Spitzer-Magis Center (Magis Center, Magis Institute, MagisAI App)
Last Updated: August 25, 2026

1. Introduction

Magis Center ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit www.magiscenter.com or the MagisAI App and all associated pages, subdomains, and content (the "Site"), and when you use any content, features, or services offered through the Site (collectively, the "Services"). By using the Services, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

This Policy applies to users in the United States and California and is intended to comply with applicable U.S. laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and the Children's Online Privacy Protection Act (COPPA).

Contact (for all privacy matters):

Email: support@magiscenter.com (preferred) or info@magiscenter.com
Mail: Magis Center, 12141 Lewis Street, Tower of Hope, 4th Floor, Garden Grove, CA 92840
Phone: (949) 271-2727 ext. 1

2. Information We Collect

We collect information in the following ways:

2.1 Information You Provide to Us

Account Information: When you create an account, register for digital newsletters, or participate in interactive features, we may collect your name, email address, other contact details, and a system-generated user ID, authentication credentials (passwords are hashed and never stored in plain text), and role and subscription status (e.g., free or paid tier).
Year of Birth (account creation only): When you create a MagisAI account we ask for your year of birth to determine how the Services may be offered to you. We do not store your year of birth; we retain only the outcome of that check.
User Content: If you submit comments, questions, or other content, we collect the information you provide.
Donations and Purchases: If you make a donation or purchase, our payment processors collect payment and billing information. In-app subscriptions are billed through the Apple App Store or Google Play and managed by our subscription processor; website donations and purchases are handled by our payment processor. We receive and store only customer identifiers and transaction references — we never store full card numbers on our servers.

2.2 Information Collected Automatically

Usage Data: We collect information about your interactions with the Site, such as IP address, browser or device type, login metrics (timestamps, session activity), pages visited, and referring URLs.
App Install Identifier: The MagisAI App generates a random identifier for your installation, used to operate usage quotas and keep the Services secure.
Cookies and Similar Technologies (websites): We use cookies and similar technologies to enable core functionality, remember your preferences, and analyze usage. You can manage cookies through your browser settings.

2.3 Information Stored Only on Your Device

Your MagisAI conversation history (your questions and the answers you receive) is stored on your own device, not on our servers. You control it: you can delete individual conversations, delete your account (which clears it), or remove the app. Questions sent to our answer service travel without your name, email, or account identity attached.

2.4 Information from Third Parties

We may receive information from third-party service providers, such as payment processors, in accordance with their privacy policies.

3. How We Use Your Information

We use your information to:

Provide, operate, and improve the Services
Authenticate users, maintain sessions, and secure accounts
Respond to your inquiries and requests
Send you updates, newsletters, and other communications (you may opt out at any time)
Process donations, purchases, and subscriptions
Develop features and enhance educational content
Protect the security and integrity of the Services
Comply with legal obligations, enforce terms, and protect rights, safety, and intellectual property

4. Anonymous Use and Internal Operations

You can use MagisAI's chat without creating an account. To make that possible, the app uses persistent identifiers — an anonymous authentication record and the app install identifier described above — solely to support the internal operations of the Services: authenticating your session, operating usage quotas, personalizing content you have asked for (such as your chosen reading level), protecting security and integrity, and complying with law. These identifiers are never used to contact you, to build a profile of you, or for advertising of any kind. The MagisAI App contains no advertising and no third-party advertising or analytics software.

5. Voice and AI Processing

If you use voice input or enable voice responses (e.g., Fr. Spitzer's synthesized voice), your audio and related text may be processed by trusted service providers to transcribe, generate, and deliver responses. Audio is processed only to deliver the feature and is not sold or used for marketing. Where a voice recording comes from a child under 13, it is used solely to respond to that request and deleted immediately afterward.

AI responses are generated using restricted and curated sources. We use reputable AI providers under agreements that limit use of data to service provision and safety (not for third-party advertising or model training on your content).

6. How We Share Your Information

We do not buy or sell your personal information. We share information only as follows:

Service Providers, by category. We use trusted vendors to operate the Services, subject to confidentiality and data-protection obligations. The categories, with the providers current as of the Last Updated date above:
- Cloud infrastructure and hosting: Google (Firebase authentication and content database), Vercel, and Render
- AI processing: AI model providers operating behind our own servers under service-only terms
- Payment and subscription processing: Apple App Store, Google Play, RevenueCat (app subscriptions); Stripe (website donations and purchases)
- Communications: email delivery providers for the messages described in Section 12
The specific providers may change as the Services evolve; this section governs by category, and we update the current list when providers change.
Legal Compliance: If required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Magis Center, our users, or others.
Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
With Your Consent: In any other circumstance, with your explicit consent.

