Privacy Policy
Privacy isn’t just a legal page to us — it’s the trust at the foundation of everything we do. The people in our community share their struggles with their bodies, their honest prayers, and the days they’d rather not talk about. We protect that trust with real safeguards, not just promises. The full details are below; if anything is unclear, write to us.
This Privacy Policy explains what data we collect across the entire Weight Loss with the Holy Spirit experience — our website, our courses and digital products, our memberships, our coaching calls, our mobile apps (the Catholic Walking App and Surrendered), our email lists, our text-message reminders, our community spaces, our podcast, our affiliate links, and our workshops and in-person events — how we use it, who we share it with, and your rights over it. We’ve written it to be readable. If anything is unclear, email team@weightlosswiththeholyspirit.com and we’ll explain.
Weight Loss with the Holy Spirit is a brand of Made for Greatness, LLC (“we”, “us”, “our”), the data controller for the information described below.
1. Services this policy covers
This Privacy Policy applies to all of the following:
- Our websites — weightlosswiththeholyspirit.com, madeforgreatness.co, and any related subdomains.
- Email lists and newsletters — including welcome sequences, program communications, and broadcast emails.
- Text-message reminders — SMS reminders about workshops and events, sent only to people who have given us their number and opted in. See Section 6.
- The Catholic Walking App — our iOS and Android walking-journey mobile application.
- Surrendered — our iOS and Android mobile application for the Surrendered program: meal logging, morning and evening reflections, the 63-day prayer series, audio and video teaching, coaching-call reminders, and an in-app AI assistant.
- Digital products and courses — any course, workbook, or digital resource we sell or include with a membership.
- Memberships — the Weight Loss with the Holy Spirit community and its associated benefits.
- Coaching calls — group calls and one-on-one coaching sessions delivered by video conference.
- Community spaces — any members-only group, forum, or chat workspace we host for qualifying members.
- Podcast — our podcast and any audio teaching we distribute publicly.
- Workshops and in-person events — live workshops, retreats, and gatherings we host, whether virtual or in person.
- Affiliate links — links from our content to third-party retailers where we may earn commission on qualifying purchases.
Most of this policy describes the Weight Loss with the Holy Spirit program as a whole — the website, courses, memberships, coaching, community, podcast, email and events. Our two mobile applications are part of that program rather than the subject of it, so where something is true only inside an app, we say so.
We refer to the Catholic Walking App and Surrendered together as “the Apps”, and to either one on its own as “the App”. The two do different things and collect different information: the Catholic Walking App records a walking journey, while Surrendered records meals, reflections and prayer progress. Where that difference matters, we name the app rather than leaving you to guess.
Where a section below applies only to a specific service, we say so plainly.
2. Information we collect
We collect only what we need to deliver the services above. The exact set depends on what you use.
2.1 Account and contact information
When you create an account on our website, in the App, or in the community, we collect your name and email address. If you choose to sign in with Apple, Google, or another single-sign-on provider, we receive the basic profile information that provider chooses to share with us (typically name and email). If you book a coaching session, we collect any intake-form responses you provide.
2.2 Phone number
If you give us your mobile number — on a registration form, at checkout, or when signing up for workshop reminders — we store it so we can text you. Providing a phone number is always optional and is never required to buy anything or to use the App. See Section 6 for how SMS works and how to stop it.
2.3 Subscription and payment information
When you purchase a product, course, membership, or program, we record what you bought, the price, the date, and your renewal or cancellation status. Card numbers are processed by our payment processors (Stripe and Ontraport). We do not see, store, or have access to your full payment card numbers. Our payment processors send us a token, the last four digits of the card, and the cardholder name for receipts and reconciliation.
The Catholic Walking App does not contain in-app purchases. Nothing is billed through Apple or Google.
2.4 Walking activity and progress (Catholic Walking App)
Inside the Catholic Walking App we record the walking activity you tell us about: the day you have reached in the walking journey, the date you last marked a walk complete, your current streak, and your total number of walks. The App does not read your phone’s step counter, pedometer, Apple Health, Google Fit, GPS location, heart rate, or any other sensor. Nothing is measured automatically — the only walking data we hold is what you record by tapping the button yourself. See Section 7.
