FW Planner
Privacy Policy

Last updated: October 12, 2026

FW Planner (Family Worship Planner), published by NSF Labs, helps families prepare worship agendas, read and summarize documents, and record and summarize talks. This policy covers the Android app (org.nsflabs.fwplanner), the iPhone and iPad app (org.nsflabs.fwPlanner), and the FW Planner documentation on nsflabs.org. The app is under review before public release; this policy also applies to private testing builds.

The app stores and uses information you choose to enter or import: household and family member names, ages, reading levels, interests, preferences, spiritual goals, baptism status, personal considerations, worship schedules, notes, conversations, documents, recordings, transcripts, summaries, and agendas. Family profiles and worship materials may reveal religious beliefs or other sensitive personal information.

This information supports personalization, reading, transcription, summarization, planning, and your saved history. Catalog usage history helps avoid repeating material within 90 days. That interval is a selection rule, not an automatic deletion schedule.

The app checks device capabilities locally to determine compatibility and select an AI model. On Android these checks include model, manufacturer, chipset, operating-system version, ARM64 support, and physical memory. Supported AI features differ by platform and hardware.

Gemma agenda generation and summarization run on your phone. Android audio transcription uses an on-device Whisper model. On supported iPhones and iPads, transcription uses Apple’s on-device SpeechAnalyzer service and requires iOS or iPadOS 26 or later; speech assets may need an initial download. The current apps do not send your prompts, family profile, imported document text, recordings, or transcripts to a cloud AI service for processing. NSF Labs does not use this content to train an AI model.

The app does not require an NSF Labs account or provide an NSF Labs cloud backup service. Local diagnostic logs can include processing status, errors, and file paths. They are not automatically uploaded to NSF Labs; review them before sharing for support. Its main database is encrypted, with its key held through platform secure storage. Recordings, imported files, exports, and temporary files are stored separately; database encryption does not mean every file is separately encrypted by the app. Android and Apple backup, restore, or device-transfer services may handle eligible app files according to your settings and the operating system’s rules. On iPhone and iPad, app documents may also be accessible through Files or computer file sharing. Platform secure storage can retain encryption-key material separately from app files; deleting the app is not a promise to erase every backup or secure-storage item.

Microphone access is used for recordings you start. A recording can continue while the app is in the background; Android shows an ongoing recording notification. You can stop recording in the app and revoke microphone access in device settings. iOS also requests speech-recognition authorization for transcription. Permission can be withdrawn through the operating system; this prevents the corresponding feature from working until permission is restored.

File selection lets you import chosen documents and audio files. The system file picker may access a cloud storage provider you have configured. That provider's handling of the source file follows its own policy.

Calendar access lets the app list available calendars and create, update, or remove worship events. If you choose a calendar connected to Google or another service, event titles, times, descriptions, and included agenda information may synchronize through that calendar service and be visible to people with access to the calendar.

Read-aloud features pass the selected text to the text-to-speech engine configured on your device. That engine may use local or network voices according to its settings and provider. This is separate from on-device Gemma generation and Whisper transcription.

Internet access is used to download AI and speech models, obtain fonts when needed, and open external resources. Gemma and Android speech-model files are downloaded from Hugging Face and its delivery infrastructure; Apple supplies its speech assets through system services. Fonts may be fetched from Google Fonts infrastructure. These services receive ordinary request information, such as your IP address and the requested resource. A model download does not require uploading your family profile or recordings.

Opening an article, video, or other external link connects you to its provider, including jw.org where applicable. External websites, storage services, calendar services, and speech engines have their own privacy policies.

If you export or share an agenda, note, document, summary, or recording, the destination app or recipient receives the content you select. Copies saved outside FW Planner are controlled by you and that destination. NSF Labs does not sell your personal information or use it for targeted advertising. The app contains no advertising, analytics, or automatic crash-reporting SDK that sends app activity to NSF Labs.

App data remains on your device until you remove it using available deletion controls, clear the app’s storage in Android settings, or delete the app. On iPhone or iPad, use Delete App to remove its local container; Offload App retains documents and data. Temporary files or other local copies can remain until the app or operating system removes them or you clear app storage. Saved histories are not automatically erased after 90 days.

You can edit or remove family profiles and delete saved recordings through the app. Clearing Android app storage or deleting the iOS app removes the local app container, including locally stored content and app-managed downloaded models. Apple-managed speech assets and secure-storage items are managed separately by the operating system. This does not remove original imported files, exported or shared copies, calendar events, or copies retained by a device backup service. Manage those separately in their respective apps or account settings. NSF Labs cannot remotely recover or delete data stored only on your phone.

Family profiles may include children's information entered for family worship planning. A parent or guardian should manage that information and any sharing. Enter only the details needed for your family's use, and obtain appropriate permission before recording or sharing another person's voice or personal information.

The FW Planner documentation is hosted through Cloudflare Pages. Hosting and security providers process connection information such as IP address, browser details, requested pages, and request times to deliver and protect the site. These documentation pages do not add advertising or visitor analytics scripts. The NSF Labs homepage may load Google Fonts.

If you join private testing, Apple TestFlight or Google Play handles your store account, installation, and testing information under its own terms and privacy policy. Depending on the platform and your choices, NSF Labs may receive tester contact details, crash or diagnostic reports, screenshots, and feedback through those services. This is separate from automatic reporting inside the app. We use information received for managing the test, resolving problems, and responding to you. Avoid including private family information in feedback or screenshots.

Support messages and testing feedback are kept for as long as reasonably needed to respond, investigate issues, administer the test, and meet applicable obligations. To request access, correction, or deletion of information you have sent NSF Labs, use the contact below. Copies independently held by Apple, Google, your email provider, or other recipients are managed by those services.

Privacy contact: [email protected].

If you contact NSF Labs, your email service delivers the contact details and information you choose to send. Do not include private family profiles or recordings unless needed to explain your request. Information supplied for support is used to respond to that request, not to train the app's AI.

We may update this policy when the app or its data handling changes. The date above identifies the latest revision. Any future feature that sends personal content to an additional service will need an updated disclosure and any required consent before that processing begins.