How we handle your information.

Ponder is a product of FlockConnect LLC, formed in North Carolina. This page explains, in plain language, what information we collect when you use Ponder, what we do with it, who we share it with, and how to ask for it back or have it deleted. Last updated: 2026-05-20.

What we collect

Account. Your email address, name (if you provide one), and the settings you pick during onboarding: your role (parent, group leader, kids ministry, youth ministry, individual, or pastor), preferred Bible translation, theological tradition, and optional doctrinal notes. If you set up a Church-tier account, we store your church’s name, city, and state.

Family / group context. For audience-specific generation, we store the descriptive context you give us. Parents may record optional child nicknames and age bands. Do not submit a child’s full legal name, contact information, precise birthday, school, photo, medical information, or other sensitive information. Group leaders record their group composition and meeting length. Children’s and youth educators record the age band and class size.

Sermon content you give us. Pasted manuscripts, audio files you upload, and YouTube transcripts we fetch on your behalf. We store these so you can re-open prior generations from your library.

Generated content. The discipleship outputs Ponder produces from your sermons. Stored tied to your account so you can return to them.

Subscription & billing. Plan tier, billing period, trial-end date, and your Stripe customer ID. Your card number never touches our servers; Stripe stores it directly.

Product telemetry. Key product events such as pageviews, onboarding progress, sign-in attempts, generation success or failure, and library views. We use PostHog for product analytics and Sentry for error monitoring. PostHog is configured without persistent analytics cookies, automatic click capture, or session replay, and we respect browser Global Privacy Control and Do Not Track signals. We do not sell this data and we do not share it with advertising networks.

Who we share data with

Ponder relies on a small number of third-party processors. Each processor only receives the data they need to do their job for us.

• Google Cloud (Vertex AI): receives your sermon transcript and your audience settings so Gemini can generate the discipleship content you requested. This is our primary AI provider. Google processes this content under its Vertex AI service terms and the Google Cloud DPA.
• Anthropic (via Vercel AI Gateway): automatic fallback AI provider. Receives your sermon transcript and audience settings only when the primary provider errors so Claude can generate the same discipleship content. Anthropic processes this content under its API and business terms.
• ElevenLabs: receives your uploaded audio files when you submit them (or the audio track of a YouTube video when its captions are unavailable), returns the transcript, and processes the audio under its API and business terms.
• YouTube: when you submit a YouTube link, we send the video ID to the YouTube transcript endpoint to fetch publicly available captions. If the uploader has captions disabled, our server downloads the public audio track to send to ElevenLabs for transcription (no account information is shared with YouTube).
• Supabase: hosts our database and your authentication session.
• Resend: sends our transactional and bulk email (magic links, generation summaries to your team).
• Stripe: processes payments and manages your subscription.
• PostHog: product analytics. We send key product events, anonymous pageview identifiers before sign-in, and your user ID after sign-in so we can understand whether the product is working.
• Sentry: error monitoring. We send error stack traces and your user ID. Personally identifiable fields like kid nicknames and doctrinal notes are stripped before send.
• Vercel: hosts the application. Vercel sees standard request metadata (URL, headers) but does not persist your content.

Your rights

Export. Signed-in users can download a JSON export from Account → Your data. You can also email privacy@flockconnect.com if you need help. Exports include your account, sermons, generations, and usage records.

Deletion. Signed-in users can delete their account from Account → Your data. Billing stops immediately and your sermons, generations, and library entries are removed. Church owners with other members must transfer ownership first. You can also email privacy@flockconnect.com if you need help. Stripe customer records are anonymized but retained for invoice-history compliance.

Opt out of analytics. If you use browser Global Privacy Control or Do Not Track, we do not send PostHog events from that browser. You can also email us and we’ll exclude your account from PostHog. Sign-in and billing events are functional and cannot be opted out.

AI training

Sermon transcripts, audience settings, and the discipleship content generated for you are not used to train any AI model. We rely on enterprise-grade service terms from our AI providers (Google Cloud Vertex AI and Anthropic) which prohibit using customer prompts and outputs to train their foundation models. You retain ownership of the content you submit and the outputs generated from it.

Privacy limits and third parties

We are responsible for the privacy practices we control. To the maximum extent permitted by law, FlockConnect LLC is not responsible for independent third-party services, sermon platforms, payment processors, AI providers, browser extensions, email providers, or other systems you choose to use outside Ponder. Their own terms and privacy notices govern their services.

Where your data lives

FlockConnect LLC operates Ponder from the United States as a North Carolina company, and our production database is hosted in the United States. Some processors may process data in other regions under their own subprocessors and transfer mechanisms. If you’re outside the United States and use Ponder, your data may be transferred to and processed in the United States.

How long we keep things

Account, sermons, generations. As long as your account is active. If you delete your account, we remove these within 30 days.

Usage records. Retained for at least 24 months for billing-audit and dispute purposes, even after account deletion, in an anonymized form.

Webhook event log. Stripe-side billing events are stored as long as Stripe retains them (typically indefinitely for tax / invoice compliance).

Legal basis

We process your information to perform the contract you agreed to when you signed up (running the product for you), to comply with legal obligations (billing, tax), and based on our legitimate interests in keeping the product reliable and secure (error monitoring, abuse prevention). We configure product analytics to avoid persistent analytics cookies and session replay. Before actively marketing Ponder in a region that requires additional consent controls, we will add those controls.

Payments

Stripe processes all payments. Your card details never touch our servers. We receive only the events Stripe publishes (subscription status, plan, billing period) and a Stripe customer ID we use to look up your subscription. Stripe’s own privacy notice governs how Stripe handles your card data.

Cookies and tracking

We use first-party cookies for authentication (Supabase session). PostHog product analytics is configured to avoid persistent analytics cookies. We do not use third-party advertising cookies.

Children

Ponder is for adults discipling themselves and the children in their care. Ponder is not directed to children under 13, children are not direct users of Ponder, and we do not knowingly accept accounts from anyone under 13. Do not submit children’s full names, contact information, photos, health information, school information, or other sensitive details. If we learn that a child under 13 provided personal information directly to Ponder, we will delete it.

Changes

If we change this policy in a way that affects you, we’ll email everyone with an active subscription before the change takes effect.