Privacy Policy — INVEST Marriage

In short

The app holds personal things: how you communicate, notes to your spouse, conversations with the Coach. We treat all of it as sensitive.
Your spouse sees only what the app says is shared. Coach conversations are private to you.
We do not sell your information, show ads, or track you across other apps and websites.
A small number of service providers run the app for us; each is named below.
You can delete your Coach conversations, or your whole account, in Settings at any time.
The app is for adults, 18 and older.

Who we are

INVEST Marriage is made by Wildfire Leadership, LLC ("we", "us"), the company of Bill and Stephanie Lammers, authors of the INVEST Marriage curriculum. We are the data controller for the information described here. Questions or requests: info@wildfireleadership.com.

This policy covers the INVEST Marriage iPhone app and this website, invest.wildfireleadership.com.

What we collect, and why

Account details. Your first name, your email address, whether you are the husband or the wife, and the season of marriage you chose. We use these to sign you in (by a code sent to your email, or through Sign in with Apple) and to address you and your spouse by name in the app. If you sign in with Apple, Apple gives us your name the first time only and an email address, which may be a private relay address that forwards to you.

What you write in the app. Your Snapshot answers and results (how you communicate and how you are most loved), your daily notes to your spouse, what you enter in the couple tools (Grace Place, the Mission Portrait, Proper Portions, the DREAM Map, date-night questions, the weekly reflection), and your conversations with the INVEST Coach. We store these so the app can show them back to you and to your spouse where the app says they are shared, and so the Coach can answer from your own Snapshot.

Your church or group code, if you redeemed one. It tells us which group gave you access so the app can open the right features. We do not share your answers, notes or conversations with your church or group.

Purchases. Whether you hold an active subscription or a gifted membership, and the dates it started and renews. Apple handles the payment; we never see your card number.

Notifications. If you allow notifications, a device token so we can deliver them, and the reminder time you chose. A notification never carries the words of a note; it says that one is waiting.

How the app is used. Which screens are opened and which features are used, with the device type and the app version, so we can see what helps couples and what does not. This never includes the words of a note, an answer or a Coach conversation. If the app crashes, a crash report with technical details about the device, the app version and the app's state at that moment is sent so we can fix it.

Safety signals. Every message to the Coach is checked automatically for signs that someone is in danger, so the Coach can point to real help. When it does, we keep a record that it happened and which kind of concern it was, never a copy of the conversation.

Images you choose. If you add a picture to a Mission Portrait, the image you chose or searched for. We do not otherwise access your photos, your contacts or your location.

On this website. The online workbook keeps your answers in your own browser's storage; nothing you type on this site is sent to us. Our hosting provider keeps standard server logs (the address a request came from, the page requested, the time) for security and reliability.

Who can see it

Your spouse. The app is built for two. When you pair with your spouse, they can see what the app says is shared: your daily note to them, your Snapshot result once you have both taken it, and what the two of you write together in a couple tool. Your Snapshot answers themselves, and anything the app marks private to you, stay yours. If you add the home-screen widget, your spouse's note is shown on your home screen, where anyone who can see your phone can see it. If you send a note as a text, you choose where it goes.

Your Coach conversations are private to you. Your spouse cannot read them. We do not read them either, except to respond to a support request you make, to investigate abuse of the service, or where the law requires it.

We do not sell or rent your information to anyone, we do not show advertising, and we do not track you across other companies' apps or websites. We do not "share" personal information for cross-context behavioral advertising as California law defines it.

When we must. We may disclose information if the law requires it, to protect someone's safety, or to enforce our terms. If Wildfire Leadership is ever sold or merged, your information would go with the service under this same policy, and we would tell you.

Who processes it for us

We use a small number of service providers to run the app. Each one processes only what its job needs, under its own terms and safeguards, and none of them may use your information for their own purposes.

Supabase hosts our database, file storage and sign-in (United States).
Google runs the model behind the INVEST Coach. Your messages to the Coach, and the context the Coach needs to answer (your Snapshot results, your spouse's where they are shared with you, and the parts of the curriculum that apply), are sent to Google's Gemini API to generate each reply, under Google's API terms.
Apple handles Sign in with Apple and every purchase.
RevenueCat keeps track of subscriptions using your account's identifier and Apple's purchase receipt.
Expo delivers push notifications and app updates.
Resend sends your sign-in code by email.
PostHog collects the usage information described above.
Sentry receives crash reports.
Unsplash receives your search words when you look for a picture for a Mission Portrait, and serves the picture you choose.
Vercel hosts this website.

Where it is kept, and how it is protected

Your information is stored in the United States. Everything travels encrypted between your phone and our servers, and is encrypted at rest. Each person's rows in our database are readable only by that person and, where the app says shared, their spouse; that rule is enforced in the database itself, not only in the app. On your phone, your sign-in is kept encrypted with a key in the device's secure keychain. No system is perfectly secure, and we will tell you if a breach affects you.

How long we keep it

We keep your information while your account exists, so the app can show you your history. Coach conversations stay until you delete them. When you delete your account, your information is removed from our live systems right away and from backups on their rolling schedule, within 30 days. Usage and crash information is kept in aggregate, without your name, for as long as it helps us improve the app.

Your choices and rights

See and correct. Your name, role and season are in Settings. Everything you wrote is in the app where you wrote it. Email us if you want a copy of your information in a portable form.

Delete. Delete your Coach conversations, or your whole account, in Settings. Deleting your account removes your account, your answers, your notes and your conversations. Entries the two of you made together in a couple tool stay with your spouse, and their own notes and answers remain theirs. You can also email us and we will delete it for you.

Notifications. Turn them off in Settings or in iOS at any time.

Unpair. You can end the pairing with your spouse in Settings. What was shared up to then stays with each of you.

California residents have the right to know what personal information we collect, use and disclose, to delete it, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information. To exercise a right, email us; we will verify the request through the email address on your account and answer within 45 days. You may authorize someone to make a request for you.

If you are in the European Economic Area, the United Kingdom or Switzerland, our legal bases are: performing our contract with you (running the app you signed up for), your consent (notifications, and the faith-based and relationship content you choose to enter, which may reveal your religious beliefs), and our legitimate interests in keeping the service secure and improving it. You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent, and you may complain to your local supervisory authority. Your information is transferred to and stored in the United States; we rely on our providers' standard contractual clauses for those transfers.

Children

INVEST Marriage is for adults. You must be 18 or older to use it, and we do not knowingly collect information from anyone under 18. If you believe a minor has an account, email us and we will delete it.

Changes to this policy

If we change this policy in a way that matters, the app will tell you before the change takes effect, and this page will show the new date. Continuing to use the app after that means you accept the change.

Contact

Wildfire Leadership, LLC · info@wildfireleadership.com