Privacy Policy

Last updated: October 16, 2026

Vessel Training ("Vessel," "we," "us") is a daily training app for your Spirit, Soul, and Body. This policy covers the Vessel app and our website, and explains what information we collect, how we use it, and the choices you have. The short version: we collect what the app needs to work, we don't sell your data, and we don't show ads or use third-party advertising trackers. Payments are handled by Stripe — your card number never touches our systems. The website uses a cookie only to keep you signed in.

Information we collect

• Account information. Your email address and name when you create an account — directly, or through Sign in with Apple or Google. During onboarding we also ask for your age and sex to personalize your experience; neither is ever shown to other users. You must be between 13 and 120 to create an account, and onboarding won't continue if an invalid age is entered.
• Profile information. A community username, which every account has and which other users can see and search. Your location: country (required, pre-filled from your device's region), plus a state, province, or region and a city where applicable. Optional details you can add: a photo, a favorite Bible verse, and the church you attend (with a "prefer not to answer" option that stores no church).
• Content you create. Daily reflection answers, community posts and comments, prayers, journal entries, workout logs, and workout photos you choose to attach. In groups: messages, posts, photos, GIFs, and challenge check-ins. In direct messages: the messages, photos, and GIFs you send. For events: the event details you write as a host and your RSVPs as a guest. On workout programs: the comments, replies, and likes you leave.
• Community connections. Your friends list, friend requests, the groups you belong to, friends you tag in a workout, users you block, and reports you file about content.
• Activity and progress. Daily completions, streaks, workout history, and challenge results that power your personal stats — and, if you follow a Vessel+ workout program, which programs you've started and the program days you've completed.
• Purchase information. If you buy event tickets or subscribe to Vessel+: what you bought, the quantity, the amount, the order or subscription status, and Stripe reference IDs. If you sell event tickets: the status of your Stripe payout account (whether it's set up and able to take payments and payouts). Your card and bank details go directly to Stripe — Vessel never collects or stores them.
• Apple Health data, only if you connect it. When you connect Apple Health in Settings → Connected Apps, we read workouts that other apps and devices (Apple Watch, Whoop, Garmin, Coros, and others) have saved to Apple Health. For each workout we store its type, start and end time, duration, calories, average heart rate, and the name of the app or device that recorded it. See Apple Health and connected devices below.
• Gym and church locations. If you pick a gym or a church, we store that place's name and map location. Users have the option to select "Home Gym" for the gym question, which does not store a location, and "prefer not to answer" for the church question. Searching for gyms and churches uses your device's location while the app is open, if you allow it; we don't store your device location.
• Workout preferences. For AI-generated workouts: your experience level, available equipment, goals or limitations you type in, and weights you've logged for lifts.
• Device information for notifications. A push notification token for your device, if you enable notifications.

What stays private

• Journal entries and prayers are private to you. A prayer is shared only if you explicitly choose to share it.
• Anonymous reflection answers stay anonymous. When you answer anonymously, your name, photo, and identity are never delivered to other users' devices. This is enforced on our servers, not just hidden in the app.
• Workout photos are private by default and appear on the community feed only if you turn on sharing for that photo.
• Direct messages are only ever visible to the two people in the conversation, and group chats only to that group's members. This is enforced by our database's access rules, not just the app. Vessel never posts, forwards, or shares chat messages anywhere outside the chat they were sent in.
• Apple Health data is never shown to other users, never used for advertising, and never sold. A workout you confirm from Apple Health counts toward your Body goal like any other workout; only the completion (and a photo, if you choose to share one) can appear to friends.
• Journal dictation happens on your device. Speech recognition uses Apple's on-device engine; your voice never leaves the phone and no audio is stored.
• Your age and sex are never visible to other users.

Apple Health and connected devices

Connecting Apple Health is optional. It lets workouts you record with an Apple Watch, Whoop, Garmin, Coros, or any other app that syncs to Apple Health count toward your daily Body goal without logging them twice.

• Read only. We request read access to workouts, heart rate, and active energy. Vessel does not write to Apple Health.
• You review every import. Imported workouts wait for your confirmation in the app before they count. Workouts you dismiss are not added to your history.
• Limited use. Health data is used only to show and confirm your workouts and to count them toward your goals and streaks. It is not used for advertising, marketing, or analytics, is not shared with third parties except the infrastructure provider that stores your account data, and is never sold.
• Disconnect any time in Settings → Connected Apps, or revoke access in iPhone Settings → Privacy & Security → Health. Workouts already confirmed stay in your history; deleting your account removes them.

How we use your information

• To provide the app: your daily plan, streaks, community feed, friends, groups, messages, events, and reflection answers.
• To generate workouts when you ask for one. Your experience level, equipment, goals text, and logged lift weights are sent to our AI provider to build the workout; your name, email, age, and sex are not.
• To send notifications you've enabled (encouragements, comments, likes, friend requests, group and direct messages, event and challenge reminders, daily reminders). You can turn each kind off in the app's Notification Settings or all of them in iOS Settings.
• To process purchases you make: creating your order, confirming payment through Stripe, and recording refunds. See Payments below.
• To keep the community safe: reviewing content that users report, enforcing blocks you set, and removing content that violates our guidelines. When you report a message or post, our team can see that item in order to review it.
• We do not sell your personal information, and we do not use it for third-party advertising.

