Privacy Policy

01Introduction

BlessFlo is operated by Trureliv LLC ("BlessFlo," "we," "us," or "our"). BlessFlo provides a mobile application and related services that help church members give to their congregation, receive giving statements, and stay connected with their community.

This Privacy Policy describes how we collect, use, share, and protect your personal information when you use the BlessFlo app and our services. It is governed by the laws of the State of California, without regard to its conflict-of-laws principles. By using BlessFlo, you agree to the practices described here. If you do not agree, please do not use the app.

02Information we collect

We collect information you provide directly, information generated through your use of the app, and information from the service providers that help us operate.

Account information

When you create an account, we collect your name, email address, and the church you choose to connect with. We use this to identify you and associate your giving with the correct congregation.

Donation information

When you give, we record the amount, the fund, category, or campaign, the date, and the church receiving the gift. Payment card numbers are collected and processed directly by our payment processor, Stripe, and are never stored on BlessFlo's servers. We retain a non-sensitive payment reference (such as a token, the card brand, and the last four digits) returned by Stripe.

Device and technical information

We collect basic device and connection details such as device type, operating system version, app version, IP address, and a device or installation identifier. We use these to keep you securely signed in, to deliver notifications, and to protect the service — for example, rate limiting by IP address to prevent abuse. If you enable notifications, we collect a push notification token so we can deliver alerts and reminders.

Usage data

We collect information about how you interact with the app — screens viewed, features used, and general activity patterns — to understand what is working and to improve the product. We use privacy-respecting, cookie-free analytics on our website and do not use third-party advertising trackers.

Communications and support

If you contact us for support, we keep your messages and contact details so we can respond and maintain a record of the request.

03How we use information

We use the information we collect to operate BlessFlo and to provide a reliable, secure giving experience. Specifically, we use it to:

• Provide the service — create and maintain your account, connect you to your church, and record your giving history.
• Process payments — securely complete your donations through our payment processor, Stripe.
• Send transactional messages — confirm gifts, deliver receipts and giving statements, and send account, security, and service notifications.
• Deliver devotional content — provide your church's daily devotionals, including AI-narrated audio generated from the church-supplied devotional text using Google Cloud Text-to-Speech. This narration is created from the devotional text only and does not use your personal information.
• Provide support — respond to your questions and troubleshoot issues.
• Improve the product — analyze aggregate usage to fix problems, refine features, and build new ones.
• Protect BlessFlo — detect, prevent, and address fraud, abuse, security incidents, and violations of our terms.
• Comply with law — meet our legal, tax, and accounting obligations and respond to lawful requests.

We do not use your personal information to serve third-party advertising, and we do not sell your personal information.

04How we share information

We share information only as needed to run BlessFlo, and only with the parties described below.

• Stripe — processes all payments. Your card information is collected and stored by Stripe under its own privacy and security standards.
• Supabase — hosts our application database, where your account and giving records are securely stored, and stores generated devotional audio that is served to the app via public URL.
• Resend — delivers our transactional email (receipts, statements, and account notifications).
• Expo — orchestrates delivery of push notifications to your device when you enable them.
• Google Firebase Cloud Messaging (FCM) — delivers push notifications to Android devices.
• Apple Push Notification service (APNs) — delivers push notifications to iOS devices (iOS launch pending).
• Google Cloud Text-to-Speech — generates AI narration for devotional audio. It receives only the church-supplied devotional text and does not receive your personal information.
• Sentry — provides crash reporting and error monitoring. It processes error stack traces and limited user identifiers to help us diagnose and fix problems.
• Upstash Redis — supports rate limiting and abuse prevention. It processes IP addresses, which may be considered personal data.
• Vercel — hosts our application and website infrastructure.
• Vercel Analytics — privacy-friendly web analytics that doesn't use cookies or track individual users. Provides aggregate visitor counts, page views, and Core Web Vitals.
• Your church administrator — has access to your giving history and contact details for the church you have joined, so they can issue statements and steward contributions.
• Legal and safety — we may disclose information when required by law, to enforce our agreements, or to protect the rights, safety, and property of BlessFlo, our users, or the public.
• Business transfers — if BlessFlo is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

05Data retention and deletion

We retain your information for as long as your account is active or as needed to provide the service, comply with our legal and tax obligations, resolve disputes, and enforce our agreements.

You can request deletion of your account and associated personal data at any time. Some records, such as donation receipts, may be retained where required for legal, tax, or accounting purposes, and your church may retain its own copies of your giving records. To begin, visit blessflo.com/delete-account or email us at delete@blessflo.com.

06Your rights and choices

Depending on where you live, you may have some or all of the following rights over your personal information:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix information that is inaccurate or incomplete.
• Deletion — request that we delete your personal data, subject to legal exceptions.
• Portability — receive your data in a portable, machine-readable format.
• Withdraw consent — opt out of push notifications at any time in your device settings, and unsubscribe from non-essential email.

To exercise any of these rights, contact us using the details in the Contact us section. We will not discriminate against you for exercising your rights.

07California residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), gives you specific rights regarding your personal information. This section describes those rights and how to exercise them.

Categories of personal information we collect

In the past 12 months, we have collected the following categories of personal information, as defined by the CCPA:

• Identifiers — such as your name, email address, and device or account identifiers.
• Customer records — such as your name and payment-related references (we do not store full card numbers).
• Commercial information — records of donations you have made, including amounts, funds, and dates.
• Internet or other electronic network activity — app usage information such as features used and interactions.
• Financial information — limited payment tokens and metadata returned by Stripe (full card data is held by Stripe, not BlessFlo).

Sources and purposes

We collect this information directly from you, automatically through your use of the app, and from our service providers (such as Stripe). We use it for the business and commercial purposes described in How we use information and disclose it to the service providers described in How we share information.

No sale or sharing of personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA. We have not sold or shared the personal information of California residents, including minors under 16, in the preceding 12 months.

Sensitive personal information

We do not use or disclose sensitive personal information for purposes beyond those permitted by the CCPA, and we do not use it to infer characteristics about you. Because of this, the right to limit the use of sensitive personal information does not change how we handle your data.

Your California rights

• Right to know — request the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it.
• Right to delete — request that we delete the personal information we collected from you, subject to legal exceptions.
• Right to correct — request that we correct inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing — because we do not sell or share your personal information, no opt-out is necessary; you retain this right should our practices ever change.
• Right to non-discrimination — we will not deny you services, charge you a different price, or provide a different level of quality because you exercised your privacy rights.

How to exercise your California rights

To submit a request to know, delete, or correct, email us at support@blessflo.com or use our account deletion request form. We will verify your request using the information associated with your account before acting on it. You may use an authorized agent to submit a request on your behalf, in which case we may require proof of the agent's authorization and verification of your identity.

Shine the Light

California's "Shine the Light" law (Civil Code § 1798.83) permits California residents to request information about disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing.

08Data security

We use administrative, technical, and organizational measures to protect your information, including encryption in transit, access controls, and row-level isolation so each church can only access its own data. Card payments are handled by Stripe, a PCI DSS Level 1 certified provider.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security, and you use the service at your own risk.

09Children's privacy

BlessFlo is not directed at users under 18. You must be 18 or older to create an account and make donations. Members under 18 wishing to give should do so through a parent or guardian's account.

We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, please contact us and we will take steps to delete it.

10Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, notify you within the app or by email. We encourage you to review this page periodically.

11Contact us

If you have questions about this Privacy Policy or how your information is handled, contact Trureliv LLC through our support page or by email at support@blessflo.com. For account deletion requests, email delete@blessflo.com or use the deletion request form.