Privacy Policy

What Selah collects, and why

Selah asks for as little as it can. Reading today’s prayer and verse needs no account and stores nothing about you. Everything below is collected only once you create an account.

Your name and email address

So you can sign in, so Selah can address you, and so it can send you the account emails below. Your email is never shown to anyone else.

Your password

Stored only as a one-way hash (bcrypt). Selah cannot read your password and neither can anyone with access to the database.

Your prayer journal

The entries you write are stored so you can return to them. They are visible only to you, are never used for any other purpose, and are never sold or shared.

The days you marked as prayed

A date and a timestamp for each day you tap “I prayed today”, so Selah can show you the days you have kept.

Your settings

Your chosen theme and reminder time. The reminder time is stored for a future reminder feature; Selah does not send notifications yet.

Basic technical logs

The hosting server keeps short-lived access logs (IP address, browser, the page requested) to keep the site running and secure. These are not linked to your account and are not used to profile you.

Selah has no advertising, no analytics or tracking scripts, no social-media pixels, and no AI features — so there is no data collection beyond the list above.

Who else is involved

Shoshin Systems does not sell or rent your information to anyone. Two service providers process data on Selah’s behalf, strictly to run the service:

• Hostinger hosts the application and its database. Your account and journal are stored on Hostinger’s servers.
• The email provider (Brevo or Hostinger mail) delivers the account emails: address verification and password resets. It receives your email address and the message, nothing more.

Both providers may process data on servers outside the Philippines, including in the European Union and the United States, under their own data-protection terms.

Cookies

Selah sets only the cookies it needs to work: one to keep you signed in, one to protect forms against forgery, and one to remember your theme. There are no advertising or analytics cookies, so there is no consent banner — nothing non-essential is set.

How long it is kept

Your account and everything in it is kept until you delete your account. When you do, Selah permanently removes your name, email, password hash, journal entries, prayer-day records, and settings from the database immediately — there is no soft-delete and no archived copy. Server logs age out on the host’s own short schedule.

Your choices

• See and correct your details from the Account screen at any time.
• Edit or delete any journal entry yourself, whenever you like.
• Delete your whole account from the Account screen; this erases everything described above.
• Ask for a copy of your data by writing to the address below, and it will be sent to you.

Depending on where you live, you may also have the right to object to or restrict certain processing, or to complain to your local data-protection authority.

Security

Selah is served only over HTTPS, stores passwords as bcrypt hashes, keeps each person’s journal isolated from every other account, and rate-limits sign-in and password-reset attempts. No system is perfectly secure, but Selah holds little and asks for little by design. To report a vulnerability, see /.well-known/security.txt.

Children

Selah is not directed at children under 13, and Shoshin Systems does not knowingly collect information from them. If you believe a child has created an account, write to the address below and it will be removed.

Changes

If this policy changes, the “last updated” date above changes with it, and a material change will be noted on this page. Continuing to use Selah after a change means you accept the updated policy.

Contact

For anything about your data or this policy, write to replayhubunlimited@gmail.com.