2.5 Meals, reflections, and prayer progress (Surrendered)
Surrendered is a food-freedom program, so what you record in it is more personal than a step count. Everything below is entered by you, by hand. Surrendered does not read your phone’s health or fitness data, Apple Health, Google Fit, GPS location, or any sensor, and it does not ask for your weight, your measurements, or your BMI.
- Meal entries — for each of up to six meal slots a day, what you ate, any changes you made to your plan, an adjustment you would make next time, and an optional set of reflection tags you pick from a fixed list (for example “hungry before”, “stopped at full”, “on plan”, “off plan”, “joyful”).
- Go-to meals — a personal list of meals you save to reuse.
- Morning and evening reflections — free-text answers about how you will care for yourself, how you want to respond rather than react, what you are asking the Lord, what you learned, and where you need support. See Section 8.
- Prayer progress — which day of the 63-day prayer series you have reached, derived from your program start date.
- Messages you send to the in-app AI assistant, and its replies. See Section 12.
- Check-in responses — where the program includes a periodic check-in, your answers and the two summary scores calculated from them. This feature is limited to a small number of participants.
Because these entries describe eating behaviour and your relationship with food, and because prayer progress reveals religious practice, we treat them as sensitive. Section 7 and Section 8 explain the protections that apply.
2.6 Content you create or share
- The written reflections you save in either App — see Section 8 for the special protections that apply to them.
- Messages, posts, reactions, and files you share in our community spaces.
- Replies to email broadcasts, including unsubscribe choices.
- Worksheet responses, quiz answers, and other content you save inside courses.
- Questions submitted before, during, or after coaching calls.
- Wins, prayers, photos, or stories you submit for sharing in newsletters or marketing — only when you opt in to that sharing.
2.7 App preferences
Your notification settings (the time of day you want to be nudged, your quiet hours, and whether you want audio and event notifications), your time zone, and your display name. Your time zone is detected automatically from your device so that reminders arrive at the right local hour.
2.8 Coaching session content
Group coaching sessions delivered by video conference are recorded. Recordings include audio, video, and the public chat, and are made available to qualifying members as replays. By joining a recorded group session, you consent to being recorded and to your recording being shown to other members of that program. One-on-one sessions are not routinely recorded; see Section 10.
2.9 Workshop and event information
For workshops and in-person events we collect what registration and safety require: name, email, phone number (if you give one), dietary restrictions and food allergies, accessibility needs, and emergency contact. For events involving travel we may additionally need legal name as it appears on your identification, date of birth, citizenship, and passport details. Some of this is shared with travel or venue partners only to the extent strictly necessary to complete the booking and protect your safety. See Section 11.
2.10 Behavioral and device information
When you use our website, the App, or open our emails, our service providers collect standard technical and behavioral data on our behalf — IP address, device type and operating system, browser, the pages you visit, the links you click, the buttons you tap inside the App, and the dates and times of your activity. On the App we also collect crash reports and error diagnostics, and a push notification token that identifies your device to the notification service. Section 5 describes the cookies and pixels we use on the website.
2.11 Marketing preferences and segmentation
Your subscription status to our marketing emails and texts, your tag-based segments inside our CRM, and any preferences or interests you’ve declared in surveys or signup forms.
3. How we use your information
We use the information described in Section 2 to:
- Deliver what you bought — fulfill course access, membership benefits, App features, coaching sessions, and event registrations.
- Run the walking journey — track which day you are on, advance it as you complete walks, calculate your streak, and show you the right daily content and milestone celebration.
- Send you the communications you signed up for — receipts, program notifications, daily walking nudges, newsletters, workshop reminders, and event details. You can unsubscribe from marketing communications at any time without losing access to anything you’ve paid for.
- Provide customer support — answer your questions, process refunds, and troubleshoot access issues.
