Your privacy matters to us. Still Waters is not an advertising platform and never will be. We collect only what's necessary to run the service, we don't sell your data, and we don't share it with third parties for commercial purposes. This policy explains plainly what we collect, why, and how.
1
Who we are
Still Waters is operated by Matthew Burleson, an individual based in Oklahoma, United States. You can reach us at burleson.matthew@gmail.com.
2
What we collect
We collect only what's needed to make Still Waters work:
| What | Why | How long |
|---|
| Email address |
To sign you in and send magic links |
Until you delete your account |
| Name and profile photo |
To display your identity to other community members |
Until you delete your account |
| Posts, prayers, and comments |
To power the community feed and prayer tab |
Until you delete them or your account |
| Follow relationships |
To personalize your feed |
Until you unfollow or delete your account |
| Faith profile fields |
Testimony, currently reading, spiritual gifts — shared with your community if you fill them in |
Until you update or delete your account |
| Push notification tokens |
To send you notifications when someone interacts with your posts |
Until you revoke permission or delete your account |
| Device/browser info |
Standard server logs for security and debugging |
Automatically purged periodically |
3
What we don't collect
- We do not track your location
- We do not use cookies for advertising
- We do not build behavioral profiles for targeting
- We do not collect payment information (the service is free)
- We do not use third-party analytics or advertising SDKs
4
How we use your information
Your information is used only to operate Still Waters:
- Authenticating your identity when you sign in
- Displaying your profile and posts to other community members
- Sending you email sign-in links
- Sending push notifications for community interactions
- Personalizing your feed based on who you follow
- Maintaining the security and integrity of the platform
5
Who we share data with
We do not sell, rent, or share your personal data with third parties for commercial purposes. Period.
We use the following services to operate Still Waters, each of which may process some of your data:
- Supabase — our database and authentication provider. Your data is stored on their infrastructure. Supabase Privacy Policy
- Vercel — our hosting provider. They serve the app and handle server requests. Vercel Privacy Policy
- Google — if you choose to sign in with Google, Google authenticates your identity. Google Privacy Policy
- ESV Bible API (Crossway) — used to fetch the daily Scripture verse. No personal data is sent to them.
6
Children's privacy (COPPA)
Still Waters is intended for users 13 and older. We do not knowingly collect personal information from children under 13. If we become aware that a user is under 13, we will promptly delete their account and all associated data. If you believe a child under 13 has created an account, please contact us at
burleson.matthew@gmail.com.
7
Your rights
You have full control over your data:
- Access — you can see all your posts, prayer requests, and profile information within the app
- Edit — you can update your profile, bio, and faith profile at any time
- Delete — you can delete individual posts or your entire account from Profile settings. Account deletion permanently removes all your data.
- Export — if you'd like a copy of your data, email us and we'll provide it within a reasonable time
If you are in the European Economic Area (EEA) or California, you may have additional rights under GDPR or CCPA. Please contact us to exercise those rights.
8
Data security
We take reasonable measures to protect your information:
- All data is transmitted over HTTPS
- Authentication is handled by Supabase with industry-standard security
- Database access is protected by row-level security policies
- API keys are stored as environment variables, never in client-side code
No system is perfectly secure. In the event of a data breach that affects your personal information, we will notify you promptly.
9
Push notifications
If you grant permission for push notifications, your device's push subscription token is stored in our database and used only to send you Still Waters notifications. You can revoke this permission at any time in your device or browser settings. Revoking permission does not affect your account.
10
Changes to this policy
We may update this policy as the service evolves. If we make material changes, we will notify you through the app or by email. The "last updated" date at the top of this page will always reflect the most recent version.
11
Contact us
Questions, requests, or concerns about your privacy? We'd love to hear from you.
Matthew Burleson
Oklahoma, United States
burleson.matthew@gmail.com