Privacy Policy

1. Introduction

Welcome to Word of Supreme ("we", "us", or "our"). Your privacy is of the utmost importance to us. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application and our website at wordofsupreme.com.

This policy is designed in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection laws (BDSG).

2. Data Controller

The data controller responsible for processing your personal data is:

For details on our legal identity and contact information, please see our Impressum.

3. Data Collection

Word of Supreme is designed to be a private tool for your spiritual journey. We collect only the minimal data necessary to operate our services.

• Email Address (Waiting List): If you choose to join our waiting list, we collect your email address solely to notify you about the app launch and related updates.
• Local Data: Your notes, highlights, and journal entries are stored locally on your device. We do not have access to this data.
• Anonymous Technical Data: We may collect anonymous, non-personally-identifiable technical data (e.g., app crashes or performance metrics) to improve the app experience. This data cannot be linked to you personally.

4. Legal Basis for Processing

We process your personal data in accordance with Article 6 of the GDPR. The specific legal bases are:

• Consent (Art. 6(1)(a) GDPR): We process your email address based on your explicit consent when you voluntarily submit your email through the waiting list form. You can withdraw your consent at any time — see Section 8: Your Rights below.
• Legitimate Interest (Art. 6(1)(f) GDPR): We process anonymous technical data to improve app stability and performance. This processing is based on our legitimate interest in providing a reliable, high-quality product.

5. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy:

• Waiting List Emails: We retain waiting list emails until 30 days after app launch, then permanently delete them from our systems.
• Analytics Data: Anonymous analytics data is retained for 12 months, then automatically deleted.
• Early Deletion: You may request the deletion of your email at any time before this period ends. Upon receiving your request, we will delete your data within 7 calendar days of your request.

6. Third-Party Services

We do not sell, trade, or otherwise transfer your personal information to outside parties for marketing purposes. The following third-party services are involved in the operation of our website and app:

• Firebase (Google Cloud): Our waiting list is managed using Firebase Firestore. Firebase processes data in the United States under appropriate GDPR safeguards (Standard Contractual Clauses). We use this service to securely store and manage your email for the purpose of communicating app updates.
• Vercel, Inc.: Our website is hosted on Vercel, Inc., which operates infrastructure in the United States. Vercel processes infrastructure-level data and enables our serverless functions.
• Google Fonts: Our website loads fonts from Google Fonts. This may result in your IP address being transmitted to Google servers.
• Apple Services: The app may use standard Apple services (like iCloud for backups, if enabled by you), governed by Apple's own privacy policies.

7. International Data Transfers

Personal data is processed by Vercel and Firebase/Google, both of which operate in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for data transfer compliance, ensuring that your data is protected to the standards required by the GDPR when transferred outside of the European Economic Area (EEA).

Firebase processes data in the United States under appropriate GDPR safeguards (Standard Contractual Clauses), matching the robust data protection terms of Google’s enterprise services.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15): You have the right to request confirmation of whether we process your personal data and to receive a copy of it.
• Right to Rectification (Art. 16): You have the right to request correction of any inaccurate personal data.
• Right to Erasure (Art. 17): You have the right to request deletion of your personal data ("right to be forgotten").
• Right to Restriction (Art. 18): You have the right to request restriction of processing of your personal data.
• Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): You have the right to object to the processing of your personal data at any time.
• Right to Withdraw Consent (Art. 7(3)): You have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with a supervisory authority. For Germany, the relevant authority is the data protection commissioner of your federal state (Landesdatenschutzbeauftragter).

9. Cookies & Analytics

We use Google Analytics to understand how visitors interact with our website. This data is anonymized and used exclusively to improve the experience of Word of Supreme seekers.

Essential, technically necessary cookies may be set by our hosting provider (Vercel) for the operation of the website (e.g., load balancing). These do not track you personally and are exempt from consent requirements under Art. 5(3) of the ePrivacy Directive.

10. Your Content

You own all the content you create within the app (Notes, Reflections). Since this data is stored on your device, you are responsible for its backup and security. We have no access to this content at any time.

11. Children's Privacy

Word of Supreme does not address anyone under the age of 16. We do not knowingly collect personally identifiable information from children. If we become aware that we have inadvertently collected data from a child under 16, we will delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. If we make material changes, we will notify you via email if you are on our waiting list.

13. Data Security & Breach Notification

We implement appropriate technical and organizational measures to protect your personal data. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users within 72 hours as required by GDPR.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

See also our Impressum (Legal Notice) for full contact details as required by German law.