Overview
Family Pledge (“the App”) is operated by David Stacey. It helps you read the Cheon Il Guk Family Pledge (including an English kids edition), study the Korean recitation with follow-along audio, read short quotes from True Parents’ books, browse a Resources library of books and teaching materials, add an optional Quote of the day home-screen widget, practice with a Family Pledge quiz, browse song lyrics (including chord charts, share, and PDF download), listen to music (including sharing a song link), view a photo gallery, and use a heavenly calendar with optional local reminders.
You can use the App without creating an account. Sign-in is optional. It is only needed if you want to join the public quiz leaderboard. This policy explains what stays on your device, what we store if you choose to sign in, and what anonymous analytics we use.
Information we do not collect
- We do not require you to create an account or sign in.
- We do not collect your phone number or physical address.
- We do not sell personal data.
- We do not show third-party advertising in the App.
- We do not use your data to track you across other companies’ apps or websites.
- We do not use session replay or record your screen.
- We do not put full pledge, lyric, or quote text into analytics events.
- We do not upload your photos or the quote images you save.
- We do not put your email or display name into analytics events.
Information stored on your device
The App stores preferences and settings locally on your device so your experience is remembered, including:
- Selected app language (menus and buttons) and Family Pledge language
- Selected background theme
- Text size and card opacity settings
- Last played music track (if any)
- Starred lyrics, songs, quotes, and resources, and pinned music playlists
- Quotes language, quote-of-the-day flags, and quote share-card preferences
- Calendar filter preferences (which event types you show or hide)
- Calendar, quiz, and daily-quote reminder preferences (what reminds you, and at what time)
- Quiz preferences and local quiz history (scores and streaks)
- One-time tip dismissals (for example mini-player, recitation, and what’s-new flags)
- Optional offline audio cache files (on supported platforms)
- Quote of the day widget payload on iPhone and Android (the next days of quotes, stored only on this device so the widget can update)
- A local sign-in session if you choose to sign in on that device
This data stays on your device unless you delete the App or clear its data through your device settings. If you sign in, we may also store identifiers of your starred quotes, lyrics, and songs, pinned playlists, and selected background theme with your account so they can follow you on another device — see “Optional account and sign-in” below. Uninstalling the App removes local preferences and cancels scheduled local reminders on that device. It does not automatically delete an optional account on our servers — see “Leaving the leaderboard and deleting your account” below.
Optional account and sign-in
If you tap Sign in, you may use Sign in with Apple, Sign in with Google, or an email sign-in code. There are no passwords in the App.
When you sign in we receive and store:
- An account identifier created for you
- Your email address (from Apple, Google, or the address you type)
- Which sign-in method you used (Apple, Google, or email)
Apple or Google may also process that sign-in under their own policies. Email codes are sent to the address you enter so you can prove you control it. Codes expire and are not used for marketing.
Signing in alone does not put you on the public leaderboard. You join only if you choose a display name and confirm.
After you sign in we may also store, with your account:
- Identifiers of quotes, lyrics, and songs you star (not the quote or lyric text)
- Identifiers of music playlists you pin
- The id of your selected background theme
Those values are used only to keep the same stars, pins, and background on devices where you are signed in. They are not shown on the public leaderboard. Guests keep this data on the device only. Starred resources stay on this device and are not synced with an account.
Public quiz leaderboard
Anyone can browse the leaderboard without signing in. To appear on it you must sign in, pick a public display name (3–20 letters, numbers, spaces, or hyphens), and opt in.
If you join, we store:
- Your display name
- Summaries of quiz attempts used for ranking (when you finished, language and mode ids, how many questions, how many you got right)
- Weekly and monthly totals derived from those attempts
When you join, the App may upload quiz history already stored on that device from the last 24 months so your existing practice can count. Later attempts on a signed-in device are uploaded the same way.
What other people can see: your display name, rank, number of correct answers, and accuracy for the current week or month. They cannot see your email, account identifier, or individual quiz answers.
Who processes this data
We use service providers to run sign-in, store account and leaderboard data, send email codes, host the website, stream audio, and measure anonymous usage. They process data on our behalf and are not allowed to sell it or use it for their own advertising:
- Apple — Sign in with Apple
- Google — Sign in with Google
- Supabase — account, display name, quiz totals, and leaderboard
- Resend — email sign-in codes
- Cloudflare — audio and published teaching files (R2 / CDN)
- The host of familypledge.app — delivering the web app
- PostHog (EU Cloud) — anonymous product analytics, described below
Those services may process ordinary technical data such as IP address as part of delivering the request. We do not use that for advertising.
Anonymous product analytics (usage data)
To understand which features are used and to improve reliability, the App
sends anonymous product analytics to
PostHog
(EU Cloud, host eu.i.posthog.com).
Analytics are not tied to your name, email, or account. We do not call identify with personal details. Events use stable technical IDs (for example language id, track id, song id, quote id, resource id, background id), platform (iOS / Android / web), and app version — not free-form personal text. If you sign in or join the leaderboard, we may record that the action happened and which method you used (Apple, Google, or email), but not who you are.
