Privacy Notice

Controller

[Operator legal entity, registered address] is the controller of your personal data. Contact: [privacy@thepriest.ai].

What we collect

Account data (only if you save your Soul): email address or other sign-in method, passkeys, sessions, consents you give.

Confession content: processed to generate the Priest's replies — see the Confessional Privacy Notice for how it is handled.

Progress data (only with the Sin Passport consent): sin categories and severity, XP, streaks, badges — never the text you wrote.

Public posts you choose to publish, reactions and reports.

Technical and analytics data: an anonymous device identifier, content-free usage events (for example “confession completed”), and security logs that never include your confessions.

Special categories of data

Confessions can reveal religious beliefs, health or sex life. We process confession content only with your explicit consent, given before your first message, and only to provide the service.

Processors

AI providers process confession text to generate replies (currently: Anthropic, OpenAI; voice providers when voice is enabled). They are bound not to use it to train their models. Email delivery: Resend. Hosting: our own servers. Product analytics: PostHog (content-free events).

Retention

Ephemeral confessions are deleted when the session ends (or after 30 minutes of inactivity). Login codes expire after 10 minutes. Sessions expire after 30 days without use. Other account data is kept until you delete it.

Your rights

You can access, export, correct and delete your data, and withdraw any consent at any time (Soul page → settings). Withdrawing the Sin Passport consent deletes your sin history. You can also complain to your data protection authority.

International transfers

Our servers and some processors are located in the United States. Transfers rely on standard contractual clauses or equivalent safeguards.