Privacy Policy

What Salt collects and why

• Account details. If you sign in with email, Salt stores your name, email address and a scrambled (hashed) version of your password. If you sign in with Google or Microsoft, Salt receives your name and email address from them and nothing else: no password, no contacts, no calendar.
• A device identity. Salt creates a random identifier for the device you are using so it can keep your things together even before you create an account. This identifier is not your name and cannot be used to find you.
• Your content. Reading plans and progress, journal entries, prayers, verse highlights and notes, memory verses, photos and voice recordings you attach, saved verses, saved news stories, playlists, calendar items, badges and settings. This is the heart of the app and it exists so that Salt can show it back to you.
• Approximate location, only if you allow it. Salt asks once. Your position is used for the weather card, local news and the Church Finder. It stays on the device it was captured on and is not copied to your other devices. When Salt asks for weather it sends coordinates rounded to roughly eleven kilometres, which names a city but not a street.
• Usage signals. Once per app open, Salt records the app version, platform, time zone, the section you were on, and counts (plans completed, badges earned, visit streak, number of journal entries) together with the first name you typed, keyed to the device identity. This lets the developer see that the app is being used and where it is failing. Journal, prayer and note text is never part of these signals.
• Notification details. If you turn on reminders, Salt stores the push address your browser issues, your time zone and the reminder times you chose, so reminders can be sent while the app is closed.
• Screen measurements. Once per app open, Salt notes viewport numbers (screen height, safe-area size, whether it is installed) with no personal details, to keep the layout correct on every phone.

Where your data is stored

Your content lives first on your own device. When you have an account (email, Google or Microsoft, or the automatic device account), Salt also backs it up to your account so that a new phone, a laptop, or a reinstall brings everything back. Photos are reduced in size for the backup and voice recordings are kept as recorded; a recording larger than about twelve megabytes stays on the device it was made on.

The backup is stored in a Neon Postgres database in the eastern United States (Virginia) and the app is served by Vercel from the United States. Both encrypt data in transit and on disk. The backup is not end-to-end encrypted: in principle the developer can open it, which is what makes cross-device restore possible. The developer does not read your content except to fix a problem you ask for help with, or where the law requires it.

Who else receives data

Salt runs on services provided by other companies. Each one receives only what its job needs, and Salt shares personal data only with the services listed here, only for the purpose given, and only with services whose terms protect that data at least as well as this policy does. Nothing is shared for advertising and nothing is sold.

• Vercel (hosting and delivery) and Neon (database): everything described above passes through or is stored with them.
• Google and Microsoft: they tell Salt your name and email address only if you choose to sign in with them. When Salt shows its sign-in options, the Google button is loaded from Google, so Google sees your network address and browser, as on any website that offers Google sign-in; Microsoft's sign-in code loads only when you choose Microsoft. Google's and Microsoft's own privacy policies govern what they record about the sign-in.
• Open-Meteo (weather): receives rounded coordinates. Weather data is provided under the Creative Commons Attribution 4.0 licence.
• OpenStreetMap services (Nominatim, Overpass, OSRM) and the United States Census geocoder: receive coordinates or the place name you searched for in the Church Finder and the Profile church picker. Map data is © OpenStreetMap contributors.
• DeepL: Salt's server sends it short phrases of Salt's own interface and plan text, once, so Salt can appear in your language; the results are shared by everyone. Your journal, prayers, notes, Bible text, news stories, church details and song titles are never sent to any translation service, and nothing is sent from your phone directly.
• Bible text providers (HelloAO, eBible.org): your device fetches Scripture from them; no personal details are sent beyond the ordinary connection.
• Apple, Spotify, YouTube and Wikimedia Commons: album art, artist photographs and song links load from their servers when you open Worship, and tapping a song opens that service. Your browser sends them your network address when it loads an image, as it does for any website.
• News publishers: Salt's server reads each publisher's public feed, and the Guardian's Content API under its Open Platform developer licence; your phone never contacts the publisher until you open a story. A thumbnail the publisher supplies loads from the publisher's servers; when you read a story from The Conversation inside Salt, their page-view counter loads once, which tells them the story was read (not who read it). Guardian stories are deleted from Salt's server within 24 hours, and a Guardian story you save keeps only its headline and link. The same goes for stories from The New York Times, which Salt's server reads from the Times Top Stories API.
• Anthropic: if the owner's admin assistant is enabled, it can receive the usage signals described above (the first name you typed, platform, time zone, visit and content counts), never your journal, prayers, notes, photos or email address.
• Share Your Verse diagnostics: when you make a verse video, Salt records how long the render took and the device type, with no video, photo or verse text.
• Google Fonts: the Worship section loads two typefaces from Google's font service, which sees your network address when it serves them.
• Resend (email delivery): only once password reset by email is switched on, which it is not today. Until then a forgotten password is reset with a one-time recovery code from Salt support, and no email is sent.

Faith is personal

Salt is a Christian app. Your journal, prayers and highlights can reveal your religious beliefs, which the law in some countries treats as especially sensitive. Salt stores that content only so it can give it back to you, and by creating an account and using sync you agree to Salt storing it for that purpose. You can withdraw that agreement at any time by deleting your account, which removes the backup.

What other people can see

Nothing in Salt is public. When you read a plan with friends, the people in that group see your name, your accent colour and how far along you are in that plan, and nothing else. When you share a calendar link or a verse image, only what you chose to share leaves the app. Salt never posts on your behalf.

How long Salt keeps it

For as long as your account exists. Deleting your account (Settings > Delete my account) removes your account and its backup from the database immediately, and from routine database backups within thirty days. Content that was only on a device is removed when you clear the app or that device's browser data.

Your choices and rights

• See your data: everything Salt holds for you is visible in the app itself (your plans, journal, prayers, highlights, saved songs and settings). Sign in with email, Google or Microsoft and it is backed up to your account, so it follows you to a new phone.
• Take a copy: email ryanamitprasad@gmail.com from the address on your account and we will send you a copy of the data held for it within thirty days.
• Correct it: your name, photo and church can be changed in Profile.
• Delete it: Settings > Delete my account. You do not need to write to anyone first.
• Location: turn it off in Settings or in your phone's settings at any time.
• Reminders: turn them off in Settings or in your phone's notification settings.
• Ask: for anything else, email ryanamitprasad@gmail.com. If you are in the European Union or the United Kingdom you also have the right to complain to your data protection authority.

Children

Salt is not directed to children under thirteen and does not knowingly collect information from them. If you are under thirteen, please use Salt without creating an account, or with a parent's account. If you believe a child has created an account, email ryanamitprasad@gmail.com and it will be removed.

Security

Salt uses HTTPS everywhere, stores passwords only as bcrypt hashes, and signs you in with short-lived tokens. No system is perfect; if you find a weakness, please report it to ryanamitprasad@gmail.com and it will be treated as a priority.

Outside the United States

Salt is operated from the United States and your data is processed there. By using Salt from another country you understand that your information is transferred to and stored in the United States.

Changes to this policy

When this policy changes, the date at the top changes with it and, for anything that matters, Salt tells you inside the app. Continuing to use Salt after a change means you accept the new version.

Contact

Ryan Prasad, Tulsa, Oklahoma, United States. Email ryanamitprasad@gmail.com. Every message is read personally.