Privacy Policy

Twelve Intelligence LLC  ·  Effective August 9, 2026  ·  Contact: support@hitheo.io

Who we are

Theos is a Scripture intelligence platform built by Twelve Intelligence LLC. We are the data controller for all information collected through the Theos app (app.hitheo.io) and this website (jointheos.io). Questions or requests: support@hitheo.io.

What we collect

When you create an account and use Theos, we collect:

• Account information — your email address, used to authenticate you and communicate with you about the product
• Conversations with Theo — the messages you send and receive in the Theo chat. These are stored for up to 7 days, then automatically and permanently deleted — unless you explicitly save a conversation, in which case it is kept until you unsave or delete it, or delete your account. You can delete any conversation yourself at any time from within the app.
• Reading activity — which passages you have read, your reading streak, and your progress through the daily reading plan. This is used to personalize your experience.
• Faith journey response — an optional, single multiple-choice question asked during onboarding about where you are in your faith. This helps us understand our users and improve the product. It is never used for advertising.
• Content you create — verse highlights, notes, favorites, and written reflections in guided journeys. This content is kept until you delete it or delete your account.
• Personalization profile — an optional feature where Theo interviews you about what brought you to Theos, where you are in your faith, and how you like to learn, then writes a short profile that shapes how Theo responds to you. Theo shows you the profile before it is saved. Only the profile text is stored — the interview conversation itself is never saved. Your profile is visible only to you, is never shared with groups or anyone else, and is kept until you update or delete it, or delete your account.
• Subscription information — if you upgrade to a paid plan, we store your plan and subscription status. Payments are processed by Stripe on the web, or by Apple or Google if you subscribe inside the app; your card number never touches our servers. See the Payments section below.
• Usage analytics — anonymized data about how you use the app (which features you use, how often you open the app). See the Analytics section below.

We do not collect your location or device contacts. Display name is optional — if you choose to set one, it is stored in your profile. Your name may also be derivable from your email address.

A note on your conversations

Conversations with Theo may touch on personal faith, doubt, Scripture interpretation, or other deeply personal matters. We take this seriously. Your conversations are:

• Stored for a maximum of 7 days, then permanently deleted — unless you explicitly choose to save a conversation
• Never used to train AI models
• Never shared with third parties except as required to operate the service (see below)
• Deletable by you at any time, in-app

GDPR note: Conversations about faith and Scripture may constitute special category data under Article 9 of the GDPR (religious beliefs). We process this data on the basis of your explicit consent, given when you create an account and begin using Theo. You may withdraw consent at any time by deleting your account.

Why we collect it

We collect and process data only to operate and improve Theos. Specifically:

• Account data — to authenticate you and maintain your account
• Conversations — to provide Theo's responses and allow you to continue conversations across sessions and devices. We also extract structured signals from your conversations (without retaining your raw message text) to personalize your experience and improve the product.
• Reading activity — to track your progress and personalize your daily reading experience
• Content you create — to show it back to you, and — only where you explicitly share it — to members of your group
• Personalization profile — to shape the tone, depth, and style of Theo's responses to you
• Subscription information — to know which plan you're on and provide the features that come with it
• Analytics — to understand how the product is used and where we can improve it

We will never use your data for advertising, sell it to third parties, or use it in ways not described here.

Legal basis (GDPR): Consent and legitimate interests. Account data and conversation processing are based on your consent. Analytics are processed under legitimate interests, with anonymization as a safeguard.

How we store your data

All data is stored in Supabase, with encryption at rest and in transit.

Raw conversation messages are automatically and permanently deleted after 7 days via a scheduled process. Conversations you explicitly save are excluded from this deletion and kept until you unsave or delete them, or delete your account. During your conversations, we extract structured signals — such as topics discussed, Scripture referenced, engagement patterns, and the general emotional tone of a conversation (for example, wonder, doubt, or gratitude) — which are stored separately in a pseudonymized form without your raw message text. These signals are used to personalize your experience and improve the product, including generating a personalized picture of your journey through Scripture. That personalization is stored pseudonymously and is never shared with anyone else. Account data, reading data, and content you create (highlights, notes, journey reflections) are retained until you delete them or delete your account.

