Privacy Policy – Jean Roorda

Last updated: October 2026

This policy explains what happens to your information when you visit jeanroorda.com and when you use the CHALICE app for iOS and Android. Both are run by Jean Roorda, based in Bend, Oregon, in the United States. You can reach her at any time at hello@jeanroorda.com.

The two are covered separately because they work differently. Part One is the website. Part Two is the app.

Part One: The Website

The short version

You can read and listen here without an account. If you make one, to listen to Jean's meditations and courses, it holds your email address, your name if you give it, what you have bought and how far you have listened. If you join Jean's email list, the list holds your address, your choices and the record of your yes. Nothing you do here is sold. Two things do follow you: Google Analytics counts visits, and a Meta pixel lets Jean advertise on Facebook and Instagram to people who have been here. Both are described below, and both can be refused. Everything else the site keeps is what you deliberately give it, the ordinary record every web server keeps, and the records described below that keep sign-ins and emails working.

What you send us

The contact form. When you write to Jean through the site, we receive your name, your email address, your phone number and subject if you filled those in, your message, the time you sent it, and the internet address your browser connected from. The message is saved on the website's own server and emailed to hello@jeanroorda.com so that Jean can reply.
Your account. To listen to the meditations and courses you sign in with a six-digit code sent to your email, or with Apple or Google; the same account works in the CHALICE app. Your account holds your email address, your name if you give it, what you have bought or been given, how far through each meditation you are (so your place is kept on every device), and when and from which internet address you signed in.
Jean's emails. If you join Jean's email list, through the box when you sign in, the sign-up form, your account pages or an email inviting you, the list keeps your address and the record of your yes. Jean's emails, below, says exactly what is kept and who sends them.
Buying the poem book. Payment is taken by Stripe on Stripe's own secure pages. Card numbers are never seen by, sent to, or stored on this website. Stripe passes on the name and delivery address needed to post the book to you, and the record of the order.
Booking a reading. Some pages carry a booking window provided by Calendly. If you book a session there, Calendly collects the name, email address and time you choose and passes them to Jean. Calendly is a separate company with its own privacy policy.

Jean's emails

Joining. You join Jean's list only by saying yes. The sign-up form sends you an email first, and you are on the list only once you press the button in it. Ticking the box when you sign in, saying yes on your account pages, or pressing the button on the page an invitation leads to counts at once, because signing in, or the invitation reaching you, has already shown the address is yours. If your device is set to a United States time zone, the box on the sign-in page comes already ticked, and you can untick it; anywhere else it starts empty.

What the list keeps. Your email address; your first name if you gave it; which kinds of email you want (Jean's newsletter, tips while you listen, Sunday invitations, offers, in-person classes near Bend); the town or area you typed, if you did; your country and time zone, so that emails arrive in the daytime where you are; and the record of your yes: when it was, how, the exact words you were shown, the page, and the internet address you were using, kept only as a one-way scramble that cannot be turned back into the address.

Who sends them. Jean's emails are sent by Postmark, an email delivery company that acts only on Jean's instructions. Postmark also sends the site's other emails, such as sign-in codes and receipts. Every one of Jean's emails says it is from Jean, carries her postal address, and has an unsubscribe link and a link to choose which kinds you get. Your mail app's own Unsubscribe button, where it shows one, works with a single press.

Opens and clicks. If you are outside the European Economic Area, the United Kingdom and Switzerland, and the site can tell where you are, Jean's emails can tell her whether you opened them and which links you pressed, through a tiny image and links that pass through Postmark. The site tells where you are from your device's time zone when you said yes. She uses this to see which letters are wanted and, after three months with no sign of life, to ask whether you still want them; if there is still no answer, you may be taken off the list. If you are in those places, or the site cannot tell where you are, nothing is counted. Nor is it for anyone whose subscription came over from Mailchimp.

A few emails about your account work differently. The one that says a course or meditation is yours, the ones welcoming you to the Sunday calls, the Friday email with that Sunday's Zoom link, the one that brings a Sunday's recording, and the older app's welcome and subscription emails tell Jean whether they were opened, wherever you are. The links in them are not counted.

Moving from Mailchimp. Until October 2026 Jean's list was kept by Mailchimp. When it moved here, each subscriber's record came with it as Mailchimp held it: their first name, when they subscribed and confirmed, from which internet address (now kept only as a one-way scramble), and the country and time zone Mailchimp had. People who had unsubscribed from Mailchimp, or whose address no longer worked, came over only as addresses never to write to. Nobody was added who had not subscribed, and nobody was asked to subscribe again.

