Privacy policy

effective 2026-07-21 · covers this website and the Koinonia: Parish Life app

Kratos Applications is a two-person software studio. This policy covers two surfaces: this website, and the Koinonia: Parish Life application. It says what data exists, where it lives, and who can see it. On both surfaces the same rule holds: we do not sell personal data, we do not run ads, and we do not share data with brokers.

This website

The site is a set of static pages hosted on Vercel. It sets no cookies and has no accounts. Three things happen when you visit:

• Hosting logs. Vercel, our hosting provider, keeps standard server logs (IP address, browser type, pages requested) for security and operations.
• Analytics. We use Vercel Web Analytics and Speed Insights to count page views and measure performance. Both are cookie-free and anonymized; nothing is tied to you as a person and nothing follows you to other sites.
• Fonts. Type is served from Google Fonts, so your browser requests font files from Google's servers. Like any web request, that includes your IP address.

The site has no forms. The contact links on it open your own email app; writing to us is an ordinary email exchange, and we use your address only to reply. If we ever add a newsletter or any other email capture, this policy will be updated first to say exactly what happens to the address.

Koinonia: Parish Life

Koinonia is a mobile application for Orthodox Christian parish communities, currently in active build with a single pilot parish. It has two tiers: anyone can use the liturgical features (daily readings, saints, fasting, calendar) without joining anything, and the community features open up only after your parish's administrators approve your membership. Kratos runs the infrastructure; your parish's clergy and administrators govern the community's records.

What the app stores

• Account. Your email address, name, phone number, and a password managed by Supabase Auth (we never see the password itself), plus short-lived email verification codes.
• Profile and directory. An optional photo, home address, patron saint, name day, ministry title, and membership type. The parish directory shows your name, email, photo, role, and ministry title to approved members of your own parish. Your phone number appears only if you switch that on. Your home address is never shown in the directory.
• Messages. One-to-one direct messages, readable in the app only by the people in the conversation. They are stored on our infrastructure and are not end-to-end encrypted.
• Parish life. Announcements, service schedules, events, and ministry membership.
• Pastoral care. Appointment requests (confession, counseling, blessing) with their time and status; confession requests deliberately carry no written detail. Clergy keep visit notes and care flags (for example: sick, homebound, bereaved) for members in their care. An appointment request is visible only to you and the assigned priest; pastoral notes and care flags are visible only to clergy and parish administrators.
• Sacramental records and attendance. Clergy and administrators record baptisms, chrismations, marriages, funerals, and ordinations, and keep service attendance, including communion participation. Members see only their own participation.

This is religious data by nature, and some of it touches on health. It is the most protected data in the system: every table is guarded by database row-level security, so each person sees only what their role allows.

Device permissions

All optional, each requested in context, and the app works without them:

• Location is used to find nearby parishes and to place your home address on a map. It is never read in the background.
• Calendar access only writes the services and events you choose to your device calendar.
• Photos access only reads the images you pick for your profile or a parish event.

Where data lives

• Supabase hosts the database, authentication, and file storage on US-based infrastructure, and sends the account verification emails.
• Orthocal.info supplies the liturgical calendar and daily readings. Your device requests that data directly; no account information is sent with the request.
• The app contains no analytics, no crash trackers, and no advertising SDKs.

One caveat worth knowing: profile photos and event images are stored at unlisted public URLs. They are not searchable or listed anywhere, but anyone holding the exact link can view the image, so upload accordingly.

Retention and deletion

Data is kept while your account and your parish's community are active. In-app account deletion is planned but not built yet; until it ships, email us or ask your parish administrator and we will delete your account, profile, and messages. Sacramental records are different: a baptism or marriage entry is part of the parish's own canonical record, maintained under the direction of the parish, and its retention follows the parish's practice rather than this policy.

Children

Koinonia accounts are for people 13 and older. Records that concern minors, such as a baptism, are entered by clergy as part of the parish's records, under the parish's direction.

Changes and contact

Koinonia is under active development, and this policy will be updated as features ship. Material changes will be announced on this site and in the app. Questions and deletion requests: alex@kratosapplications.com orjohnny@kratosapplications.com.