Faithmetrics

Privacy Policy

Last updated: 28 June 2026

Faithmetrics is offered to users in both the United States and the European Union / United Kingdom, and this policy covers both. Where a right or rule applies only in one region, we say so. EU/UK users have the rights set out under the General Data Protection Regulation (GDPR); US users have the rights set out under applicable US federal and state law, including the California Consumer Privacy Act as amended (CCPA/CPRA).

1. Who we are

Faithmetrics is a spiritual-formation platform operated by Aquinas Studios Corp ("we", "us", "our"). It offers diagnostic tools and a guided 15-stage devotional journey based on Dr. Andrea LaFountain's book Living in Love with God.

Data controller: Aquinas Studios Corp, 1018 Beech Road, Wallingford, PA 19086, USA.

EU representative (GDPR Article 27): James Moran, Chief Operations Officer, Aquinas Studios, 6 Tirlaughan Brae, Carrigart, Co. Donegal, Ireland. EU and UK users may contact our EU representative on any matter relating to the processing of their personal data.

Contact for privacy matters: info@aquinasstudios.com. You can use this address, or either postal address above, for any question about this policy or to exercise your rights.

This policy explains what personal data we collect when you use the Faithmetrics app at aquinasstudios.com, why we collect it, how we protect it, and the rights you have over it.

2. The most important point first

Faithmetrics asks you about your relationship with God. Your diagnostic scores, and the fact that you use a spiritual formation tool at all, reveal your religious beliefs. Under the EU/UK GDPR this is "special-category data" (Article 9) and receives the highest level of protection; comparable sensitivity applies under US law. We only process it with your explicit consent, which you give at sign-up and can withdraw at any time.

Faithmetrics is a spiritual-formation tool, not a counselling, clinical, or crisis service. Nothing in the app is medical or psychological advice. If you are in crisis, please contact the emergency or support services for your country.

3. What personal data we collect

We try to collect as little as possible. In summary, we hold: your account details (email and a securely hashed password) to create and secure your account and send essential service emails; your profile details (name, age band, sex, relationship status, country) to personalise the journey and show the correct local support resources; confirmation that you are 18 or older and the date you gave consent; your diagnostic scores (Heart-Love, Soul-Love and Mind-Love results and stage progress), which reveal religious belief and are processed on the basis of your explicit consent; your subscription and payment-status records to give you access to the paid journey; and basic technical and usage data from our hosting provider to keep the service running and secure.

Your journal stays on your device. Anything you write in the in-app journal and reflection boxes is stored only on your own device (in your browser's local storage). It is never transmitted to or stored on our servers, and we cannot read it. If you clear your browser data or switch devices, that content does not travel with you. This is a deliberate privacy decision.

Anonymous diagnostic results. You can take a diagnostic before creating an account. Those results are held temporarily in your browser and are only saved to our servers if you choose to create an account, at which point they become the baseline of your journey. If you never create an account, they are not stored by us.

4. How we use your data

We use your data to provide the diagnostics, journey, and certificate of completion; to create, secure, and manage your account and subscription; to send essential service emails (account confirmation, password reset, and notices about your subscription); to show you the correct local support resources based on your country; and to keep the platform secure, reliable, and lawful. We do not currently send marketing email. We also use data to improve Faithmetrics and to understand how the spiritual-formation journey works for people in general, for research and quality-control purposes. We only ever use anonymised and aggregated data for this: information that has been stripped of anything identifying you and combined into overall patterns and statistics, so that individual users cannot be identified. We do not use your identifiable personal data, or anything you write in your journal, for research. We do not sell your personal data, we do not use it for advertising, and we do not use it to build profiles for any purpose beyond running Faithmetrics itself.

