Governance & Stewardship
MyPlate.com · Version 2.0 · Effective September 2026
Implementation-aligned draft — legal review may still be required.
MyPlate.com collects only the information necessary to provide a meaningful formation experience. Your private journal, reflections, prayers, and gratitude entries are yours — no administrator, steward, or AI can read them. We do not sell your data, advertise to you, or profile your spiritual life. You can view, export, correct, and delete your data at any time.
We collect: (1) Account information — your name, email, and registration details. (2) Profile information — optional biography, timezone, and preferences you choose to provide. (3) Formation content — private journal entries, reflections, prayers, and gratitude records you create. (4) Community participation — memberships, gathering RSVPs, and discussions you contribute to. (5) Communication preferences — which emails and notifications you want to receive. We do NOT collect: biometric data, biofeedback data, browsing history from other sites, advertising identifiers, or behavioral tracking data.
Your data is used to: (1) Authenticate your account and secure your access. (2) Provide the formation experience — journals, reflections, prayer, and gratitude tools. (3) Enable community participation — gatherings, discussions, and circles. (4) Process payments through Stripe when you subscribe. (5) Send transactional emails (magic links, security notices, account-related communications). (6) Send optional communications you explicitly opt into (formation prompts, event notifications). (7) Maintain security audit logs for platform integrity. Every data category has an explicit purpose. We do not use your data for advertising, behavioral profiling, or unrelated commercial purposes.
Your journal entries, reflections, prayers, and gratitude records are private by default. They are protected by strict owner-only access controls — no administrator, steward, or system process can read your private formation content. Your private data is never sent to AI services, never used for analytics, and never scored or profiled. You may share a reflection with a Circle explicitly if you choose, but sharing is never automatic.
Your data is stored on secure infrastructure (Base44 platform) with encryption in transit and at rest. Private formation content (journals, reflections, prayers, gratitude) is protected by row-level security that prevents access by anyone other than you. Payment data is handled by Stripe — MyPlate does not store your card number or full payment credentials.
We do not sell, rent, or license your personal data. We share data only with service providers necessary to operate the platform: (1) Base44 — infrastructure, database, authentication, and hosting. (2) Resend — transactional email delivery. (3) Stripe — payment processing. (4) AI providers — for optional AI-assisted features (you interact with AI only when you choose to use those features). (5) Daily.co — live audio/video sessions when you participate. Each provider receives only the data necessary for their specific function. A current list of material service providers is available in our Subprocessor Register.
We use governed, privacy-protective analytics to understand if the platform is working correctly. We track page loads, load times, and user actions (like accepting or dismissing recommendations). We do NOT track: journal content, reflection content, spiritual condition, moral scores, medical or psychological inferences, or behavioral profiles. Analytics events are retained for approximately 90 days and then automatically deleted. We do not use advertising pixels, cross-site tracking, or behavioral advertising.
Some features use AI to assist with drafting, summarization, navigation, and reflection support. AI is assistive, not sovereign — it cannot make governance decisions, assign roles, approve or remove members, change payments, override your privacy preferences, or interpret our Canon authoritatively. When you use an AI-assisted feature, the prompt text and any optional context you provide are sent to the AI provider. AI outputs are advisory and reversible. You can challenge, correct, or disregard AI-generated content. AI provenance (metadata about AI interactions) is recorded for governance auditability and is accessible only to administrators.
Your data is retained as follows: (1) Account and profile data — retained while your account is active. (2) Journal entries — retained until you delete them (archive is reversible; 'recently deleted' entries are recoverable for 30 days, then permanently erased). (3) Analytics events — retained for approximately 90 days, then automatically deleted. (4) Authentication tokens — expire after approximately 10 minutes. (5) Audit events — retained for security and compliance purposes (content is minimized; private journal content is never logged). (6) Payment records — retained by Stripe according to their own policies; MyPlate stores only token references. Specific legal retention periods for audit and payment records are under review.
You have the right to: (1) View your data — access your profile, journal, reflections, and participation records. (2) Correct your data — update your profile, preferences, and formation content. (3) Export your data — request a downloadable copy of your account data via the Account Center. (4) Delete your data — request account deletion, which includes a 7-day grace period during which you can cancel. (5) Withdraw consent — revoke optional communications and analytics preferences at any time without losing core service access. (6) Control notifications — manage which emails and notifications you receive.
When you request account deletion: (1) Your request enters a 7-day grace period during which you can cancel. (2) After the grace period, your account and profile data are removed. (3) Your journal entries follow their own deletion lifecycle — archive is reversible, 'recently deleted' entries are recoverable for 30 days, and permanent deletion removes them irrevocably. (4) Community content you created (discussions, gatherings) may be retained according to community governance — your individual account is removed, but shared community assets are not destroyed when you leave. (5) Security audit events are retained for compliance purposes but do not contain your private journal content. (6) Payment records held by Stripe are subject to Stripe's own retention policies. We do not represent that we can delete records controlled by external providers.
MyPlate.com is intended for use by adults aged 18 and older. Our registration form requires you to select an age range, with the minimum option being 18-24. We do not knowingly collect personal information from children under 18. If you believe a minor has provided us personal information, please contact us so we can investigate and remove the data.
Your data may be processed by service providers located outside your country of residence, including the United States and other regions where our providers operate. We are reviewing the specific cross-border data flows associated with each provider. If you have questions about international data transfers, please contact us.
We protect your data with: (1) Server-side authentication and authorization controls. (2) Row-level security that prevents unauthorized access to your private data. (3) Encryption in transit and at rest. (4) Audit logging of security-relevant actions. (5) Rate limiting on sensitive surfaces. (6) Founder-authorized administrative access controls. No system is perfectly secure, but we design for privacy-by-default and fail-closed access controls.
We may update this Privacy Policy from time to time. Material changes will be accompanied by a version update and a new effective date. We will not retroactively change how your sensitive data is used without appropriate governance and notice.
For privacy questions, data requests, or account concerns, please contact us through the platform's support channels. We will respond to verified account holders and investigate privacy concerns promptly.
© 2004–2026 MyPlate.com — All Rights Reserved