Privacy Policy

This Privacy Policy describes how Koby Empire, Inc., dba Sunflower Sober (“Koby Empire,” “we,” “us,” or “our”) collects, uses, discloses, sells, shares, and otherwise processes information in connection with the Grace mobile app and this website (together, “Grace”).

By using Grace, you acknowledge that you have read this Policy and consent to the practices it describes, including the disclosures to third parties named below. If you do not agree with it, do not use Grace. Your use is also governed by our Terms of Service, including its dispute-resolution provisions.

Grace is one of several apps operated by Koby Empire, Inc. This Policy covers Grace. Our other apps have their own policies.

Grace is a faith-based sobriety and recovery app. The simple fact that you use it — along with your answers about substance use, cravings, sobriety length, mood, faith tradition, and prayer — may reveal or imply information about your health, your substance use, your recovery, and your religious beliefs.

We treat that seriously, and we have tried to write this Policy so that you can see exactly where that information goes. Where information is shared with the analytics and advertising partners named in Section 6, those events may reflect your use of a sobriety and recovery app.

Information you give us

• Your first name or preferred name.
• Your phone number, if you choose to verify one. It is used to secure and recover your account — never for marketing.
• Your email address, if you opt in to email updates.
• Your answers during onboarding: the substances you are recovering from, how often you experience cravings, roughly what you have been spending, your goals and obstacles, your faith tradition, how often you pray, how you describe your relationship with God, and your commitment level.
• Your sobriety start date, and your daily check-ins: mood, craving level, and what you need that day.
• Journal entries, prayers, and reflections you write.
• Messages you send to the AI companion.
• Scriptures you save.
• Your community profile: nickname, avatar, bio, and profile photo.
• Your community content: posts (including photos and milestone posts), comments, replies, and prayer reactions.
• Reports you submit about other members’ content.
• Feedback you send us in the app, and messages you send our support team.
• Your answers to occasional surveys about how Grace is affecting your recovery, which open in a web form outside the app.
• Your subscription and purchase status (we never receive your card details).

Information we collect automatically

• Device and technical information: device model, operating system, app version, language, time zone, and IP address, which indicates approximate location.
• Identifiers: the account ID we assign you, your push notification token, and advertising identifiers where your device settings allow them.
• Usage information: screens viewed, features used, onboarding progress, check-in and journaling activity, community activity, paywall views, purchases, and when each of these happens.
• Diagnostic information: crashes, errors, and performance data.

We use information to:

• Provide and operate Grace, including saving your data and syncing it across your devices.
• Personalize what you see — devotionals, scripture, and AI responses shaped by what you have told us about yourself.
• Generate AI companion responses and remember context between conversations.
• Moderate community content and enforce our Terms, including automated screening of text and images.
• Send you notifications and, if you have opted in, email.
• Process subscriptions and manage entitlements.
• Measure and improve Grace, understand which features help, and run product experiments.
• Advertise Grace, including measuring campaign performance, retargeting, and building advertising audiences (see Section 7).
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with the law and enforce our agreements.
• Create aggregated or de-identified data, which we may use for any purpose.

Your information is stored on our servers, not only on your device. Your account, profile, onboarding answers, journal entries, prayers, check-ins, saved scriptures, AI conversations, community content, and uploaded images are stored using Google Firebase — Firebase Authentication, Cloud Firestore, and Cloud Storage — and our own API runs on Google Cloud Run. All of it is hosted in the United States. Some of the other providers in Section 6 may process information elsewhere; see Section 17.

The app also keeps a copy of some of your data on your device so it works offline. Deleting the app removes that local copy but does not delete anything from our servers — for that, delete your account (Section 13).

We do not sell your journal entries, prayers, check-ins, AI conversations, or community posts. We do disclose information to the service providers and partners below, and some of those disclosures are a “sale” or “sharing” under state privacy law — see Section 7. These are our partners as of the date at the top of this page; they change from time to time.

• Google LLC — Firebase Authentication, Cloud Firestore, and Cloud Storage hold your account and content; Google Cloud Run hosts our API; Firebase Analytics and Crashlytics receive usage and crash data.
• Anthropic — powers the AI companion, personalized devotionals, and automated content moderation. It receives your messages, the profile context described in Section 8, and images you upload to the community.
• Mem0 — receives your messages and the companion’s replies, and stores memories drawn from them against your account ID so the companion can remember context between sessions. Mem0 uses its own AI providers to extract those memories.
• Expo — delivers push notifications; receives your push token and the contents of the notification.
• PostHog — product analytics; receives your account ID and usage events across the app.
• RevenueCat — manages subscriptions; receives your account ID and your purchase, subscription, and entitlement status.
• Apple and Google — process purchases and app-store transactions under their own terms.
• Meta Platforms — advertising and measurement; see Section 7 for exactly what it receives.
• Chatwoot — powers in-app support chat; receives what you write to support and an identifier for your conversation.
• Typeform — hosts our occasional impact surveys. When you open one we pass your account ID so the answers can be matched to your account, and your answers go to Typeform directly.
• Our website hosting provider — serves this site and processes standard request logs.

We also disclose information:

• To other members, when you post in the community (Section 9).
• To a successor or acquirer in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, in which case information transfers as a business asset.
• To government authorities, courts, or others where we believe disclosure is required by law or legal process, or is needed to protect the rights, safety, or security of members, the public, or Grace, or to establish or defend legal claims.
• To anyone else at your direction or with your consent.

