Privacy policy

Moment of Grace is an app by Grace Healing Arts.

What we collect and why

When you submit the SMS enrollment form, we collect your phone number, email address, optional first name or nickname, chosen time zone, the exact consent wording and policy links shown, wording version, submission time, source page and a one-way keyed hash of your IP address. We use these records to document your request and consent and reduce abuse. Raw IP addresses are not stored in the enrollment database. Our hosting provider may separately process IP addresses in operational logs.

Your optional first name is encrypted with the identity key and used to greet you in daily check-in texts. We add it on our server without sending the signup name to the AI to write the greeting. It may appear in message previews. You can leave it blank or use a nickname. The form does not activate participation or verify phone ownership. When the program is active for your invited number, it triggers a welcome text; a YES reply is required before prayer sessions and daily check-ins begin. Once you are invited and confirm from your phone, the service stores enrollment and opt-out status, phone-confirmation records, provider message identifiers and daily usage. Prayer requests, generated prayer text, guided-practice text, recordings and delivery status are saved to provide your private links, understand natural follow-ups and deliver your requests. Morning notifications may mention a specific person, pet or situation from your latest available prayer request within the past 36 hours. These details may appear on your phone’s lock screen. If no recent request is available or personalization is unavailable, the invitation is general. We do not intentionally collect payment details through this beta.

Your email address is encrypted with the identity key. We use it to reach you if texting is unavailable and to send occasional emails from Grace Healing Arts. Those emails are sent through Kajabi, our email provider, which receives your email address and first name for that purpose only. Every email includes a way to unsubscribe. We do not sell your email address or share it for anyone else’s marketing.

To understand short replies, we also keep encrypted, temporary conversation context: the recent question, a few recent messages and any concern you are still sharing. This context stops being used after two hours and is cleared by background cleanup. It is replaced as the conversation continues and cleared when you reply STOP or FORGET. This short conversation context supports replies within your conversation.

Mobile information and consent

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be sold or shared for another company's messaging program. We disclose only the information required to service providers operating this program, or when legally required.

Service providers

Supabase stores enrollment records, encrypted written content and private audio. Twilio processes phone numbers, incoming and outgoing text and media messages, voice attachments and delivery events. Anthropic processes your request and prayer context to prepare content; Inworld processes narration text to generate audio; ElevenLabs processes the first 90 seconds of incoming voice messages to convert speech into text. Vercel hosts this website and its server functions. Providers may retain information under their own policies. Carin does not personally monitor the text conversation.

When you send a voice message, we use up to the first 90 seconds to prepare your prayer automatically. Longer recordings are trimmed rather than rejected for their duration. The app temporarily downloads and processes the recording, then removes its temporary files. The transcript is handled as a written prayer request. The original attachment may remain with Twilio under its retention policies; ElevenLabs may retain the processed audio under its policies. Very large, unreadable or undelivered attachments may require sending your words as text.

Security and private links

Phone numbers, email addresses, optional first names, retained consent evidence and written personal prayer content are encrypted by the application before database storage. New recordings are also encrypted by the application before storage. Older beta recordings may remain protected by private storage until migration finishes. Identity and prayer content use separate encryption keys for new records. Authorized server processes can decrypt this information to deliver the service; this is not end-to-end encryption. Website connections use HTTPS. Ordinary SMS is not end-to-end encrypted. Avoid sending details you do not need to share.

Private prayer links expire after 30 days and open on any device without verification. Anyone with a link can open its prayer and recordings until the link expires or is revoked. Share it only if you wish. Text LOCK LINKS from your enrolled phone to turn off your existing prayer links. No security measure can guarantee complete protection.

Retention and your choices

For content created after the November 7 privacy rollout is activated, requests, prayers and recordings are scheduled for deletion from active storage after 30 days. Cleanup runs in the background; an outage can delay deletion, but expired links stop access. Earlier beta test content is preserved until you request deletion. Enrollment and consent records remain while you use the service. You can request access, correction, withdrawal of a pending enrollment request or deletion by calling (631) 513-6151. We may ask you to verify control of the phone number before disclosing or deleting personal records. Once a deletion request is approved and processed, access and messages stop; background cleanup removes enrollment records, requests, prayers and recordings after in-flight work has finished. Backups, provider records and copies already downloaded are subject to separate retention and cannot be promised immediate deletion.

Reply STOP to unsubscribe or HELP for help. You can also use the opt-out words listed in the SMS terms & conditions. DELETE MY DATA currently returns support instructions. Reply FORGET to clear recent conversation context and turn off use of earlier requests in daily check-ins and follow-ups.

Contact

Grace Healing Arts LLC · (631) 513-6151 · Contact & support. This is a business support phone, not an emergency service.