Privacy Policy

Who is responsible for your information

DEVALE TECHNOLOGIES S.R.L. is the data controller. For privacy questions, access requests, or requests to delete your information, email [email protected].

Mobile app: identity and information on your device

The app does not ask you to register with an email address or password. When it starts, it creates or restores an anonymous Supabase authentication account. Its unique user ID identifies your requests and associated server records. Session credentials are saved on your device. “Anonymous” here means that you have not supplied login details; it does not mean your activity is unidentifiable.

Reading positions and progress, reading plans, saved verses, personal notes, conversation history, listening position, reminder settings, language, and appearance preferences are stored on your device. These records are not automatically synchronized as a personal cloud library. Information you include in an online request is processed as described below.

Loading daily readings and online audio also contacts our backend, even if you do not use chat.

Personalization settings include reading goals, reading challenges, Bible familiarity, preferred reading pace, and an optional age range. They are saved locally. Relevant selections are also sent with AI requests to tailor explanations and answers. You can edit them in Settings. The age range can be left undisclosed; the app does not verify your age.

Mobile app: AI questions and explanations

When you ask a question or request an explanation, the app sends the question or selected passage, relevant conversation context, language and Bible version, and applicable personalization settings to our Supabase backend. The backend uses OpenAI to analyze requests, find relevant passages, and generate answers. This includes sending query text or derived search text for embeddings, which help find relevant Scripture.

For chat generations, our backend stores the question, conversation context supplied with that request, generated response, conversation and user IDs, and technical evaluation, model, timing, and usage information. Optional answer ratings and reasons are also stored. Deleting a conversation from your device does not delete these server records.

Bible reading choices, spiritual goals, notes, and conversations can reveal religious beliefs or other sensitive information. Local notes are not automatically uploaded, but anything you put in a question or feedback submission may be sent to the services handling that request. Please avoid including information about other people or sensitive details that are unnecessary for your question.

OpenAI states that API data is not used to train its models by default unless the customer opts in. Its retention and abuse-monitoring rules depend on the endpoint and account controls. Disabling response storage does not, by itself, eliminate all provider retention. See OpenAI’s API data controls.

Mobile app: microphone, audio, and reminders

Dictation is optional and requires microphone permission. When you finish a recording for transcription, its audio and any relevant Bible reference are sent through Supabase to OpenAI. This happens even if you choose to review the transcript before sending it as a chat message. The app attempts to delete the temporary recording after transcription or cancellation. The transcript becomes a chat message only if you send it.

For listening features, requested Bible text or reading commentary is processed through Supabase, using OpenAI for English speech and ElevenLabs for French speech. ElevenLabs also processes generated audio and its text to align spoken words. Narration requests include the selected content, language, and voice; generated audio is cached for playback. This is separate from recording your microphone.

Reading reminders are scheduled locally through your device’s notification system. You can decline permission or change it in device settings. The app does not register a remote push notification token for these reminders. Reminder text may appear on your lock screen according to your device settings.

Mobile app: feedback and support

If you submit feedback, we receive its category, your message and/or selected images, an optional reply email, your technical user ID, submission time, app and build version, operating system, and the screen from which you submitted it. You choose which images to attach using the system photo picker; the app does not request access to your entire photo library for this feature.

Feedback and images are stored in Supabase. Images use private storage and time-limited viewing links. Feedback notifications are sent to our support team through Resend and can include the message, reply email, technical details, and attached images. Copies can therefore also exist in the email service and our support mailbox. Images are re-encoded without copying their original EXIF location metadata, but their visible content may still reveal personal information.

Mobile app: technical information and payments

Our backend and hosting providers process network request information, which may include IP addresses and request metadata, to deliver and secure online features. Service diagnostics include request IDs, response times, errors, and AI usage counts. Apple App Attest and Google Play Integrity help verify genuine app requests; this involves technical integrity proofs, request hashes, app/device integrity results, and, on iOS, an attestation key identifier and verification records.

The app does not include an advertising or behavioral analytics SDK. This does not exclude backend diagnostics or information handled by Apple and Google when distributing the app. Platform distribution services can provide crash reports and feedback to developers under their applicable terms.

Subscriptions and in-app purchases are not available in the current app. The app does not request payment card details.

