WonAnother ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our discipleship platform at https://wonanother.com (the "Service"). Please read this policy carefully.
1. Who We Are
WonAnother is a subscription-based discipleship platform designed to help individuals track their spiritual growth, connect with mentors, and access curated biblical learning content. We are committed to handling your data with care, transparency, and integrity.
2. Information We Collect
2.1 Information You Provide Directly
- Account registration data: Name, email address, denomination or theological tradition, and role (Disciple, Mentor, Ministry Leader).
- Profile information: Gender, age range, church name, congregation size, and ministry focus — used solely to personalize your experience.
- Spiritual assessment responses: Answers to discipleship diagnostic questions used to calculate your Growth Score and personalized learning path.
- Journal entries: Free-form and guided reflection content you choose to write on the platform. See Section 5 for our specific commitments regarding this sensitive content.
- Habit and progress data: Records of spiritual habits you log, lessons you complete, and streaks you maintain.
- Payment information: Billing details processed securely by Stripe. We do not store your full credit card number.
- Communications: Messages you exchange with mentors and any feedback you submit.
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, session duration, and click patterns — collected via PostHog analytics (only with your consent).
- Device and browser information: IP address, browser type, operating system, and referring URLs.
- Cookies and local storage: Used to maintain session state, remember your preferences, and (with consent) enable analytics tracking.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Service.
- Personalize your discipleship learning path and growth recommendations.
- Enable mentor–disciple relationships and communication.
- Process subscription payments and manage your account.
- Send transactional emails (account verification, invitation notifications, subscription receipts).
- Analyze usage patterns to improve platform features (analytics only with explicit consent).
- Comply with legal obligations.
We do not sell your personal data to third parties. We do not use your data for advertising profiling.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:
- Contractual necessity: To provide the Service you signed up for.
- Legitimate interests: To improve and secure our platform.
- Consent: For analytics cookies and non-essential tracking. You may withdraw consent at any time.
- Legal obligation: Where required by applicable law.
5. Journal Entries and Sensitive User Content
Our Commitment to Your Private Reflections
Journal entries and guided reflection responses are treated as highly sensitive personal content. They are stored encrypted at rest, never used to train AI models, and are never shared with third parties. By default, journal entries are private to you. You may optionally choose to share specific entries with your assigned mentor — this is always opt-in and revocable. WonAnother staff do not read individual journal entries except where required by law or to investigate a credible safety concern.
Assessment responses (Growth Score diagnostics) are similarly treated as sensitive. Aggregate, anonymized trend data may be used to improve our question library, but individual responses are never disclosed externally.
6. Data Sharing and Disclosure
We share your information only in the following limited circumstances:
- Mentors and Ministry Leaders: If you are a Disciple, your assigned mentor may see your progress, habit streaks, and any journal entries you explicitly share. Ministry Leaders may see aggregated (non-identifiable) growth trends for their congregation.
- Service providers: Trusted third parties who help us operate the platform (Stripe for payments, Resend for email, PostHog for analytics, Supabase for database hosting, Backblaze for file storage). Each is bound by data processing agreements.
- Legal requirements: We may disclose data if required by law, subpoena, or to protect the rights and safety of our users or the public.
- Business transfers: In the event of a merger or acquisition, your data may be transferred. We will notify you and ensure the same level of protection.
7. Cookies and Tracking
We use cookies and similar technologies for the following purposes:
- Essential cookies: Required for authentication and core functionality. These cannot be declined.
- Analytics cookies (PostHog): Help us understand how visitors use the site. Only activated with your explicit consent via our cookie banner. You can withdraw consent at any time by clearing your browser's local storage or clicking "Decline" in the cookie banner.
8. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal or financial compliance (e.g., billing records for up to 7 years per applicable tax law). You may request earlier deletion of specific content types (e.g., journal entries) independently of account closure.
9. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion ("Right to be Forgotten"): Request deletion of your personal data.
- Portability: Receive your data in a machine-readable format.
- Objection / Restriction: Object to certain types of processing.
- Withdraw consent: Withdraw analytics consent at any time without affecting prior processing.
To exercise any of these rights, email us at privacy@wonanother.com. We will respond within 30 days.
10. Children's Privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us immediately at privacy@wonanother.com.
11. Data Security
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest for sensitive fields, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
12. International Data Transfers
Our servers are located in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) where required under GDPR for such transfers.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notification at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy.
14. Contact Us
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us:
WonAnother
Email: privacy@wonanother.com
Website: https://wonanother.com