Privacy Policy

Account Information

• Name (first and last)
• Email address
• Password (securely hashed, never stored in plain text)
• Birth date
• Last active timestamp
• Account settings (AI enabled/disabled, financial tracker visibility, reminder preferences, flexible mode option)

Mission Details

• Gender (optional)
• Age and mission eligibility status
• Expected mission dates
• Assigned mission location and language
• Missionary Training Center (MTC) information

Usage Data

• Journal entries you create and save
• Preparation progress and task completion status
• Settings and preference choices
• Language practice, teaching practice, and mission readiness interactions
• Daily AI feature usage for rate limiting purposes
• Mission journey events (bishop interviews, mission calls, MTC start dates, and other Church-related milestones)
• Daily practice and readiness habit tracking data (mindfulness practices, streaks, and skill development)
• Contact form messages submitted through the application

Device Information

• Browser type and version (for compatibility)
• Operating system type
• IP address (for authentication and security only)

Browser-Based Voice Features

Some features in My Mission Path may optionally use your browser's Web Speech API to enable voice input for language practice, pronunciation feedback, or voice-to-text functionality. When you enable voice features, your audio input is processed by your browser's speech recognition service. Please review your browser's privacy settings and the privacy policies of any third-party speech recognition providers to understand how voice data is handled. My Mission Path does not store audio recordings on our servers; audio is processed in real-time by your browser.

How We Use Google Gemini AI

We use Google's Gemini 2.0 Flash AI model to power features including language practice conversations, teaching practice scenarios, and wellness coaching. These features are optional—you choose whether to use them.

Data Transmission to Google

When you use an AI feature, your input (text, context, and conversation content) is transmitted to Google's API servers in real-time to generate responses. Your message content is sent to Google's systems as part of this processing. Please review Google's Privacy Policy to understand how Google processes this data.

AI Conversation History and Session Summaries

Important: My Mission Path does not save or retain the full text of AI conversation messages. However, we generate AI-powered summaries of your AI sessions (including teaching practice, language practice, and mindfulness coaching sessions) which are stored in our database for your reference and to improve personalized features. These summaries are retained as long as your account exists and are permanently deleted when you delete your account. The full conversations themselves pass through Google's servers during processing, and you should review Google's data retention and use policies.

Daily Usage Limits

To ensure fair access, each user has a limit of 200 AI interactions per day. This limit is enforced on our server and resets daily. A local counter in your browser helps show your remaining messages, but the server-side check is the authoritative limit. We do not store detailed interaction logs.

Google's Use of Your Data

Google's Gemini API is governed by Google's standard privacy policies. Depending on your Google account settings and Google's current policies, data sent to Google's API may be used to improve their services. Refer to Google's Privacy Policy and Google Cloud Service Terms for complete details.

AI-Generated Recommendations

Recommendations provided by AI characters (teaching practice scenarios, mindfulness guidance, skill coaching, and language practice) are generated by AI and are advisory in nature. These recommendations are not legally binding decisions and should not be treated as professional advice from medical, financial, or theological experts.

Right to Human Review

You have the right to request human review of any AI-generated recommendations or coaching provided through the app. To request human review or clarification, please contact us at mymissionpath@gmail.com with details of the specific recommendation you wish to discuss.

AI Character Personas

My Mission Path features AI-powered character personas — named individuals with distinct personalities — designed to create realistic, conversational practice experiences. These characters are powered by Google's Gemini AI model. They do not represent actual individuals and are tools to help you practice teaching and build confidence before your mission.

Where Your Data Is Stored

• Database: Supabase (PostgreSQL), located in secure cloud infrastructure
• Hosting: Vercel, a globally distributed CDN and hosting platform
• Local Storage: Some preferences and usage counters are stored in your browser's localStorage

Security Measures

• Passwords: All passwords are hashed using industry-standard algorithms and are never stored in plain text
• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS (HTTPS)
• Database Security: Supabase provides enterprise-grade security with encryption at rest and role-based access control
• Access Controls: Only authorized personnel can access user data, and such access is logged

Data Breaches

In the unlikely event of a data breach, we will notify affected users as required by applicable laws and regulations. For users subject to GDPR, we will notify you within 72 hours of becoming aware of the breach, as required by Article 34. We will investigate the breach, take corrective action, and cooperate with relevant authorities.