Examples of events we may record:
- Which section of the App you open (hub navigation / screens)
- Which pledge language or app language you view
- When a music track starts loading or fails to play (for error diagnosis)
- When you open lyrics, toggle chords, share lyrics, export a lyrics PDF, share a song from Music, or view a gallery photo (song, track, or picture id only — never the lyric text)
- When you tap Open in app on the mobile website (the in-app path only)
- When you open Quotes, view a quote, change quote language, share a quote, or add the Quote of the day widget (quote id only — never the quote text)
- When you open Resources, open a book, view or download a PDF, or open an external link (resource id only — never the book text)
- When you start, finish, or leave a quiz, and reminder preference changes
- When you change background, text size, or reminder preferences
- When you open Progress or the leaderboard
- When you sign in, sign out, join the leaderboard, or leave it
- When an optional in-app update, feedback, or reminder opt-in prompt is shown or answered
We do not use this data for advertising profiles. Session replay is off. PostHog processes the data as our analytics provider under their terms and privacy policy. The project is hosted in the EU region.
Notifications and reminders
On iOS and Android, you may optionally enable local calendar reminders for holy days, anniversaries, Blessing days, Ahn Shi Il, monthly pledge times, and other events you choose, optional weekly reminders for the Family Pledge quiz, and an optional daily quote reminder. Reminders are scheduled and delivered by your device’s notification system. They are not sent through our servers.
When you first open the App on a phone, we may show a one-time in-app prompt offering calendar, quiz, and daily-quote reminders. If you tap Enable, the App then requests notification permission from the system. If you tap Not now, or dismiss the prompt, we remember that choice on this device and do not ask again. You can still turn reminders on or off later in Settings → Notifications, or revoke permission in your device settings.
The App may request notification permission (and, on some Android versions, permission related to exact alarms) only so reminders can appear at the times you configure. You can change or revoke these permissions in your device settings at any time. Reminders are not available in the web version of the App.
Internet access and media
Core reading, the quotes catalog, lyrics, themes, the calendar catalog, and many images work offline after install. Quote text stays in the App; we do not send quote bodies to our servers. Music and the Korean Family Pledge recitation stream from a content delivery network (Cloudflare R2) so the App download stays smaller. That means playback needs a network connection (or a previously cached file where offline download is available). Offline audio files stay on this device. An App update may replace those files so you receive improved recordings; they are not uploaded.
The App may also check a public version file on familypledge.app to see whether a newer store release is available. That request is a simple download of version numbers — it is not an account check.
If you sign in or open the leaderboard, the App contacts our account service (Supabase) over HTTPS.
If you share a quote, the App can create an image on your device and open the system share sheet. Destinations you pick (Messages, Mail, other apps) have their own privacy policies. If you save that image, it is written only to your on-device photo library. We do not upload it, and we do not use the photo library for anything else.
If you share a song from Music, the App creates a public web address for that track (playlist and song ids only — not your name). Messaging apps may fetch a preview page with the album artwork from familypledge.app. We do not receive the contents of the message you sent. On iPhone and Android, opening familypledge.app or a shared Family Pledge link can open the installed app instead of the website (Universal Links / App Links). The mobile website may offer an Open in app button; it does not automatically send you to the stores.
If you open external links from the App (for example Support development, Send feedback, email, a YouTube / Spotify / website button on a music playlist, or a PDF / web / Spotify / Audible link on a quote book), those destinations are governed by their own privacy policies. Tapping YouTube, Spotify, or Audible opens the native app if it is installed, otherwise a browser page. We do not send your account, quiz, or search text to those services. Your device platform (Apple or Google) may process standard app distribution, crash, or diagnostics data according to their policies when you install or use apps from their stores.
The English kids edition of the Family Pledge includes a bundled PDF. Opening or sharing it copies the file to a temporary folder on this device and uses the system viewer or share sheet. We do not upload the PDF. Sharing a lyrics page or downloading a lyrics PDF works the same way: the file is generated on this device and is not uploaded.
The Quote of the day home-screen widget (iPhone and Android) reads quotes already stored on this device. It does not contact our servers. You can add it from the Daily quote reminder screen or from your phone’s widget gallery. It does not require the daily reminder to be on.
The web version at familypledge.app is hosted by a third-party hosting provider, which may process standard technical logs (such as IP address and browser type) as part of delivering the site.
Leaving the leaderboard and deleting your account
You can Leave the leaderboard in the App. That removes your display name from the public board. You can also Sign out on a device.
To delete your account and the personal data we store for it (email, display name, uploaded quiz attempts, leaderboard totals, and synced favourite, playlist-pin, and background identifiers), open Account → Delete account in the App. You can also email support@familypledge.app from the address on the account. Quiz history that only lives on this device is not removed. Anonymous analytics events that were never tied to your account cannot be individually deleted.
Children’s privacy
The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account or joined the leaderboard, contact support@familypledge.app and we will delete that data.
Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the App after updates means you accept the revised policy.
Contact
Family Pledge is operated by David Stacey. For privacy questions, account deletion, or other requests, contact: