Privacy Policy

Version: 0.2 (draft)  ·  Effective date: July 9, 2026  ·  Last updated: July 9, 2026
When this policy leaves draft, superseded versions will remain available at stable URLs, and material changes will be announced before they take effect.

1. Who we are

Oikos Connect ("Oikos Connect," "we," "us," or "our") provides a family-organization application spanning calendar, chores, shared lists, meal planning, goals, and faith features (prayer, devotionals, scripture, and gratitude), available on the web and, over time, native apps. This policy explains what information we collect when you use Oikos Connect at oikosconnect.com and our applications, and how we handle it.

The family is the core unit of the app. An adult creates a family, and data is organized and access-controlled around that family.

2. Information we collect

2.1 Information you give us

Faith content is sensitive, and we treat it that way. Prayer requests, prayer logs, gratitude entries, and devotional activity can reveal religious beliefs and personal circumstances. We handle this content as a sensitive category: it exists only because you chose to use those features, it defaults to your narrowest applicable privacy scope, it is never used for advertising, profiling, or inference about your beliefs, and anonymous prayer options are built in for the most sensitive requests. Using Oikos Connect does not require us to assume — and we do not infer — any particular religious affiliation.

2.2 Information collected automatically

• Device & technical data — such as device type, browser, app version, and IP address, used to operate and secure the service.
• Usage data — basic diagnostic and reliability information (for example, errors) so we can keep the app working.
• Push tokens — if you enable notifications, an identifier used to deliver them.

We use only the cookies and local storage needed to keep you signed in and to make the app function (including offline). We do not use advertising or cross-site tracking cookies.

2.3 Information from connected services

If you choose to connect Google Calendar, we access your calendar data through Google's OAuth process, using only the permissions you grant, solely to provide two-way calendar sync. We do not use Google user data for advertising, and our use complies with the Google API Services User Data Policy, including its Limited Use requirements. You can disconnect at any time in settings or from your Google account.

3. How we use information

• To provide, maintain, and improve the app's features for your family.
• To sync your data across your devices and (if you connect it) Google Calendar.
• To enable sharing you initiate with connected families, groups, or your church, according to your chosen privacy scope.
• To send you notifications and, if you're a subscriber, service and billing messages.
• To secure the service, prevent abuse, and comply with legal obligations.

We do not use your family's content to build advertising profiles, and we do not use children's information for any commercial purpose beyond providing the service.

4. Privacy scopes & sharing — you decide who sees what

Sharing in Oikos Connect is never automatic. Every event, prayer, list, note, and photo carries a privacy scope that you set. Nothing moves beyond a circle you chose:

• Private — visible only to you.
• Family — visible within your household (the default).
• Oikos — visible to specific families you've connected with.
• Group — visible to a group you've joined (e.g., a small group or ministry team).
• Church — visible to your congregation, with optional anonymous posting for sensitive prayer requests.

Access is enforced at the database level, not merely hidden in the interface. Anonymous prayer requests are designed so that your identity is not disclosed to the wider audience.

5. Service providers (data processors)

We rely on a small set of trusted providers to run the service. They process data only to perform services for us, under contract:

The full list — including each provider's processing location and when it is active — is maintained on our Subprocessors page, which we update when the list changes.

We may also disclose information if required by law, to protect the safety of a child or any person, or in connection with a business transfer — in which case this policy will continue to govern your data.

6. AI features (opt-in)

Some Plus features use artificial intelligence — for example, Magic Import, which turns a photo of a flyer or a block of text into a calendar event, and a weekly family digest. AI processing happens only when you choose to use one of these features. When you do, the relevant content is sent to our AI provider (Anthropic) to generate the result and return it to you. This content is not used to train third-party models, and we do not enable AI features for children's accounts by default. If you never use an AI feature, no content is sent for AI processing.

7. We do not sell your data

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have no advertising business. We do not sell, rent, or trade your family's information — or your children's information — to data brokers or advertisers. Our revenue comes solely from the subscriptions and one-time purchases you choose to make.