- Improve our products — understand which programs are completed, which App features are used, which teachings resonate, and where people get stuck. This is done in aggregate; we do not read individual reflections.
- Run our business operations — billing, accounting, fraud prevention, and security monitoring.
- Show relevant marketing — run ads on Meta and Google about our products and retarget visitors who showed interest. Section 5 covers this in detail.
- Comply with legal obligations — respond to lawful requests, enforce our Terms of Use, and protect our community and ourselves from fraud or abuse.
4. Service providers we share with
We share specific data only with service providers who need it to deliver the services in Section 1. Each is bound by data processing terms that limit their use of your data to providing services to us. We do not sell your personal information.
- Ontraport
- Email marketing, text messaging, marketing automation, customer relationship management (CRM), website forms, and order processing. Receives: name, email, phone number, purchase history, marketing tags, behavioral signals from our website, and a summary of your App progress (your account identifier, total walks, last walk date, and current streak). ontraport.com/privacy
- Stripe
- Payment processing for purchases on our website. Receives: name, billing address, email, payment card details (which Stripe processes; we do not see them), and transaction amount. stripe.com/privacy
- Google Firebase
- Account authentication, database storage, push notification delivery, and backend services for both Apps. Receives: account email, and all data the App stores for you (encrypted at rest) — your reflections, walking progress in the Catholic Walking App, and in Surrendered your meal entries, go-to meals, prayer progress and assistant conversations — plus your notification preferences and device push token. firebase.google.com/support/privacy
- Expo
- Delivers push notifications to your device on our behalf. Receives: your device’s push token and the contents of the notification being delivered (for example, “your coaching call starts in 30 minutes”). It does not receive your reflections, meal entries, or assistant conversations. expo.dev/privacy
- OpenAI
- Surrendered only. Generates the replies from the in-app AI assistant. Receives: the message you type and the recent messages in that same conversation — nothing else from your account. Sent under API terms that prohibit training on your data. See Section 12. openai.com/policies/privacy-policy
- Apple App Store and Google Play
- Distribution of the Apps on iOS and Android. Because neither App contains in-app purchases, Apple and Google receive only the standard download and device information described in their own policies. apple.com/legal/privacy · policies.google.com/privacy
- HelloAudio
- Hosts and delivers the audio teachings and prayers inside the Apps. Receives: device IP address and request logs when audio plays. helloaudio.fm/privacy
- Searchie
- Hosts and delivers course and teaching content associated with your membership. Receives: your name and email address to grant access, and viewing activity for the content you open. searchie.io/privacy-policy
- membership.io
- Surrendered only. Hosts and streams the video teaching library shown inside the app. Receives: device IP address and request logs when a video plays.
- Resend
- Delivers operational email on our behalf — for example, internal alerts when a membership sync fails. Receives: the recipient address and the contents of that message. It is not used for marketing email. resend.com/legal/privacy-policy
- Sentry
- Crash and error reporting for the Apps. Receives: anonymized device identifier, App version, error stack traces, and limited diagnostic context. We do not transmit your reflections, meal entries, assistant conversations, or other written content to Sentry. sentry.io/privacy
- Zoom
- Video conferencing for coaching calls, virtual workshops, and live events. Receives: name, email, IP address, audio/video stream during sessions, chat messages. zoom.us/privacy
- Course and community platforms
- Hosting of courses, membership content, and coaching call replays, and hosting of any members-only community workspace. Receive: name, email, course progress, viewing history, recordings of group coaching calls, and any messages or files you share in the community.
- Scheduling provider
- Booking and calendar management for one-on-one coaching sessions. Receives: name, email, booking time, intake form responses.
- Google Analytics
- Website usage analytics. Receives: IP address (truncated where supported), pages visited, referrer, device and browser information. We do not use Google Analytics inside the App. policies.google.com/privacy
- Meta (Facebook) Pixel
- Website conversion tracking and ad audience building. Receives: events such as page view, product view, and purchase, along with hashed identifiers used to match website visitors to Meta accounts. facebook.com/policy
- Podcast hosts and platforms
- Our podcast is distributed through standard podcast platforms (e.g., Apple Podcasts, Spotify, Amazon Music). Listening data is collected by those platforms under their own privacy policies; we receive only aggregate, anonymized download counts.
