CANONIZED
Privacy, in plain English
What the app keeps, where it lives, and how to delete it. Last updated 19 September 2026.
The short version. Signed out, nothing leaves your device. Signed in, we keep the email address the account was signed in with, the first names typed for the people playing, and their progress in the game. No passwords, no ads, no trackers, nothing sold or shared.
Playing without an account
The game keeps your progress in your browser's own storage on your device. Nothing is sent to us. Clearing your browser data clears it. The app also stores its own files on your device so it can open without a connection.
Playing with an account
An account is optional. It exists so progress can follow a player from a phone to a tablet to the classroom laptop. When someone signs in we keep:
- The email address on the account. Signing in works by a six-digit code sent to that address. There is no password.
- The names on the account. A first name, or a nickname, for each person who plays. A name is never an email address and never has its own sign-in.
- Progress. Which figures, prayers, lists, puzzles and story beats have been done, and how the Church Year questions went. That is all the record is.
Sign-in codes expire after ten minutes. A signed-in device stays signed in for up to 180 days, or until you sign out.
Children
CANONIZED is built for Sunday-school ages upward, and it is built so that the adult holds the account. We do not ask children for an email address, a password, a photo, a location, or anything else about them. The only thing about a child in our records is the first name the account holder typed. A parent or teacher can see and delete everything on the account at any time from Your account in the app.
Where it is kept
Account records are stored with Cloudflare in the United States. Sign-in emails are sent through Resend. Both act only on our instructions and do not use the data for anything else.
What we never do
- No advertising, no ad networks.
- No third-party analytics or tracking scripts.
- No selling, renting or sharing of anything to anyone.
- No contact from us except the code you asked for when signing in.
The Share my progress card is drawn on your device and shared by you, through your own phone's share sheet. We never see it.
Deleting everything
In the app, open Your account and tap Delete this account. That erases the email, every name and every record on our side immediately. Signing out on a device clears that device only; the account keeps its copy.
Questions
Write to hello@saintpathacademy.com.
CANONIZED · SaintPath Academy · app.saintpathacademy.com