8. Retention & deletion

We keep your information only as long as it serves you. Concretely:

How to delete your account and data

• In the app: Settings → Family → Delete account. The account owner can delete the entire family account; members can delete their own profile.
• By email: send a deletion request to [email protected] from the email address on your account. We verify it's you, then delete.

Either path triggers the timeline above. You can export your family's data first from Settings — we recommend it, because deletion is permanent.

10. Your rights & choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Oikos Connect gives you tools to do most of this directly in the app, and you can always contact us for help. We will not discriminate against you for exercising these rights.

• Access & export — view and export your family's data.
• Correction — edit your profiles and content.
• Deletion — delete content or your entire account.
• Notifications — turn push notifications on or off per category.
• Connected services — disconnect Google Calendar at any time.

To exercise any right you can't complete in-app, email [email protected] with the subject "Privacy request." We verify the request comes from the account holder (or a parent/guardian, for child data) and respond within 30 days.

11. US state privacy rights (California, Colorado, Virginia, Connecticut & others)

If you live in California (CCPA/CPRA), Colorado (CPA), Virginia (VCDPA), Connecticut (CTDPA), or another US state with a comprehensive privacy law, you have specific rights in addition to those above:

• Right to know / access — what personal information we've collected about you, the categories of sources, and the purposes (they are exactly the ones in Sections 2–3; we collect nothing beyond them).
• Right to correct inaccurate personal information.
• Right to delete — see Section 8 for both paths.
• Right to data portability — export your family's data from Settings.
• Right to opt out of sale, sharing, and targeted advertising — we do not sell or share personal information for cross-context behavioral advertising, and we do not use it for targeted advertising, so there is nothing to opt out of. This is a design decision, not a toggle. We treat the "no sale" commitment as covering the preceding 12 months and the life of the product to date.
• Limits on sensitive personal information — the sensitive information we handle (faith content; children's data a parent adds) is used only to provide the features you chose, never for inference, profiling, or advertising, which means no separate "limit use" request is needed.
• Right to appeal (Colorado, Virginia, Connecticut) — if we decline a request, we'll explain why, and you may appeal by replying with "Appeal" in the subject line; a different reviewer will decide within 45 days and we'll include how to contact your state Attorney General if you remain unsatisfied.
• No discrimination — exercising any right never degrades your service.
• Authorized agents (California) — an authorized agent may submit requests on your behalf with proof of authorization; we'll verify with you directly.
• Global Privacy Control — because we don't sell or share data, GPC signals require no action from us; we honor the spirit of the signal by default.

12. International users (GDPR & UK GDPR)

Oikos Connect is operated from the United States and our providers process data primarily in the US (see Subprocessors). If you use the service from the European Economic Area, the United Kingdom, or Switzerland:

• Legal bases. We process your data to perform our contract with you (providing the app), for our legitimate interests (securing and improving the service, in ways you'd reasonably expect), with your consent (optional connections like Google Calendar, AI features, faith features), and to comply with legal obligations.
• Your rights include access, rectification, erasure, restriction, portability, and objection — exercised through the same in-app tools and [email protected] path as Section 10 — plus the right to withdraw consent at any time and to lodge a complaint with your local supervisory authority.
• International transfers. Using the service transfers your data to the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses with our processors, and we will formalize additional transfer mechanisms (and appoint EU/UK representatives) before actively marketing in the EEA/UK — a counsel item noted in our launch checklist.
• No automated decision-making that produces legal or similarly significant effects about you.

13. Security

We protect your data with encryption in transit, database-level access controls that scope data to your family, hashed passwords, and least-privilege access for our systems. No method of transmission or storage is perfectly secure, but we work continually to safeguard your information and will notify you of a significant breach as required by law.

14. Changes to this policy & contact

We may update this policy as the product evolves or the law requires. Every version carries its effective date and version number at the top of this page, and superseded versions will remain available once we're out of draft. For material changes — anything that expands what we collect or how we use it — we will notify you in the app and by email before the change takes effect, and where the change concerns children's data we will obtain fresh parental consent as COPPA requires. Continued use after a non-material update means you accept the revised policy.

Related: Terms of Service · Refunds & Cancellation · Children's Privacy Notice · Subprocessors