Privacy Policy

Ian Marco ("we," "us," or "our") operates Sacred: Bible & Daily Devotion ("Sacred" or "the App"), a Christian devotional mobile application, and the website thesacredapp.com ("the Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Sacred. By using Sacred, you agree to the collection and use of information in accordance with this policy.

Sacred is designed with a privacy-first approach. We collect only the data necessary to provide you with a meaningful devotional experience. We do not sell your personal data for money, and the App does not use your data for third-party advertising. Our website uses a small set of analytics and advertising tools, described in the "Website Analytics and Advertising" section below — along with a simple way to opt out at any time.

1. Information We Collect

When you create an account, we collect your name, email address, and an encrypted password for authentication and communication purposes. We also collect your profile preferences such as language preference, devotional level, and theme preferences in order to personalize your content experience. If you use the Bible Chat feature, we process the questions and messages you enter in order to provide AI-powered responses.

We automatically collect usage data such as features used, content viewed, time spent in the App, and frequency of use. This helps us improve the App, curate content, and perform analytics. We also collect device information including device model, operating system version, and app version for technical support and compatibility purposes. Performance data such as crash logs and error reports are collected to maintain app stability.

Sacred does not collect precise geolocation data, photos, videos, or audio from your device, contacts, calendar data, or messages, health, fitness, or biometric data, or financial or payment information (this is handled exclusively by Apple). The App does not collect data for the purpose of tracking you across apps or websites owned by other companies.

2. How We Use Your Information

We use your information to provide, operate, and maintain the App and its features, to personalize your devotional experience based on your language and level preferences, to process and manage your subscription through Apple's In-App Purchase system, and to provide AI-powered Bible Chat responses. We also use your information to send service-related communications such as updates and security alerts, to analyze usage patterns to improve content and user experience, to diagnose technical issues and maintain app stability, and to comply with legal obligations.

3. Sharing of Your Information with Third Parties

In compliance with Apple's App Store guidelines, we clearly disclose all third parties with whom your data may be shared. We will always obtain your explicit permission before sharing personal data.

Apple Inc. processes transaction data for In-App Purchases and subscription management. We receive only subscription status information. RevenueCat Inc. receives an anonymous subscriber ID and subscription status for subscription management and analytics. Our AI service providers (such as Anthropic) process the text of your Bible Chat messages in real-time to generate responses. These messages are not used for model training without your separate consent. Bible content providers receive content requests without personal identifiers in order to deliver Bible text and narrated audio. Our hosting provider (Supabase) stores account data, user preferences, and usage data for database hosting and user authentication. OneSignal Inc. processes device tokens and notification interaction data to deliver push notifications and engagement analytics. Their privacy policy is available at onesignal.com/privacy_policy. Google LLC processes the user's email and basic profile information solely for authentication purposes via Google Sign-In (OAuth 2.0 identity verification). Their privacy policy is available at policies.google.com/privacy. AppsFlyer Ltd. receives device information and, with your consent via Apple's App Tracking Transparency prompt, your advertising identifier (IDFA) for mobile attribution and analytics — helping us understand how users discover Sacred. When you use the "Share Sacred App" feature, a unique referral link is generated; we do not access your contacts or address book. Their privacy policy is available at appsflyer.com/legal/privacy-policy. Mixpanel Inc. receives usage events (screens viewed, features used, flows completed), device information (model, OS, app version), and approximate location derived from IP address for product analytics — helping us understand usage patterns and improve the App. Mixpanel uses a randomly generated device identifier, not your Android ID or advertising ID. Mixpanel acts as a data processor, processing data solely on behalf of Sacred. Their privacy policy is available at mixpanel.com/legal/privacy-policy. Functional Software, Inc. (Sentry) receives crash logs, stack traces, and device diagnostic information (battery level, memory, connectivity, app version) for error tracking and crash reporting — helping us detect and fix bugs to improve app stability. Sentry does not collect emails, names, or advertising IDs; it uses random per-installation identifiers that are not trackable across apps. Sentry acts as a data processor, processing data solely on behalf of Sacred. Their privacy policy is available at sentry.io/privacy. ElevenLabs Inc. processes text content for text-to-speech audio generation. No personal identifiers are sent with the text content. Their privacy policy is available at elevenlabs.io/privacy.

We do not sell your personal data to any third party for money. Within the App, we do not share your data with advertising networks or data brokers, we do not allow third parties to use your data for their own marketing purposes, and we do not use your data for tracking across apps or websites owned by other companies. Our website works a little differently: it uses advertising and analytics tools that may be considered "sharing" under California law — see the "Website Analytics and Advertising" section below, and the "Do Not Sell or Share My Personal Information" link in the Site footer to opt out at any time.

4. Third-Party AI Data Processing

In accordance with Apple's App Store Review Guideline 5.1.2(i), we provide the following disclosure regarding AI data processing. When you use the Bible Chat feature, the text of your messages is transmitted to our third-party AI service provider to generate responses. Messages are processed in real-time and are not stored by the AI provider beyond the session duration unless you separately consent. By using Bible Chat, you explicitly consent to this data processing. You can choose not to use Bible Chat if you do not wish to share data with third-party AI services. Your personal data and chat interactions are not used to train AI models unless you provide separate, explicit, opt-in consent. All data transmitted to AI service providers is encrypted in transit using TLS 1.2 or higher.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit using TLS/SSL protocols, encryption of sensitive data at rest, secure authentication mechanisms with encrypted password storage, regular security assessments and updates, and access controls limiting personnel access to personal data on a need-to-know basis. While we strive to use commercially reasonable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure and we cannot guarantee absolute security.

