Privacy Policy
Effective June 2, 2026
Cristian Hernandez ("we," "us," or "our") operates the Biblical App mobile application and related services (collectively, the "Service"). This Privacy Policy describes the personal information we collect, how we use and share it, and the choices available to you. It applies together with our Terms of Service.
1. Information we collect
Account and profile information. If you register with email and password, we collect your email address, first name, last name, and password (stored by us only in hashed form). If you use Sign in with Apple, we receive the information Apple shares according to your Apple ID settings, which may include your name and a private relay or direct email address.
Verification codes. For email sign-in and registration, we send one-time verification codes to your email address. The codes you enter are verified against securely hashed values stored on our servers; we do not store the plaintext code after verification completes.
Authentication data. We issue access tokens so you can stay signed in. Tokens and related session metadata are stored on your device using the device's secure storage (for example, the iOS Keychain).
User content on your device. The Service lets you save highlights, chapter bookmarks, personal notes, Bible studies (including reflections and discussion prompts), chat history, reading preferences (such as theme, typography, and faith tradition), and related study material. Today, this content is stored primarily on your device. Notes, study reflections, and chat history on your device are encrypted before being written to local storage.
Questions and AI features. When you ask an open-ended question in chat, we send your question, selected Bible scope, translation preferences, and related context to our servers. We retrieve relevant passages from our biblical text corpus and may use an AI service to generate a response that cites Scripture. We do not answer by searching the public internet for blogs, forums, or other third-party web pages. For follow-up questions (for example, when you ask us to expand on a prior answer), we may also receive the previous question and answer you chose to include as context.
Verse insights (non-AI). Features such as cross-references, word studies (Strong's), timelines, and biblical places are drawn from our reference datasets through dedicated study endpoints. Those requests use verse and reference context; they do not use the same open-ended AI chat flow as general Q&A.
Subscription information — Apple. If you purchase Biblical Premium through Apple In-App Purchase on iOS, Apple processes payment. We receive subscription status, product identifiers, and transaction metadata needed to activate and maintain your entitlement. We do not receive your full payment card number.
Subscription information — Stripe. If you purchase through our website or another flow powered by Stripe, Stripe processes payment. We store a Stripe customer identifier, subscription status, product identifiers, and billing period metadata. We do not receive your full payment card number.
Maps and places. The Service may display maps and information about biblical locations referenced in Scripture. Those features show historical or textual place data served from our reference datasets. We do not collect your precise device location for those features.
Technical and support data. When you use the Service, our systems may automatically record information such as app version, device type, operating system, IP address, timestamps, and error or security logs needed to operate, secure, and troubleshoot the Service.
2. Information stored on your device
Biblical App is designed to be local-first. Most of your reading and study data stays on your device, including highlights, notes, studies, chapter bookmarks, chat threads, cached answers, and bundled Bible text (such as KJV). This data remains on your device unless you delete it, delete your account, or uninstall the app.
Sensitive keys used to encrypt your notes and other protected content are stored in the device's secure storage and are removed when you delete your account through the app.
Appearance settings such as light/dark mode and reader typography are stored locally on your device.
3. Information stored on our servers
Today. Our servers currently store your account and subscription information, registration and verification records, reference Bible and study datasets, and data needed to process your questions and maintain the Service. Highlights, notes, studies, bookmarks, and chat history are not stored on our servers today except as described below for optional future sync.
Account records. We store your user account information (such as email, name, authentication identifiers, and account status) while you have or are creating an account.
Registration and verification. During sign-up or sign-in, we temporarily store pending registration data and one-time email verification codes (in hashed form) until verification completes or the records expire.
Subscriptions and billing. We store subscription status, product identifiers, billing period information, and related subscription events for Apple In-App Purchase and, where applicable, Stripe. Payment is processed by Apple or Stripe; we do not store your full payment card number.
Account deletion records. When you delete your account, we remove your user account data and associated subscription records. We may retain a minimal deletion audit record (such as user identifier, timestamp, identity provider, and technical request metadata including IP address and user agent) for security, fraud prevention, or legal compliance. Audit records do not retain your email or name.
Reference and study datasets. Our servers host Bible text, books, translations, cross-references, timelines, places, lexicon entries, and related reference datasets used to power search, reading features, verse insights, and Scripture-based answers. These datasets are shared reference content, not personal information about you.
Questions and AI requests. When you submit a chat question, we process it on our servers to retrieve Scripture and generate a response. Questions, retrieved passages, and related context may be sent to our AI provider for inference. Request data may also appear in server logs for a limited time for security, troubleshooting, and service operation.