- Event, venue, and travel partners
- For workshops, retreats, and travel-based events, we share necessary registration data with the venue, booking agency, lodging provider, and ground transport operator(s) for the specific event. The exact partners are disclosed at the time of registration.
- Affiliate retailers
- If you click an affiliate link from our content (for example, an Amazon Associates link), the destination retailer sets cookies on your browser to credit the referral. We see only aggregate referral counts; we do not see what you purchase.
We may also disclose information when required by law (subpoena, court order, lawful government request) and to professional advisors (accountants, lawyers, auditors) bound by confidentiality. If we are ever involved in a merger, acquisition, or sale of business assets, your information may be transferred as part of that transaction; we will notify you and any successor will be bound by this policy or one materially equivalent.
5. Cookies, analytics, and advertising
Our websites use cookies and similar technologies. Cookies are small text files stored by your browser that let websites remember you and let analytics and advertising tools function.
5.1 What we use cookies for
- Strictly necessary — keeping you signed in, remembering your shopping cart, security tokens. These cannot be turned off without breaking the site.
- Analytics (Google Analytics) — measuring how many people visit our pages, which posts are popular, and where visitors come from. Used in aggregate.
- Advertising (Meta Pixel) — tracking which website actions led to purchases, building audiences for ad targeting on Facebook and Instagram, and retargeting visitors who showed interest.
- Affiliate tracking — third-party retailers may set their own cookies when you click an affiliate link.
5.2 Your choices
You can manage cookies in your browser settings — most browsers let you block third-party cookies, clear cookies on exit, or block specific domains. You can also opt out of personalized advertising at:
- Meta (Facebook / Instagram): facebook.com/adpreferences
- Google: adssettings.google.com
- Industry-wide opt-out: aboutads.info/choices (US) or youronlinechoices.eu (EU)
The App itself does not use Google Analytics, Meta Pixel, or any third-party advertising tracker. Advertising tracking applies only to our websites.
6. Text messages (SMS)
We text only people who have asked us to. Giving us your mobile number is always optional, is never a condition of buying anything or using the App, and you can stop the messages at any time by replying STOP.
6.1 What we send
Today we use text messages for reminders about workshops, live events, and sessions you have registered for or expressed interest in — for example, a reminder the day before a workshop, or a link to join a session that is starting.
We may in future also send occasional promotional texts about new programs, offers, and launches. If you have consented to marketing messages, those are covered by the consent you gave at signup. Where the law requires separate consent for marketing texts, we will collect it separately before sending any.
6.2 How you opt in
We add your number to our messaging list only when you affirmatively provide it and agree to receive texts — by checking an unchecked consent box on a form, by texting a keyword to us, or by giving express consent verbally or in writing at an event. We keep a record of when and how you consented.
6.3 How to stop
- Reply STOP to any message to be removed from all text messages. You will receive one final message confirming the opt-out.
- Reply HELP for help, or email team@weightlosswiththeholyspirit.com.
- Opting out of texts does not affect your email subscription, your App account, or anything you have purchased.
6.4 Frequency and cost
Message frequency varies with how many events you register for. Message and data rates may apply — texts are billed by your mobile carrier under your own plan, not by us. We are not responsible for delayed or undelivered messages, and carriers are not liable for them either.
6.5 Who sees your number
Your mobile number is stored in our CRM (Ontraport), which also sends the messages. We do not sell, rent, or share mobile numbers with third parties for their own marketing. Numbers are shared only with the messaging provider that delivers our texts, and only for that purpose.
7. Activity, food, and health-related data
Neither App accesses your phone’s health or fitness sensors. No step counter, no pedometer, no Apple Health, no Google Fit, no GPS or location, no heart rate, and neither App asks for your weight, your body measurements, or your BMI. Everything either App knows about your activity or your eating is something you typed in yourself.
