Privacy Policy

1. No account

The Service has no account, no email address and no password. Your data is kept against an anonymous identifier for your device, which is created on the device the first time you open the app. Content you post in the community carries a separate public alias, so the identifier your app authenticates with is never published.

We do not sell your personal data and we do not build advertising profiles. On iOS we do ask, through Apple’s tracking prompt, for permission to use your device’s advertising identifier — solely to measure which marketing channel an install came from (Section 7). If you decline, the app behaves exactly the same.

2. What we collect

What you give us

• Profile — display name, username, short bio, favourite verse, and an emoji or an uploaded photo. These are shown to other people in the community. Uploaded photos are stored in our file storage and served from a public link.
• Setup answers — if you answer the optional questions when you first open the app: gender, age range, how much time you spend on your phone, how you heard about us, and the daily prayer goal you set. You can skip every one of them, and none of them are shown in the community. Your denomination is also asked there and is treated separately — see Section 8.
• Devotional activity — the prayers you save, the topic you type before a guided prayer, how you answered the daily check-in, your streak and progress, your reading position, and your Bible highlights and notes.
• Community content — posts, prayer requests, comments and replies, 🙏 and ❤️ reactions, live-chat messages and their emoji reactions, testimonies you attach when you mark a request answered, and who you have blocked. Community content is public to other users. Each piece of writing is also stamped with the language it is written in, so it reaches the room that speaks it.
• Safety reports — when you report a post, comment, message or person, we store what you reported and the reason you chose.
• Cancellation reason — if you cancel a subscription and pick a reason, we store that choice and whether we showed you an offer. There is no free-text box, so nothing you write can end up here.
• Support requests — if you email us, we receive your message and the address you sent it from.

What we collect automatically

• Device identifier — the anonymous per-device identifier described above, plus the public alias attached to your content.
• Device and diagnostic data — platform, brand, model, device type, manufacturer, hardware generation, operating-system name and version, app version, and crash and performance reports.
• Language and notifications — your device language, and — if you turn notifications on — a push token so reminders and community notifications can be delivered. We also keep the notifications we sent you, so the in-app list survives a new phone.
• Usage data — which features are used and how the setup and subscription flows progress. Screen-by-screen telemetry is sampled: most devices report none of it at all.
• Subscription status — whether a subscription is active, which product, when it renews or expires. Payment is taken by Apple or Google; we never receive or store card details.
• Housekeeping — when you accepted the community rules, when the profile was created, and when the app was last opened.

What never leaves your phone

• The apps you choose to pause — the selection and its schedule are held by your operating system’s screen-time controls and stay on the device. We never receive the list of apps you blocked.
• Local state — drafts, settings, your reading position and local copies of your own prayers and highlights.

3. How we use it

We use what is described above to:

• provide, personalise and maintain the Service;
• keep your prayers, streaks, progress and profile;
• run the community and its safety and moderation tools;
• deliver the notifications you asked for;
• process subscriptions, and prevent fraud, spam and abuse;
• diagnose faults and improve reliability;
• measure which marketing channel an install came from (Section 7); and
• comply with our legal obligations.

We do not sell your data or build advertising profiles. We do use automated screening: writing is checked before it appears, and content that breaks the community rules can be removed, and writing restricted for a period, without a person reviewing it first. You are always told what happened and why, restrictions lift themselves (Section 9), and you can reach a human at support@bibleshield.app.

4. How we share it

We do not sell, rent or trade your personal information. We share it only:

• with service providers — that process data on our behalf to run the Service (Section 6);
• with the community — — what you post is public to other users, and a post or request you share carries a public link anyone with it can open;
• for legal reasons — where required by law, regulation or valid legal process;
• for safety — to protect the rights, property or safety of Bible Shield, our users or the public; and
• in a business transfer — if we are involved in a merger, acquisition or sale of assets, in which case we will notify you of any change to this Policy.

5. AI-generated prayers and automated screening

When you generate a guided prayer, the topic you type is first checked against a word filter on our servers and then sent to an AI provider (Google Gemini) to write the prayer. Sent with it, when you have provided them, are the display name you chose, your denomination, the verse you are reading and the mood you selected at check-in, so the prayer is written for you and in your language. Your device identifier is never sent. Prayer topics are private and are never shown in the community.

The same provider screens longer community writing for content that breaks the rules, and a separate provider (fal.ai) checks uploaded profile photos for adult content — it receives the image itself. Please do not put details into a prayer topic, a post or a photo that you would not want processed this way.

6. Who processes data for us

We rely on the processors below, and on no others. Each receives only what it needs for the purpose listed.

7. Measurement and advertising

We advertise the app, and we measure which advert brought an install. On iOS this begins with Apple’s tracking prompt. If you allow tracking, your device’s advertising identifier is shared with our attribution provider (AppsFlyer), and the install id it issues is passed to RevenueCat so a subscription can be credited to the right campaign. If you decline, measurement falls back to Apple’s own SKAdNetwork reporting, which is aggregated and does not identify you.

