Your prayers are sacred.

Adorned & Armed is a Christ-centred discipleship ministry run by Samuel and Comfort Alimo. We build devotional journeys, a prayer wall, a community feed, and a private journal — all hosted on this platform.

When this policy says “we”, “us” or “our”, it means the Adorned & Armed ministry. When it says “you”, it means anyone using the platform — signed in or not.

The smallest amount we can. Specifically:

• Email address — required for sign-in. We also use it to send the rare admin notification (e.g. when we reply to a prayer request you submitted).
• Display name — the name you choose to show on your profile and on any public community posts you make.
• Profile photo — optional. If you upload one, it sits in our private storage bucket and is shown next to your community posts.
• Journal entries — the private notes you write inside a bulletin. Visible only to you.
• Prayer requests — text you submit through the prayer form. You decide whether each request is shared on the public wall or kept private to the pastoral team.
• Testimonies — stories you submit. We hold these until reviewed by a pastoral team member; once approved (with your permission), they are shown publicly on the testimony page.
• Community posts and replies — the prayers, reflections, and questions you post in the community feed.
• Feedback — anything you write in the feedback form.
• Journey progress — which journey you are walking, which day you have reached, which bulletins you have saved or marked complete, and your reminder time preference.
• Device information — basic information needed to deliver the Progressive Web App experience (e.g. user-agent for install detection, screen size for responsive layout). We do not log IP addresses for analytics.

Your data is used to provide and protect the devotional experience. That means:

• Showing you the right bulletin for your day, saving your journal entries, remembering which days you have completed.
• Displaying your public community posts and approved testimonies to other readers.
• Sending the pastoral team an admin notification when you submit a prayer request, testimony, or piece of feedback that needs a response.
• Sending you the rare email you have asked for — sign-in confirmation, a reply to your prayer request, a launch announcement for a journey you said you wanted to be notified about.
• Improving the platform — knowing which journeys are read most, which day people stop on, what to fix next.

We never use your data to train models, sell anything to advertisers, or build profiles for third parties. We do not run behavioural tracking. We do not show ads.

The database is hosted on Supabase. Row Level Security is enabled on every table that holds user content — meaning your journal entries, private prayer requests, and saved bulletins are accessible only to you and to authorised administrators using a service-role key for moderation purposes.

The website itself is served by Vercel. Audio files (the read-aloud bulletins) live in a private storage bucket and are accessed through short-lived signed URLs that expire after one hour.

We use a small number of third-party services to run the platform. Each one only sees what it needs to:

• Google — used only if you choose “Continue with Google” on the sign-in page. Google sees the sign-in event and your basic profile (email + name); we never see your Google password.
• Resend — sends transactional email on our behalf (sign-in confirmations, admin notifications). Resend sees the recipient address and the email body for the moments needed to deliver the message.
• Vercel — hosts the website and serves it to your browser.
• Supabase — runs the authentication, database, and storage layers described above.

We do not sell, rent, share, or trade personal data with advertisers, data brokers, or any other third party. The list above is the entire list.

We use only one kind of cookie: a session cookie that keeps you signed in after you log in. It is required for the app to work and expires when your session ends (or after eight hours of inactivity).

We do not run analytics cookies, advertising pixels, fingerprint scripts, or cross-site trackers. There is nothing here to opt out of.

This is the part we care about most. Three different kinds of content have three different visibilities:

• Journal entries are visible only to you. They are stored encrypted at rest, gated by Row Level Security, and the pastoral team does not browse them.
• Private prayer requests are visible only to the pastoral team — Samuel, Comfort, and any future named administrator. They are held in confidence; we do not share them outside the team without your permission.
• Public prayers and community posts are visible to everyone signed in to the platform because you chose to share them. You can ask us to take any of your public posts down at any time.

You can, at any time:

• View your data — sign in and browse Profile → Journal, Profile → Saved, and the prayer wall.
• Export your data — write to info@adornedandarmed.com. We will send you a JSON archive within a week.
• Delete your data — Profile → Settings → Sign out and then write to us requesting account deletion. We will remove your data within seven days. Public posts will be redacted to “Anonymous”.
• Correct your data — change your display name, profile photo, and email from Profile → Settings. For anything else, email us.

The platform is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and you believe a child has signed up, please contact us and we will delete the account.

When this policy changes meaningfully, we will update the “Last updated” date at the top of the page and, for significant changes, send a one-time notice to your sign-in email. Continued use of the platform after a change means you accept the new policy.

Effective date: May 2026.