Because this is a program run by a brand whose name mentions weight loss, we want to be exact about what we do and do not know. The two Apps record different things, so we take them separately.
7.1 Catholic Walking App
What it records, and only because you enter it yourself:
- The day number you have reached in the walking journey.
- The date you last tapped the button to mark a walk complete.
- Your current streak and your total number of walks, both derived from the above.
- Any written reflection you choose to save.
What it never collects: your weight, body measurements, BMI, calories, food intake, medical conditions, medications, diagnoses, GPS routes, or any data from a health platform or wearable device.
Your progress summary — account identifier, total walks, last walk date, and current streak — is synced to our CRM (Ontraport) so we can see how the program is going for you and support you in it. It is not sold, not shared with advertisers, and not used to make any decision about you beyond the content and encouragement we send.
7.2 Surrendered
Surrendered is a food-freedom program, so it does record what you eat — but only as free text you write yourself, and never as measurement.
What it records, all entered by you:
- What you ate at each meal slot, in your own words, plus any notes about changes and adjustments and the reflection tags you select.
- Your saved go-to meals.
- Your morning and evening written reflections.
- Which day of the 63-day prayer series you have reached.
- Messages you send to the in-app AI assistant. See Section 12.
What it never collects: your weight, body measurements, BMI, calorie counts, macros, portion sizes, medical conditions, medications, diagnoses, GPS location, or any data from a health platform or wearable device. Surrendered does not weigh you, score you, or compare you to anyone.
We treat this as sensitive information. What you eat, how you felt about it, and where you are in a prayer series can reveal eating behaviour and religious practice. Under the GDPR and several US state privacy laws that places it in a protected category, and we handle it that way: it is never sold, never used for advertising or ad targeting, never used to train anyone’s AI model, and never shared with any third party except the service providers in Section 4 who need it to run the app for you.
We are not a healthcare provider, and neither App is a medical device. Nothing in either App is medical advice, and nothing in them is treatment for an eating disorder. If you are struggling with disordered eating, please talk to a qualified professional. See the disclaimer in our Terms of Use.
8. Special protections for what you write
What you write inside the Apps is subject to stronger protections than the rest of your data. What you record about your body, your eating, your discouragement, your hope, and your prayers is yours. We protect it with the safeguards listed below.
This section covers your written reflections in either App, and in Surrendered it covers your meal entries and notes, your go-to meals, and your conversations with the AI assistant.
- Encrypted at rest — this content is stored in Google Firebase, where it is encrypted at rest by Google’s standard infrastructure.
- Encrypted in transit — TLS / HTTPS for everything moving between your device and our backend.
- Owner-only access — Firebase Security Rules restrict reads and writes to your authenticated account only. There is no admin tool inside our company that lets our team read your reflections, your meal entries, or your assistant conversations.
- Never used to train AI — we will never use any of it to train an AI model, ours or anyone else’s, and the assistant is never given your reflections or meal entries. See Section 12.
- Not transmitted to crash reporting — Sentry, our error reporting tool, never receives any of this content.
- Not synced to our CRM — Ontraport receives program progress, never the words you wrote.
- Deleted with your account — see Deleting your account and data. In Surrendered you can also clear an assistant conversation on its own, at any time, without deleting anything else.
9. Sharing to social media
The Catholic Walking App includes a button that lets you share a milestone badge — for example, reaching day 30 of the walking journey — to Facebook. This is entirely optional and only happens when you tap it. Surrendered has no social sharing feature.
When you use it, the App hands the image and a short message to Facebook’s own sharing screen on your device. You see exactly what will be posted and can cancel before anything is shared. We do not post on your behalf, we do not have access to your Facebook account, and we do not receive information about your Facebook friends or activity. Once content is shared to Facebook, Facebook’s privacy policy governs it.
10. Coaching call recordings
Group and one-on-one coaching sessions delivered by video conference are recorded. Recordings include the audio, the video feeds of all on-screen participants, and the public chat. We use the recordings to make replays available to qualifying members.
