A quiet space should have clear boundaries.

Who is responsible for this information

As We Walk is currently operated as a private beta project by Joseph Knight. For privacy questions, requests, or concerns, contact joseph@theknight.family.

What stays on your device

Private journal entries, unfinished journal drafts, reading preferences, and appearance settings are stored locally on your device. Private journal content, drafts, and other app state are encrypted before they are written to the local database. The encryption key is stored using the operating system's protected storage. If that key is lost, the encrypted local content cannot be recovered.

Authentication credentials and the device's notification token are stored using the operating system's protected storage. Removing the app deletes its local data from that device, but does not by itself delete your account or server-stored shared data.

What is stored for the shared experience

Your account includes your name, email address, and a service-generated user ID. After you connect with your spouse, shared services store the connection and invitation records, reading positions, Bible translations, encrypted shared-note text, highlights, encrypted journal-entry text, hearts, encrypted comment text, and reading invitations so they can appear on both devices. These records also include the identifiers and timestamps needed to keep the shared space synchronized.

New shared note, journal, and comment text is end-to-end encrypted after both spouses have opened a current app build. The encryption keys needed to read that text remain on the spouses' devices, so an app maintainer or database operator cannot ordinarily read it. Existing beta writing is upgraded by its author after both spouses' encryption keys are available; until upgraded, it remains protected in transit and by database access controls but is not end-to-end encrypted.

Bible references, translations, highlights and their colors, reading positions, invitations, hearts, account identifiers, record identifiers, and timestamps are not end-to-end encrypted. An authorized maintainer may technically access that synchronization data when needed to operate, secure, or support the private beta.

Notifications and minimal activity

If you enable notifications, the app stores a device push token, device platform, token status and update times, and delivery results needed to send and troubleshoot As We Walk notifications. A shared journal notification includes your spouse's first name, a generic message, and the shared entry's identifier. It does not include the journal text itself.

The app records at most one daily check-in for each signed-in account. That record contains the account ID, UTC date, and time of the first check-in that day. Daily check-in records are deleted after 90 days. They do not record what you read or wrote, which screen you visited, how long you stayed, or how many actions you took.

Service providers

As We Walk uses Supabase for accounts, the shared database, and realtime updates; Expo for app delivery, updates, and push notifications; Apple's notification service to deliver notifications on iPhone; and an email delivery provider for account emails. These providers process information only as needed to operate the app.

How long information is kept

Shared content is kept while the spouse connection and shared space remain active. Notification tokens and related delivery records are kept until they are replaced, disabled, no longer needed, or the related account or shared entry is deleted. Daily check-in records are kept for no more than 90 days.

No advertising or sale of data

As We Walk has no advertising, subscriptions, or in-app purchases. Personal information and spiritual content are not sold or used to build advertising profiles.

Your choices

You can keep a journal entry private, decline notifications, disconnect from your spouse, or delete your account from Settings. If you cannot access your account, contact support for help with a deletion or privacy request.

Disconnecting from your spouse deletes the couple's shared space and its shared reading positions, notes, highlights, journal entries, hearts, comments, and reading invitations for both accounts. Deleting your account removes your account and associated server data and, because the shared space depends on the spouse connection, also deletes that shared space for both accounts. These actions cannot be undone.

Additional rights where privacy law applies

If you are in the European Economic Area, the United Kingdom, Switzerland, or another place with similar privacy rights, you may ask us to access, correct, delete, or restrict the use of your personal information. Where applicable, you may also object to processing, withdraw consent for optional notifications, or request a portable copy of information you provided to us.

Send requests to joseph@theknight.family. We may ask for information needed to verify your identity. We will respond without undue delay and, where GDPR applies, generally within one month. You may also complain to the data-protection authority where you live or work; in France, that is the CNIL.

We do not use your information for advertising profiles or automated decisions that produce legal or similarly significant effects.

Questions

Visit Support for privacy questions, deletion requests, or help with the beta.