Privacy Policy
Effective September 27, 2026 · Talk to Jesus by Castalia Cupcakes
This policy describes what we collect, why we collect it, and how you can ask us to delete it. It covers the Talk to Jesus iOS app, Android app, and website.
Who we are
Castalia Cupcakes operates Talk to Jesus.
Castalia CupcakesMemphis, Tennessee, United States
Privacy: privacy@talk-to-jesus.com
Support: support@talk-to-jesus.com
What we collect
- Account. Email address, display name, and a password stored by our auth provider. We do not see your raw password.
- Questions and replies. The text you send and the reply you receive, so we can return an answer and apply your daily limit.
- Usage. Plan name, questions used today, and the UTC date those counts apply to.
- Subscription status. Product id, store platform (Apple or Google), and a store purchase token so we can confirm you paid.
- Session cookies. Short-lived cookies keep you signed in for about 30 minutes of activity.
- Device basics. The store apps may send standard device and app version information needed to run the product and restore purchases.
We do not ask for contacts, photos, precise location, health data, or payment card numbers. Apple and Google handle card data if you subscribe.
Why we collect it
- Create and sign in to your account
- Generate a reply to your question
- Enforce free and paid daily limits
- Decide whether to show an ad on the free plan
- Restore or check a subscription
- Respond to support mail
- Keep the service secure and running
Who else sees data
- Vercel. Hosts the website and APIs.
- Supabase. Stores accounts and profile fields such as name, plan, and usage.
- xAI. Receives the text of a question so a reply can be generated. Do not send information you would not want processed by a language service.
- Apple and Google. Process paid subscriptions and may share purchase status with us.
- Advertising partners. On the free plan, a short ad may appear after a reply. Those partners have their own policies.
We do not sell your personal information.
Cookies
Signed-in sessions use HttpOnly cookies named tj_access and tj_refresh, each lasting 30 minutes. They are used only to keep you logged in. Clearing site data or tapping Sign out removes them.
How long we keep it
Account and profile records stay until you delete the account. Usage counts reset each UTC day. Server logs on our hosts follow those hosts’ normal retention. Store receipts follow Apple’s or Google’s rules.
Your choices
- Change your display name or password in the app Account screen.
- Delete your account in the app Account screen. That removes your profile and sign-in on our side.
- Email privacy@talk-to-jesus.com if you cannot open the app and want deletion or a copy of what we hold.
- Cancel a paid plan in your Apple ID or Google Play account. Deleting the app does not cancel a subscription by itself.
If you live in a place with extra privacy rights (including the EEA, UK, or California), you may also ask us to access, correct, or delete personal data, or to object to certain processing. We will respond within the time those laws require.
Children
Talk to Jesus is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, write to privacy@talk-to-jesus.com and we will delete it.
Security
Traffic uses HTTPS. Passwords are handled by our auth provider. No method of transmission or storage is perfectly secure.
Changes
If this policy changes in a material way, we will update the date at the top of this page.
Talk to Jesus