Trust & Security

Avodah Dynamics runs on the Lovable Cloud platform. Lovable provides the underlying hosting, managed Postgres database, authentication system, file storage, and edge function runtime. Our team is responsible for the application code, the data model, access rules, the third-party services we choose to integrate, and how we respond to requests from members.

You are responsible for the security of your own account: choosing a strong password, keeping your email account secure, and signing out on shared devices.

• Members sign in with email and password or with Google sign-in.
• Passwords are hashed by the managed auth system; we never see them in plain text.
• Member roles (regular member vs. admin) are stored in a dedicated user_rolestable and checked server-side. Admin actions are gated by a security-definer role check — they cannot be granted from the client.
• Anonymous sign-ups are disabled.

• Connections to the site use HTTPS/TLS in transit, terminated by our hosting provider.
• Member-scoped data (your profile, preferences, saved pairings, challenge log, audit submissions) is protected by row-level rules so each member only reads or writes their own rows.
• Email addresses on member profiles are not readable by anonymous visitors. Only the signed-in owner can read their own profile.
• Personalized audit reports are returned only when the caller supplies the exact report id, through a single secured database function.
• Marketing and devotional content (blog posts, devotionals, scripture pairings, soundcloud tracks, events) is intentionally public.

• Account data: email, display name, and the auth method you signed in with.
• Member activity: daily challenge check-ins, streak counts, saved pairings, preferences.
• Optional submissions: answers and email if you take the Builder Audit or subscribe to the daily briefing.
• Operational logs: minimal request and email-delivery logs needed to run the service.

We do not sell personal data. We do not run third-party advertising trackers on authenticated pages.

• Transactional email (welcome, password reset, audit reports) is sent via our managed email infrastructure.
• The Daily Dispatch is opt-in. Every issue includes a one-click unsubscribe link.
• If you unsubscribe, your address is added to a suppression list and no further marketing is sent.

Manage your subscription at any time from /unsubscribe.

We rely on the following third parties to operate the service. Each handles only the data needed to provide its function.

• Lovable Cloud — hosting, database, authentication, edge functions, file storage.
• Shopify — apparel checkout and order fulfillment for the Levush shop.
• SoundCloud — hosting the public Avodah Sound preview catalog.
• Google — Google sign-in for members who choose it.
• Resend / managed email provider — delivery of transactional and digest email.

You can request a copy of your account data, ask us to correct it, or ask us to delete your account. To do any of these, email the address below from the account you want to act on so we can verify it's you.

If you believe you've found a vulnerability or a privacy issue, please email security@avodahdynamics.com with a description of the issue and steps to reproduce. We'll respond as quickly as we can and will not pursue good-faith security research.

General questions about this page or our practices: avodahdynamics.com/contact · hello@avodahdynamics.com.

Last updated June 18, 2026. This page is editable project content maintained by the Avodah Dynamics team. It is not certified or independently verified.