What is collected
If you create an account, we store an identifier, email, and the name you give. If you save settings, we store timezone, calendar choice, briefing times, channel preferences, and the time you consented. If you add commitments or novenas, we store those fields. API tokens are stored only as SHA-256 hashes. Briefing history stores a short summary, the date, the slot, and the channel status.
The liturgical calendar itself is not tied to you. Reading lookups send a date to a public citation index, not your user id.
Why
To show your day in your timezone, to keep the practices you asked us to remember, to deliver the two briefings you enabled, and to let an assistant you authorize call the same service.
Cookies and sign-in
The app sets an essential session cookie through its own authentication. There are no advertising or analytics cookies. Google or X sign-in, if you choose it, is handled by the platform’s auth broker under that provider’s terms. Email and password accounts are stored in this app’s database.
AI
Catholic Why does not send your question to a generative model. Answers come from a reviewed catalog. If you connect Muse or another assistant, that assistant receives the tool response for the call it makes with your token. Do not put confessional matter in notes.
Other services
Hosting and the database are provided by the platform that runs this app. The USCCB site and the readings index are requested by the server for citations. Email is sent through Resend only if the operator configures it. Muse is contacted only if you submit the connector and use your token there. No card numbers are stored, because billing is not configured.
Retention and deletion
Preferences, commitments, novenas, tokens, and briefing history remain until you delete them. Tokens expire after 90 days. Rate-limit counters are deleted after two days. Use the data deletion page to remove application records. The sign-in identity held by the auth provider may be separate; write to support if you also need that removed.
Children
The service is for adults 18 and older and does not seek children’s data.