5. Who we share your data with

We use a small number of trusted service providers ("processors") who handle data on our behalf and under contract, and who may only use it to provide their service to us:

• Supabase — our database, authentication, and hosting provider, which stores your account, profile, diagnostic, and subscription records.
• Lovable — the platform on which the app is built and served.
• Paddle — our payment provider and merchant of record. When you subscribe, your card details are entered on Paddle's own checkout and processed by them; we never see or store your full card number. We receive only your subscription status and period dates.
• Our email-delivery provider — used to send the essential service emails described above.

We may also disclose data if we are legally required to (for example, in response to a valid legal request), or to protect the safety of a person where the law allows.

6. Where your data is stored and transferred

Your account, profile, diagnostic, and subscription data is stored in the European Union — specifically on Amazon Web Services infrastructure in the Stockholm, Sweden region (eu-north-1). Keeping the primary database in the EU means this core data is not transferred outside the EU/EEA in normal operation.

Some of our service providers (for example, our payment provider and email-delivery provider) are based in, or may process limited data in, the United States or other countries. Where personal data is transferred outside the EU/UK to such providers, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses, or transfers to countries benefiting from an adequacy decision. For US users, data may be stored or processed in the EU and/or the US; by using the service you understand your data may be processed in both regions. The protections described in this section apply to your personal data. Anonymised and aggregated information, which can no longer be linked to you as an individual, is not personal data, and we may analyse it (including outside the EU/EEA) for the research and quality-control purposes described in section 4.

7. How long we keep your data

We keep your account and journey data for as long as your account is open. If you close your account or ask us to delete your data, we remove your personal data from our active systems within 30 days. We retain payment and transaction records for up to seven years where required for tax and accounting law; such retained records are limited to what the law requires. Backups are overwritten on our provider's normal cycle, within 30 days.

8. Your rights

If you are in the EU/UK, under the GDPR you have the right to access a copy of your data; to rectification of data that is wrong or incomplete; to erasure ("the right to be forgotten"); to restriction of our use of your data while a concern is resolved; to portability of your data in a machine-readable form; to object to processing we carry out under "legitimate interests"; and to withdraw consent at any time where we rely on it (including for your diagnostic scores). Withdrawing consent does not affect anything we did lawfully beforehand.

If you are in the United States, depending on your state you may have the right to know what personal data we hold about you, to request its deletion, to correct it, to obtain a copy, and to not be discriminated against for exercising those rights. We do not sell or share your personal data as those terms are defined under California law, and we do not use it for cross-context behavioural advertising.

To exercise any of these rights, contact us at info@aquinasstudios.com. You can also delete your account and associated data directly in the app. If you are in the EU/UK and believe we have mishandled your data, you have the right to complain to your national data-protection authority (in Ireland, the Data Protection Commission, dataprotection.ie).

9. Children

Faithmetrics is intended for adults. You must confirm that you are 18 or older to create an account. We do not knowingly collect personal data from anyone under 18, and we do not knowingly collect personal data from children under 13 in accordance with the US Children's Online Privacy Protection Act (COPPA). If we learn that we have inadvertently collected data from a child, we will delete it promptly.

10. How we protect your data

We protect your data with industry-standard safeguards: all data is encrypted in transit (TLS), passwords are never stored directly but kept as secure one-way hashes, and access is restricted by row-level security so that each person can reach only their own records. Paid content is gated by a subscription check enforced at the database layer, not just in the app. Your personal reflections in the journal never leave your device. Your data is stored within the European Union (AWS, Stockholm). No system can be guaranteed perfectly secure, but we take every reasonable precaution to protect your information and have strict protocols for our service partners who require access.

11. Sensitive disclosures

Because your journal stays on your device, any sensitive personal reflection you write there is not transmitted to us. Where the app does point you toward external support resources, it does so based only on your country. Faithmetrics does not provide crisis, medical, or counselling services. If you are struggling, please reach out to a trusted person, your priest, or the support services for your country.

12. Changes to this policy

We may update this policy from time to time. When we make a material change, we will update the "last updated" date and, where appropriate, tell you in the app or by email. Your continued use of Faithmetrics after a change means you accept the updated policy.

13. Contact us