Legal
Privacy Policy
Last modified: September 7, 2026
Directee is operated by Digital Lighthouse Designs, LLC, a Michigan limited liability company (“Directee”, “we”, “us”). This policy explains what information we collect through the Directee marketing site (directee.app) and the Directee application (my.directee.app), how we use it, and the choices you have. Please read it carefully. If you do not agree with it, please do not use Directee.
Two kinds of people in Directee
Directee is a practice-management application for spiritual directors. That means two different sets of people appear in it, and this policy treats them differently.
- Users are the spiritual directors who create an account. If you have an account, you are a user, and “you” in this policy means you.
- Directees are the people a director accompanies. Directees do not have accounts and do not use Directee. Their information is in the app only because their director entered it.
We have no direct relationship with directees. The director decides what to record about them, and the director is responsible for that information — including having whatever consent or permission their professional standards and local law require before entering it. We process directee information only to provide the service to the director, and on the director’s instructions. We do not sell it, and we do not use it to market to anyone.
Information we collect about users
- Account information — your name, email address, and password. Passwords are stored only as a cryptographic hash; we never see or store the password itself.
- Contact details — a phone number, if you provide one.
- Billing information — your plan, billing period, and payment status. Payments are handled by Stripe. We do not receive or store card numbers.
- Connection credentials — if you connect Cal.com for scheduling, we store the credentials needed to keep your calendar in sync.
- Usage data and logs — ordinary web server and application records such as IP address, browser type, pages requested, and error information, which we use to operate, secure, and troubleshoot the service.
Information you enter about directees
The records you keep in Directee are yours to shape. Depending on how you use the app, they may include a directee’s name and contact details, notes from your sessions, appointment history, invoices and payments, uploaded documents, tasks, and communications.
Session notes in spiritual direction can be deeply personal. They may hold spiritual, emotional, or health-related content about someone who is not our user. We hold that material as the director’s confidential record: it is visible in the application only to the account it belongs to, and our staff access it only when it is necessary to operate the service, resolve a support request you raise, or comply with the law.
How we use information
- To provide, maintain, and improve the Directee application.
- To create and manage your account, and to send account notices such as trial reminders, renewal notices, and receipts.
- To bill you and collect payment for a paid plan.
- To answer your questions and provide support when you contact us.
- To keep the service secure, detect abuse, and diagnose technical problems.
- To comply with our legal obligations.
We do not sell personal information, and we do not use the content of your notes, documents, or directee records for advertising.
AI processing of notes and uploads
Some Directee features use third-party AI services. When you use them, the content involved leaves our servers and is sent to the provider so it can return a result:
- Note summaries and sentiment indicators — the text of the note is sent to OpenAI, which returns the summary or indicator.
- Expense import — a bank statement or spreadsheet you upload for expense tracking is sent to Anthropic, which returns the parsed transactions.
- Support voicemail transcripts — a voicemail left on our support line is sent to Deepgram, which returns a transcript so our support team can read it.
These providers process the content in order to return the result. Under the API terms we use with them, they do not use content submitted through the API to train their models. We rely on those terms; we do not control the providers themselves, and their own practices are described in their policies.
If you would rather no note or file of yours be sent to an AI provider, do not use these features. Notes you write and keep without requesting a summary or sentiment indicator are not sent for AI processing. Given how sensitive direction notes are, we encourage you to consider what your directees would expect before turning these features on their records.
Service providers we rely on
We use a small number of established providers to run Directee. Each receives only what it needs to do its job.
- Stripe — subscription payments and invoicing. If you connect your own Stripe account to invoice your directees, that relationship is between you and Stripe, and Stripe’s terms and privacy policy apply to you directly.
- Cal.com — scheduling and appointment sync, if you connect it.
- OpenAI — note summaries and sentiment indicators.
- Anthropic — parsing uploaded bank statements and spreadsheets for expense import.
- Deepgram — speech-to-text for voicemails left on the support line.
- Twilio — SMS messaging and the support phone line.
- Postmark — transactional email such as password resets and account notices.
- Microsoft Azure — the infrastructure the application and its database run on.
- Cloudflare — DNS and network security.
Text messaging to and from the Directee support line is covered in more detail by our SMS Privacy Policy.
When we disclose information
Beyond the providers listed above, we disclose personal information only:
- with your consent, or at your direction;
- to comply with a court order, law, or legal process, or to respond to a lawful government request;
- to enforce our Terms of Service or to protect the rights, property, or safety of our users or others;
- to a successor in the event of a merger, acquisition, or sale of assets — in which case we will give notice before your information becomes subject to a different privacy policy.
Security
We take reasonable measures to protect your information: traffic is encrypted in transit, passwords are hashed, and each account’s records are scoped so that one director cannot see another’s. Your part matters too — keep your password confidential and do not share your account. No system is perfectly secure, and we cannot guarantee that information transmitted over the internet is immune from interception.
Retention, export, and deletion
We keep your account data for as long as your account is active. You can edit or delete records inside the application at any time; some record types are soft-deleted first, meaning they leave your view but remain recoverable for a period before being removed. You can ask us to export a copy of your account data, or to delete your account and its data, by contacting support. After deletion, copies may persist in encrypted backups for a limited period before those backups expire, and we may retain records we are required to keep for tax or legal purposes.
If you are a directee and want to know what a director has recorded about you, or want it corrected or removed, please contact your director. They control that record; we act on their instructions.
Cookies
Directee uses cookies that are necessary to run the service — chiefly to keep you signed in and to protect forms against cross-site request forgery. Blocking them will prevent you from signing in. We do not use cookies for advertising or cross-site behavioral tracking.
Children
Directee is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us information directly, please contact us and we will delete it.
Users outside the United States
Directee is offered from the United States and operated there. If you use Directee from Canada or anywhere else outside the United States, your information — including directee records you enter — will be transferred to and processed in the United States, where privacy laws may differ from those where you live. By using Directee, you consent to that transfer and processing. If you have rights over your personal information under the law that applies to you, contact us and we will honor them as that law requires.
Changes to this policy
We may update this policy from time to time. When we make a material change to how we treat personal information, we will post the revised policy here and update the date at the top of the page. Your continued use of Directee after a change takes effect means you accept the revised policy.
Contact
Questions about this policy or our privacy practices: email support@directee.app, call or text (888) 423-4311, or reach us through the contact page. Written requests can be sent to Digital Lighthouse Designs, LLC, 557 Scio Church Road, Ann Arbor, MI 48103, United States.