Optional cloud sync (future). If we enable optional cloud sync, we will update this policy and describe the datasets stored (which may include encrypted note and chat payloads that we cannot decrypt). Until then, your User Content remains primarily on your device.
4. How we use information
We use personal information to provide and operate the Service, create and secure your account, authenticate you, deliver Scripture-based answers and study features, process subscriptions, respond to support requests, prevent fraud and abuse, comply with law, and improve reliability and performance.
We use your questions and selected Bible scope to retrieve Scripture from our corpus and to generate responses grounded in those passages.
We do not sell your personal information. We do not use third-party advertising trackers in the app.
Content sent to our AI provider for inference is processed to generate your answer. Under our provider's API terms, content sent for inference is not used to train their public models. We do not use your questions or User Content to train our own public models.
Where required by law, we process personal information based on your consent, to perform our contract with you, to comply with legal obligations, and for our legitimate interests in operating and securing the Service (balanced against your rights).
5. How we share information
Anthropic. We use Anthropic to generate Scripture-grounded chat responses. Your question and retrieved Bible passages are sent to Anthropic for inference. We do not send your password or payment details. Anthropic processes this data under its terms and privacy policy.
Stripe. When you subscribe through a Stripe-powered flow, Stripe processes payment. We receive subscription and customer metadata from Stripe as described above.
Other service providers. We use trusted vendors to host infrastructure, deliver email verification messages, and perform similar operational functions. They may access personal information only to perform services for us and under contractual confidentiality and security obligations.
Apple. If you use Sign in with Apple or In-App Purchase, Apple processes information under its own privacy policies and terms.
Maps providers. On some platforms, map tiles or map services may be provided by Apple or Google when you view biblical place information. Those providers may receive standard technical data required to load maps, under their respective policies.
Legal and safety. We may disclose information if we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of users, the public, or the Service.
Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this Privacy Policy.
With your direction. If you export or share a study file (for example, a `.biblical-study.json` file) with another person, you control how that file is shared outside the Service.
6. Data retention
We retain account and server-side information while your account is active and as needed to provide the Service.
When you delete your account in Settings, we delete your user account and associated server-side data, including Stripe checkout and subscription records where applicable. We may retain a minimal deletion audit record as described in Section 3.
Local data on your device is removed as part of the account-deletion flow in the app and when you uninstall the app, except for data your operating system or backups may retain.
Email verification codes and pending registration records are kept only as long as needed to complete verification or secure the registration process, then deleted or expired.
Subscription and billing records may be retained as required for accounting, tax, fraud prevention, and dispute resolution.
Server logs and support records may be kept for a limited period for security and troubleshooting, then deleted or de-identified where feasible.
7. Security
We use administrative, technical, and organizational measures designed to protect personal information, including encrypted network transport (HTTPS), hashed password storage, secure token storage on device, field-level encryption for sensitive note and chat content on device, and access controls on our systems.
No method of transmission or electronic storage is completely secure. We cannot guarantee absolute security.
8. Your choices and rights
Account deletion. You may delete your account at any time in Settings → Delete account. This permanently deletes your account and associated server-side data, and removes user-owned data from the device as part of the deletion flow. We attempt to revoke Sign in with Apple credentials where applicable, but revocation may not succeed in all cases.
Subscriptions. Apple subscriptions are managed in your Apple ID account settings. Stripe subscriptions are managed through the Stripe customer portal or the channel where you subscribed. Deleting your account does not automatically cancel an active Apple subscription; you must cancel Apple subscriptions separately. Account deletion may cancel active Stripe subscriptions as part of server-side cleanup.
Access, correction, and portability. You may update certain preferences in the app. For other requests, contact us using the email below. Depending on where you live, you may have rights to access, correct, delete, restrict, or port personal information, or to object to or withdraw consent for certain processing. We will respond as required by applicable law.
California residents. We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under California law. You may contact us to exercise applicable privacy rights.
9. Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will take steps to delete it.
10. International users
If you access the Service from outside the United States, your information may be processed in the United States or other countries where we or our service providers operate (including Anthropic). Those countries may have data protection laws that differ from the laws where you live.
11. Open-source Bible and study materials
The Service includes Bible text, cross-references, word studies, timelines, places, and related materials from open-source or public-domain datasets. Those materials remain subject to their respective license terms. We provide attribution where required within the app.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy in the app and revise the effective date above. If changes are material, we may also notify you through the app or by email where appropriate. Continued use after the effective date of an updated policy constitutes acceptance of the changes, except where applicable law requires otherwise.
13. Contact us
Questions about this Privacy Policy or our data practices: ariya.faith@ariyafaith.com
Cristian Hernandez