AppsFlyer is also told when an install reaches a marketing milestone — finishing setup, opening the subscription page, starting a trial, or subscribing, with the price — and passes those on to the advertising network that brought you. Your setup answers are never included in what is sent.

Separately, we use PostHog for product analytics (which features are used, how the setup and subscription flows progress) and Sentry for crash and performance diagnostics. Neither is used for advertising.

8. Religious belief and other sensitive information

Bible Shield is a Christian prayer app, so some of what it holds is sensitive by nature. Two things deserve to be said plainly.

Your denomination is information about religious belief, which UK and EU data-protection law treats as a special category. We ask it once, during setup, to write prayers that fit how you pray and to understand who the app is reaching. It is optional — you can skip it, change it or clear it in your profile at any time — and answering it is your explicit consent to us processing it for those two purposes. It is sent to the AI provider that writes your prayers and it is never sent to any advertising network. Deleting your profile deletes it.

What you write — a prayer request, a post, a comment, a message — may itself reveal beliefs, health or other sensitive matters. You choose what to write and, for posts and requests, whether to write anonymously; anything you post in the community is public. Prayer topics and saved prayers are not.

9. How long we keep it, and deleting your data

Some of this is enforced by a nightly job rather than by a promise:

• Saved prayers — kept on our servers for 180 days, then deleted. The copy on your phone stays until you remove it.
• Live-chat messages — kept for 90 days, then deleted.
• Notification history — kept for 90 days, then deleted.
• Devices that never finished setup — deleted after 7 days.
• Profile, community content, highlights and progress — kept while your profile exists, and removed when you delete it or delete the item.
• Product analytics and crash diagnostics — kept by those providers for up to 12 months.
• Safety records — if content of yours was removed for breaking the community rules, that removal counts against you for 90 days, and a restriction lasts 7 days and at most 30 days. The record of the decision is kept even if you delete your profile — otherwise deleting and reinstalling would clear every restriction. It holds a date, the anonymous identifier and the removed text.
• Billing records — your subscription state and the purchase events behind it are kept after deletion as the record of a paid relationship; the reason you gave for cancelling is kept as aggregate feedback. Reports you filed about someone else’s content also remain, because they are about that content and not about you.

You can delete your profile at any time from inside the app (Profile → Delete account) or from bibleshield.app/delete. Deletion is immediate and cannot be undone. It erases your profile and setup answers, your prayers, streaks, highlights and notes, your posts, prayer requests, comments and reactions, your chat messages and reactions, your blocks, your notification history, and your uploaded photo — everything except the safety and billing records listed above.

10. Security

We use reasonable technical and organisational measures: encryption in transit (HTTPS/TLS), app-attestation checks so requests must come from a genuine copy of the app, access controls limiting who can reach user data, and a design that keeps the identifier you authenticate with separate from the alias your content is published under. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights

Depending on where you live, you have the right to access, correct, delete or export your personal data, and to withdraw consent. The in-app delete flow exercises deletion directly; for anything else, email support@bibleshield.app and we will respond within 30 days.

United Kingdom and European Economic Area

• Controller — AKES Solutions Limited, Unit 501 Leroy House, 434-436 Essex Road, London, United Kingdom, N1 3FY, contactable at support@bibleshield.app.
• Lawful bases — performance of a contract (providing the Service you asked for), our legitimate interests (keeping the Service working, safe and measurable), your consent (notifications, tracking, and the optional setup answers), your explicit consent (denomination, Section 8), and legal obligations (billing records).
• Your rights — access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. You may withdraw consent at any time, without affecting what was done before.
• International transfers — our providers operate globally; where data leaves the UK or EEA we rely on appropriate safeguards such as Standard Contractual Clauses.
• Complaints — you may complain to your local data-protection authority.

California

• Right to know — the categories and specific pieces of personal information we hold about you.
• Right to delete — your personal information.
• Right to correct — inaccurate personal information.
• Right to opt out — — we do not sell your personal information or share it for cross-context behavioural advertising.
• Non-discrimination — we will not treat you differently for exercising these rights.

12. Children

The Service is not directed to children under 13 (or the minimum age of digital consent where you live), and we do not knowingly collect their personal information. If you believe a child has given us information, contact support@bibleshield.app and we will delete it.

13. International users

We operate the Service from, and rely on providers located in, several countries. By using the Service you understand that your information may be processed outside the country you live in, under different data-protection rules.

14. Changes to this Policy

We may update this Policy. When we do we revise the “last updated” date above and, for significant changes, give notice in the app.

15. Contact

Questions or requests about your privacy: AKES Solutions Limited, Unit 501 Leroy House, 434-436 Essex Road, London, United Kingdom, N1 3FY, or email support@bibleshield.app.