Notice and consent. The recording status is announced at the start of each session, and a recording indicator is visible inside the video platform. By joining a session that is being recorded, you consent to being recorded and to your recording being shown to other members of the program for which the call was conducted.
If you would prefer not to appear in the recording:
- Mute your microphone.
- Turn off your video.
- Avoid posting in the public chat — chat is included in the recording.
- Send any private questions to team@weightlosswiththeholyspirit.com instead of asking them live.
Where recordings are stored. Recordings are downloaded from the video platform and uploaded to our course platform. Access is restricted to qualifying members of the program for which the call was conducted. We do not publish coaching call recordings publicly.
One-on-one coaching. One-on-one sessions are not routinely recorded. When a recording is made — for example, at your request — it is shared only with you and your coach, and is never made available to other members. If you would prefer your one-on-one session not be recorded, tell your coach at the start of the session and we will turn recording off.
11. Workshops and in-person events
For workshops and gatherings we collect registration details: name, email, optional phone number for reminders, dietary restrictions and food allergies, accessibility needs, and emergency contact.
For events that involve travel we additionally collect what travel and safety require: legal name as it appears on your identification, date of birth, citizenship, passport number and expiration, and any medical information you choose to share with us.
This data is used solely to:
- Register you and reserve your place.
- Book travel and lodging, where applicable.
- Meet venue, airline, and tour-operator requirements.
- Plan meals, transport, and accessibility on the ground.
- Reach your emergency contact in case of a medical event.
Event partners receive only the fields they require to complete their part of the event. We delete passport-number records and passport-image scans within 90 days of the event’s conclusion. Dietary, medical, and emergency-contact information is retained only while the event is active.
12. Artificial intelligence
12.1 The AI assistant in Surrendered
Surrendered includes an in-app AI assistant. When you send it a message, that message — together with the most recent messages in the same conversation, so it can follow the thread — is sent to OpenAI, which generates the reply and returns it. Your conversation is stored in your account so you can read it back, and you can delete it at any time using Clear on the chat screen.
What the assistant is given: only what you type into it and the recent messages in that same conversation. It is not given your meal entries, your morning or evening reflections, your prayer progress, your purchase history, or anything from your coaching calls. It cannot see other members’ conversations, and other members cannot see yours.
What OpenAI may do with it: we send this data through OpenAI’s API under terms that prohibit using it to train their models. OpenAI may retain it briefly for abuse monitoring under their own policy. See openai.com/policies/privacy-policy.
The assistant offers encouragement and reflection prompts. It is not a coach, a counselor, a spiritual director, or a medical professional, its answers are generated text and can be wrong, and nothing it says is medical, psychological, or spiritual advice. It is never used to make any decision about you, your membership, or your access to anything.
If you would rather not use it, simply don’t open it. Nothing else in Surrendered depends on it, and declining costs you no other feature. The Catholic Walking App contains no AI assistant.
12.2 AI we use internally
Separately, we use AI tools for internal analysis — for example, summarizing aggregate, anonymized customer feedback. These tools do not have access to your reflections, your meal entries, your direct messages, or any individually identifiable user content beyond what we explicitly choose to feed them, and they are never used to make consequential decisions about you.
What we do not do, anywhere:
- We do not train any AI model on your reflections, meal entries, assistant conversations, coaching session transcripts, or any other personal content.
- We do not permit third-party AI providers to train their models on your data.
- We do not use AI to make automated decisions that have legal or similarly significant effects on you.
- We do not feed your written content into the assistant on your behalf — it sees only what you choose to type.
Coming changes. If we introduce a further AI-powered feature, or change what an existing one has access to, we will update this policy to disclose what data it uses, how prompts are processed, and your options, before that change goes live.
13. Things we never do
- We do not sell your personal information. Not to advertisers, not to data brokers, not to anyone.
- We do not sell or share your mobile phone number. No third party ever receives it for their own marketing.
