Creativio AI SRL (“Sacred Path,” “we,” “us”) takes your privacy seriously. This Privacy Policy explains how we collect, use, and share Personal Data when you use mysacredpath.app and related services.
Summary
- We do not sell your Personal Data.
- We use your data to provide and improve the Services, process payments, send you the reading plans and content you’ve signed up for, and (with your consent) market our Services to you.
- We share data only with service providers we need to operate the business (Stripe, Vercel, Supabase, Postmark, Anthropic/Claude, Google Analytics, Meta Pixel, etc.) and only to the extent necessary.
- You can access, correct, delete, or export your data at any time by contacting privacy@mysacredpath.app.
- We comply with GDPR (EU/UK), CCPA and other US state privacy laws, and Romanian data protection law.
By using the Services, you consent to the practices described here.
1. What This Privacy Policy Covers
This Privacy Policy covers how we treat Personal Data we collect when you access or use the Services. “Personal Data” means any information that identifies or can be used to identify an individual. This policy does not cover the practices of third parties we do not control.
2. Personal Data We Collect
We collect the following categories of Personal Data:
- Contact Data — First name and email address you provide during the quiz, so we can send your personalized reading plan.
- Quiz Responses — Your answers to 5 onboarding questions about what you’re carrying, your sense of closeness to God, and the word you most need to be true. Processed by Anthropic’s Claude API to generate your personalized reading plan.
- Payment Data — Card type, billing address, and transaction history. The full card number is handled only by Stripe and is never stored by us.
- App Activity Data — Which reading plans you open, session length, feature usage, used to improve the Services.
- Device & IP Data — IP address (hashed for storage), device type, browser type, operating system. Used for security, analytics, and customer support.
- Advertising Data — Hashed email for ad platform matching, click IDs from ads (gclid, fbclid, etc.), UTM parameters. Used for ad campaign measurement.
- Cookie Data — See our Cookie Policy for details.
- Geolocation (Coarse) — IP-based approximate location (city/region only — we do not collect precise GPS location).
3. How We Collect Personal Data
From you directly:
- When you take the quiz, make a purchase, subscribe to our emails, or contact support
- When you voluntarily provide information in text fields, surveys, or support communications
Automatically:
- Through cookies and similar technologies when you visit our website
- Through server logs, analytics, and security tools
From third parties:
- Ad networks (Google, Meta) provide us with measurement data about how you interacted with our ads
- Payment processors provide transaction confirmations and limited billing info
4. How We Use Personal Data
We use Personal Data for the following purposes:
Providing, personalizing, and improving the Services
- Generating your personalized reading plan via AI
- Processing transactions, issuing receipts, handling refunds
- Delivering your 7-day path by email
- Responding to customer support inquiries
- Improving Services through analytics, testing, and product development
Marketing
- Sending you promotional communications (with your consent where required by law)
- Running advertising campaigns on Google, Meta, and other platforms
- Measuring the effectiveness of our advertising
Legal compliance and enforcement
- Complying with applicable laws and regulations
- Enforcing our Terms of Service
- Protecting the rights, property, and safety of Sacred Path users, third parties, or the public
Legal Bases (GDPR — for EU/UK users)
- Contractual necessity: To provide the Services you’ve purchased
- Legitimate interests: Improving the Services, running analytics, marketing, security
- Consent: For cookies, optional communications, and sensitive data
- Legal obligation: Tax records, responding to lawful requests
You have the right to withdraw consent at any time.
5. Who We Share Personal Data With
We share Personal Data only as described below. We do not sell your Personal Data.
Service Providers (process data on our behalf, under contract):
- Hosting & Infrastructure: Vercel Inc.
- Database: Supabase Inc.
- Payment Processing: Stripe Inc.
- Email Delivery: Postmark (ActiveCampaign LLC)
- AI Processing: Anthropic PBC (Claude API) — used to generate personalized reading plans
Analytics Partners:
- Google Analytics (via Google Tag Manager)
- Plausible Analytics (privacy-friendly, no cookies)
Advertising Partners (for ad measurement and retargeting):
- Google Ads
- Meta (Facebook & Instagram) — via Pixel and Conversions API
We share only the minimum data necessary with each partner, and all partners are contractually bound to process data only on our instructions.
Legal and safety disclosures. We may disclose Personal Data to comply with applicable law, regulation, court order, or legal process, or to protect the rights, property, or safety of Sacred Path users or others.
Business transfers. If we undergo a merger, acquisition, or sale of assets, Personal Data may be transferred. We will notify you of any such change.
6. International Data Transfers
Creativio AI SRL is based in Romania (EU). Some of our service providers are located in the United States and other countries. Where we transfer Personal Data outside the European Economic Area, we rely on Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.
7. Data Security and Retention
We use industry-standard security measures — including encryption in transit (TLS) and at rest, access controls, and regular security reviews — to protect Personal Data. However, no method of internet transmission or electronic storage is 100% secure.
We retain Personal Data for as long as your relationship with us is active, as needed to provide the Services, or as required to comply with legal obligations (e.g., tax records retained for 10 years under Romanian law). When data is no longer needed, we delete or anonymize it.
8. Your Privacy Rights
All users may:
- Access the Personal Data we hold about you
- Correct inaccurate or incomplete data
- Delete your Personal Data (subject to legal retention requirements)
- Export your Personal Data in a portable format
- Withdraw consent for processing based on consent
- Opt out of marketing communications
To exercise these rights, email privacy@mysacredpath.app with subject line “Data Rights Request.”
EU/UK Residents (GDPR rights):
- Right of access, rectification, erasure, restriction, portability, objection
- Right to lodge a complaint with a supervisory authority (in Romania: ANSPDCP)
- Right not to be subject to solely automated decision-making with significant effects
California Residents (CCPA rights):
- Right to know what Personal Data we collect, use, and share
- Right to delete Personal Data we have collected
- Right to correct inaccurate Personal Data
- Right to opt-out of “sale” or “sharing” of Personal Data
- Right to non-discrimination for exercising these rights
To opt out of cookie-based advertising, adjust your browser cookie settings or email us at privacy@mysacredpath.app.
9. Children’s Privacy
Sacred Path is intended for users aged 18 and older. We do not knowingly collect Personal Data from children under 13 (in the U.S.) or under 16 (in the EU/UK) without verifiable parental consent. If you believe we have collected such data, contact privacy@mysacredpath.app and we will delete it.
10. Automated Decision-Making
Sacred Path uses AI (Claude) to generate personalized Bible reading plans based on your quiz responses. This is a content personalization tool, not “automated decision-making with legal or similarly significant effects” under GDPR. You can always ignore the generated plan and use the Services in other ways.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified by email or website notice at least 14 days before they take effect.
12. Contact
Creativio AI SRL
Str. Mestecănului 18A, CAM. 2
307160 Dumbrăvița, Timiș County, Romania
CUI: 48697175 · VAT: RO48697175 · Reg: J35/3275/2023
General privacy inquiries: privacy@mysacredpath.app
Romanian Data Protection Authority: www.dataprotection.ro