Groups and sharing

Theos lets you join groups and walk through journeys together. Sharing is always a choice you make:

• If you share a journey with a group, members of that group can see the journey and its content.
• Your written responses to journey questions are private by default. Group members can see that you responded, but not what you wrote, unless you mark a response as shared.
• Group members can see your display name (or email-derived name) and your activity within that group.
• Your conversations with Theo, reading activity, highlights, and notes are never visible to a group.

You can leave a group at any time from that group's page in the app. If you own the group, transfer ownership to another member first. If you delete your account, content you shared with a group remains available to that group in de-identified form — no longer connected to your name or account — while everything tied to your identity is deleted.

Payments

Paid subscriptions purchased on the web are processed by Stripe. Your payment card details are collected and stored by Stripe, not by us — we never see your full card number. See Stripe's privacy policy.

Subscriptions purchased inside our iOS or Android app are processed by Apple or Google through their app stores, under their own privacy policies. We never receive your card details from them either. We use RevenueCat to manage those subscriptions; it receives an account identifier and your purchase status so we can unlock the features you have paid for. See RevenueCat's privacy policy.

However you subscribe, the only billing data we store is your plan type and subscription status.

Emails we send

We send transactional emails (sign-in links, account notices) and occasional product emails — such as a welcome series or updates about features. Every non-essential email includes an unsubscribe link, and unsubscribing never affects your account. If you join a waitlist on this website, we store your email address to notify you and may send you occasional updates until you sign up or unsubscribe.

Service providers

We share data with the following service providers, solely to operate Theos. Each is contractually bound to protect your information and may not use it for their own purposes:

• Supabase — database and authentication (US-based, SOC 2 compliant)
• Anthropic — AI responses. Your messages are sent to Anthropic's API to generate Theo's replies. Anthropic does not use API data to train their models. See Anthropic's privacy policy.
• Voyage AI — semantic search within Scripture and theology content. Query text may be processed to generate embeddings.
• PostHog — product analytics. Usage events are collected to understand how the app is used. See PostHog's privacy policy.
• Stripe — payment processing for subscriptions purchased on the web. See Stripe's privacy policy.
• RevenueCat — subscription management for purchases made in the iOS and Android apps. Receives an account identifier and your purchase status. See RevenueCat's privacy policy.
• Resend — email delivery. Your email address is shared with Resend so we can send you sign-in links and product emails. See Resend's privacy policy.
• Vercel — hosting and infrastructure.

We may disclose your data if required by law. We will notify you if we are legally permitted to do so.

Analytics and tracking

We use PostHog to collect anonymized usage analytics — things like which features are used, how often sessions occur, and where users encounter friction. PostHog may use cookies or local storage to track sessions. We do not use Google Analytics, Meta Pixel, or advertising-related tracking. We do not use analytics data to target you with ads.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data — you can delete conversations in-app at any time, or delete your full account from your Profile page. If you shared a journey with a group, the journey content remains available to that group in de-identified form; everything connected to your identity is deleted.
• Withdraw consent at any time without affecting prior processing
• Data portability — you can download your data directly from your Profile page, or request it by emailing us
• Object to processing in certain circumstances

To exercise any of these rights, use the tools available in your Profile page in the app, or email support@hitheo.io. We will respond within 30 days at no charge.

If you are in the EU or UK and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local supervisory authority.

Children

Theos is intended for people aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us at support@hitheo.io and we will delete it promptly.

Changes to this policy

We will update this policy when our data practices change materially. We will notify users of significant changes by email before they take effect. The effective date at the top of this page reflects the most recent version.

Contact

Questions, requests, or concerns — email support@hitheo.io. We read every message.