NarroWay Privacy Policy

Effective Date: September 3, 2026

Last Updated: September 3, 2026

Operator: The Narroway LLC (“NarroWay,” “we,” “us,” or “our”)

Contact: team@narroway.io

Sites & apps covered: narroway.io, app.narroway.io, and the NarroWay iOS and Android applications

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use NarroWay. By creating an account or using NarroWay, you agree to this Policy. If you do not agree, please do not use the Service.

---

1. Introduction

NarroWay is a family discipleship product: Scripture formation paths, Word and Field activities, parent verification tools, and optional church or school links. We are committed to protecting your privacy and designing the Service for households under parent or guardian stewardship.

---

2. Information We Collect

2.1 Account information

When you create an account, we collect:

Email address
Password (handled by Firebase Authentication; we do not store plaintext passwords)
Account and membership status (for example free starter, trial, subscription, lifetime, or organization access)

2.2 Profile and household information

You may create disciple profiles under your household account. We collect information you provide for those profiles, such as:

Display names
Age band / proficiency “bucket” or voice tier
Progress, streaks, unlocked content, and formation history

Child profiles are created and managed under the parent or guardian account.

2.3 App usage and content progress

To run practice-and-mastery features and parent tools, we process:

Activity and lesson completion (Path, Word, Field, and related modes)
Streaks, XP, awards, and similar progression data
Dinner Table / parent verification events where enabled
Organization or church assignment progress when you link an organization code

2.4 Purchases and billing

Depending on where you subscribe:

iOS In-App Purchases: Apple processes payment. We receive purchase and entitlement signals (for example product identifier, transaction identifiers, and subscription status) so we can unlock access. We do not receive your full Apple ID password or full card number.
Web / Stripe (narroway.io): Stripe processes payment. We receive customer, subscription, and invoice metadata needed to grant and manage access. We do not store full payment card numbers on our servers.

2.5 Device, diagnostics, and notifications

We may collect:

Device and OS information needed for compatibility and support
Push notification device tokens (if you enable notifications)
Crash and error diagnostics (see Analytics and Crashlytics below)

2.6 Communications

If you email support or request account deletion, we collect the content of that correspondence and related account identifiers.

2.7 Information we do not intentionally collect

We do not require Social Security numbers, government IDs, or payment card PANs in the NarroWay app. We do not use Firebase Analytics to store disciple profile names, verse answers, or payment card numbers.

---

3. How We Use Your Information

We use information to:

Provide the Service — operate accounts, profiles, content unlocks, and household membership
Facilitate discipleship — enable Parent Hub / verification and family progress features
Process purchases — grant, renew, restore, or revoke membership based on Apple, Stripe, or organization entitlements
Run trials — offer a limited full-access trial where available (no card required in-app for the server trial)
Send transactional notices — account, security, billing-related, or product-critical messages
Send optional push notifications — if enabled (for example formation reminders)
Improve and secure the product — analytics, crash diagnosis, abuse prevention, and support
Comply with law — respond to lawful requests and enforce our Terms

We do not sell your personal information. We do not use Firebase Analytics for third-party advertising.

---

4. Data Storage, Processors, Analytics, and Security

4.1 Primary infrastructure

We use Google Firebase (including Authentication and Cloud Firestore) and related Google Cloud / Firebase Functions to store and process account and app data.

4.2 Payments

Apple Inc. — iOS subscriptions and lifetime In-App Purchases
Stripe, Inc. — web subscriptions and lifetime purchases on narroway.io

4.3 Firebase Analytics (Google)

We use Google Firebase Analytics on narroway.io, app.narroway.io, and mobile apps (iOS and Android) to understand how NarroWay is used and to improve the product. Analytics may include:

Usage events (for example opening Path, Word, Field, or Way; completing activities; paywall interactions)
Screen or section views
Sign-in events (that a sign-in occurred and the method, not your password)
A pseudonymous identifier (we may associate analytics with your Firebase user ID across sessions)

Analytics is disabled in developer/debug builds. In production builds, collection follows your device and platform settings where applicable.

