terms, this data is not used to train Google’s or Anthropic’s models.

Our AI Products

Our AI-powered features help you reflect on and organize your own content — for example, generating personalized devotional recaps and reflections from your Stones (Month in Review, Daily Rewind, and Daily Rewind Plus), suggesting relevant Scripture to accompany what you write, searching your own Stones by meaning rather than keywords, and converting photos of your handwriting into text. When you use these features, the relevant content — such as the text or image you submit, or your own Stones used as context — is transmitted to and processed by Google Cloud Vertex AI as described above, used only to generate the requested result, and never used to train the models. AI-generated content may not always be accurate; it is provided to support, not replace, your own reflection. Scripture text shown by these features always comes from our own licensed Bible text database, not from the AI. The features below involve additional processing worth describing in detail:

Month in Review. Once a month, Living Stones can prepare a personal recap of your previous month — a reflection, in the voice of our companion character “Nim,” on the moments you chose to record. To generate it, the following content is processed by our AI service provider:

Your own content: the Stones and Reflections you wrote during that month, together with summary statistics about your activity (counts of Stones, themes, and similar figures that we compute ourselves — never by the AI).
Content already shared with you by your Tribes: Stones, and Reflections marked public, that members of your Tribes shared to those Tribes during the month. This content — which you can already see in the app — is analyzed only to identify shared themes across your community. Your recap’s community section names themes and totals; it is designed never to quote, name, or attribute any individual member’s content, and we enforce this with automated checks on every generated recap, not only with instructions to the model.

Your recap is generated only for you. If you choose to share it into a Tribe or Organization, recipients receive a reduced version containing only your own numbers, themes, and verse — never your Tribes’ community section and never other members’ content. Scripture text shown in recaps always comes from our own licensed Bible text database, not from the AI.

We may also email you a brief monthly summary linking to your full recap in the app. This email contains only your own activity — your totals, the theme you returned to, and a verse — and never includes the AI-written reflection or other members’ content. It is delivered through our email provider (see Section 3), and you can unsubscribe from it at any time.

Insights for church and ministry leaders. If you share a Stone or a prayer request with a church or ministry Organization, that content may be included in a monthly summary we prepare for that organization’s leaders. The summary has two parts: activity figures that we compute ourselves (never by the AI), and a written overview, generated by our AI service provider, of the themes the community has been walking through — gratitude, grief, a season of waiting, and so on.

Only content shared with that organization is used. Stones and prayer requests you kept private, or shared only with a Tribe, are never included.

The summary is designed to describe a community, not its individuals. It never quotes you, never names you as the source of a theme, and never reports on you individually. A theme is only surfaced when several different members have shared something like it, and a month is only summarized at all once enough different people have contributed — so a summary cannot be traced back to one person. As with Month in Review, we enforce these limits with automated checks on every generated summary, not only with instructions to the model.

If you would rather your writing not be part of this, share it privately or with a Tribe rather than with your church.

Creating a Stone from an image. Some of our AI features let you turn an image into a Stone. When you choose to photograph a handwritten page — or select a screenshot of your own writing — that image is sent to our AI service provider (Google Cloud Vertex AI) to read the text and prepare a draft Stone for you to review. We use the image only to create that draft: it is processed at the moment you request it and is not stored by Living Stones afterward, and — like our other AI features — it is not used to train Google’s or Anthropic’s models. You are always shown the transcription result before anything is saved, and you can edit or discard it.

How We Process Your Data Using AI

Recaps are generated when you first open them, stored in your account so they are never re-generated, and retained like your other content (see Section 8). Each recap records which model produced it. If you submit feedback on a recap (thumbs up/down), we store your rating, any categories or comments you provide, and the model information — we use this to evaluate and improve the feature. You can stop the processing described above at any time by deleting your account (Section 10); recap generation is also subject to feature controls we may operate centrally.

In Short: If you choose to register or log in to our Services using a third-party account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party account details, like your Apple ID, Google account, Facebook, X, or other third-party logins. Where you choose to do this, we will receive certain profile information about you from the third-party provider, which may include your name, email address, and profile picture, as well as other information you choose to make public.

We will use the information we receive only for the purposes described in this Privacy Notice or that are otherwise made clear to you on the relevant Services. We do not control, and are not responsible for, other uses of your personal information by your third-party provider.

If you choose to register or log in using your Apple ID, Apple will share with us your name and either your real email address or a private relay email address (if you choose to hide your email using Apple’s email privacy feature). We will use whichever email address Apple provides as your account contact address and will not attempt to resolve a private relay address to your real email address. Apple only shares your name on the first sign-in; subsequent logins will not re-send name information. You can review Apple’s privacy practices at apple.com/legal/privacy.

If you choose to register or log in using your Google account, we will receive your name, email address, profile photo, and a Google account identifier. Our use of information received from Google Sign-In adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can review Google’s privacy practices at policies.google.com/privacy.

8. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible, securely store your personal information and isolate it from any further processing until deletion is possible.

9. How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

10. What Are Your Privacy Rights?

In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us. Please note that this will not affect the lawfulness of the processing before its withdrawal.

Opting out of marketing and promotional communications: You can unsubscribe at any time by clicking the unsubscribe link in our emails, replying “STOP” or “UNSUBSCRIBE” to our SMS messages, or contacting us. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can log in to your account settings and update your user account. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and/or comply with applicable legal requirements.

If you have questions or comments about your privacy rights, you may email us at privacy@livingstones.app.

11. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

12. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have certain rights regarding your personal information.

Categories of Personal Information We Collect

Category	Examples	Collected
A. Identifiers	Contact details such as real name, alias, postal address, telephone number, unique personal identifier, online identifier, IP address, email address, and account name	YES
B. Personal information (California Customer Records statute)	Name, contact information, education, employment, employment history, and financial information	YES
C. Protected classification characteristics	Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data	NO
D. Commercial information	Transaction information, purchase history, financial details, and payment information	NO
E. Biometric information	Fingerprints and voiceprints	NO
F. Internet or other similar network activity	Browsing history, search history, online behavior, and interactions with our and other websites, applications, systems, and advertisements	YES
G. Geolocation data	Device location	YES
H. Audio, electronic, sensory, or similar information	Images and audio, video or call recordings	NO
I. Professional or employment-related information	Business contact details, job title, work history, and professional qualifications	NO
J. Education information	Student records and directory information	NO
K. Inferences drawn from collected personal information	Inferences drawn to create a profile or summary about an individual’s preferences and characteristics	YES
L. Sensitive personal information	Religious or philosophical beliefs	YES

We only collect sensitive personal information as defined by applicable privacy laws or for the purposes allowed by law or with your consent. We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months.

Your Rights

You have rights under certain US state data protection laws. These include the right to know whether we are processing your personal data; to access it; to correct inaccuracies; to request deletion; to obtain a copy of the data you previously shared; to non-discrimination for exercising your rights; and to opt out of processing for targeted advertising, the sale of personal data, or profiling.

How to Exercise Your Rights

To exercise these rights, you can contact us by emailing privacy@livingstones.app. Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf.

Appeals

Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing privacy@livingstones.app. If your appeal is denied, you may submit a complaint to your state attorney general.

13. Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Last updated” date at the top of this Privacy Notice. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

14. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at privacy@livingstones.app or contact us by post at:

Living Stones 110 Primera Dr San Antonio, TX 78212 United States

15. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. To request to review, update, or delete your personal information, please contact us at privacy@livingstones.app.