- We do not read what you write in the Apps. Not your reflections, not your meal entries, not your conversations with the AI assistant. No employee, contractor, or partner has a tool that exposes them.
- We do not read your phone’s health or fitness data. Neither App requests health, sensor, or location permissions at all.
- We do not train AI on your content, and we do not let anyone else do so either. See Section 12.
- We do not allow third-party advertising trackers inside the Apps. No Meta Pixel, no Google Ads conversion tracking, no third-party SDKs that profile users.
- We do not sell anything inside the Apps. Neither App contains in-app purchases, prices, or subscription offers.
- We do not contact you outside the channels you signed up for. Buying a course does not opt you into the broader newsletter; subscribing to the newsletter does not give us permission to text you.
14. Marketing emails and opt-out
We send marketing emails about our programs, courses, and events to people who have signed up for our list, made a purchase, or registered for a free resource. Every marketing email includes an unsubscribe link in the footer. Clicking it removes you from marketing communications immediately.
You will continue to receive transactional messages (receipts, program access notifications, password resets, account alerts) regardless of marketing email preferences, because those are necessary to operate your account.
Push notifications from the App — daily walking nudges, new audio alerts, and event reminders — are controlled separately, inside the App on the Profile screen, and in your device’s notification settings. Turning them off does not affect your email or SMS preferences.
To stop all email contact entirely, unsubscribe and then email team@weightlosswiththeholyspirit.com asking us to delete your account.
15. Your rights
You have rights over your data. Most of these rights apply regardless of where you live; some are specific to your jurisdiction.
15.1 Rights available to everyone
- Access — request a copy of the data we hold about you.
- Correction — ask us to correct inaccurate data.
- Deletion — ask us to delete your account and the data associated with it. See the next section.
- Export — request your data in a readable format.
- Unsubscribe — opt out of marketing emails and texts at any time.
15.2 European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)
If you are in the EEA, the UK, or Switzerland, you also have the right to:
- Restrict or object to specific processing.
- Receive your data in a portable, machine-readable format.
- Withdraw consent at any time (where processing is based on consent).
- Lodge a complaint with your local data protection authority. We would prefer the chance to address your concern first — please contact us before filing.
Our legal bases for processing under GDPR are: contract (delivering the products you bought), legitimate interest (operating and improving our business, fraud prevention), consent (marketing emails, text messages, certain cookies), and legal obligation (tax and accounting).
15.3 California (CCPA / CPRA), Virginia, Colorado, Connecticut, Utah, and other US state privacy laws
If you are a resident of a US state with a comprehensive privacy law, you have the right to:
- Know what categories of personal information we collect, the sources, and the purposes.
- Access the specific pieces of personal information we hold about you.
- Delete your personal information.
- Correct inaccurate personal information.
- Opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. We do not sell personal information for money. Our use of Meta Pixel may qualify as “sharing” under California law for cross-context behavioral advertising; you can opt out of this sharing by emailing us or by using the cookie management options in Section 5.
- Limit the use and disclosure of “sensitive personal information.” We do not use the limited categories of data we collect for purposes beyond what is described in this policy.
- Be free from retaliation for exercising any of these rights.
You may also designate an authorized agent to exercise these rights on your behalf, with proof of authorization.
15.4 How to exercise these rights
Email team@weightlosswiththeholyspirit.com with the subject line “Privacy Request” and tell us what you’d like to do. We may need to verify your identity (typically by confirming you control the email address on file). We respond within 30 days for GDPR / UK requests and within 45 days for US state law requests.
16. Deleting your account and data
To delete your Catholic Walking App account and all associated data, email team@weightlosswiththeholyspirit.com with the subject line “Delete my account”, from the email address on your account.
We confirm within 5 business days and complete the deletion within 30 days. You do not need an active subscription, and you do not need to reinstall the App, to make this request.
16.1 What gets deleted
When you request account deletion, we permanently delete:
- Your account login and authentication record.
- Your name, email address, and phone number.
- Your written reflections, including morning and evening entries.
- Catholic Walking App: your walking journey progress — day number, walk dates, streak, and total walks.