We prohibit service providers from using personal information for their own marketing and require them to implement appropriate security safeguards.

7. Children's Privacy and COPPA

7.1 The Services may be used in educational or faith-formation contexts involving minors.

7.2 We do not knowingly collect personal information from children under 13 without verifiable parental consent. Account creation includes a neutral age screen; where it indicates a visitor is under 13, we do not create an account. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at support@magiscenter.com. We will take reasonable steps to delete such information promptly.

7.3 Certain features may be made available to children under 13 only with verifiable parental consent. Parents may review, delete, and refuse further collection or use of their child's information by contacting us.

For users under 13:

A parent/guardian (or an authorized school/teacher acting as the parent's agent under COPPA where applicable) must provide verifiable consent before an account is created or any personal information is collected.
Parents/guardians can review their child's personal information, request deletion, and refuse further collection or use at any time by contacting support@magiscenter.com. We will verify identity before fulfilling requests.
If we learn we collected personal information from a child under 13 without required consent, we will delete it promptly.

For teens 13–17: We encourage involvement of a parent/guardian. In some contexts, parental permission may be required by our terms or applicable law.

Schools and Educators: Where a school authorizes student use, the school may provide consent in place of a parent under COPPA for educational use only. Schools must obtain any necessary permissions and ensure student privacy is protected consistent with this Policy.

Student Privacy: When the Services are used for school purposes, we do not use student information for targeted advertising, do not build profiles of students for non-educational purposes, and do not sell student information. Schools may request deletion of student information collected in connection with school use, and any education records remain under the school's control.

8. Your Choices and Rights

8.1 Account Information: You may update or correct your account information at any time by contacting us. You may delete your MagisAI account directly in the app (Account → account deletion), which removes your account record and the conversation history on your device, or by contacting us.

8.2 Communications: You may opt out of receiving promotional emails by following the unsubscribe instructions in those emails.

8.3 California Residents: If you are a California resident, you have certain rights under the CCPA/CPRA, including the right to access, correct, or delete your personal information, and to opt out of certain data sharing. You will not be discriminated against for exercising these rights. To exercise these rights, contact us at info@magiscenter.com.

9. Data Security

We maintain a written information security program with administrative, technical, and physical safeguards appropriate to the data we handle, including:

HTTPS/TLS encryption in transit
Secure authentication with hashed passwords (never stored in plain text)
Deny-by-default database access rules; user data is never writable from the apps
Role-based, least-privilege access for administrators
Vendor due diligence and contractual data-protection terms
Regular review and testing of safeguards

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Data Retention

We retain personal information only as long as reasonably necessary for the purposes it was collected, and we do not retain children's personal information indefinitely. We maintain a written data retention policy; in summary:

Account data: retained while the account is active; deleted promptly upon in-app account deletion or a verified deletion request, unless retention is required by law.
Anonymous accounts: anonymous authentication records unused for 12 months are deleted.
Conversation history: stored only on your device and under your control; not retained on our servers.
Server logs (including question processing logs, which carry no account identity): retained for a limited period for security and reliability — generally no more than 90 days — then deleted or de-identified.
Payment records: transaction references retained as required by legal, tax, and accounting rules.
Children's personal information: retained only as long as necessary for the purpose it was collected, then deleted using reasonable protective measures.

11. Third-Party Links

The Services may contain links to third-party websites or resources. We are not responsible for the privacy practices or content of those sites. Please review their privacy policies before providing information.

12. Email and Notifications

We may send you transactional emails (e.g., account, security, subscription). You may manage marketing preferences or unsubscribe where applicable. We do not send SMS unless you opt in.

13. International Users

The Services are operated in the United States. If you are accessing the Services from outside the U.S., you consent to the transfer and processing of your information in the U.S. The Services do not respond to browser "Do Not Track" signals. If you use an accepted browser Global Privacy Control (GPC) indicating a preference to limit sale/sharing, we honor it to the extent applicable (we do not sell or share personal information as defined by CCPA/CPRA).

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top indicates when changes were made. Your continued use of the Services after changes are posted constitutes your acceptance of the revised Policy.

15. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact us at:

Magis Center, 12141 Lewis Street, Tower of Hope - 4th Floor, Garden Grove, CA 92840
Email: support@magiscenter.com
Phone: (949) 271-2727 ext. 1

By using the Services, you acknowledge that you have read and agree to this Privacy Policy.