Privacy

In short

  • We collect what we need to run your account, your chats and your giving, and nothing for advertising. We never sell or share your data for marketing.

Your account

  • Your email address, the name you give us (a nickname is fine) and, if you choose one, your home church.
  • A sign-in cookie keeps you signed in. If you pick a home church before confirming your email, a second cookie remembers that choice for up to a day.
  • You must be 13 or older to use First Fruits Chat.

Your chats

  • Your messages and the assistant’s replies are stored so you can see your history. They are encrypted before they are saved, so our database and its backups cannot be read on their own. Our server decrypts them to show them to you and to send recent messages to the AI model.
  • To answer, your recent messages in that conversation are sent through Vercel AI Gateway to an AI model provider (currently Anthropic). They process it to produce the reply under API terms that do not allow training their models on it.
  • Our team does not read your chats. We keep them until you delete the conversation or your account.
  • We count how many messages you send each day to apply the Free plan limit. These counts hold no message text and are deleted after 7 days.

Payments and giving

  • Payments are handled by Stripe. We never see or store your card number. We keep your Stripe customer reference, your plan and the amount of each payment.
  • For each payment we record how much went to each cause. These records are kept for our financial accounts and the public monthly report. If you delete your account, they stay without your name or account attached.

Waitlist and contact form

  • If you join the waitlist or write to us, your email (and message) are encrypted with a key that only our team holds. The website itself cannot read them back. Waitlist emails are deleted after one year; contact messages 90 days after we handle them.
  • To stop spam we use Cloudflare Turnstile on these forms and on sign-in, plus short-lived rate limits keyed on a scrambled, irreversible form of your network address that we never store.

What we never do

  • No advertising pixels, Google Analytics, session recording or heatmaps. Fonts and images are served from this site.
  • We count page views and simple actions (such as “a message was sent”) on our own analytics server without IP addresses, conversation identifiers or what you typed.

Your choices

  • Delete any conversation from the chat, or delete your whole account in Settings. Account deletion removes your profile and every conversation immediately.
  • Change your plan, card or cancel at any time from Settings → Manage billing.

Contact

  • Questions about privacy: hello@example.com