Privacy Policy

Effective September 28, 2026
Updated October 21, 2026

In short

What you write, choose or draw in a game is never saved and never readable by us.
Two-phone play is encrypted from phone to phone. Nothing from it is stored.
Your phone remembers your place and your settings. You can clear your game history any time.
A free account keeps your email, names, progress and settings, so you can play on another phone.
We count plays without names or ids. No tracking ads. We never sell data.

Who we are

Cord & Flame is run by Faith Flow Technologies Inc., Edmonton, Alberta, Canada ("we"). We follow Canada's PIPEDA and, where it applies, Alberta's PIPA. Questions: privacy@cordandflame.com.

Your answers stay yours

Answers, secrets, words, choices, drawings and scores inside a game are never saved and never sent to us. They are cleared when you move on.

On two phones, everything travels encrypted between your two phones. It passes through our live connection service without being stored, and we cannot read it. A pairing code ends after ten minutes and is deleted within the hour.

The private check-in at the start is used in that moment to pick your pace, then discarded.

What your phone keeps

To remember your place, this phone keeps:

Your two names, which game you are on, and the dates you finished games.
Settings: faith or not, Bible version, pace, mood, short game, text size, church code, Intimacy on or off, and the date you last asked about it.
Chosen culture flavours.
Game history: personal bests, Quick Play history (ids of recently played cards and verse references), mission reminders, Weekend Quest marks, and keepsake numbers such as games played.
Where you stopped in an unfinished game, for up to 7 days (only the game, card and prompt position, never answers).
A copy of the game cards and pages, so the app opens fast and works offline.

Tap Menu, then Clear our game history, to remove the game history above from this phone. Your place, settings and account stay as they are. To remove everything, clear this site's data in your browser.

Signing out keeps a separate on-phone copy of your account's coupons, badge dates and card-id history, so signing back into the same account does not erase them. They are not shown during guest play. Clear our game history also removes these saved copies. Couples' answers and keepsake words are never included.

If you make a free account

A free account unlocks Games 4 to 28 and saves your place across phones. We keep:

Your email address, to send sign-in codes.
Your two names, current game, finish dates and Weekend Quest marks.
Your total finished games, calendar days played and badge dates. A random guest-transfer identifier prevents the same guest games being added twice. It contains no answers.
Settings: faith or not, Bible version, pace, mood, text size, church code, chosen culture flavours, Intimacy on or off and the date you last asked.

Answers are never part of it. Download your data or delete your account any time from your account page. Accounts that never finish signing in are removed after 24 hours.

Anonymous counts

To learn whether the games help, we count things like a game started or finished, a closeness tap (1 to 5) and "How was that?" choices. Each count holds only the game, the day, faith or not, pace, and a church code if you joined through a church. No names, emails, accounts, device ids or IP addresses. We see totals only. Churches see totals only, and only after five couples have started.

Feedback, card reports and suggestions

All optional. We keep only what you choose or type, which game or card it was about, and the day. Never an account, email, device id or IP address. Other couples never see it. Card reports and suggestions are deleted after 12 months. When you suggest a card, you can add a first name so we can thank you; we keep it only with your tick, and if we use your card, the card itself never shows your name.

Invited testers may send sample-game feedback or a note. It carries the tester label from the invitation (for example "Couple 1"), never names or answers, and is deleted when testing ends.

Mutual Yes

Each of you picks privately. Your picks are never saved and never sent to us. Only ideas you both said yes (or both said maybe) to are shown. This phone keeps one date so the game is offered at most once a week.

Sharing a card

A card with your names is only made when both of you say yes. Nothing is shared unless you tap share. Links carry only a short share code, never names or answers.

Couple Challenge

When you challenge another couple, we keep the names you both agreed to show, your scores and which cards were played. No answers. A challenge is deleted after 30 days.

Church Couples' Night

A room keeps its code and the team nicknames couples type in. Everything about the room is deleted when the night ends, or after 4 hours at the latest. We keep only anonymous daily counts, such as how many rounds were played and how many couples joined.

Error reports

When something breaks, we receive the error message, where in our code it happened, and the page. Personal details are removed first. Never answers, names or anything you typed. Kept up to 30 days.

Other information

Church sign-up: the church's name and place, and the contact's name, role and email.
Reminders: if you turn on notifications, the address and keys your browser gives us, your chosen time and time zone, not linked to your names or account. Turned off or expired, they are deleted.
Safety: a scrambled code made from your internet address, to stop abuse of sign-in, contact, pairing and reminders. It cannot be turned back into the address and is replaced within 24 hours.
Backups: one private daily copy of our database, kept 30 days, readable only by our admins. Deleted accounts leave the backups within 30 days.
Visits: our hosting service sees your IP address and browser type to deliver the app, and gives us simple totals such as visits per day.

Services we use

Hosting, database and sign-in: our hosting and database providers store the information above and deliver the app.
Email: sign-in codes and replies are sent through Resend. Resend gets the address and the email. No tracking images or tracked links.
Payments, when purchases are available: Stripe handles payment. Your card details never reach us. We keep only your Stripe customer and plan ids, plan status and renewal date.
Our inbox: mail to us is hosted by Google Workspace.

Some of these may process data outside Canada, including in the United States.

What we never do

No tracking ads or ad trackers.
No selling, renting or trading of personal information.
No profiling of your relationship, and no training of artificial intelligence on your information.

We may offer optional sponsored game packs, marked with the sponsor's name and logo. The logo is stored with us, so your phone never contacts the sponsor. Sponsors never receive any data about you, and there are no ads anywhere else.

Children

Cord & Flame is for married adults, both 18 or older. It is not meant for children.

Your choices

Delete your account, and all its data, from your account page, or write to privacy@cordandflame.com to ask for a copy, a correction or deletion. If you are unhappy with our answer, you may contact the Office of the Privacy Commissioner of Canada.

Contact

Privacy: privacy@cordandflame.com
Everything else: info@cordandflame.com
Support: cordandflame.com/help

If we change how we handle information in a meaningful way, we will update this page and tell you in the app.