An invitation. Some members in the United States who are not on the list may receive one email, once, asking whether they would like to join. Joining takes pressing the button on the page it leads to; the email itself adds nobody. Pressing "No thanks" there instead puts the address with those never to write to, so that it is not invited again and gets none of Jean's list emails.

Words you share. Some of Jean's emails end with a link to share a few words with her. What you write there, the name you give, your email address and a one-way scramble of your internet address are kept for Jean to read. It is shown to anyone else only if you said she may share it and she chooses to. Ask, and it is deleted.

Stopping. Every one of Jean's emails has an unsubscribe link. That link, the link to choose which kinds you get, and your account's You page let you choose which kinds you get or stop them all. In the CHALICE app, the switch "Announcements from Jean" and "Jean's newsletter" follow each other: turning either one off turns off the other. Once you leave, your address is kept, marked as having left, so that you are never written to again by mistake.

What is collected automatically

Server records. Like every website, this one keeps a log of requests: the internet address you connected from, the page you asked for, the time, and which browser you used. These exist so that faults can be diagnosed and abuse can be blocked. They are not used to identify individual readers.

Google Analytics. The site uses Google Analytics 4 to count visits. It records which pages are read, which site you arrived from, roughly which city you are in, what kind of device and browser you use, how far down a page you scroll, which outbound links you follow, and what you type into the site's search box. It does not record your name, and this site sends Google nothing that identifies you. Google Analytics 4 does not store internet addresses; it uses them to work out an approximate location and then discards them.

Three settings matter, and all three are deliberate. Google's advertising features are switched off. Data sharing with Google's advertising products is switched off. Nothing collected here follows you to other websites. The statistics are kept for 14 months and then deleted automatically.

If you would rather not be counted at all, install Google's official opt-out add-on, or use any content blocker. Both work, and neither affects how the site behaves for you.

The Meta pixel. Jean advertises on Facebook and Instagram. To make that work, this site carries a small piece of code from Meta that tells Meta which pages you visited here and whether you did something that matters to her: sent a message, subscribed, or started to buy the book. Meta uses this to show her advertisements to people who have been here, to measure whether an advertisement worked, and to find new people who resemble the ones who visited. When you send a message through the contact form, the server reports that to Meta as well, with your email address, phone number and name first turned into one-way fingerprints, so that Meta can match them against its own records without receiving the details themselves. What you wrote is never sent. Meta is a separate company with its own privacy policy, and if you have a Facebook or Instagram account, Meta can connect this activity to it.

Your choice

Both services above can be switched off for this browser with one click, and switched back on with the other. Declining changes nothing about how the site works for you. The first control is also the opt-out that California law provides.

Cookies

A cookie is a small file a website stores in your browser. This site sets these, and no others.

trx_addons_is_retina records whether your screen is a high-density one, so that pictures are sent at the right sharpness.
jr_liked remembers which posts you have liked from this browser, so the heart stays filled when you come back. It holds nothing but a list of article names, and it is not connected to any name or address.
jr_session keeps you signed in to your account. It holds a random key and nothing else, and lasts 30 days from when you sign in, or until you sign out.
jr_name_asked remembers, for a year, that this browser has been asked your name, so that you are asked only once.
Three others last only while you sign in: jr_apple and jr_gnonce (signing in with Apple or Google), and jr_after, which remembers which page to take you back to.
jr_consent remembers whether you accepted or declined the two services above, so that you are not asked again. It lasts a year.
_ga and _ga_081SRDW0TQ belong to Google Analytics and let it tell a returning visit from a new one. They last up to two years.
_fbp and _fbc belong to Meta. The first tells one browser from another; the second remembers which advertisement brought you here, so that a message or a purchase can be credited to it. Both last 90 days.

Two more, PHPSESSID and jr_preview, exist only inside the private area Jean uses to edit the site. Ordinary visitors never receive them.

The embedded services described below may set cookies of their own when, and only when, they load. You can refuse or delete cookies in your browser's settings. The site works without them, apart from the heart no longer remembering you.

Content embedded from elsewhere

Some pages include material served by other companies. When that material loads, the company providing it can see your internet address, in the same way it would if you had visited its site directly.

Vimeo hosts the video on the front page. It is deliberately set not to load until you press play, and it asks Vimeo not to track you.
Calendly provides the booking window on the journal pages.
Google Fonts supplies the typefaces the site is set in.
Spotify hosts the audio of The Higher Vibe Podcast. Pressing play on an episode here streams it from Spotify's servers, which see your internet address in the same way they would if you listened on Spotify itself. Nothing loads until you press play.

