Privacy Policy

Updated October 2, 2026. This policy explains how Sparrow handles information in its website and mobile app.

Information you provide

Sparrow handles account and sign-in information, church memberships and roles, and the church records you are authorized to use. Depending on the available feature, these records can include donor names and contact details, donations, fund allocations and financial activity. Church administrators control access to their church’s records.

Ask Sparrow processes the questions, conversation context and authorized workspace information needed to answer your request. When you start voice, microphone audio and transcripts may be processed by speech or AI services. Microphone access is optional and controlled through your device permissions.

How information is used

We use information to sign you in, enforce church permissions, provide requested features, maintain attributable financial history, troubleshoot problems and protect the service. AI proposes or explains; financial changes require an authorized person’s explicit approval.

Services that process information

Sparrow uses Supabase for authentication and database services, Vercel for website hosting and performance diagnostics, and OpenAI for supported AI and voice requests. Stripe processes payment information where payments are enabled; Sparrow does not store raw card or bank credentials. Apple provides app distribution, device authentication and TestFlight services. TestFlight can collect crash, usage and tester feedback information under Apple’s terms.

Information needed for a feature is sent to its service provider. Do not include unrelated private information in an AI question or support request.

On your device

The mobile app uses the system Keychain for saved sign-in and protected local storage for donation drafts and recovery records. Face ID and Touch ID are handled by Apple’s operating system; Sparrow receives an authentication result, not your biometric template. Clearing or signing out of the app can remove local access without deleting the church’s financial history.

Copy support details copies the app version, build, app identifier, device type and operating system version. It does not include your password, sign-in token, donor details or church records. You choose whether to send those details to support.

Retention and your choices

Information is kept as needed to operate the service, support accounts and preserve required financial and audit history. Retention can depend on the record and the church’s responsibilities. Account removal does not necessarily remove attributable financial records. Contact your church administrator about church records, or email us for account access, correction or deletion requests.

Device permissions control microphone and supported biometric access. The Sample Church preview uses synthetic records; it does not represent your church’s real financial position. Some mobile features are still in development.

Contact

For privacy questions or data requests, email support@mysparrow.app. Please do not send passwords or raw payment information.