Privacy Policy - Foundry

Self-authored policy - not legal advice. This policy describes how the Foundry app actually handles data. It was prepared by LifeCity (not by an attorney) for an adults-only (18+), United States audience and is provided in good faith. If Foundry later serves minors or gains meaningful EU/UK usage, have it reviewed by counsel before relying on it in those contexts.

Effective date: June 4, 2026
Provider: LifeCity ("we", "us", "our")
Contact: support@lifecitypdx.com

Who this applies to

Foundry is a Christian discipleship platform. People use it in four roles - students, mentors, admins, and members of partner organizations. Students work through a Track → Category → Lesson curriculum guided by mentors; admins manage content, organizations, and pairings. This policy covers the Foundry mobile app and the backend services that power it.

What we collect

We collect only what's needed to run the discipleship experience:

Account information - your name (a full name and a display name), email address, date of birth, phone number, and password credentials. Sign-up and sign-in are handled by our authentication provider (Google Firebase Authentication) using email and password only; we do not use social or third-party logins. We use your date of birth to confirm you are old enough to use Foundry.
User-generated content you create - journal entries, Bible reflections, homework responses, and voice notes (audio recordings). Voice notes may be transcribed to text on your device using your operating system's speech-recognition feature.
Relationship and role data - your role (student/mentor/admin), and mentor↔student pairings and organization membership used to connect you with your mentor or group.
Usage analytics - how the app is used (screens viewed, features used, events) via PostHog. We do not collect an advertising identifier (IDFA/AAID), and we do not track you across other companies' apps or websites.
Purchase data - if you buy a membership, your subscription/purchase status is managed through RevenueCat and the Apple App Store or Google Play. We do not receive or store your full payment card details; those are handled by the app stores.
Device and technical data - limited technical information (e.g. app version, device/OS type, and a push notification token if you enable notifications) needed to deliver the service and notifications.

We do not sell your personal data, and we do not use it for cross-app advertising.

How we use it

We use the information above to:

Create and secure your account and sign you in.
Store and display your journal entries, reflections, homework, and voice notes, and make the appropriate content visible to your assigned mentor or organization.
Connect students with mentors and organizations and support the discipleship workflow.
Send relevant push notifications (e.g. lesson assignments, mentor messages) when you enable them.
Process and maintain memberships and purchases.
Understand and improve how the app is used (analytics), diagnose problems, and keep the service reliable and secure.

Content moderation and safety

Foundry includes user-to-user messaging. To keep the community safe and to comply with app-store requirements, we operate a moderation system:

You can report a message or another user, and block other users, from within the app.
When you submit a report, we store the report, a snapshot of the reported content, and the identities of the reporter and the reported user, so our moderators can review it.
Our moderators review reports and act on objectionable content within 24 hours, which may include removing the content and suspending or permanently disabling the responsible account.
We retain moderation records (reports and enforcement actions) as needed to operate the service, enforce our terms, and meet legal obligations, even after the related message or account is removed.

See the End User License Agreement (EULA) for the community guidelines you agree to.

Third parties and processors

We rely on the following service providers, who process data on our behalf under their own terms and security commitments. They are processors, not advertising partners:

Google Firebase (Authentication, Firestore, Cloud Storage, Cloud Functions) - our core backend: stores your account, content, and relationship data.
PostHog (US cloud) - product/usage analytics.
RevenueCat - in-app purchase and subscription management, working with the Apple App Store and Google Play, which process the actual payments.
Expo push notification service - delivery of push notifications you opt into.

Each processor receives only the data needed for its function and is contractually required to protect it.

Data retention

We keep your account and content for as long as your account is active or as needed to provide the service. When you delete your account (see below), we delete or de-identify your personal content - journal entries, reflections, homework, voice notes, and pairing data - within 30 days. We retain a limited set of records longer only where necessary: purchase and subscription records for financial and tax purposes, and moderation reports and enforcement actions for safety and legal compliance - each kept no longer than the law requires. We may keep aggregate, de-identified analytics that can no longer be linked to you.

Children's and minors' data

Foundry is intended for adults and is not directed to children or minors. You must be at least 18 years old (or the age of majority where you live) to create an account and use the service. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a minor, we will delete it. If you believe a minor has provided us personal information, contact us at support@lifecitypdx.com.

Note for review: Because Foundry is offered only to adults, set the App Store age rating and Google Play target-audience/content rating to an adult (non-kids) audience, and keep any sign-up age gate consistent with the 18+ requirement above.

Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. In all cases:

Account deletion - you can permanently delete your Foundry account from within the app: open your account/profile screen, choose Delete account, and confirm with your password. This deletes your account and associated personal content - journal entries, Bible reflections, homework, voice notes, and pairing data - and removes your authentication record. Deleting your account does not cancel an active App Store / Google Play subscription; manage that separately in your store account settings.
Access / correction / export - to request a copy of your data or a correction, contact us at support@lifecitypdx.com.
Notifications - you can turn off push notifications in your device settings.
Analytics - analytics are limited to product usage and contain no advertising identifier. We do not sell or share your personal information, and we do not use it for cross-context behavioral advertising. To ask us to stop processing your usage analytics, contact us at support@lifecitypdx.com.

We will respond to verified requests as required by applicable law. To protect your account, we may need to verify your identity before acting on a request.

Data security and storage

Data is transmitted over encrypted connections and stored with our backend provider (Google Firebase). Access to your content is restricted by server-side security rules so that, in general, only you and the mentors/organization you are paired with can see your content. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

Where your data is processed

Foundry is intended for users in the United States, and our service providers (including Google/Firebase and PostHog's US cloud) store and process data in the United States. We do not target or market Foundry to users in the European Union or the United Kingdom. If you access Foundry from outside the United States, you understand that your information will be transferred to and processed in the United States.

Changes to this policy

We may update this policy from time to time. We will revise the Effective date above and, where appropriate, notify you in the app.

Contact us

Questions or requests about this policy or your data: LifeCity, support@lifecitypdx.com.