Privacy Policy
Last updated: October 23, 2026
Build Faith is made by Daniel Gileadi ("we"). This page explains what we keep, why we keep it, where it lives and how you can remove it.
The short version
- Your pages are yours. We keep them so they show up on every device you sign in on. We don't sell them, share them or use them for ads.
- There are no ads, no tracking, no analytics and no AI.
- When something goes wrong in the app, it sends us an error report so we can fix it. Your pages are never in it, and you can turn reports off.
- If you delete your account in Settings, it's gone from our server straight away and from our backups within 14 days.
Where your pages live
- On your device. Each device you sign in on keeps a full copy, so Build Faith works offline. Signing out removes that copy from the device.
- On our server. Your changes sync to your account, so your other devices get them. The server runs on Railway in the western United States.
- In backups. Once a day, an encrypted copy of the server goes to Cloudflare R2 in North America. We keep 14 days of backups. Only we hold the key.
What we keep, and why
| What | Why | How long |
|---|---|---|
| Your email | To sign you in. Codes go there. | Until you delete your account |
| Your name and photo, if you add them | To show who you are in the app | Until you remove them or delete your account |
| Your pages and everything in them: text, images, video, audio, files, and books you add to your library (with their text and a search index) | To keep and sync them | Until you delete them or your account |
| Each page's history: every change, and which of your devices made it | So you can go back to an earlier version | As long as the page exists. Deleting a page forever clears its history. |
| Your devices: a name such as "Safari on Mac", plus when each was first and last used | For Settings · Devices, and to email you when a new device signs in | Until you sign that device out or delete your account |
| Each sign-in: the IP address and the type of browser or app | To keep your account secure | Until that sign-in ends (you sign out, or 60 days without use) |
| Sign-in codes | To sign you in | 10 minutes. They're stored scrambled. |
| Error reports: what went wrong and where in the app, the last few steps before it (such as "opened a canvas" or "pressed Undo", never what's on the page), the app's version and your type of device, linked to your account | To find and fix problems | 90 days. Turn them off in Settings · Preferences. |
| Sharing: who you've shared each space or page with, and the email addresses you've invited | So the people you share with can open what you shared | Until you stop sharing, or the invitation is used or removed |
| A copy of your data you've asked us to send you | To send it to you | 7 days, then deleted. It's never backed up. |
| Our support log: each time we look up your account or change something on it (such as signing out a device), who did it and why | So there's a record of everything we do with accounts | Kept after an account is deleted, with only its email address |
What we don't collect: analytics, ad identifiers, your location, your contacts or payment details. Error reports never include your pages, titles, names or anything you've typed. Build Faith is free during the beta.
Your photo is stored at an unlisted web address so the app can show it quickly, a bit like an unlisted video. Anyone who has that exact address can open it.
Server logs record errors and account events, such as "an account was deleted". Our host also logs each request to the server, with its IP address. Logs don't contain your pages. Our host deletes them after 90 days.
Can we see your pages? Your pages on our server are protected by sign-in, and nobody else can open them. Our support tools show us facts about an account, such as when it signed up, its devices, how much space it uses and who it shares with, and the shape of its pages: what kind each page is, and where things sit on a canvas, drawn as plain boxes, and which of our scripture books it reads. They never show what your pages say, their titles, or your pictures. Each time we look up an account or change something on it, our support log records it. Like most apps that sync, we can technically reach your pages on the server. We only do that to fix a problem you've asked us about, or when the law requires it.
Sharing
When you share a space or a page, the people you add can open it, and edit it if you let them. They see your name, email address and photo. If you invite someone by email, we send them an email with your name. If you turn on a link, anyone who has that link can open what it points to, until you turn the link off.
Who else handles your data
We use a few companies to run Build Faith. Each one gets only what its job needs.
- Railway runs our server and stores your account, pages and error reports (United States).
- Cloudflare handles our domain and email routing, and stores our encrypted backups (North America).
- Vercel serves the web app's files. Like any web host, it sees your IP address when your browser loads them.
- Resend sends our emails. It gets your email address and the email itself.
Some things you do in the app reach other services:
- Videos. If you add a video from YouTube, Vimeo or Loom, your device loads it straight from that site, and that site's privacy policy applies. YouTube videos play through YouTube's reduced-tracking player.
- Link previews. When you paste a link, our server visits the page to build a preview. The website sees our server, not you.
- Notion import. You sign in to Notion yourself, and we use that access for one import only. We don't keep it. Your Notion pages pass through our server on the way to you, and we keep only what you import.
We never sell your data. We don't share it with anyone else unless the law requires it.
Emails
We only email you about your account:
- sign-in codes
- a sign-in from a new device
- a change to your email address
- deleting your account
- someone sharing a space or page with you, asking to join one of yours, or answering your request
- a copy of your data you asked for
There's no newsletter and no marketing.
Your choices
- Change your name, email or photo in Settings · Account.
- Sign out another device in Settings · Account. That device's sign-in ends straight away.
- Delete your account in Settings · Account · Delete account, or email us and we'll delete it for you. It removes your account, pages, history, files, devices, photo and error reports from our server immediately, and from backups within 14 days. Copies on your other devices stay until you sign out on them or remove the app.
- Turn off error reports in Settings · Preferences.
- Get a copy of your data in Settings · Account · Export everything, which saves it on your device. Or email us, and within 30 days we'll email you a link to download it: your pages as Markdown, your pictures and files, and a full copy Build Faith can read. The link works for 7 days.
If you're in the EU or UK, you can also ask us to show you what we hold, correct it, send it to you or limit how we use it. You can complain to your data protection authority.
- We use your data to provide Build Faith because you asked us to (contract).
- We keep sign-in IP addresses, new-device emails and backups to keep your account safe, and error reports to keep Build Faith working (legitimate interests). You can turn error reports off at any time.
- Our server and backups are in North America, so your data leaves the EU. Railway, Cloudflare and Resend have agreed to the EU’s standard contractual clauses, the approved way to protect data sent outside the EU.
Children
Build Faith isn't meant for children under 13, or under the age your country requires if that's older. If you think a child has made an account, email us and we'll delete it.
Security
- Sign-in uses one-time emailed codes, so there's no password to steal or reuse.
- Codes are stored scrambled and expire after 10 minutes.
- Everything between your device and our server is encrypted in transit.
- Backups are encrypted with a key only we hold.
- We email you when a new device signs in, so you can sign it out.
Changes
If we change this policy in a way that affects you, we'll tell you in the app or by email before the change takes effect.
Contact
Email hello@buildfaith.app · Build Faith is made by Daniel Gileadi.