Privacy

This page describes, as plainly as we can, what is stored when you use Walking in Wisdom, who can see it, and what is and is not yet built. Where something is an intention rather than a finished commitment, we say so directly rather than implying more than is true.

What is stored

• Account details: your name if you give it, your email address, and a broad location (country, state or region, and city, but never a street address), so that we can understand where people are engaging with faith questions.
• Your conversations: the questions you ask and the answers you receive, kept under your account so you can return to a conversation later.
• Your response preferences, such as tone and which kinds of supporting material you want to see.
• A technical record of each call made to the underlying AI system for every question, including the question and answer text and timing information, kept for quality review and safety monitoring of the system itself.
• If a message is flagged by our safety check as a possible sign of crisis or abuse, a short excerpt (up to 280 characters) is kept so the flag can be reviewed.
• Anonymous theme data describing broadly what kinds of things people are asking about. This is never the words you actually used; see “How aggregated church insight works” below.

Third-party processing

Answers are generated using OpenAI's API. Your question, and the Scripture or library material relevant to it, are sent to OpenAI in order to generate a response. Your question text is therefore also subject to OpenAI's own data-handling terms, in addition to ours.

Never shared with a church, or any third party, in identifiable form

Nothing about your specific conversation, including your questions, your account, or your identity, is ever shared with a church, a pastor, or any other third party. What a church may receive is described below, and it is aggregate only.

How aggregated church insight works

Each question is classified into a broad theme, such as grief and loss, or doubt and faith struggles, along with a short description of the angle it takes. The words you actually typed are never stored as part of this and are never passed along. Separately, broad reader geography is aggregated into counts by country, state, and city.

These two views are deliberately kept apart from one another. Theme data is not currently linked to a specific location, so it is not possible to know that a particular person, or even a particular place, asked about a particular theme. Only that a theme is occurring at all, and roughly where readers as a whole are located.

Does a human ever read a conversation?

Yes, in specific and limited circumstances, and we would rather say this directly than let the question go unanswered.

• If a message is flagged as a possible crisis or abuse concern, a short excerpt is reviewed by an operator so the flag can be checked.
• Operators of the system also have technical access to the record described above, for quality review, debugging, and safety monitoring of how the system is performing. This is an operational tool, not routine reading of conversations, but the technical ability exists and we want to be direct about that rather than imply otherwise.

Outside these cases, conversations are not routinely read by staff.

Deleting your data

• You can delete an individual conversation yourself from within the chat. This removes the conversation and its messages from your account immediately.
• This does not yet reach every internal record. In particular, the technical record kept for quality review and safety monitoring, described above, is retained separately and is not automatically deleted when you delete a conversation. Closing this gap is something we intend to do; it is not yet done, and we would rather state that plainly than imply otherwise.
• A full, self-service account-deletion option is not yet built. If you would like your account and its associated data removed before that option exists, contact us directly and we will action it by hand.