Privacy Policy

Who we are

HerWalk is a faith-centered reflection, prayer, journaling, and guided-journey app operated by CyberTusk LLC.

Questions about this policy or your data can be sent through the HerWalk Support page at /herwalk/support or by emailing support@cybertusk.net.

Account and authentication information

HerWalk collects your email address to create and sign in to your account with a passwordless magic link (via Supabase Auth).

HerWalk also uses a User ID — a unique account identifier created by our authentication provider — to associate your data with your account.

We do not use passwords for HerWalk Phase 0 authentication.

Profile and preferences

Depending on what you choose during onboarding or later in Profile, we may store selected purposes for using HerWalk, a selected life-season preference, a reminder-time preference (preference only; HerWalk does not currently send push notifications), and an App Lock preference stored on-device.

User-generated content

Content you create in HerWalk may include journal entries (titles, body text, tags, timestamps, soft-delete state), prayer entries and prayer updates, and guided-journey progress (which journey or day you completed or left off on).

Technical information required to operate the App

HerWalk may store authentication session tokens securely on your device, local offline journal copies and sync-related metadata on your device, and basic connectivity status used only to sync your own data when online.

Information we do not collect (Phase 0)

HerWalk does not currently include advertising SDKs; analytics or marketing tracking SDKs; crash-reporting SDKs that collect diagnostics beyond what Apple may collect independently; push-notification delivery services; location, camera, microphone, photo-library, or contacts access for product features; or sale of personal information to data brokers.

Face ID / Touch ID / device passcode (when App Lock is enabled) are processed by your device’s system biometric APIs. Biometric templates stay on your device and are not sent to CyberTusk or Supabase.

How we use information

We use the information above to create and authenticate your account; sync and restore your journal, prayers, journey progress, and profile across sessions or devices when signed in; provide export and deletion controls; protect the App (for example, isolating each account’s data with row-level security and account-scoped local storage); and communicate essential account messages such as magic-link sign-in emails.

We do not sell your personal data. We do not use your journal or prayer content to train AI models in Phase 0.

Storage and service providers

HerWalk uses Supabase for authentication (email magic links) and cloud database storage of account-associated application data. Your email and user-generated content that syncs to the cloud are processed by Supabase as our infrastructure provider, subject to their security and privacy practices and our configuration (including authentication and row-level security).

On device, HerWalk stores your auth session in secure storage, encrypted local journal data in an on-device SQLite database for offline use, onboarding draft and entitlement cache values as needed for app operation, and App Lock enabled/disabled preference in secure on-device storage.

Local encryption helps protect offline journal copies on your device. It is not end-to-end encryption of all cloud data. Server-stored journal content is associated with your authenticated account and protected by access controls.

If you download HerWalk from the App Store or Google Play, Apple or Google may collect information under their own policies as part of distributing and operating their platforms.

Tracking

HerWalk does not use third-party advertising or cross-app tracking SDKs in Phase 0. We do not sell personal data for cross-app tracking.

Retention

We retain account and application data while your account remains active.

Soft-deleted journal or prayer items may remain recoverable inside the App for a period before permanent removal workflows apply.

When you delete your account, we delete your authenticated account and remove associated HerWalk application data as described below.

Magic-link emails are delivered through our authentication provider’s email systems and are retained according to that provider’s operational needs for authentication delivery.

Access, export, and deletion

Signed-in users can export their account-associated data from Profile using the in-app export control.

Signed-in users can delete their account from Profile → Delete my account. Deletion shows a clear permanent-deletion warning; requires explicit confirmation (typing DELETE_MY_ACCOUNT); may require device authentication when App Lock or device biometrics are available; deletes your authenticated account on the server; removes associated HerWalk application data tied to that account (via cascading deletion of user-owned records); and clears account-scoped local data and signs you out.

If server deletion fails, HerWalk fails closed: local data and session are preserved and you can try again.

Profile also offers a separate control to delete local journal data on the current device without deleting the cloud account. That control does not replace full account deletion.

Security

We use industry-standard protections appropriate to HerWalk’s architecture, including authenticated sessions, database row-level security so users can access only their own cloud rows, secure on-device storage for session and key material, and optional App Lock using device Face ID / Touch ID / passcode.

No method of transmission or storage is 100% secure. Please protect access to your email account, since magic links are delivered by email.

Children

HerWalk is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can delete the account and associated data.

Faith and user-generated content

HerWalk includes religious / faith-oriented guided content and private user-generated journal and prayer content. Your private entries are intended for your account; they are not a public social feed in Phase 0.

International users

HerWalk may be operated using infrastructure located in the United States or other regions used by our service providers. If you use HerWalk from another country, you understand your information may be processed in those locations.

Changes to this policy

We may update this Privacy Policy as HerWalk evolves. The effective date at the top will change when we do. Continued use of HerWalk after an update means you accept the revised policy. Material changes may also be communicated in-app or through App Store / release notes when appropriate.

Contact

CyberTusk LLC — HerWalk Privacy & Support.

Use the HerWalk Support page at /herwalk/support, or email support@cybertusk.net, for privacy questions, deletion help, or data requests.