Website: waitlist, hosting, and cookies

The website has no user accounts. Joining the waitlist is voluntary. When you submit the form, your email address is sent directly to Loops, our email service provider, to request Bible Daily launch and update emails. You can withdraw your consent using the unsubscribe link in those emails or by contacting us. Unsubscribing stops mailing; you can separately request deletion of your contact information.

Cloudflare Pages / Cloudflare delivers and protects the website and may process your IP address and HTTP request information. The site uses system fonts and serves its scripts and images with the site. We have not added advertising trackers, analytics scripts, or non-essential cookies to the website. The website saves your manually selected interface language in your browser’s local storage so it can remember your choice on later visits. Its own code does not save your email in cookies or browser storage. Loops and Cloudflare may process their own service and security metadata.

Why information is processed and GDPR legal bases

For the app functionality you request, including saving local reading information and delivering online answers, explanations, and audio, the legal basis is providing the service to you (GDPR Article 6(1)(b)). Operating and securing the app and website, preventing abuse, diagnosing problems, handling support, and assessing response quality serve our legitimate interests in a reliable service (Article 6(1)(f)), subject to your rights and interests.

Waitlist emails are based on your consent (Article 6(1)(a)). Processing needed to meet an applicable legal obligation, including responding to data protection requests, is based on Article 6(1)(c). Dictation, sending feedback, and joining the waitlist are choices; technical authentication and security processing are part of operating the connected app.

Information revealing religious beliefs requires an additional legal condition under GDPR Article 9, such as explicit consent where applicable. An ordinary service legal basis does not replace that condition. This privacy policy is information about processing; reading it, using the app, or selecting a spiritual goal does not by itself constitute explicit consent. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Service providers and international processing

Our services use Supabase for authentication, backend functions, databases, and file storage; OpenAI for AI answers, retrieval, and audio; ElevenLabs for narration and audio alignment; Resend for feedback email; and Loops for website waitlist email. Cloudflare delivers the website. Apple and Google also handle app distribution and platform integrity services under their applicable terms.

These providers may process information outside Romania and the European Economic Area, including in the United States. Processing locations and retention depend on the provider and service configuration. You can contact us for information about recipients and the safeguards applicable to transfers of your data. The app and website have no advertising network or data broker integrations.

Retention and requests to delete data

Local reading information, preferences, and chat history remain on your device until you remove them using the available app controls or clear the app’s stored data. Device backups may hold separate copies under your device or backup provider’s settings. Clearing local data or uninstalling the app does not request deletion of your Supabase account or server records.

Server chat generation records, completed feedback, and account or integrity records remain stored until separately deleted; there is no automatic expiry for those records in the app’s current processing. Short-lived security challenges and incomplete feedback uploads have separate expiry rules. Those rules do not delete completed conversations or feedback. Provider logs, backups, and support email copies have separate retention arrangements.

To request deletion of your Bible Daily technical account, server data, feedback, or waitlist contact, email [email protected] and describe the records concerned. The app does not currently offer an in-app control for deleting the server account. Because the app uses an anonymous session, your email alone may not identify its records; contact us before clearing that session if possible. We may need information to verify the request and locate the relevant data. Do not send session credentials.

Deletion requests are subject to applicable data protection rights and any lawful retention requirements. Removing an authentication account alone does not necessarily remove feedback, stored images, or email copies; those records need separate handling.

Your data protection rights

Where the GDPR applies, you may request access to your personal information, correction, erasure, restriction of processing, and portability where applicable. You may object to processing based on legitimate interests and withdraw consent for consent-based processing. These rights are subject to the conditions in applicable law.

Contact [email protected] to exercise your rights. You may also complain to your local supervisory authority or Romania’s National Supervisory Authority for Personal Data Processing (ANSPDCP).

Security

Online service requests use encrypted HTTPS or secure WebSocket connections. The backend uses authenticated requests, database access rules, and private storage controls for feedback images. These services process information on their servers; conversations are not end-to-end encrypted. Local data is stored within the app’s storage and relies on your device’s protections. No method of storage or transmission can guarantee absolute security.

Children and age information

The personalization questionnaire accepts an optional age range, including “Under 18,” and does not establish a person’s exact age or verify parental permission. Parents or guardians with concerns about information a child has provided can contact [email protected] to request help identifying and removing the relevant information.

Changes to this policy

We update this policy when our services or data practices change. The date above identifies the latest update. This policy is available at bible-daily.app/privacy/.