Security Policy

This Security Policy applies to Beyond Excellent Consulting LLC's website, digital products, mobile applications, internal systems, third-party service providers, and app-related services, including Kourted and CAPTURE.

Beyond Excellent Consulting LLC is committed to protecting user information through reasonable administrative, technical, and organizational safeguards.

Security measures may include:

• Secure authentication practices
• Encrypted communications where applicable
• Access controls
• Limited data access
• Security monitoring
• Vendor security reviews

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, account information, saved content, membership information, purchase entitlement status, and app activity data from unauthorized access, disclosure, alteration, or misuse.

For CAPTURE, protected information may include user-submitted thoughts, saved reflections, generated prayers, Scripture suggestions, account information, app activity, and support communications.

Users are responsible for maintaining the confidentiality of their login credentials and for using strong, unique passwords. Users should notify us promptly if they believe their account has been accessed without authorization.

We may rely on trusted third-party service providers for hosting, authentication, analytics, payment processing, subscription management, email communications, video delivery, and app infrastructure. We review vendors based on the nature of the services provided and the data they may process. Third-party providers are responsible for maintaining their own security practices, systems, and policies.

Access to Apple Developer Program credentials, certificates, provisioning profiles, App Store Connect, TestFlight, and related build tools is limited to authorized personnel or contractors with a legitimate business need. Team members must use their own authorized accounts where available and may not share credentials. Contractors must be bound by written confidentiality and security obligations. Access will be removed when no longer needed.

If we become aware of a security incident involving personal information, we will take reasonable steps to investigate, contain, mitigate, and remediate the issue. Where required by applicable law, we will notify affected users, regulators, platforms, or other appropriate parties.

While we use reasonable safeguards, no website, mobile application, internet transmission, or electronic storage system can be guaranteed to be completely secure. Users use our services with this understanding.