6. Data Retention and Deletion

Account information is retained for the duration of your active account plus 30 days after a deletion request. Usage and analytics data is retained for 24 months and then anonymized or deleted. Bible Chat conversation history is automatically deleted after 90 days. Performance and crash data is retained for 12 months. Subscription records are retained as required by tax and accounting laws, typically 7 years.

You may request deletion of your account and associated personal data at any time by navigating to Settings > Account > Delete Account within the App, or by contacting us at hi@thesacredapp.com. We will process the request within 30 days. All personal data associated with your account will be permanently deleted or anonymized. We will send a confirmation of deletion to your registered email address. Some data may be retained where required by law or for legitimate business purposes, but only for the minimum duration required.

Deleting your account does not automatically cancel your subscription. You must cancel your subscription separately through your Apple ID Account Settings to avoid future charges.

7. Your Rights

Regardless of your location, you have the right to access and request a copy of the personal data we hold about you, to request correction of inaccurate personal data, to request deletion of your personal data, to withdraw consent for data processing at any time, and to request a copy of your data in a structured, commonly used, machine-readable format.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to request that we limit the processing of your personal data, to object to our processing of your personal data based on legitimate interests, and to file a complaint with your local Data Protection Authority.

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the right to request that we delete your personal information, and the right to non-discrimination for exercising your rights. We do not sell personal information for money. Some of the advertising tools on our website may qualify as "sharing" personal information for cross-context behavioral advertising under the CPRA; you have the right to opt out of that sharing at any time from our Your Privacy Choices page (the "Do Not Sell or Share My Personal Information" link in the Site footer), and we honor the Global Privacy Control signal as a valid opt-out request.

To exercise any of the above rights, please contact us at hi@thesacredapp.com. We will respond to your request within 30 days or within the timeframe required by applicable law.

8. Device Permissions

Sacred requires internet access for content delivery and subscription verification. The App may optionally request permission to send notifications for daily devotional reminders and verse of the day. We respect your device permission settings and will never attempt to manipulate, trick, or force you to consent to unnecessary data access.

9. App Tracking Transparency

The Sacred app does not track you across apps or websites owned by other companies for advertising purposes. We use AppsFlyer for mobile attribution analytics to understand how users discover our app. With your explicit consent via Apple's App Tracking Transparency (ATT) prompt, we may collect your device's Identifier for Advertisers (IDFA) solely for attribution purposes. You can opt out at any time by declining the ATT prompt or through your device's Settings > Privacy > Tracking.

10. Children's Privacy

Sacred is designed to be suitable for users of all ages and contains only faith-based, devotional content. We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information promptly. Within the App, we do not send personally identifiable information or device information to third parties for advertising or tracking purposes; our website and its advertising tools are intended for general audiences and are not directed at children. Parents or guardians who believe their child has provided personal information without their consent should contact us at hi@thesacredapp.com.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including Argentina and the United States, where our service providers operate. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission and Data Processing Agreements with all third-party service providers.

12. Website Analytics and Advertising

This section is about our website, thesacredapp.com — including our blog and the Sacred quiz — rather than the App itself. Like most websites, ours uses a few tools that help us understand which content resonates and whether our advertising is working:

Meta (Facebook) Pixel and Conversions API. These measure how well our ads on Facebook and Instagram perform and help us reach people who may love Sacred. The Pixel uses cookies to note the pages you visit and the actions you take on our Site (like completing the quiz). If you create an account or subscribe on our Site, we may also send Meta a hashed (scrambled, not directly readable) version of your email address, along with technical details such as your IP address and browser type, through Meta's Conversions API so those conversions are counted accurately. Meta's privacy policy is available at facebook.com/privacy/policy, and you can manage your ad preferences at facebook.com/adpreferences.

Google Analytics 4. Tells us how visitors find and move through the Site (pages viewed, approximate location derived from IP address, device type) so we can improve it. Google's privacy policy is available at policies.google.com/privacy.

Pinterest Tag. Measures visits that come from our Pinterest content and ads. Pinterest's privacy policy is available at policy.pinterest.com/privacy-policy.

AppsFlyer Smart Script. Runs on our blog to build the app-store links you click, adding attribution parameters so we know which article brought you to the stores. AppsFlyer's privacy policy is available at appsflyer.com/legal/privacy-policy.

Your choices. Under the California Consumer Privacy Act, the use of some of these advertising tools may be considered "sharing" personal information for cross-context behavioral advertising. We never sell your personal information for money — and you can turn this sharing off at any time: visit Your Privacy Choices (the "Do Not Sell or Share My Personal Information" link in the Site footer) and we will disable these tools for your browser. We also honor the Global Privacy Control (GPC) signal automatically: if your browser sends it, these tools stay off without you having to do anything.

13. Cookies and Similar Technologies

Sacred is a native mobile application and does not use browser cookies. However, we may use similar technologies such as local storage and device identifiers for maintaining your session and login status, remembering your preferences and settings, and analytics and performance measurement. If you access Sacred-related web content such as this Privacy Policy page, standard web cookies may be used — see the "Website Analytics and Advertising" section above for the tools involved and how to opt out.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by email prior to the changes becoming effective. Your continued use of Sacred after the effective date of any modifications constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically.

15. Contact Information

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at hi@thesacredapp.com.