Who can see your content

Community posts are visible to your friends on Vessel. Reflection answers are visible to the Vessel community (with the anonymous option above). Comments and likes are visible alongside the content they're on. If a friend tags you in a workout, the "with" line naming you on their post is visible to whoever can see that post; accepting the tag only decides whether the workout counts toward your own goal. Your profile (name, photo, username, location, gym, church if you've added one, favorite verse, mutual friends) is visible to other signed-in users, and friends can find you by searching your username. If you set a gym or a church, you also count toward that place's member tally on the in-app map, and Vessel can suggest you as a friend to people who train or worship at the same place. Comments on workout programs are visible to signed-in users viewing that program.

Groups

• Everything inside a group stays inside the group. Messages, posts, photos, GIFs, reactions, shared prayers, and challenge check-ins are visible only to current members. Someone who leaves or is removed loses access. Nothing from a group is ever shown on the public feed or to non-members by Vessel.
• Public groups can be found in Discover. Non-members can see the group's name, photo, description, and member count, and can request to join. They cannot see its content.
• Private groups are invite-only and don't appear in Discover.
• Group challenges. Your daily check-ins are visible to your group. A challenge's overall stats are shared with the group only if the leader turned that on when creating it.
• Group leaders can remove members and delete messages in their group. They cannot see direct messages between members.

Direct messages

You can message people you're friends with. Messages, photos, and GIFs are visible only to you and the other person. Clearing a conversation removes it from your side. Blocking someone hides the conversation for both of you and prevents any new messages between you. Vessel does not share, forward, or analyze your messages, and only sees a message if one of you reports it.

Events

• Private events are visible only to the people the host invites (including a group's members when an event is attached to a group). Invited guests see the full details and the guest list.
• Public events appear in Discover to all signed-in Vessel users, and in the events listing on our website, where anyone — signed in or not — can see the public details: title, description, image, date and time, city and region, and host. Signed-in users also see which of their friends are going.
• Event links. A host can share a link to their event. For a private event, the link shows the public-style preview (never the address or guest list) to whoever opens it.
• The street address (or online link) of a public event is shared only with attendees — the host, guests the host invited, and people who RSVP'd going, maybe, or joined the waitlist. Declining or being removed hides the address again. The same rule applies to the full guest list.
• Hosting a public event posts a note to your friends' feeds that you're hosting, with the public details only.
• Hosts can see who RSVP'd and can remove guests. Guests can change or withdraw their RSVP at any time.
• Ticketed events. Buying a ticket adds you to the guest list as going. The host sees your name and how many tickets you bought. See Payments below for what Stripe receives.

Payments

Payments on Vessel — event tickets and the Vessel+ subscription — are processed by Stripe. Your card details go directly to Stripe and never touch Vessel's systems; we store only the order records and Stripe reference IDs described above.

• What Stripe receives. Your payment details, your account email address (so Stripe can send your receipt), and what you're buying. Stripe processes this under its own privacy policy and retains the transaction records it's legally required to keep.
• If you sell tickets, you set up a payout account directly with Stripe. The identity, bank, and tax details Stripe asks for during that setup go to Stripe, not to us — Vessel only sees whether your account is ready to take payments and payouts.
• What hosts see about buyers. The host of a ticketed event sees your name on the guest list with your ticket quantity, and can refund your order. Hosts never see your payment details.
• Order records are kept. Ticket orders are financial records. If you delete your account, your orders are kept for bookkeeping but unlinked from you, so they no longer identify you. Deleting your account also cancels any active Vessel+ subscription.

Service providers

Vessel runs on trusted providers that process data on our behalf, and only to provide their service to us:

• Supabase — database, authentication, and file storage, including chat photos (stored in private buckets readable only by the chat's participants) and Apple Health workout records.
• Cloudflare — video streaming for Spirit content.
• Expo / Apple Push Notification service — delivering notifications.
• Stripe — payment processing for event tickets and Vessel+, and payout accounts for event hosts. Stripe receives your payment details directly, plus your account email for receipts; hosts' identity, bank, and tax details are collected by Stripe itself.
• Resend — sending account emails such as password resets.
• OpenAI — generating AI workouts from the workout preferences described above. No account identifiers or health data are sent.
• Google Maps Platform — gym and church search and city lookup. Your search text and approximate location are sent through our server to find nearby places.
• KLIPY — GIF search in chats. Your search terms and an anonymous identifier are sent to KLIPY; GIFs are loaded from KLIPY's servers.
• Apple and Google — sign-in, if you choose those options. Apple also provides on-device speech recognition for journal dictation and, if you connect it, Apple Health.

Data retention and deleting your account

We keep your information while your account is active. Along the way you can delete your own posts, comments, messages, and workouts; leave any group; clear a direct-message conversation; withdraw from events; and disconnect Apple Health. You can delete your account at any time in the app (Profile → Settings → Delete Account), which permanently removes your account and the personal data associated with it, including your messages, group memberships, event RSVPs, and imported workouts. Two payment-related exceptions: ticket orders are kept as financial records but unlinked from your identity, and Stripe retains the transaction records it is legally required to keep. Any active Vessel+ subscription is cancelled when your account is deleted. If you host an upcoming event with ticket sales, you'll be asked to settle it (hold it, or cancel and refund) before the account can be deleted.

Age

Vessel is for users 13 and older. We ask for your age during onboarding and do not allow an account to be created for anyone under 13. We do not knowingly collect personal information from children under 13; if you believe a child under 13 has created an account, contact us and we will delete it.

Changes to this policy

If we make meaningful changes, we'll update this page and the date above, and for significant changes we'll notify you in the app.

Contact us

Questions or requests about your data: vesseltrainingco@gmail.com