Grace includes Meta’s advertising SDK. Once you have accepted our Terms, we send Meta events about your use of the app — app activations, completing onboarding and registration, starting a free trial, and starting a subscription — together with your Grace account identifier, device information, and advertising identifiers. Meta uses this to measure our advertising, optimize campaigns, retarget you, and build audiences of people similar to our users, and may also use it for its own purposes under its own privacy policy.

Under the California Consumer Privacy Act and similar state laws, this counts as a “sale” of personal information and as “sharing” it for cross-context behavioral advertising. Because Grace is a sobriety and recovery app, these events may reveal that you use one.

We do not send Meta — or any advertising partner — your name, email address, phone number, journal entries, prayers, check-ins, AI conversations, or community posts.

How to opt out

• On iOS, decline the App Tracking Transparency prompt, or turn Grace off later under Settings › Privacy & Security › Tracking. When you decline, we instruct Meta not to use your device’s advertising identifier.
• On Android, delete or reset your advertising ID under Settings › Privacy › Ads.
• Email koby@sunflowersober.com and ask us to opt you out of the sale and sharing of your personal information.
• This website carries no advertising or analytics technology, so there is nothing on it for a Global Privacy Control signal to opt out of. The controls above are what apply to the app.

To generate a reply, we send our AI provider your message, recent messages from the same conversation, and context from your profile: your name, how long you have been sober, the substances you are recovering from, your faith tradition, your age if you gave it, your goals and obstacles, how often you pray, how you describe your relationship with God, your commitment level, and your current mood, craving level, and stated need.

We also send each exchange — your message and the companion’s reply — to a memory service, stored against your account ID, so the companion can remember context between sessions. That service uses its own AI providers to extract memories from what we send it. And we send community text, post images, and profile photos to our AI provider for automated safety screening before they are published.

These providers operate under commercial terms that do not permit them to train or improve their models on your conversations. They may derive aggregated, de-identified data from what we send them and use that to improve their own services.

Conversations with the AI companion are not protected by doctor–patient, therapist–client, clergy–penitent, or any other privilege. Please do not submit anything you would not want processed this way.

Visible to every signed-in member: your nickname, avatar, bio, and profile photo; your posts, comments, and replies; your prayer reactions; and the sobriety length shown alongside them. Treat all of it as public.

Never visible to other members: your journal entries, prayers, check-ins, mood and craving logs, saved scriptures, AI conversations, onboarding answers, phone number, and email address.

Your nickname is whatever you choose and we do not verify it. If you want to stay anonymous in the community, pick a nickname and photo that do not identify you.

If you allow notifications, we store a push token for your device and use it to send daily check-in and evening reminders, scripture, milestone celebrations, nudges to come back if you have been away, alerts when someone prays for or comments on your posts, and a reminder before a free trial ends. We also keep a record of notifications sent to you in the app. Turn notifications off at any time in the app or in your device settings.

This website does not use advertising or analytics cookies — it sets only what is needed to serve the page. The Grace app does not use cookies; it uses the software development kits described in Section 6, which collect the information described in Section 3.

We keep your information for as long as your account exists, and afterwards for as long as we need it for the purposes in this Policy — to resolve disputes, enforce our agreements, and meet legal obligations.

Information may persist in backups and logs for a period after it is removed from our active systems. Information already disclosed to the third parties in Section 6 is retained and used under their own policies.

You can delete your account at any time from inside the app. When you do, we permanently delete your user record and everything under it — your profile, onboarding answers, journal entries, prayers, check-ins, mood and craving logs, saved scriptures, AI conversations, and push tokens — along with your community profile, your profile photo, and the posts, comments, replies, and prayer reactions you have published. Your authentication record is deleted too, so the account cannot be used again. This cannot be undone.

What deletion cannot reach

• Other members may already have read, replied to, or screenshotted something while it was up. We can remove your content from Grace; we cannot undo someone else having seen it.
• Copies held by the third parties in Section 6, and copies in our backups, which expire on their own schedule.

If something you expected to be gone is still visible, email koby@sunflowersober.com and we will remove it by hand.

Deleting your account does not cancel a subscription. Cancel that in your Apple ID or Google Play settings.

We use measures we consider appropriate for Grace, including access rules that keep your private content readable only by your own account, and server-side screening of images before they are published. No method of transmission or storage is completely secure, and we cannot guarantee the security of any information.

Grace is for adults 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, email us and we will delete it.

Depending on where you live, you may have the right to know what personal information we hold about you, to access a copy, to correct it, to delete it, to opt out of its sale or sharing and of targeted advertising, and to limit our use of sensitive personal information. We honor these requests where the law requires it.

To make a request, delete your account in the app, or email koby@sunflowersober.com describing what you want. We may need to verify your identity first, and we may decline or limit a request where the law permits. We will not discriminate against you for exercising these rights. If we decline, you may appeal by replying to our response.

This website does not sell or share personal information, so browser signals such as Global Privacy Control and “Do Not Track” have nothing to act on here. To opt out of the sale and sharing that happens in the app, use the controls in Section 7 or email us.

Grace is operated from the United States and intended for use there. Your information is processed and stored in the United States and in other countries where our service providers operate, whose laws may differ from those where you live. If you use Grace from outside the United States, you consent to that transfer.

We may update this Policy. When we make a material change we will give notice in the app, by email, or by asking you to accept the updated Policy, and we will update the date at the top of this page. Continuing to use Grace after a change takes effect means you accept it.

Koby Empire, Inc., dba Sunflower Sober.

• Privacy questions and requests: koby@sunflowersober.com
• Everything else: hello@sunflowersober.com