This policy explains what the Biblically app stores, the legal basis for processing it, who it is shared with, and how to delete all of it. Two things are true of Biblically that are not true of most apps, and they shape everything below: there are no analytics, advertising, or tracking technologies in the app of any kind, and we never sell, license, or share your personal information for anyone else's purposes.
It covers the Biblically mobile app and the biblically.app website (together, the "App"). Biblically is made and run by an independent individual developer, not a company. Full details of who is responsible for your data, and how to get in touch, are set out further down.
"Personal information" means information relating to an identified or identifiable person, as defined by the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), and other applicable privacy laws. Which parts of this policy apply to you depends on where you live; the sections on your rights say so explicitly.
Biblically is for devotional and informational use only. It does not provide medical, psychological, legal, or pastoral counselling. The daily check-in records how you say you feel so that you can see your own patterns over time; it is not a clinical assessment and nobody reviews it. If you are struggling, please reach out to a qualified counsellor, licensed medical professional, or trusted pastoral caregiver. In an emergency, contact your local emergency services immediately — 911 in the United States, 112 across Europe.
| Category | What it is |
|---|---|
| Account information | Your email address and, where the provider supplies it, your name. Sign-in is handled entirely by Apple or Google; we never see or store a password. If you use Sign in with Apple and choose Hide My Email, we only ever receive Apple's private relay address and never your real one. |
| Content you create | Bookmarked chapters; highlighted verses and any notes attached to them; favourited passages; prayer journal entries; your daily check-in answers (how connected you feel and how you are feeling, each on a five-point scale) and whether you read or journaled that day. |
| Information revealing religious belief | Your tradition setting (Catholic, Orthodox, or neither), which decides the canon shown, and your answers to the short questions asked when you first create an account. Your journal entries may also reveal your beliefs. This is special category data and is treated accordingly — see below. |
| Stored only on your device | Chapters you have read, cached so they work offline; your reading position and display preferences; and your Daily Focus app selection. None of this is uploaded. |
| Technical information | Our hosting provider records standard server logs — IP address, timestamps, and the request made — as a normal part of running a service and for security. We do not use this to profile you, and we run no analytics on it. |
| Messages you send us | If you email us for support, we keep your message and address so we can reply. |
Information revealing religious beliefs is a "special category" of personal data under the GDPR (Article 9) and receives extra protection. We process it on the basis of your explicit consent, given when you choose a tradition and answer the opening questions, and we process it solely to operate the App for you — showing the right canon, saving your journal, and displaying your own history back to you.
We do not use it for advertising, profiling, or research. We do not sell it, license it, or share it with data brokers or AI developers. You can withdraw your consent at any time by deleting your account, which erases the underlying data outright.
The App contains no analytics or telemetry SDKs of any kind. We do not collect your location, contacts, photos, health data, calendar, or advertising identifier. We show no ads and build no advertising profiles. The website sets no cookies and has no tracking pixels, which is why you were not asked to consent to any.
Daily Focus shields distracting apps until you have read. It is built on Apple's Screen Time (Family Controls) framework, and Apple's design means the App cannot see which apps you chose — the system returns an opaque reference, not a list. That reference is stored only on your iPhone, in the App's private storage. It is never transmitted to us or to anyone else, and we could not read it if it were. Nothing about your Screen Time usage reaches us.
The legal-basis column applies where the GDPR or UK Data Protection Act governs your data.
| Purpose | Legal basis |
|---|---|
| Creating and running your account, and syncing your content between your devices | Performance of a contract |
| Showing the canon matching your tradition, and saving journal entries, check-ins and intake answers that may reveal religious belief | Explicit consent (GDPR Art. 9(2)(a)) |
| Generating an explanation when you ask for one | Performance of a contract |
| Keeping the service secure, preventing abuse, and diagnosing faults | Legitimate interests — running a service that works and is not abused |
| Replying to you when you contact us | Legitimate interests, or performance of a contract |
| Complying with legal obligations and responding to lawful requests | Legal obligation |
We do not process your information for marketing. The App sends no promotional email and no push notifications.
