Your pocket. Your privacy.

Who is responsible

Back Pocket is operated by Phil Loose, trading as Wild Kestrel.

Phil Loose personally is the legal data controller. Wild Kestrel is his personal trading name, not a limited company, charity or separate legal person.

Privacy contact: hello@wildkestrel.co.uk.

Before launch — owner to confirm: controller postal/contact address.

An optional community

Words and Worship are free to use without an account. A private community profile uses your name and verified email. Church or worship community, worship roles and experience are optional. There is no public member directory and no marketing email programme.

Information we handle

Accounts hold sign-in email, verification and account dates. Profiles hold name, optional details, a consent choice, privacy-version label and creation/update dates. Tips hold category, tip, optional explanation, first-name or anonymous credit, moderation status/notes, publication dates and withdrawal requests. We also hold protected administrator/moderator roles, moderation audit records and data-export request records. Hosting and sign-in providers may handle technical connection and security information; the exact logs and retention need confirmation.

Purposes and legal grounds

These details support sign-in, private profile editing, reviewed tip sharing, Pocket Cred, moderation, member statistics and rights requests.

Before launch — confirm and document the Article 6 lawful basis for each purpose. No contract, legitimate-interest or consent basis is declared approved by this draft. If legitimate interests are chosen, document the necessity and balancing assessment and explain the right to object.

Optional information and religious belief

Church/community and worship roles may reveal religious belief, which is special-category data. Experience, tips and even membership context may also reveal or allow an inference about belief. The form has a separate, unticked explicit-consent choice for optional profile details; it is not consent to marketing or to the whole service.

Leave optional details blank to minimise what you share. To withdraw that choice now, clear church/community, all worship roles and experience, untick consent and save your profile. Tools remain available. Withdrawing consent does not make earlier lawful processing unlawful; any remaining processing needs an independently valid basis. Published tips and third-party copies are separate from profile consent.

Before launch — confirm an Article 6 basis and an applicable Article 9 condition for every relevant use. Article 9(2)(a) explicit consent is a candidate, not an approved conclusion. Review consent evidence, withdrawal, statistics, free-text tips and whether linking Senior Pocket to optional details creates pressure to consent.

Who can see it

Your profile and email are not public. Authorised administrators can access private member details for administration. Moderators and administrators can see submitted tips, explanations, credit choices, author identifiers and moderation records. Only approved, published, non-withdrawn tips appear in Pocket Wisdom, with their category, explanation and chosen first-name or anonymous credit. “Anonymous” hides public credit, not your identity from the moderation team. Public material can be copied by others.

Services, hosting and Scripture

The app uses Lovable Cloud for accounts and community data. The actual hosting region, service providers/subprocessors, email delivery, contracts and any overseas access or transfers are not confirmed in this notice. Before launch — supply the verified list, roles, locations and applicable UK transfer safeguards.

Reading Scripture sends the requested reference from the app’s server to YouVersion; the lookup does not send your profile or email. Passage text is kept temporarily for reading, not deliberately saved in the app’s database or on-device storage. Required translation attribution is retained. API access does not establish contractual permission: applicable Bible licences, attribution, usage and domain terms still need owner verification. External fallback and creator links take you to separately operated sites.

Optional Bible search sends your submitted phrase to YouVersion, without your profile or email. Phrases may reveal beliefs or personal concerns: avoid including identifying details. Bible-mode queries and results are not deliberately saved in app storage or URLs. Temporary preview request counters use a hashed connection address when available, not query text; they expire after one minute and reset with the server. Before launch — confirm provider query handling, infrastructure logs, lawful grounds and shared abuse protection.

Storage on your device

Sign-in sessions use browser storage; the editor’s preview may also use its sign-in storage service. Local settings remember key/tempo/metre, thought positions and the previous homepage strapline. Installed app support is designed to cache app files and some pages, not Scripture or community API responses. It is disabled in preview. No advertising tracker has been added in the app code; hosting/editor telemetry and any cookies require a separate launch check. Before launch — classify essential and optional storage and decide any PECR notice/consent controls.

Deletion, withdrawal and retention

Tip withdrawal requests are designed to remove a tip from public Pocket Wisdom immediately while retaining the private submission for moderation. Account deletion is designed to remove the sign-in account and linked profile, tips, requests and tip audit records from the active service. These operations still need full acceptance testing; they do not promise deletion from backups, provider logs, downloaded files or copies made by others.

Before launch — confirm retention for active/inactive accounts, pending/rejected/withdrawn tips, consent evidence, moderation, rights requests, security logs and backups. Confirm restore safeguards so deleted information is not accidentally reintroduced. No retention duration is promised in this draft.

Your choices and rights

My Back Pocket lets you edit details, download the currently available profile and tips, record an export request, request tip withdrawal and delete your account. The download is not a complete subject-access response. An administrator marking a request fulfilled does not itself deliver an export.

Depending on the legal basis, you may request access, correction, erasure, restriction or portability, object to processing, and withdraw consent. For privacy questions or account-data requests, email hello@wildkestrel.co.uk. Before launch — confirm the identity-check and response procedure, and review any limits. You can complain to the UK Information Commissioner’s Office.

Community standards and children

Read the draft community guidelines before sharing. Before launch — confirm the membership age policy, safeguarding/reporting contact and moderation/appeal process. The Children prompt collection is not an invitation to collect children’s personal information.