Who else sees your information

Meta does, for advertising, in the way described under The Meta pixel, and you can stop that under Your choice. Nobody else. Your information is not sold, rented or traded, and the only other companies that touch it are the ones named in this policy, each acting on Jean's instructions to do a specific job: send an email (Postmark), take a payment (Stripe), post a book, count a page view (Google), or look after the site's address (Cloudflare, which manages the site's domain name; visits themselves go straight to the site's own server and do not pass through Cloudflare). The only other circumstance is a legal one, where a court order or a law obliges disclosure.

How long things are kept

Messages from the contact form are kept for up to two years so that a conversation can be picked up again, then deleted.
Your place on Jean's list lasts until you unsubscribe. After that your address is kept, permanently, marked as having left, so that you are never written to again by mistake. Your name, area, country and time zone stay with it until you close your account or ask for them to be removed. The record of each yes and no is kept with it, as proof of what you agreed to and when.
A sign-up never confirmed is deleted after 30 days.
The limits on the site's forms (signing up, signing in, messages, hearts and shared words) keep a one-way scramble of an internet address for two days, and a scramble of each email address that asked to join for 31 days, so that the forms cannot be used to flood anyone's inbox. They are cleared out as new ones arrive, so some last a little longer.
Sign-in records (when, and from which internet address) last as long as the sign-in does: on the website, until 30 days after your last visit; in the app, until you sign out. Sign-in codes are deleted a day after they run out.
The emails sent to you are kept on the site's server: a copy of each, when it went, whether it was delivered, and whether it was opened or a link in it pressed, where that is counted. There is no set time for deleting them yet; they stay when you leave the list or close your account, and are deleted if you ask. Postmark keeps its own copy for 45 days.
Your account lasts until you close it. Closing it takes your address off Jean's list and clears your name, area, country and time zone from the list, signs you out everywhere, and removes your email address and the means of signing in from the account. What the law requires to be kept about orders stays, and so does the rest of the account under a placeholder in place of your address: its name, what was bought and listened to, and any profile details the older app kept. The record of each yes and no to Jean's emails stays too, without your area or time zone. Words you shared with Jean stay unless you ask for them to be deleted.
Analytics is deleted automatically after 14 months.
Meta's cookies last 90 days. What Meta keeps on its own side is governed by Meta's policy, not this one.
Server records are held for a short period by the hosting company, normally a few weeks.
Order records are kept for as long as tax and accounting law requires.

Where your information is held

The website runs on a server in Michigan, in the United States. Google, Meta, Postmark, Cloudflare, Stripe and Calendly are United States companies and store information there, as Mailchimp does until Jean's account with it is closed.

How it is protected

The whole site is served over an encrypted connection. Messages sent through the contact form are stored in a place that cannot be reached from the web. The area Jean uses to edit the site is protected by a password that is never stored in readable form. Signing in on the website needs no password: you sign in with a code sent to your email, or with Apple or Google. Accounts made in the older version of the app also have a password, stored only as a one-way scramble that cannot be read back. If a breach ever occurred that put your information at risk, you would be told.

Your rights, wherever you live

You may ask what information is held about you, ask for it to be corrected, ask for a copy, or ask for it to be deleted. Three of these you can do yourself at any time: Download my data on your account's You page gives you a copy of what is held about you (all but the scrambled codes, passwords and internet addresses, and messages sent through the contact form, which anyone can send under any address; ask for those); the unsubscribe link in every one of Jean's emails, or the email choices on your You page, take you off Jean's list at once; and closing your account, on the You page or in the app, does what How long things are kept describes. For anything else, write to hello@jeanroorda.com. There is no charge, and you will have an answer within 30 days.

If you are in the European Economic Area or the United Kingdom

Under the General Data Protection Regulation and the UK GDPR, the data controller is Jean Roorda, Bend, Oregon, United States, reachable at hello@jeanroorda.com.

Why we are allowed to hold your information. Each use rests on one of these legal grounds:

Replying to your message rests on taking steps you have asked for, and on the legitimate interest in answering people who write in.
Sending Jean's emails rests on your consent, given when you join her list and withdrawable at any time from any of them. Opens and clicks of Jean's list emails are counted only for people the site can place outside the European Economic Area, the United Kingdom and Switzerland.
Knowing whether the few account emails named under Jean's emails were opened rests on the legitimate interest in knowing that a Zoom link, a recording or a purchase reached you.
Running your account rests on performing the agreement you entered into when you made it.
Fulfilling a book order rests on performing the contract you entered into.
Keeping the site running, secure and free of abuse rests on legitimate interests.
Counting visits rests on your consent, given on the bar this site shows to visitors in Europe and the United Kingdom, and otherwise on the legitimate interest in knowing which pages are worth keeping.
Advertising through Meta rests on your consent, given on the same bar and withdrawable at any time under Your choice.