Only the service providers needed to run the App. Each acts on our instructions or as an independent controller for the limited purpose described, and each has its own privacy policy.
| Recipient | What it receives | Why |
|---|---|---|
| Supabase | Your account and all content you create | Hosts the database and handles sign-in. Data is stored in the United States. |
| Apple and Google | Whatever their own sign-in flow involves | They authenticate you and tell us your email address. |
| bolls.life | Your IP address and which chapter is requested | Serves the Bible text. No account information is sent. |
| OpenAI | Only the verse text and its reference | Generates the optional passage explanation. Nothing identifying you is sent — the request contains the passage and nothing else. Results are cached without any link to who asked, and reused for everyone. |
Beyond these, we may disclose personal information where we are legally required to — to comply with a valid legal obligation or lawful request from an authority, or to establish, exercise or defend legal claims. If the App were ever transferred to someone else, your information could transfer with it; we would tell you in the App before that happened and you would be able to delete your account first.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under the CCPA and other US state privacy laws. We have never done so.
Biblically is made and operated by Yun Gu Ko, an individual developer acting as the data controller for the App. There is no company behind it and no other party has access to your information.
For any question about this policy, your data, or to exercise any of the rights set out below, write to hello.biblically@gmail.com. Requests are handled personally and we will respond within one month.
Our hosting is in the United States, so if you use the App from outside the US your information is transferred there. Where the GDPR or UK Data Protection Act applies, such transfers are made under the safeguards those laws require, including Standard Contractual Clauses entered into by our hosting provider.
Your account and everything in it are kept for as long as you use the App. When you delete your account, that content is erased immediately — it is not queued, held for a grace period, or kept in a reduced form. Residual copies may persist briefly in our hosting provider's encrypted backups before those are overwritten in the normal course, typically within 30 days.
Two things sit outside your account and so are not affected by deleting it. Support emails you have sent us, and our replies, are kept for as long as needed to resolve your question and a reasonable period afterwards. Explanation text generated for a passage is cached without any link to the person who requested it; it is not personal information and it remains after an account is deleted.
We would retain information beyond that only where the law specifically requires it, or where it is needed to establish, exercise or defend a legal claim — the narrow exceptions the GDPR's right to erasure allows for. Nothing else survives deletion: your journal entries, highlights, notes, bookmarks, favourites, check-in answers and tradition setting are destroyed with the account and cannot be recovered by us or by you.
In the App, go to Me → Account and tap Delete account. Deletion is immediate and permanent: your account and every record described above are removed from our database, and the copy held on your device is erased at the same time. There is no recovery period and we keep no separate copy of your content. You do not need to contact us or give a reason.
Signing out, by contrast, leaves your data intact so that you can sign back in.
Connections between the App and our servers use TLS encryption, and data is encrypted at rest by our hosting provider. Access to the database is restricted per-user by row-level security, so one account cannot read another's content. No system is perfectly secure, but we take reasonable and appropriate technical and organisational measures to protect your information.
Biblically is not directed at children under 13, and we do not knowingly collect personal information from them. If you are under the age at which you can consent to data processing in your country — 13 to 16 depending on where you live in the EU — please use the App only with the permission of a parent or guardian. If you believe a child has provided us with personal information, contact us and we will delete the account.
Where the GDPR or UK Data Protection Act applies, you have the right to:
Exercise any of these by emailing hello.biblically@gmail.com. We will respond within one month. There is no fee unless a request is manifestly unfounded or excessive.
If you live in California, Virginia, or another state with a comprehensive privacy law, you have the right to know what personal information we collect and why, to access a copy of it, to correct it, to delete it, and not to be discriminated against for exercising these rights. Because we do not sell or share personal information and do not use it for targeted advertising or profiling, there is no opt-out for you to exercise — but the rights above still apply, and you may exercise them by emailing hello.biblically@gmail.com. You may use an authorised agent, and we may need to verify your identity before acting on a request.
If this policy changes materially we will update the date at the top and, where the change affects how your data is used, tell you in the App before it takes effect. Where a change requires your consent, we will ask for it.
Questions about this policy, your data, or anything else: hello.biblically@gmail.com