Kingdom Perspective, LLC, operating My Purpose Plan
Effective date: 19 August 2026
1. Introduction
This Privacy Policy describes how Kingdom Perspective, LLC ("the Company," "we," "us") collects, uses, discloses, retains, and deletes personal information in connection with the My Purpose Plan application and related services (the "Services").
The Services are directed to users in the United States.
Where this Policy states a specific commitment concerning the Company's own systems — a retention period, a deletion timeline, an access restriction — that commitment is enforced by automated systems and verified by automated tests. The Company maintains this Policy as the authoritative specification of its data-handling conduct.
2. Personal Information We Collect
Information you provide:
- Account information: name and email address.
- User content: your purpose statement and the inputs used to create it; purpose tiles, tasks, and plans; daily check-in and check-out entries, including written reflections; messages; feedback; and recognition ("shout-outs") sent to colleagues.
- Uploaded images, such as a profile photograph.
- Where the Services are provided through your employer: your job role and work area, as provided by you or your employer.
- Precise location, only where you use the volunteer search feature ("Connect") and only at your request. Location is used to find nearby volunteer opportunities and is not stored beyond the request.
- Volunteer applications you submit through Connect: your name, email address, and any file you attach. See Section 7.
- Where your organization has connected a workspace to the Services, task information from that workspace, including the email address identifying the assignee. See Section 7.
- Where you create a calendar subscription link, the times the link was first and most recently fetched.
Information collected automatically:
- Device and usage information, including device type, application version, and feature usage, collected through the Company's analytics provider. This information is not used to identify you across third-party applications or websites.
- Crash diagnostics, where the application stops unexpectedly: the device model, operating system version, and an installation identifier. No content you author is included in a crash report.
The application contains no advertising software and no cross-application tracking software.
Information we do not collect: contacts, biometric information, voice audio — dictation is performed by your device's own speech recognition, and audio does not reach Company systems — and payment card numbers. Payment processing is performed by Stripe (web) and by the Apple App Store or Google Play for mobile in-app purchases; card details are not transmitted to or stored on Company systems.
3. Purposes of Processing
The Company processes personal information for the following purposes:
- Providing the Services, including creation of your purpose statement, plans, and daily check-ins.
- Generating content by means of artificial intelligence, as described in Section 5.
- Providing employers with aggregated, de-identified workforce insights, subject to the restrictions in Section 6.
- Delivering service communications, reminders, and support.
- Operating, securing, and improving the Services.
The Company does not sell personal information and does not share personal information for cross-context behavioral advertising.
4. Sensitive Personal Information and Consent
Content authored within the Services — a purpose statement or a written reflection — may reveal information that applicable state law classifies as sensitive personal information, including information concerning religious beliefs or mental or physical health. Precise geolocation, which applicable state law also classifies as sensitive personal information, is collected only where you request a volunteer search, is used solely to perform that search, and is not stored.
Accordingly, before your purpose statement is created, the Services present a consent request describing, in plain language, the storage and artificial-intelligence processing of the content you author. Creation of a purpose statement requires this consent, because the processing described is necessary to provide that feature. Consent may be declined, and the request may be revisited at any time.
Withdrawal of consent. Consent may be withdrawn at any time in Settings. Upon withdrawal, artificial-intelligence processing of content you author stops in full, including translation; stored selections concerning beliefs are removed; and the written portions of daily check-ins are no longer collected, while check-ins themselves remain available. You elect either (a) retention of your purpose statement, visible only to you, or (b) deletion of your statement. Neither election affects account standing or benefits already accrued; where deleting the statement would end eligibility for a feature that requires one, the Services state this before the deletion is confirmed.
California residents. You may direct the Company to limit its use of sensitive personal information through the Limit the Use of My Sensitive Personal Information control in Settings or the corresponding link in the application. The Company uses sensitive personal information solely to provide the Services requested and does not use it to infer characteristics or for advertising purposes, with one disclosed exception: where the Services are provided through your employer, an AI-generated insight summarizing themes across employees' daily reflections may be included in the aggregated, role-attributed employer report described in Section 6, subject to the anonymization threshold stated there. Exercising the limit control excludes your content from that insight.
5. Artificial Intelligence Processing
- Content you author is transmitted to the Company's artificial-intelligence providers (OpenAI and Google's Gemini API) to generate your purpose statement, translate content between English and Spanish, generate daily check-in content, and — where the Services are provided through your employer — produce the aggregated, role-level employer insight described in Section 6.
- Generated output is produced for your account only. Your content is not used to generate output for other users, with one disclosed exception: where the Services are provided through your employer, a short AI-generated insight summarizing themes across employees' daily reflections may be included in the aggregated, role-attributed employer report described in Section 6, subject to the same anonymization threshold stated there. This is an AI-written message about a group, never your own words shown to anyone else.
- Your content is not used to train artificial-intelligence models, whether the Company's or either provider's. This is a contractual commitment of both providers under their paid-API terms.
- A provider may retain submitted content for up to thirty (30) days solely for the purpose of monitoring misuse of its service, after which it is deleted, except where the provider is required by law to retain it longer. It is not used for any other purpose during that period.
