Privacy Policy

How Ask Gospel handles your information when you visit, ask a question or use an account.

Who to contact

For questions about how Ask Gospel handles your information or to make a privacy request, contact support@askgospel.net.

Information we collect

Our account service provider manages email and password accounts and sign-in through a third-party account. Account information includes your email address, unique account identifier, sign-in provider and email verification status. Third-party sign-in can also provide basic profile information, such as your name and profile picture. Passwords are handled by our account service provider.

For signed-in users, our cloud database stores conversation titles, questions, answers, Gospel references and timestamps linked to the account. We also store question usage, subscription status and billing identifiers to manage your allowance and subscription.

Guest conversations are not saved as chat history in our cloud database. They remain in browser memory, with a temporary copy in the tab’s session storage to preserve the conversation during signup or sign-in. After verified sign-in, that conversation can be transferred to your account. A random guest identifier and a separate server-side usage record keep track of the guest allowance without storing the guest conversation.

Requests also involve technical information such as IP addresses and browser details. The application uses an account identifier or, for guests in production, an IP address for short-lived rate limiting. Hosting and service providers may process technical logs. If you email support, we receive your email address and the information you send.

How we use your information

We use information to generate AI-powered answers, save and retrieve conversations, authenticate accounts, manage question allowances, process subscriptions, respond to support requests and protect the service against abuse. Request identifiers, temporary locks and payment event records help prevent duplicate questions or billing operations.

Questions may include personal or sensitive topics. You can freely discuss faith and Scripture, but please avoid sharing unnecessary identifying, medical, financial or other highly sensitive personal information.

Services that process information

Cloud infrastructure and account service providers process data on our behalf to support sign-in, account records, saved conversations, usage tracking and billing records. When you choose third-party sign-in, that provider also handles authentication.

Your question, a limited amount of recent conversation and selected Gospel passages are sent to a third-party AI service provider to generate an answer. The application does not attach your email address or account identifier to that AI request, but anything you write in a message is included. Requests disable response storage using the API’s storage option; this does not guarantee that the provider retains no data under its own service and security arrangements.

Stripe provides hosted Checkout and subscription management. Payment details are entered with Stripe; the application does not store full card details. We link Stripe customers and subscriptions to your account identifier and receive payment and subscription updates to manage Plus access.

Our website hosting provider processes requests to deliver and protect the site. We also use a third-party website analytics service for website usage statistics, as described below.

These services may process information outside the UK.

Cookies and browser storage

Essential storage supports sign-in and question allowances. The ask-gospel-session cookie has a five-day lifetime when issued; the ask-gospel-guest cookie has a one-year lifetime. Our account service provider also uses browser storage to maintain sign-in. These functions are separate from optional analytics. Clearing storage may sign you out or remove a temporary guest draft, but does not delete your saved account data.

Your theme and analytics preference are stored locally in your browser. The analytics preference contains no account identifier and remains until you change it or clear browser storage. An earlier analytics rejection is respected unless you change your choice below.

Privacy-friendly website analytics

We use a third-party website analytics service to understand visits, popular pages and visitor trends so we can improve Ask Gospel. It runs without an opt-in banner unless you opt out. We do not enable analytics cookies, advertising tracking, profiling or custom events.

Page views can include the page address, time, referring website, approximate country, region or city, device type, browser and operating system. The provider processes connection information to produce these statistics and uses a request-derived visitor hash. Its documentation says the visitor session is discarded after 24 hours; this is not a promise that all analytics data is deleted after 24 hours.

We exclude authentication-action links and unknown or private page paths, strip query strings and fragments, and suppress analytics when an external referrer could reveal a private path or query. We do not send chat messages, answers, email addresses, account identifiers or conversation identifiers as analytics data. We do not link analytics to your Ask Gospel account.

The provider processes analytics separately from your saved conversations. The reporting window for our current plan is one month, but the provider states that data may be stored longer than the reporting window. The application does not set a guaranteed analytics deletion period. See the provider’s analytics privacy documentation and reporting and retention information.

You can object free of charge using the control below and change your choice at any time. Opting out stops further analytics events from this browser; it does not affect your account or erase statistics already received by the provider. The choice applies to this browser, not all your devices. If browser storage cannot be read, analytics stays off.

Retention and deletion

Saved conversations remain available until you delete them or delete your account; the application has no automatic age-based deletion for saved history. You can delete individual conversations in the sidebar. Deleting a conversation does not reset your question allowance.

Signed-in requests have a separate retry record that can include the generated answer and references, a hash of the request and processing timestamps. Cached responses expire 24 hours after their latest update and are no longer reused after expiry. We attempt to remove small batches of expired records during normal signed-in account activity. Removal is not immediate or guaranteed within a fixed period; expired records may remain stored if you do not return. Deleting a conversation does not immediately remove this separate cache.

Account deletion requires confirmation and a recent sign-in. The service confirms cancellation of recurring billing and closure of the Stripe customer record, where applicable, before deleting saved conversations, account and usage records, associated billing records and the authentication account. A minimal deletion marker linked to the former account identifier remains to prevent old requests from recreating the account’s records.

Closing the Stripe customer record does not mean that all payment or invoice information retained by Stripe is erased, or that copies held under service providers’ retention arrangements are removed. Expiry of a browser cookie does not automatically delete the corresponding server-side usage record.

Your privacy rights

Under UK data protection law, depending on the circumstances, you may request access to your personal information, correction, deletion, restriction of processing or a portable copy, and object to certain processing. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. These rights are subject to the conditions and exceptions in the law.

Contact support@askgospel.net to exercise your rights or raise a concern. We may need to verify your identity before acting on a request. You can also complain to the UK’s Information Commissioner’s Office (ICO). If you live elsewhere, you may also have rights under local law.