Privacy Notice

Last updated: June 7, 2026

This Privacy Notice explains how rtrn LLC ("rtrn," "we," "us," or "our") collects, uses, protects, and shares information when you use the rtrn web application and website at rtrnapp.com (the "Service"). rtrn is operated from Allen County, Indiana, and the Service is offered to users in the United States only.

By using rtrn, you agree to the practices described here. If you do not agree, please do not use the Service.

1. Our Promise

Your reflections are sacred, and we treat them that way.

• We will never sell your personal information or your journal entries. Not to advertisers, not to data brokers, not to anyone. This is a brand promise, not just a policy.
• We do not show you advertising and do not use your content to target ads.
• We collect only what we need to make the Service work and to give you a good experience - nothing more.
• Your journal is private to you. The only times your content leaves your private journal are (a) entries you choose to share with a group you've joined, and (b) the specific content you explicitly opt in to have analyzed for an AI Growth Report (see Section 6). We do not browse or read your entries for any other purpose.

2. Information We Collect

Account information. When you create an account, we collect your email address, your display name, and an authentication credential (your password is stored only in hashed form by our authentication provider - we never see or store it in plain text).

Content you create. This includes the Scripture passages you select, your journaling responses - your Reflect (Meditatio), Pray (Oratio), Act (Actio), and Give Thanks (Review) entries - your drafts, your saved readings, any entries you choose to share with a group, and your group memberships.

Subscription and billing information. If you subscribe to a paid plan, our payment processor, Stripe, collects and processes your payment details. rtrn does not receive or store your full card number. We retain limited billing records such as your subscription plan, status, billing dates, the last four digits and card brand, and a Stripe customer identifier.

Usage and device information. We use the built-in analytics provided by our hosting platform, Lovable, to understand how the Service is used and to improve it. This may include general information such as pages visited, actions taken, approximate device and browser type, and similar technical data.

Communications. If you email us (for example, support requests, prayer requests, or feedback), we receive the contents of those messages and your email address.

3. How We Use Your Information

We use the information above to:

• Provide, operate, and maintain the Service, including your account, journal, and groups;
• Authenticate you and keep your account secure;
• Process subscriptions, trials, renewals, and related transactions through Stripe;
• Send you transactional messages such as receipts, password resets, trial and renewal notices, and important account or security notices;
• Respond to your support requests and communications;
• Generate AI Growth Reports, only if you opt in (see Section 6);
• Monitor for, prevent, and address fraud, abuse, security issues, and violations of our Terms; and
• Understand usage and improve the Service.

We do not use your information for advertising, and we do not sell it.

4. AI Growth Reports (Opt-In Only)

Growth Reports use artificial intelligence to surface themes, patterns, and insights across your journaling over time. Because this feature involves processing your reflections, we built it to put you in control.

It is off by default. Growth Reports are processed by AI only if you affirmatively opt in. We record your consent (including the date and time you gave it), and you can withdraw it at any time from your Account settings. Turning it off stops future AI processing.

What is sent for processing. When you have opted in, the following content is sent, in de-identified form (see below), to our AI provider, Anthropic, to generate your report:

• the Scripture passage you journaled on;
• your Reflect (Meditatio) responses;
• your Act (Actio) responses; and
• your Give Thanks (Review) responses.

What is never sent. Your Pray (Oratio) responses - your direct, intimate prayers to God - are never transmitted for AI processing. They remain in your private journal.

De-identification. Before any content is sent for processing, we de-identify it. Your name, email, and account identity are not included. The content is associated only with a pseudonymous identifier that does not reveal who you are to the AI. Please note that because your reflections are written in your own words, they may still contain personal details you choose to include; rtrn does not add any identifying information of its own.

About our AI provider. Anthropic acts as a service provider (sub-processor) that processes this de-identified content on our behalf solely to produce your report. Under Anthropic's commercial API terms, your inputs and the AI's outputs are not used to train Anthropic's models. Anthropic retains inputs and outputs only for a limited period for security and abuse-prevention purposes, after which they are deleted, except where longer retention is required to investigate misuse or to comply with law.

If you never opt in, none of your content is ever sent to any AI provider.

5. How Your Information Is Protected

We take reasonable measures to protect your information:

• In transit: data is encrypted using industry-standard TLS.
• At rest: your data is stored on Supabase, which encrypts data at rest at the storage layer.
• Access controls: we use Postgres Row Level Security, which is designed so that each account can access only its own data.

Please note that rtrn does not currently use end-to-end (client-side) encryption. This means that, in principle, rtrn and our infrastructure providers have the technical ability to access stored content - for example, to provide support you request, to operate the Service, or to deliver an AI Growth Report you have enabled. We access content only for these limited, legitimate purposes, and never to read your private entries out of curiosity or to sell or advertise.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. How We Share Information

We never sell your personal information or journal entries.

We share information only in these limited circumstances:

• Service providers (sub-processors) who help us run rtrn, bound to protect your data and use it only to provide their services to us:
  • Supabase - database, authentication, and hosting;
  • Stripe - payment processing;
  • Lovable - application hosting and built-in analytics;
  • Anthropic - AI Growth Report generation, only for content you have opted in to share (Section 4).
• Group sharing you initiate - when you choose to share an entry with a group, the members of that group can see what you shared. You control what you share.
• Legal and safety - if required by law, valid legal process, or to protect the rights, safety, or property of rtrn, our users, or the public.
• Business transfers - if rtrn is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction, subject to this Notice.

7. Data Retention and Deletion

We keep your account information and content for as long as your account is active.

You can delete your account at any time from your Account page. When you do:

• your journal entries, drafts, shared group posts, saved readings, and group memberships are removed from our live systems, and any active subscription is canceled;
• residual copies may persist in encrypted Supabase backups for up to 7 days before being overwritten on the backup cycle; and
• limited billing and transaction records are retained by us and by Stripe for as long as required for tax, accounting, legal, and fraud-prevention purposes.

8. Your Choices and Rights

You can:

• Access and review your information through your account;
• Correct your account details;
• Export your entries from your Account page;
• Delete your data or your entire account from your Account page, or by emailing us;
• Opt in or out of AI Growth Reports at any time in your Account settings; and
• Cancel your subscription at any time (see the Terms of Service).

To make a request, email hello@rtrnapp.com. We will respond within a reasonable time. While rtrn is offered only in the United States and certain state-specific privacy laws may not apply to us, we aim to honor reasonable access, correction, and deletion requests regardless.

9. Children's Privacy

rtrn is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, please contact us at hello@rtrnapp.com and we will delete it. If you are between 13 and 17, we encourage you to use rtrn with the awareness and involvement of a parent or guardian.

10. Third-Party Content and Services

The Service displays daily Mass readings and Scripture text sourced from third parties. That content is owned by its respective rights holders and provided subject to their terms. rtrn is not responsible for the content, privacy practices, or terms of third-party services.

11. Changes to This Notice

We may update this Privacy Notice from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you within the Service or by email. Your continued use of rtrn after an update means you accept the revised Notice.

12. Severability

If any provision of this Privacy Notice is held to be invalid, unlawful, or unenforceable, that provision will be severed and the remaining provisions will continue in full force and effect.

13. Contact Us

rtrn LLC
Fort Wayne, Indiana, United States
Email: hello@rtrnapp.com