Privacy
Our privacy promise
People tell Nēr things they have not told anyone. That deserves more than a policy — it deserves a design. Last updated September 2026.
Things we will never do
- We will never sell your personal data, to anyone, for any price.
- We will never use prayer requests, journal entries, or check-ins for advertising.
- We will never show your therapist searches to your church, your employer, or anyone else.
- We will never share your journal, check-in text, wellness logs, or AI conversations with a pastor, mentor, or church leader.
- We will never train a public AI model on your private writing.
Private by default
Every check-in, journal entry, prayer, and wellness log is visible only to you. This is enforced in the database with row-level security. Authorized service operators and infrastructure providers may need access to maintain the service; this is not end-to-end encryption.
What your church can see, and only if you choose
Connecting a church code gives your pastoral team exactly three things:
- Prayers you explicitly mark share with my church. You can make them private again at any time.
- Care requests and next-step interests you deliberately send them.
- Your name, so a human can actually follow up.
If you opt in to the anonymous congregation pulse, your check-in scores — never your words — are added to averages. Those averages stay hidden until at least five members have opted in, because a smaller group cannot honestly be called anonymous.
Your community, your choice
Connections use private invitation codes and mutual acceptance. People you invite can see your display name. There is no public member directory, online status, or read receipts. Accepting a connection does not share your private entries.
You may separately share completion dates for check-ins, prayer, Scripture, wellness, and lessons with each accepted connection. Only the past 14 days are visible. Your words, scores, and reflections are never included. Clear the checkboxes in that conversation to revoke sharing immediately.
Direct messages are available only between accepted connections. You can pause incoming direct messages and invitations, revoke codes, disconnect, or block a person. Disconnecting or blocking deletes the direct conversation and its invitations for both people. Blocking hides messages between you within shared circles, but shared circle membership and display names remain visible. Leave a shared circle if you need to stop sharing that space.
Circles are invite-only, with up to 30 members. Anyone holding a valid circle code can join. Circle members see each other's display names, messages sent after they joined, upcoming invitations including locations, and responses. Personal activity is never shared with circles. Hosts can revoke invitation codes, remove members or messages, and close a circle.
Delete your messages before leaving if you do not want them to remain in the circle. Deleting your account removes your authored messages and invitations, disconnects your connections, and closes circles you host, including their conversations. Members cannot recover those circles. Someone may already have copied or photographed content you shared; we cannot erase those copies. Community content is not end-to-end encrypted and is not monitored for emergencies.
Nature illustrations are bundled with the app. Viewing them does not send your identity or activities to an image provider.
The AI companion
When the live companion is enabled, your message and recent companion conversation are sent to an AI provider to generate a reply. Your profile, journal, prayers, check-in text, and wellness logs are not included. Demo mode uses scripted studies and does not contact an AI provider. Conversations and their Scripture evidence are stored with your account on the server.
The AI companion is off until you turn it on, and you can turn it off and delete the transcript whenever you like.
Membership, referrals, and payments
We record your trial and free-access dates, referral rewards, payment-provider identifiers, and subscription status to administer membership. An invitation link uses a necessary, HTTP-only cookie for up to 30 days to remember the invitation during registration. We do not import contacts or tell inviters who registered. Social connections and progress sharing require separate choices.
Stripe processes web payments and receives the account email, purchase details, and billing information you enter at checkout. We do not store full card numbers. Apple processes App Store purchases. Payment providers may retain transaction records for their own legal obligations after your Nēr account is deleted. Optional support is kept separate from private writing and does not change privacy permissions.
Authentication email
Supabase sends confirmation and password-reset emails through Resend. These providers process your email address and the information needed to deliver and secure the message. Emails do not include your prayers, journals, or wellness records.
Bible reading
Nēr retrieves public Bible chapters from the Free Use Bible API operated by AO Lab. Requests leave our server with only a translation, book, and chapter; we do not send your identity, private writing, or account cookies. Following an external publisher link opens that provider’s website under its own privacy policy.
Icon delivery
Navigation icons load through Nēr’s Font Awesome kit. Your browser contacts Font Awesome to retrieve its script, styles, and icon fonts, which exposes normal connection information such as your IP address to that provider. Nēr does not send your private writing to the icon service. Local icon copies remain available if the kit cannot load.
Daily progress and reminders
We save the days you complete check-ins, prayer, Scripture, lessons, and wellness practices so your progress follows your account across devices. Deleting an individual entry does not remove that day's completion. Deleting your account removes both.
Push notifications are optional. When you enable them, we store your browser's push subscription, encryption keys, chosen time, and time zone. Our server sends generic encouragement through your browser provider (such as Apple, Google, Mozilla, or Microsoft). Notifications contain no private writing, scores, or personal activity history. Delivery records help prevent repeated reminders.
You can pause all reminders or disconnect a browser in Settings. Reminders may continue on a connected browser after sign-out. Browser providers process delivery information under their own policies.
Crisis language
Nēr scans what you write for language suggesting you may be in danger. When it finds it, the app stops what it is doing and shows crisis resources. We record that this happened — the matched phrase, the time, and where in the app — so we can improve safety. We do not contact anyone on your behalf, and we do not report you to your church.
Your data belongs to you
- Export: download everything as JSON from Settings, any time.
- Delete: erase your account and every record permanently, from the same page. The active account and its records are deleted immediately. Infrastructure backups may retain copies until their configured retention period expires.
- Correct: edit or delete any individual entry, prayer, or reflection.
What we do collect
Your email address and name for your account; the content you deliberately create; and operational data such as error reports. Error reports are stripped of request bodies and cookies before they leave our servers, so your writing never appears in a crash log.
What Nēr is not
Nēr is not a medical provider, a licensed counselor, or an emergency service. It is not a HIPAA-covered entity, and it does not create a clinical record. If you need care, please see a clinician — we will help you find one. If you are in danger, call your local emergency number or 988 in the US.
Children
Nēr is intended for people 13 and older. Members under 18 should use it with a parent or guardian's knowledge.
Questions
Public email support is not open yet. Contact the person who invited you to Nēr for help. You can export or delete your account in Settings.