6. Access to User Content
Employer access. Where the Services are provided through your employer, your employer cannot read the personal content you author, except where you author it in a space shared with your team (item 4). This restriction is enforced at the database layer:
- Reflections, check-in entries, and purpose statements are readable only by their author.
- Employer-facing reporting is aggregated, and attributes reflections to job role only. It contains no names and no direct identifiers, and a role's data is included only where at least three distinct employees contributed in the reporting period. The report's AI-generated summary (Section 5) is produced from de-identified, role-level content under the same threshold.
- Employers cannot view whether an individual has participated in check-ins or reflections, or with what frequency. This restriction does not extend to features that identify participants to their team by design: team recognition ("shout-outs"), which an Employee User enters by choosing to send one, and the task-completion leaderboard, which ranks completion of assigned team tasks and is visible to the employer.
- Tasks on a collaborative tile — a tile shared between you and colleagues — are visible to that tile's team by design, and where your employer has connected a workspace integration (Section 7) those tasks, including their notes, are copied into that workspace. Tasks on your own private tiles are not shared and are not copied.
Internal access. Within the Company, access to user content is restricted to a limited number of engineering personnel for support and fault diagnosis, under a dedicated access grant separate from general administrative access.
7. Disclosure of Personal Information
The Company discloses personal information to service providers processing it on the Company's instructions under contract:
| Category of recipient | Information received |
|---|---|
| Cloud hosting and infrastructure providers | Application data, as the platform on which the Services run |
| Artificial-intelligence providers — OpenAI and Google (Gemini API) | Content you author, as described in Section 5 |
| Payment processors — Stripe, and the Apple App Store or Google Play for mobile purchases | Billing information for paid accounts. Card details are collected by the processor and never reach Company systems |
| Mobile subscription management providers | Your account identifier and email address for every signed-in mobile user, whether or not a purchase is made, and purchase and subscription history |
| Email delivery providers | Email address and name |
| Mapping and location providers | Coordinates you supply at the moment of a volunteer search, which the Company does not store. In the browser version the mapping library loads on each page, which discloses your network address, browser type, and the page address to the provider whether or not you use that feature |
The specific providers within each category are identified in the Company's subprocessor register, published on the Company's website and available on request. Providers are named individually above only where the identity of the provider is itself material to you.
Customer-directed integrations
Where your organization connects a Notion workspace to the Services, the Company sends selected information to that workspace at your organization's direction. This is not a service provider relationship: the receiving workspace is your organization's own, governed by your organization's own agreement with Notion, and the Company acts on a credential your organization's administrator supplies.
| Destination | What the Company sends |
|---|---|
| Notion | Tasks on collaborative tiles (title, notes, schedule, completion status, points) authored by the administrator or by employees of that organization, the tiles those tasks belong to, and each such person's name, email address, role and organization identifier. Tasks on a user's own private tiles are not sent |
The Company is not a party to that agreement, does not determine the workspace's retention, and cannot revoke the credential on your organization's behalf. Disconnecting the workspace stops any further transfer. That provider offers no permanent-delete capability; where a person leaves your organization, the Company archives their page and assigned task pages, and permanent removal is your organization's own action as controller of that workspace.
Disclosures you direct
Where you apply to a volunteer opportunity through Connect, the Company transmits your application at your request. This is likewise not a service provider relationship: you choose the recipient, and transmitting the application to that recipient is the purpose of the feature.
| Recipient | What the Company sends | When |
|---|---|---|
| Idealist, and through it the organization that posted the opportunity | Your first name, last name, email address, and any file you attach | Only at the moment you submit an application |
The recipient is responsible for your application once it is received, and its handling is governed by that organization's and that platform's own privacy practices rather than by this Policy. The Company does not retain a copy of your attachments. The Company retains only a record that you applied, and to which opportunity, for the period stated in Section 9.
The Company may also disclose personal information where required by law, and in connection with a merger, acquisition, or sale of assets, in which case this Policy's protections continue to apply to the transferred information.
8. Data Location
Personal information is stored on Google Cloud Platform in the United States (region us-central1),
encrypted in transit and at rest. Every service provider that receives personal information is a
United States company, and the Company transmits personal information to no recipient outside the
United States.
9. Retention of Personal Information
The Company retains each category of personal information only for the period stated below. These periods are enforced by automated deletion processes.