Google Gemini AI (Google Cloud)

• Data Shared: AI conversation messages, user input for language/teaching practice
• Purpose: Generate AI responses for features
• Privacy Policy: Google Privacy Policy

Supabase (Database & Authentication)

• Data Shared: All account data, mission details, journal entries, settings, and progress data
• Purpose: Store and manage your data securely
• Privacy Policy: Supabase Privacy Policy

Vercel (Hosting & Deployment)

• Data Shared: Application code and basic server logs (IP addresses, request metadata)
• Purpose: Host the application and serve it to users globally
• Privacy Policy: Vercel Privacy Policy

External Links

My Mission Path may contain links to official Church resources on ChurchofJesusChrist.org. These external sites have their own privacy policies. We encourage you to review their policies before sharing any information.

Standard Contractual Clauses

To ensure adequate protection for your data when transferred internationally, My Mission Path relies on Standard Contractual Clauses (also known as Model Clauses) approved by the European Commission. These clauses are incorporated into our agreements with the following data processors:

• Supabase (Database): Processes and stores your personal data in secure cloud infrastructure with Standard Contractual Clauses in place
• Vercel (Hosting): Hosts the application and processes server logs under Standard Contractual Clauses
• Google Cloud (AI Services): Processes AI requests through Google's Gemini API under Google's data processing terms

Cookies

We use only essential cookies to maintain your login session. Specifically:

• NextAuth.js Session Cookie: Stores encrypted session information to keep you logged in. Expires when you log out or after 30 days of inactivity.

We do not use tracking cookies, advertising cookies, or analytics cookies. We do not share cookie data with advertisers.

Local Storage

We use browser localStorage for non-sensitive data that improves your experience:

• Daily AI Usage Counter: Tracks your AI feature usage for the day (200 interactions per day limit)
• UI Preferences: Remembers display settings like theme preference, collapsed sections, or other UI state

localStorage is stored locally on your device and is not transmitted to our servers.

Minimum Age

My Mission Path is intended for users who are 16 years of age or older. We do not knowingly collect personal information from anyone under 16. Our account registration process requires users to confirm they are at least 16 years old.

If We Discover a User Under 16

If we become aware that a user under 16 has created an account, we will take immediate steps to delete their account and associated data.

Parent or Guardian Concerns

If you are a parent or guardian and believe someone under 16 has created an account or provided information to My Mission Path, please contact us at mymissionpath@gmail.com. We will verify and delete the account and associated data.

Legal Basis for Processing

We process your personal data under the following legal bases under GDPR:

• Consent: For non-essential features (AI features, analytics improvements)
• Legitimate Interest: To provide, maintain, and improve the service; to enforce our terms; and to protect against fraud
• Contract Performance: To provide the service you've requested

Your GDPR Rights

If you are a resident of the EU or EEA, you have the following additional rights:

• Right to Access (Article 15): Request a copy of your personal data
• Right to Rectification (Article 16): Correct inaccurate data
• Right to Erasure (Article 17): Request deletion of your data (right to be forgotten)
• Right to Restrict Processing (Article 18): Limit how we use your data
• Right to Data Portability (Article 20): Receive your data in a portable format
• Right to Object (Article 21): Object to certain types of processing
• Right to Lodge a Complaint: File a complaint with your national data protection authority

How to Exercise Your Rights

To exercise any of these rights, contact us at mymissionpath@gmail.com with your request. We will respond within 30 days of receiving your request.

Data Sales

We do not sell or share your personal information for profit. We do not sell, rent, lease, or otherwise disclose your personal information to third parties in exchange for monetary or other valuable consideration.

Your CCPA Rights

If you are a California resident, you have the following rights:

• Right to Know: Request what personal information we have collected about you
• Right to Delete: Request deletion of personal information we have collected from you
• Right to Opt-Out: Opt out of any future data sales (though we do not currently sell data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

How to Submit a Request

To submit a CCPA request, contact us at mymissionpath@gmail.com. We will verify your identity and respond within 45 days.