Your rights. You have the right of access to your information; the right to have it corrected; the right to have it erased; the right to restrict how it is used; the right to receive it in a portable form; the right to object to processing based on legitimate interests; and the right to withdraw consent at any time, which does not affect anything done before you withdrew it. You also have the right to complain to your national data protection authority, and you may do so without contacting us first, though we would rather have the chance to put things right.

Automated decisions. There are none. No decision affecting you is made by a machine, and no profiling is carried out.

Information leaving Europe. Your information is processed in the United States. Google, Meta, Stripe, Postmark's parent company ActiveCampaign, Cloudflare, Calendly, and Mailchimp's parent company Intuit (until Jean's Mailchimp account is closed) each rely on the EU-US Data Privacy Framework, the UK extension to it, or the European Commission's Standard Contractual Clauses, which are the mechanisms European law provides for this.

How consent is asked for. If your device's clock is set to a European time zone, this site shows a bar with two equal buttons before either Google Analytics or the Meta pixel runs, and nothing tracks you until you choose. Declining changes nothing about how the site works. The choice is kept in your browser, and you can reverse it at any time under Your choice. Visitors elsewhere are not asked first, which is the ordinary practice where they are, and have the same controls.

If you are in California

In the past twelve months this site has collected identifiers such as your email address and internet address, commercial information if you bought the book, a meditation or a course, and internet activity such as which pages you read. It does not sell personal information. It does share internet activity with Meta for what the law calls cross-context behavioral advertising, which is the pixel described above, and it does not do so knowingly for anyone under 16. You have the right to opt out of that sharing: the control marked "Do not sell or share my information" under Your choice stops it on this browser. You may also ask what has been collected, ask for it to be deleted, or ask for it to be corrected, and you will not be treated any differently for asking.

Children

This website is not aimed at children and does not knowingly collect information from anyone under 16. If you believe a child has sent us something, write to us and it will be deleted.

Changes to this policy

If this policy changes, the new version will appear on this page with a new date at the top. Material changes will be described rather than slipped in quietly.

Part Two: The CHALICE App

CHALICE is a place for spiritual growth, healing and learning: a library of guided clairvoyant meditations, live sessions, and a community of people practising together. This part of the policy covers the app on iOS and Android.

What the app collects

Your account. Creating an account records your name and email address. These are used to run your account, to support you when something goes wrong, and to tell you things you need to know about the app. It is the same account as on the website, so what Part One says about your account, Jean's emails and how long things are kept applies to it too. The older version of the app also asked for a few profile details, such as a picture, where you live, a phone number or a date of birth, which stay with the account if you gave them.
Purchases. Lessons, courses and subscriptions are paid for through Apple's App Store or Google Play. The payment happens inside Apple's or Google's systems. CHALICE never receives or stores your card details.
How you use the app. The app records which lessons and courses you open and how far through them you are, so that your place is kept and so that the material can be improved.
What you post. Anything you write in the Community area or send through Chat is stored so that it can be shown to the people it is meant for.

Signing in

You sign in to CHALICE with a six-digit code sent to your email, or with Sign in with Apple or Sign in with Google. With Apple or Google, your password is held by them, never by CHALICE, and their two-factor and anti-fraud protections apply. If you use Apple's private email relay, CHALICE never learns your real address. The older version of the app signed in with an email address and a password, which is stored only as a one-way scramble that cannot be read back.

Subscriptions

CHALICE offers one-month and three-month subscriptions. Payment is taken by Apple or Google when you confirm the purchase, and renews automatically unless you turn renewal off at least 24 hours before the period ends. You manage and cancel renewals in your Apple ID or Google Play account settings, not in the app. No payment information reaches CHALICE at any point.

Who else sees it

Your information is not sold, and it is not shared with advertisers. It is handled by Apple and Google for sign-in and payment, by Postmark, which sends its emails, and by the services that store the app's data and deliver its video and audio. Beyond that, it is disclosed only where the law requires it.

Your rights in the app

You can change your account details in the app at any time. You can close your account from inside the app, on the website's You page, or by writing to hello@jeanroorda.com; what closing removes, and what it keeps, is set out under How long things are kept. If you are in Europe or the United Kingdom, the full set of rights described in Part One applies here in the same way, and Jean Roorda is the controller for the app as well.

Children

The meditations are suitable for people of any age, but an account is not. CHALICE does not knowingly create accounts for children under 13 without a parent's consent, and will delete any that come to light.

Questions

Anything at all about this policy, either part of it, write to Jean Roorda at hello@jeanroorda.com.