Privacy Policy

1. Introduction

Welcome to Devotion ("the App"), developed and operated by Believe PR, owned by Armando Jimenez. We are deeply committed to protecting your privacy and your spiritual practice.

Devotion is an AI-powered daily devotional app for Christians. Each day, the app generates a personalized devotional experience that adapts to your mood, chosen category, and the historical and spiritual significance of the date. Content is generated via Google's Gemini AI through Firebase AI Logic.

2. Privacy-First Approach

Devotion is built on a privacy-first foundation. We believe your spiritual practice and personal reflections should remain private. Unlike many apps, we:

• Store all devotional data locally on your device
• Never upload your personal content to our servers
• Don't require email, login, or any personal identification
• Don't serve any advertisements

Important: If you delete the app, all your saved devotionals, bookmarks, and preferences will be permanently lost. We cannot recover this data because we never had access to it.

3. Information We Collect

3.1 Information You Create

All of the following data is stored locally on your device and is NOT transmitted to our servers:

• Generated Devotionals: Daily AI-generated devotional content including scripture, reflections, prayers, and affirmations
• Mood & Category Selections: Your optional mood text and chosen devotional category (e.g., Gratitude, Peace, Hope)
• Bookmarked Devotionals: Devotionals you choose to save for later reading
• Devotional History: A chronological record of all your past devotionals
• Notification Preferences: Your daily reminder settings and times
• Theme Preferences: Light mode, dark mode, or system theme selection

3.2 Information Automatically Collected

We may collect the following anonymous data to improve the app experience:

• Firebase Analytics: Anonymous usage analytics such as screen views, feature usage, and your selected devotional category (e.g., "Hope", "Peace"). No personally identifiable information is collected. We do NOT collect the free-text mood description you enter.
• Firebase Remote Config: Feature flags and app configuration. No personal data is collected.
• Firebase Crashlytics: Anonymous crash reports including device type and OS version for stability improvements. Your devotional content is never included.
• Firebase App Check: Device attestation tokens to protect our backend from abuse. No personal data is collected.

3.3 Information We Do NOT Collect

We explicitly do NOT collect or have access to:

• ❌ Your mood entries or personal feelings
• ❌ Your devotional content or reflections
• ❌ Personal identification (name, email, etc.)
• ❌ Location data or GPS information
• ❌ Health or biometric data
• ❌ Contacts, calendar, or social media profiles
• ❌ Financial or banking information

4. How We Use Your Information

4.1 App Functionality (On-Device)

Your data is used entirely on your device to:

• Display your daily devotional content
• Store and retrieve your devotional history
• Manage your bookmarked devotionals
• Send daily devotional reminders at your chosen time
• Apply your preferred visual theme

4.2 AI Content Generation

When you generate a devotional, the following is sent to Google's Gemini AI:

• Your optional mood text (if provided)
• Your selected category (if chosen)
• The current date for contextual content

This information is used solely to generate your personalized devotional. See Section 6 for details on AI privacy.

4.3 App Improvement

Anonymous data helps us:

• Fix bugs via anonymous crash reports
• Understand feature usage via anonymous analytics
• Optimize app performance and stability

Your devotional content and personal entries are NEVER used for analytics.

5. Data Storage & Security

All your personal data is stored on your device using:

• Database: Local SQLite database via Drift (an offline-first database)
• Preferences: SharedPreferences (platform-standard key-value storage) for theme and notification settings
• iOS: Secure app sandbox with iOS encryption
• Android: Internal app storage with Android security

5.1 Data Retention

• Data remains on your device indefinitely until you delete it
• Deleting the app removes all local data permanently
• We have no ability to recover deleted data

6. AI-Generated Devotionals

6.1 How It Works

Devotion uses Google's Gemini AI (via Firebase AI Logic) to generate daily devotional content:

• Your optional mood text and chosen category are sent to Google's servers for processing
• The AI generates a complete devotional including scripture, reflection, prayer, and an action step
• The generated content is delivered to your device and stored locally

6.2 Privacy in AI Processing

Important privacy protections:

• Your mood input and category selections are processed by Google Gemini but are NOT stored long-term by Google
• Inputs are not linked to your personal identity
• No conversation history is retained on Google's servers after generation
• Subject to Google's AI privacy policies

6.3 Important Disclaimers

6.4 Opting Out

The AI generation is a core feature of the app. You can choose not to provide a mood or category, in which case the AI will generate a general devotional for the day.