- Surrendered: your meal entries and notes, your saved go-to meals, your prayer progress, your conversations with the AI assistant, and any check-in responses.
- Your notification preferences and time zone.
- Your device push notification tokens.
This is permanent and cannot be undone.
Deleting your app account does not cancel your membership. Your app login and your Weight Loss with the Holy Spirit membership are two separate things that happen to share an email address. Deleting the app account removes the data listed above; it does not end a subscription, stop a payment, or remove your access to courses, coaching or the community. To cancel a membership, contact us directly.
16.2 What we keep, and why
- Financial and tax records — invoices, payment records, and transaction history are retained for the period required by US tax law (typically 7 years). These are held for legal compliance and cannot be deleted on request.
- Suppression record — if you have unsubscribed from email or texted STOP, we keep a minimal record of that fact (your email address or phone number and the opt-out date) so that we do not accidentally contact you again. This is required to honor your opt-out.
- Content you posted in shared spaces — anything you posted in a community space may remain visible to other members unless you ask us to remove it specifically. Tell us in your deletion request if you want it removed.
16.3 Deleting some data without deleting your account
You do not have to delete everything. You can also ask us to remove only your phone number, only your reflections, or only your marketing subscriptions, and keep your account. Just say what you want removed in your email.
17. How long we keep your data
We retain different categories of data for different periods, based on what’s necessary to operate the service and what the law requires.
- Active accounts — we retain account and content data for as long as your account is active.
- Inactive accounts — if you stop using the App but do not ask us to delete your account, we retain your data so your progress is waiting for you if you return.
- Account deletion — see Section 16. Deletion completes within 30 days of your request.
- Course and membership purchase history — retained for as long as your account exists; tax and accounting records retained for the period required by US tax law (typically 7 years).
- Coaching call recordings — group program recordings are typically retained for at least 12 months after the program ends, so members can re-watch the full series. One-on-one sessions are generally not retained beyond the engagement.
- Workshop and event data — passport numbers and scans are deleted within 90 days of event conclusion; dietary, medical, and emergency-contact information is deleted at event conclusion.
- Email and SMS marketing data — retained until you unsubscribe or opt out and request deletion. Unsubscribe alone removes you from sending lists; deletion removes the underlying record, apart from the minimal suppression record described in Section 16.2.
- Website analytics and ad-event data — retained according to the default settings of Google Analytics (currently 14 months) and Meta (currently up to 24 months for ad events).
18. International data transfers
We are based in the United States. The service providers we rely on are also primarily based in the United States. If you are accessing our services from outside the US, your data will be transferred to and processed in the US (and potentially other countries where our service providers operate).
For transfers from the EEA, UK, and Switzerland, we rely on Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner’s Office, and on the data processing terms our service providers commit to. We have evaluated the protections offered by our processors and consider them adequate.
19. Children’s privacy
Our services are intended for adults (18 and over). We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account or registered for any of our services, please email team@weightlosswiththeholyspirit.com and we will delete the account.
20. Security
We protect your data using industry-standard practices: TLS / HTTPS for all data in transit, encryption at rest in our backend storage, role-based access controls inside our team, and regular review of who has access to what. Your reflections are locked to your account by Firebase Security Rules — the strongest level of access control Firebase offers.
No system is perfectly secure. If we ever experience a data breach that affects your information, we will notify you in accordance with applicable law.
21. Changes to this policy
If we change this Privacy Policy, we will post the new version at this URL and update the effective date at the top. Material changes — those that affect how we handle your existing data, expand the categories of data we collect, or introduce new third-party processors — will be announced by email and, where appropriate, by an in-App or in-website notice that you must read before continuing.
22. Contact
Questions, concerns, or requests about your data — including data export, account deletion, formal data-subject requests under GDPR, UK GDPR, or US state law, and complaints — go to:
team@weightlosswiththeholyspirit.com
Made for Greatness, LLC
206 Ironwood Dr. #1096
Coeur d’Alene, ID 83814
United States