Five Loaves
Privacy Policy
Effective May 29, 2026
Five Loaves is a small tool for the people who lead small groups. We want it to be useful, honest, and safe to trust. This Privacy Policy explains what we collect when you use the service, why we collect it, who we share it with, and what choices you have.
Plain-language summary: we collect what we need to make the service work for you, we do not sell your personal information, and we only share it with the service providers we genuinely need to operate (listed below) or when the law requires it. Sensitive content like the conversations you have with FiLo is sent to the AI provider that generates the response. If anything here is unclear, write to us at hello@fiveloaves.ai.
Who we are
Five Loaves is operated by 5L Labs LLC ("Five Loaves", "we", "us"), a limited liability company organized in the State of South Carolina, United States. When this policy talks about "the service" we mean the Five Loaves website, the FiLo chat experience, the small-group leader workspace, the member surfaces, and the related mobile apps.
What we collect
Information you give us
Account information. When you create an account, our authentication partner (Clerk) collects and stores your email address, name, optional profile picture, and the password or single sign-on identity you use to sign in. We see this same information so we can identify you within the service.
Group and membership information. When you create a group, join one, or are invited to one, we store the group's name, your role (leader or member), and (when relevant) the invitation token used to join.
Content you create. The service is built around the content you write inside it: study guides, manuscripts, session notes, research cards, prayer requests, and the messages you exchange with FiLo. We store this so you can come back to it, share it within your group as you choose, and let FiLo work with it.
Billing information. If you subscribe to a paid tier, our payment processor (Stripe) collects and stores your payment method. We do not see or store full card numbers. We do store a record of your subscription status, plan, and invoice history so we can give you the right access and respond to billing questions.
Things you send us. If you contact us by email, reply to a survey, or send feedback through the app, we keep what you wrote and our reply.
Information collected automatically
Usage and device data. We use PostHog to capture product analytics tied to a pseudonymous device identifier: which pages you visit, which features you use, how long things take to load, and the rough shape of your device and browser. This helps us understand which parts of the service work and which don't.
Technical data. Our servers receive your IP address, the time of each request, the user agent your browser sends, and basic error diagnostics. We retain these for a short window to keep the service running and to investigate abuse.
Cookies and local storage. We use cookies and similar browser storage to keep you signed in, remember small preferences (the active study tab, the open / closed state of the Reference Shelf), and run the analytics described above. You can disable cookies in your browser, but parts of the service (signing in, in particular) will stop working.
How we use your information
We use what we collect to:
- Operate and improve the service.
- Generate FiLo's responses, look up scripture, and surface research cards in response to what you ask.
- Sync your study content and notifications between your devices and your group.
- Send service-related email (sign-in confirmations, group invites, billing receipts, security notices).
- Send optional product updates if you have opted in. You can opt out at any time from the link in the email.
- Detect and prevent abuse (spam, attacks, attempts to scrape content, fraudulent payments).
- Comply with our legal obligations and protect our rights and the rights of others.
FiLo and AI
FiLo is the AI assistant built into Five Loaves. When you ask FiLo a question or send it a message, your message, the relevant prior messages in that conversation, and (when applicable) the study or meeting context are sent to our AI provider, Anthropic PBC, to generate the response. FiLo's reply is then sent back to you and stored in your account so you can come back to it.
Anthropic processes that content under its own terms and privacy practices. As of the effective date above, Anthropic retains API inputs and outputs for a limited period for the purposes of safety review and abuse prevention, and does not train its general models on it. If those terms change in a way we think matters, we will update this policy.
FiLo also looks up structured theological data (lemmas, passages, cross-references, scholar profiles) from OwlGraph, a graph database operated by 5L Labs as a separate service, and from open-licensed scripture and lexicon sources. Lookups carry only the entity being looked up (a lemma, a verse reference, a scholar slug); they do not include the rest of your conversation.