| Category | Retention period |
|---|---|
| Account information (name, email address) | Duration of the account |
| Content you create — your purpose statement, plans, tiles, tasks (including tasks synchronized from a connected workspace), and uploaded images | Duration of the account |
| Daily check-in and check-out entries, including reflections and the daily content generated from them | 24 months |
| Messages, and recognition sent to colleagues | 24 months. Where your account is deleted sooner, your identifying details are removed so that the other person keeps their copy |
| Feedback you submit, and workplace survey responses | 24 months. Where your account is deleted sooner, your identifying details are removed and the de-identified text and ratings are kept for the remainder of the period |
| Volunteer application records (that you applied, and to which opportunity — never the application or its attachments) | 24 months |
| Precise location (volunteer search) | Not stored; used only for the moment of the search |
| Job role, work area, and posts to your organization's feed | Life of your employment |
| Connections you or your organization set up — a connected workspace, a calendar subscription link | Until disconnected or removed |
| Aggregated employer reports, which contain no direct identifiers | 36 months |
| Employment records | Duration of employment, then 7 years, as employment law requires |
| Billing records | 7 years, as tax law requires |
| Consent records (date, version, and scope of consent; never content) | Duration of the account, then 7 years |
| Records of requests you make (access, deletion, export) | Purged 14 days after the request is fulfilled |
| Records evidencing that the Company completed a deletion, and logs of internal access to user content | 3 years |
| Records of security incidents, and of legal holds | 7 years; a legal hold, for its duration plus 7 years |
| Device and usage information | Notification tokens until you sign out; analytics 14 months; crash diagnostics 90 days; service logs 30 days |
| Technical records of payment and integration processing | Up to 180 days |
| Backups | Up to 30 days |
Where you delete your account, or your employer removes you from its team, the periods above are superseded by Section 10: remaining information is deleted or de-identified within fourteen (14) days, except where a longer period is stated above because the law requires it or because the record evidences the Company's own compliance, and except that crash diagnostics, service logs, and technical records of payment and integration processing are not individually deleted and instead expire on the shorter periods stated for them. Analytics records linked to your identity are deleted; aggregated measurements, which identify no one, are retained.
10. Account Deletion
You may delete your account at any time in Settings. Deletion proceeds as follows:
- Immediately: the account is closed and can no longer be used for anything except cancelling the deletion; uploaded images, notification tokens, and reminders are deleted; and, for a subscription billed directly by the Company, future billing is stopped without ending the current billing period, so it can be reinstated at no cost if you cancel the deletion. Subscriptions billed through the Apple App Store or Google Play must be cancelled separately, in your app store account settings. A calendar subscription link, if you have one, stops publishing immediately and is deleted at fourteen days; cancelling the deletion within that period restores it.
- For fourteen (14) days: remaining personal information is held to permit reversal. Signing in and cancelling within this period restores the account and its content, excepting the items deleted immediately under paragraph 1.
- At fourteen (14) days: all remaining personal information is permanently deleted or de-identified in accordance with Section 9, and deletion instructions are issued to the Company's service providers.
- Backups: deleted information expires from backups no later than forty-four (44) days after the deletion request. Backups are not selectively modified; a restoration performed for disaster-recovery purposes re-applies outstanding deletions before the Services return to operation.
Where an employer removes an individual from its team, that individual's team-related content — check-in and check-out entries, recognition sent to colleagues, posts to the organization feed, monthly workplace survey responses, daily AI-generated check-in content, reminders, and job role and work area — is deleted or de-identified within fourteen (14) days, following the same schedule as account deletion for those categories. The individual's account, purpose statement, purpose tiles, messages, images, and consent records are not affected and remain governed by that individual's own account, which continues to operate, including under a personal subscription, unless the individual separately deletes it. Employment and billing records are retained solely for the periods stated in Section 9.
11. Your Privacy Rights
Applicable state law may provide the rights to access, correct, and delete personal information, to receive a portable copy, and to limit the use of sensitive personal information. The Company honors these rights for all users, irrespective of state of residence.
- Submission: through the application (Settings) or by email to privacy@mypurposeplan.com.
- Response time: within forty-five (45) days of receipt, extendable once by forty-five (45) days where reasonably necessary; you will be informed of any extension.
- Verification: requests are verified against the authenticated account or the account email address. Authorized agents may submit requests where state law provides; the Company verifies both the agent's authority and the consumer's identity.
- Non-discrimination: exercising any right does not affect the price, quality, or availability of the Services.
- Appeals: if the Company declines a request, it will state the reasons. You may appeal by responding to the decision; appeals are answered within forty-five (45) days. If the appeal is denied, you may contact the Attorney General of your state.
12. Children's Privacy
The Services are not directed to children under thirteen (13) years of age, and the Company does not knowingly collect personal information from them. If you believe a child has provided personal information to the Company, contact privacy@mypurposeplan.com and the information will be deleted.
13. Cookies and Website Technologies
The application does not use advertising cookies or cross-site trackers.
The Company's marketing website (mypurposeplan.com) is operated on the Squarespace platform, which sets cookies necessary for the site to function and to record visitor statistics for the Company. The site carries no advertising cookies and no cross-site tracking pixels.
14. Security
Personal information is encrypted in transit and at rest. Internal access is restricted by role as described in Section 6. The Company designs its systems so that the most personal content receives the narrowest access, and applies administrative, technical, and physical safeguards appropriate to the sensitivity of the information processed.
15. Changes to This Policy
Material changes to this Policy will be announced in the application and by email before taking effect, and the effective date above will be revised. Prior versions are available upon request.
16. Contact
Kingdom Perspective, LLC, doing business as My Purpose Plan privacy@mypurposeplan.com