Privacy Policy
The Bible Letter is a daily devotional app. It is built to need as little about you as possible: you can use every free feature without an account, we show no ads, and we do not track you across apps or websites.
This policy describes what the app and our server actually handle. "We" means OWNER_LEGAL_NAME_PLACEHOLDER, the publisher of the app.
What we collect, and why
| Data | Why |
|---|---|
| An anonymous device identity: a random user ID and device ID created on first launch, a secret that lets this device sign back in (stored on our server only as a hash), plus platform, app version, OS version, time zone and language | To keep your likes, saves and settings, to send the daily letter at your local time, and to keep the app working with your app version. |
| Likes and saves: which letters you liked or saved, and when | Private bookmarks, synced so you do not lose them. Nobody else can see them. |
| Reminder settings: whether reminders are on and the time you chose | To deliver the daily letter when you asked for it. |
| Push notification token (from Apple or Google, through Firebase Cloud Messaging) | To deliver the daily letter notification. It is removed when you turn reminders off, sign out or delete your account, and cleared automatically after 90 days without use. |
| Sign in with Apple or Google (optional): only the account identifier Apple or Google gives us for this app | To keep your likes and saves across your devices. We do not ask for your name or email address. |
| Purchases (optional Premium subscription): the store's transaction or purchase identifier (a Google purchase token is stored only as a one-way hash), product, status and renewal dates | To check with Apple or Google that the subscription is real and active, and to unlock Premium. We never see your payment details. |
| Anonymous error reports: a short, scrubbed error message with app version, platform and time. No user ID, device ID or IP address is stored with it | To find and fix crashes. You can turn this off in Settings → Diagnostics. |
| Server logs: IP address, time, request path and status, kept for 14 days | Security (rate limiting, abuse prevention) and troubleshooting. |
What stays on your device
The letters you have read, the visual and musical "recipe" of each card, your display, sound and narration preferences, and your session history are stored on your device only. Read-aloud uses your device's own text-to-speech. Your sign-in secret is kept in the device's secure storage (Keychain or Android Keystore) and is not included in device backups.
What we do not do
- No advertising, no advertising identifiers, no analytics SDKs, no tracking across apps or websites.
- We do not sell or share your data for marketing.
- We do not read your contacts, photos, location, microphone or camera. Saving a share image to your photo library happens only when you choose it, through the system's own dialog.
Who processes data for us
- Our hosting provider (HOSTING_PROVIDER_PLACEHOLDER), where our server and database run.
- Google Firebase Cloud Messaging and Apple Push Notification service, which deliver notifications (they receive the push token and the notification text).
- Apple and Google, when you sign in with them or buy Premium through their stores. Their own privacy policies apply to what you do in their sign-in and payment screens.
How long we keep it
Account data is kept while you use the app. Deleting your account (below) removes it at once. Database backups are kept for 14 days, so deleted data disappears from backups within 14 days. Records of store purchases are kept without any link to you, because stores and tax rules require transaction records.
Deleting your data
In the app, open Me → Account → Delete account. This permanently deletes your user record, devices, sign-in links, likes, saves, reminder settings, notification history and push tokens from our server. Deleting your account does not cancel an active subscription; cancel it in your App Store or Google Play subscription settings. You can also ask us to delete your data by writing to support@troysoft.com.tr.
Your rights
Depending on where you live (for example under the GDPR or the CCPA), you may ask to access, correct, export or delete your data, or object to its use. Because the app does not know your name or email, please describe your device and when you installed the app, or sign in and tell us which provider you used, so we can find your data.
Children
The app is suitable for all ages but is not directed at children under 13, and we do not knowingly collect personal information from them beyond the anonymous identity described above.
Security
All traffic is encrypted (HTTPS). Sign-in and refresh secrets are stored only as hashes. Purchases and sign-ins are verified on our server against Apple's and Google's own keys.
Changes
If this policy changes, we will update the date above and, for meaningful changes, tell you in the app.
Contact
OWNER_LEGAL_NAME_PLACEHOLDER · OWNER_POSTAL_ADDRESS_PLACEHOLDER · support@troysoft.com.tr