our promise

Trust, Privacy & Security

This page is maintained by the team at Don't Forget to Heal to answer common questions about how your data is handled. It is editable project content — not an independent certification or third-party audit.

Last updated · June 18, 2026

Shared responsibility

Don't Forget to Heal runs on the Lovable Cloud platform, which provides hosting, database, and authentication infrastructure. We rely on those platform controls and, on top of them, are responsible for how this app collects, uses, and protects your information. You are responsible for keeping your sign-in credentials private and choosing what you share in journals, reflections, and prayer requests.

Access & authentication

  • Accounts use email + password or Google sign-in through the platform's managed authentication service.
  • Sessions are stored in your browser only; we don't issue long-lived tokens to third parties.
  • Administrative access is limited to a single account and gated by a role-based check in the database, not by email.
  • All traffic between your browser and our servers is encrypted in transit (HTTPS).

What we collect & how it's protected

The app stores only what you provide while using it:

  • Account: email, display name, optional avatar.
  • Personal content: journal entries, episode reflections, assessment responses, prayer requests, episode listening progress.
  • Optional submissions: newsletter email, inner-circle interest form.

Every personal-content table is protected by row-level security rules so that you — and only you — can read or change your own rows. Public prayer requests have your name and email automatically stripped before they are stored as public.

Your controls

  • View, edit, or delete your own reflections, journal entries, and assessments from your dashboard.
  • Request full account deletion by emailing the address below. We process deletion requests within 30 days.
  • Newsletter unsubscribe links are included in every email we send.

Subprocessors & third-party services

Beyond the Lovable Cloud platform (which provides our hosting, database, and authentication), we do not use any additional third-party data processors at this time. If that changes, we will update this page before the change takes effect.

Contact & privacy requests

For privacy requests, security reports, or any questions about how your data is handled, please reach out:

eboni@ebbtech.us

We aim to respond to privacy and security inquiries within 7 business days.

This page describes current practices and may be updated as the app evolves. It is not legal advice and does not constitute a contract, certification, or warranty. For questions about specific situations, please contact us directly.