Consumer health data privacy policy

What I collect and why

What you write in a prayer request or a session request may describe a health condition. I collect it only to pray for you and to reply to you.

I keep each request in a private database on a server my office runs at DigitalOcean, not in email. Requests more than a year old are deleted as new ones arrive.

My nightly database backups leave requests out. DigitalOcean also backs up the whole server each day. Those backups include requests and are kept for seven days.

Where it comes from

It comes from you directly, through the two request forms on this site and any email you send me.

Sharing

I do not sell it. I do not share it with any third party or affiliate. The only exceptions are when the law requires it or a life is in danger.

Service providers handle it only to do their work for me.

DigitalOcean hosts this website and hosts and backs up the server that keeps your request. Google carries my email.

When a request comes in, I get a short email without what you wrote. Emails we exchange live in my Google email, like any other mail.

My email is sorted with the help of automated tools, including AI services from other companies. Those tools can keep copies of what they read. Share by phone anything you would rather keep out of email.

Your rights

You may ask whether I have your consumer health data. You may also ask to see it, to have it deleted, or to withdraw your consent. Use either request form, or reply to any email from me.

When I delete it, I delete your request, our emails and any calendar entry for your session. Your request is gone from my database at once, and from DigitalOcean's server backups within eight days.

I will respond within 45 days. If I deny a request, reply to my answer to appeal. I will answer the appeal in writing within 45 days.

If I deny your appeal, you may file a complaint with the Washington State Attorney General at atg.wa.gov/file-complaint (external site).

Updated 10/31/26