Last updated: 29 April 2026
Daily Wayfinder is a private journaling app where you write your reflections and receive a personalised Bible verse, prayer, and short pastoral response. The journal entries you write are spiritual and often deeply personal. We take that seriously, and this policy explains in plain language what happens to your data.
If anything here is unclear, email us at dailywayfinder@gmail.com.
The controller of your personal data is Daily Wayfinder, operated by Niklas Wibelius, based in Gothenburg, Sweden. You can reach us at dailywayfinder@gmail.com.
We collect only what we need to run the service:
We do not buy data about you, and we do not run advertising trackers on the app.
Because journal entries are about your faith, prayers, doubts, and spiritual life, they qualify as special category personal data under Article 9 GDPR (data revealing religious or philosophical beliefs).
We process this data only on the basis of your explicit consent, which you give when you create an account and write an entry. You can withdraw that consent at any time by deleting your account, which will erase your entries (see Section 8). Withdrawing consent does not affect processing that already happened lawfully before withdrawal.
When you write an entry, we send the text of that entry to OpenAI, our AI provider, which generates the Scripture reference, prayer, and reflection that you see in the app. The response is saved in your account so you can read it again later.
We have a data processing agreement with OpenAI and use their API under terms where:
We do not sell your entries, we do not share them with advertisers or other third parties, and no human at Daily Wayfinder reads your entries except in narrow operational cases such as you asking us for support that requires it, or investigating a serious abuse report.
AI responses can occasionally be wrong, miss context, or misinterpret what you wrote. Treat them as a thoughtful starting point for reflection — not as pastoral counsel, medical advice, mental health care, or theological authority.
We use the following sub-processors. Each one is bound by a data processing agreement and either operates inside the EU/EEA or relies on the EU Standard Contractual Clauses for transfers outside it.
Some of our sub-processors are based in the United States. When your data is transferred there, we rely on the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable. We choose providers who maintain strong technical and organisational security measures.
You have the right to:
You can exercise most of these rights inside the app from your account settings, or by emailing us at dailywayfinder@gmail.com.
We protect your data with encryption in transit (TLS) and at rest, role-based access controls, and the row-level security features of our database so that one user cannot read another user's entries. We keep the number of people with access to production data as small as possible — currently it is limited to the founder.
No system is perfectly secure. If we ever discover a breach that affects you, we will notify you and the relevant authorities within the timeframes required by law.
We use a small number of cookies and similar storage to keep you signed in, remember your theme preference, and operate the service. We do not use advertising cookies. For more detail, see our Cookie Policy.
Daily Wayfinder is not intended for children under 16. If you are between 13 and 16, you may use the service only with the consent of a parent or guardian, in line with the GDPR and your local law. If we discover that we hold data on a child below the applicable age without proper consent, we will delete it.
We may update this policy from time to time. When we make material changes, we will update the “last updated” date at the top and, where appropriate, notify you in the app or by email before the change takes effect. The current version always lives at this URL.
For any privacy question or to exercise your rights, email dailywayfinder@gmail.com.