Purpose / legal basis: Legitimate interest in operating, securing, and improving NarroWay; where required, your consent via platform settings.

Processor: Google LLC (Firebase).

Google Privacy Policy: https://policies.google.com/privacy

Firebase Terms: https://firebase.google.com/terms

4.4 Firebase Crashlytics (mobile apps only)

On iOS and Android, we use Firebase Crashlytics for crash reports when the app stops unexpectedly. Reports may include device/app version, crash diagnostics, and a pseudonymous Firebase user ID. Crashlytics is not used on the web app; severe web errors may be logged as limited analytics events.

4.5 Security

We implement reasonable administrative, technical, and physical safeguards. No method of transmission or storage is 100% secure. You are responsible for protecting your account password and device access.

---

5. Sharing Your Information

We do not sell or rent personal information.

We may share information with:

Service providers that help us operate NarroWay (for example Firebase/Google, Apple, Stripe, hosting, and email infrastructure), under instructions limited to providing the Service
Household members under the same account (parent/coach and disciple profiles) as needed for verification and family features
Organizations you join (church or school) when you redeem an organization code — limited roster/assignment data needed for that relationship
Authorities when required by law or to protect rights, safety, and integrity

Apple and Stripe process payment data under their own privacy policies.

---

6. Children’s Privacy (COPPA)

NarroWay is designed for family use. A parent or guardian should create and control the primary household account. Child profiles are created under that account.

We do not knowingly collect personal information directly from children under 13 for a separate child-owned account without verifiable parental consent. If you believe a child under 13 has provided personal information outside parental control, contact team@narroway.io and we will take appropriate steps.

Parents can review, update, or delete household profile data through the app (where available) or by contacting us.

---

7. Your Choices

Account & profiles: Update profile information in the app.
Notifications: Control push notifications in device settings (and in-app settings where available).
Analytics / tracking: Use platform privacy settings (for example iOS App Tracking / analytics preferences where applicable).
Subscriptions:

- Apple: Settings → Apple ID → Subscriptions (or Manage Subscriptions from the in-app membership flow)

- Web/Stripe: narroway.io/account

Restore Purchases (iOS): Available in the membership paywall and account settings for Apple purchases.

---

8. Deleting Your Account and Data

You can delete your NarroWay account and associated household data at any time.

How to delete in the app

In the NarroWay app: More → Delete account (or Settings → Account → Delete account), then confirm with your password.

How to request deletion by email

Email team@narroway.io from the email address tied to your NarroWay account.

Subject: Account deletion request
Include: (1) the sign-in email, (2) a clear request to delete the account and associated data, and (3) optionally that you are the parent/guardian for a household

We may ask you to confirm identity before processing.

What we delete or anonymize (where reasonably possible)

Your Firebase Authentication account
Your account document and disciple profiles (users/{uid} and related profile data)
Device notification tokens registered for push notifications, if any
Other household content we control that is not required for legal retention

What may be retained

Billing/tax records processed by Apple or Stripe (per their retention and applicable law)
Support correspondence about your deletion request
Aggregated or de-identified analytics that cannot reasonably be linked back to you
Records we must keep for legal, fraud-prevention, or accounting purposes

Timing: We aim to complete verified deletion requests within 30 days and will confirm when processing is finished.

Before you delete: Cancel any active subscription so you are not charged after deletion.

Apple: Settings → Apple ID → Subscriptions
Web: narroway.io/account (Stripe Customer Portal)

Lifetime (one-time) purchases are not auto-renewing subscriptions; deleting the account removes access in NarroWay even if Apple still shows the non-consumable purchase history.

---

9. International Users

NarroWay is operated from the United States. If you access the Service from another country, you understand your information may be processed in the United States and other locations where our processors operate.

---

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated Policy on this page and revise the Effective Date / Last Updated date. Continued use of NarroWay after changes become effective constitutes acceptance of the updated Policy where permitted by law.

---

11. Contact Us

Questions about this Privacy Policy, privacy rights, or account deletion:

The Narroway LLC

Email: team@narroway.io

Website: https://narroway.io