KingLio Privacy Policy
Last updated: 18 August 2026 Applies to: the KingLio web app at kinglio.app and the KingLio mobile apps for iOS and Android. Published by: StarPhoenix LLC
The short version
Your prayers never leave your phone. Not as a promise about what we choose to look at. The app does not send them. Your journal, your notes, your prayer wall drafts and the mood you tap each morning are written to your own device and are not uploaded to us, ever.
Your progress does leave your phone, if you sign in. Streak, XP, lessons completed, games played, which chapter you were reading, your avatar, your Circles and your daily check-ins are stored on our servers so they survive a new phone and so a family can share one flame.
You can use the whole app without ever signing in. Nothing is uploaded until you do.
Two consequences of the first paragraph you should understand before you rely on it:
- We cannot recover your journal. If you lose your phone or delete the app, the entries are gone. There is no copy on our side, because we never received one. The app can save a backup file, so please use it.
- Your journal does not follow you to a new phone by itself. Signing in on a new device restores your progress but not your writing. Restoring the backup file does that.
What stays on your device and is never uploaded
- Your prayer journal, including every photo attached to it
- Prayers you write in the prayer builder, and which guided prayers you save
- Notes you write against a day's Bible reading
- How you say you are feeling each day, and the verse chosen in response
- Anything you write on the prayer wall
- Problem reports you draft, until you choose to send one
- Family Mode: the parent PIN, and the child profiles set up on the device
- The name of your church, if you enter one
These are excluded from what the app uploads, in the code, by name. If you have used a version of KingLio from before 18 August 2026 while signed in, some of this may have reached our database. The next time your app saves, it overwrites that record with one that does not contain it.
What we store, when you sign in
Signing in is optional. If you do, we hold:
| What | Why |
|---|---|
| Your email address | To send the sign-in link. It is the only way back into your account. |
| Your name and chosen avatar | So your family sees who checked in |
| Streak, XP, level, lessons and games completed | So they survive a lost phone |
| Reading progress and highlighted verses | So the reader picks up where you left off |
| Which Circles you are in, and your daily check-ins | A Circle's shared flame is calculated from these |
| Badges earned | Same |
Children who join a family do not need an email address. Their device is paired with a code from a parent and holds an anonymous account: we have no name for them beyond the one their parent typed, and no way to contact them.
Our database is hosted by Supabase, in the EU. Row-level security means one account cannot read another's rows even if the app asked it to.
What we do not do
- No advertising. No ad identifiers, no tracking across apps or websites, and no selling or sharing of anything to anyone for marketing.
- No analytics, today. We do not currently measure which screens you open or how long you stay. If we add product analytics, it will count events, not content, and this policy will say so before it goes live.
- No location. The crisis screen lists helplines for several regions rather than working out which one you are in.
- No contacts, microphone or camera. Photos in your journal are chosen by you from your own library and stay on the device.
- No training of AI models on anything you write.
Children
KingLio is made for families and includes a Family Mode with child profiles.
Under COPPA and the UK Age Appropriate Design Code we collect the minimum needed to make a child's device work: a display name their parent chose, and their progress. We do not collect a child's email address, phone number, location, photograph or contacts. Everything a child writes, including journal, prayers and mood, stays on their device under the same rule as everyone else's.
Parents control, per child:
- Access to the prayer wall, and whether the child can post
- Access to the Difficult Questions learning path
- Access to Circles beyond the family
- Access to Ask Leo, which is off by default for under-13s
A parent can delete a child's profile from inside the app. Doing so removes it from our servers as well as the device.
The prayer wall
The prayer wall currently shows written examples, not real requests from other people. It is labelled as such in the app. Nothing you write there is transmitted anywhere.
If that changes, and the wall becomes a genuinely shared space, this policy will be updated first, and the app will make the change obvious rather than quietly switching it on.
Ask Leo
Today, Ask Leo answers from a fixed list of questions built into the app. No network request is made and nothing you type is sent anywhere.
We intend to replace it with a real study assistant. When we do:
- Your question, and the passage you are asking about, will be sent to an AI provider in order to answer it.
- Your journal, your prayers and your progress will not be sent unless you explicitly ask for help with a specific entry.
- Messages our safety system identifies as being about self-harm, abuse, or medical or legal matters are never sent to an AI at all. They are handled on your device and shown support resources instead.
- Nothing you write will be used to train a model.
- This policy will be updated, and the app will tell you plainly, before any of it is switched on.
Your rights
Wherever you live, you can:
- See what we hold: it is the progress list above; ask and we will send it
- Correct it: most of it is editable in the app
- Delete it: Settings → Delete account removes your account, your progress, your check-ins and your membership of every Circle. It is immediate and we keep no backup copy of it afterwards. Deleting the last adult in a household also deletes the children in it, because they have no other way to be reached.
- Take it with you: the journal has a full export; ask us for the rest
If you are in the UK or EU, our lawful basis for holding your progress is performance of the contract you entered into by creating an account. You may object, and the remedy is the same: delete the account.
If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we have no financial incentive to.
To exercise anything above, or to complain: hello@kinglio.app. UK and EU users may also complain to their own data protection authority.
How long we keep things
Progress is kept while your account exists. Delete the account and it goes immediately, not after 30 days. Server logs, which contain IP addresses, are kept by our hosting providers for a short period as part of running the service.
Third parties
| Who | What they get | Why |
|---|---|---|
| Supabase | Your account and progress | Our database and sign-in |
| Cloudflare | The request itself, including IP address | Serves the site and app |
| Apple, Google | Downloads and purchases, under their own policies | App distribution |
We use no analytics, advertising or tracking SDK.
Security
Your account is protected by a link sent to your email; there is no password to steal. Rows are isolated per account at the database level rather than only in the app. Traffic is encrypted in transit.
Family Mode's parent PIN restricts access within the app. It is a reasonable barrier for a child, not a security measure against a determined adult, and you should not treat it as one. It is never sent to us.
Changes
If this policy changes materially, and particularly if we begin collecting something we do not collect today, we will say so in the app before the change takes effect, not afterwards.
What changed on 18 August 2026: the previous version of this policy said KingLio had no accounts and no server. That was true when it was written and stopped being true when sign-in and Circles were added, and the document was not updated at the time. It is corrected above. In the same release the app stopped uploading journal entries, prayers, notes and mood, so the promise that prayers stay on your phone is now enforced by the code rather than by a document.
Contact
StarPhoenix LLC [REGISTERED BUSINESS ADDRESS, to be completed before store submission] hello@kinglio.app