FiLo is a research and study assistant. It is not a substitute for pastoral care, professional counseling, mental-health support, or legal advice, and its answers can be wrong. Please read its replies as input to your own discernment, not as authority.
Who we share your information with
We share personal information only with the parties below, and only to the extent each one needs to do its job for the service.
People in your groups
When you create study content as a group leader, you choose which sections are visible to your group members. Member-visible content is shared with the members of that group on the member-facing surfaces. Private content stays private to you. Prayer requests and similar items are shared according to the sharing setting on each item.
Service providers (subprocessors)
We rely on a small set of vendors to operate the service. Each one processes data only for us, under contractual confidentiality and security commitments:
- Anthropic PBC - AI provider that powers FiLo.
- Clerk Inc. - authentication and account management.
- Stripe Inc. - subscription billing and payments.
- PostHog Inc. - product analytics.
- Resend Inc. - transactional email (sign-in confirmations, group invites, billing receipts, member notifications).
- Amazon Web Services, Inc. - cloud hosting (Kubernetes, databases, object and file storage) in the United States (us-east-1 region).
Legal and safety
We will disclose information if we are required to by law (for example, in response to a valid subpoena or court order), or if we reasonably believe it is necessary to prevent harm, protect our rights, or investigate fraud or abuse of the service.
Business transfers
If Five Loaves is acquired, merged, or restructured, your information may be transferred as part of that transaction. We will give you notice before any such transfer changes how your information is handled.
What we will not do
We do not sell your personal information. We do not rent it. We do not share it with advertisers. We do not use the content of your study notes, manuscripts, or FiLo conversations to train general AI models.
Your choices and rights
You can update or correct your account information at any time from your account settings. To delete your account along with the studies, notes, and conversations attached to your user, email us at hello@fiveloaves.ai from the address on your account. We will confirm receipt and remove the data within thirty (30) days. Group content you authored as a leader may persist within the group if other leaders remain; we will anonymize your authorship in that case.
Depending on where you live, you may have additional rights under local privacy law (for example, the GDPR in the EU/UK or the CCPA in California): the right to access the personal information we hold about you, the right to ask us to correct or delete it, the right to object to certain processing, and the right to data portability. To exercise any of these rights, write to us at hello@fiveloaves.ai. We will respond within the timelines applicable law requires of us.
Note that some content - religious belief and the contents of prayer requests in particular - may be a "special category" of personal data under European law. When you provide that content to the service, you are giving us your consent to process it for the purposes of running the service for you and your group.
How long we keep your information
We keep your account, group memberships, and content for as long as your account is active so you can come back to it. When you ask us to delete your account (see "Your choices and rights"), we remove your personal information and attached content from our production systems within thirty (30) days. Database backups roll off on their own retention schedule (no longer than ninety (90) days after deletion). We may keep a minimal record of the deletion (the fact that you asked, when, and the account identifier) so we can answer any later question about it.
We keep billing records for as long as our tax and accounting obligations require, which is typically seven (7) years.
Security
We use industry-standard practices to protect your information: encrypted transport (HTTPS), encrypted storage at rest, scoped access for our team, and regular review of who and what can reach which data. No system is perfectly secure, but we work to keep this one trustworthy and to fix things quickly when something is off. If you believe you have found a security issue, please email hello@fiveloaves.ai and we will respond promptly.
International users
Five Loaves is operated from the United States. If you use the service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your country. By using the service you consent to this transfer.
Children
The service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, write to us at hello@fiveloaves.ai and we will delete it. If you are between 13 and the age of majority in your jurisdiction, please use the service only with the involvement of a parent or legal guardian.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Effective" date at the top and, if the change is material, give you at least fourteen (14) days' notice in the service or by email before it takes effect (except where applicable law or a security issue requires us to act faster). Continuing to use the service after the new policy takes effect means you accept the change.
Contact
The fastest way to reach us is hello@fiveloaves.ai. We aim to respond within a few business days.
See also our Terms of Service.