7. Permissions

7.1 Required Permissions

Internet Access

• Purpose: Generate AI devotionals via Firebase AI, deliver anonymous analytics, and manage subscriptions
• Privacy: Only used for AI generation, analytics, and subscription verification — never to upload your personal data

Local Storage

• Purpose: Save devotionals, bookmarks, and preferences on your device

7.2 Optional Permissions

Notifications

• Purpose: Daily devotional reminders
• Privacy: Notifications are generic reminders and do not contain your devotional content or mood
• Control: You can enable or disable reminders at any time in Settings

7.3 Permissions We DON'T Request

Devotion does NOT request:

• ❌ Camera or photo library
• ❌ Location / GPS
• ❌ Contacts
• ❌ Calendar
• ❌ Microphone
• ❌ Health data
• ❌ Bluetooth

8. Subscriptions

8.1 Premium Subscription

Devotion offers a premium subscription tier for enhanced features:

• Billing: Monthly or annual auto-renewable subscription
• Payment: Managed via RevenueCat + Apple App Store / Google Play Store
• Cancellation: Cancel anytime in your App Store or Play Store subscription settings

8.2 Subscription Data

Subscription management involves:

• RevenueCat: Processes purchase tokens and manages subscription status. No personal content data is shared with RevenueCat.
• Apple / Google: Payment processing is handled entirely by Apple App Store or Google Play Store.

8.3 Refund Policy

Refunds are handled through:

• Apple: reportaproblem.apple.com
• Google: Google Play refund page

Refund policies are subject to Apple and Google's terms.

9. Third-Party Services

Devotion integrates the following third-party services:

9.1 Firebase Analytics

• Purpose: Anonymous usage data (screen views, feature usage)
• Data Collected: No personally identifiable information
• Privacy Policy: https://policies.google.com/privacy

9.2 Firebase Remote Config

• Purpose: Feature flags and app configuration
• Data Collected: No personal data
• Privacy Policy: https://policies.google.com/privacy

9.3 Firebase Crashlytics

• Purpose: Crash reports for stability improvements
• Data Collected: Device info, crash stack traces (NOT your devotional content)
• Privacy Policy: https://policies.google.com/privacy

9.4 Firebase AI / Google Gemini

• Purpose: AI-powered devotional content generation
• Data Collected: Mood text and category (processed, not stored long-term)
• Privacy Policy: https://policies.google.com/privacy

9.5 RevenueCat

• Purpose: Subscription management and purchase verification
• Data Collected: Purchase tokens, subscription status
• Privacy Policy: https://www.revenuecat.com/privacy

9.6 Apple App Store / Google Play Store

• Purpose: App distribution and subscription processing
• Data Collected: Purchase history, app downloads
• Privacy Policies: See Apple and Google policies above

9.7 Firebase App Check

• Purpose: Protects backend resources from abuse by verifying requests come from our authentic app
• Data Collected: Device attestation tokens
• Privacy Policy: https://firebase.google.com/support/privacy

9.8 Tracking Technologies

We do not use cookies. Firebase Analytics may use device-level identifiers (such as Apple's IDFA or Google's Advertising ID) for anonymous usage analytics. You can reset or limit these identifiers in your device's privacy settings (iOS: Settings > Privacy > Tracking; Android: Settings > Google > Ads).

No Advertising Services: Devotion does NOT use Google AdMob or any other advertising service. There are no ads in the app.

10. Your Privacy Rights

10.1 GDPR Rights (European Union)

If you are in the EU, you have the following rights:

Legal Basis for Processing

We process data on the following legal bases under GDPR Article 6:

• App functionality and AI content generation: Performance of a contract (Art. 6(1)(b)) — necessary to provide the service you requested.
• Analytics and crash reporting: Legitimate interest (Art. 6(1)(f)) — to improve app stability and user experience. You can limit analytics by resetting your device's advertising identifier.

We have not appointed a Data Protection Officer (DPO) as our processing activities do not meet the thresholds in GDPR Article 37. You may contact us at the email below for any data protection inquiries.

Firebase Analytics data is retained by Google for 14 months (default). Crashlytics data is retained for 90 days.

Your Rights

• Right to Access: Request information about data collected
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to data processing
• Right to Withdraw Consent: Withdraw consent at any time

10.2 CCPA Rights (California)

If you are in California, you have the following rights:

In the preceding 12 months, we have collected the following categories of personal information: device identifiers and usage data (via Firebase Analytics), crash diagnostic data (via Firebase Crashlytics), and mood/category selections (transmitted to Google Gemini for AI content generation).

We do NOT sell or share your personal information as defined under the California Consumer Privacy Act. We disclose data to the following categories of service providers: Google LLC (analytics, crash reporting, AI content generation) and Apple Inc./Google LLC (app distribution).

• Right to Know: Request details about collected data
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of data sale (we do not sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

10.3 Exercising Your Rights

Since most data is stored locally on your device:

• Access: All your devotionals and data are accessible within the app at any time
• Deletion: Delete the app to remove all local data, or remove individual devotionals within the app
• For analytics data: Contact us at the email below and we will address your request

11. Children's Privacy

Devotion is intended for a general audience aged 13 and older. We do not knowingly collect personal information from children under 13.

• Minimum age: 13 years old
• Parental supervision is recommended for younger users
• If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information and terminate any associated access
• If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at armando.jimenez.dev@gmail.com

12. International Users

12.1 Data Transfers

Since all your personal data is stored locally on your device, there are no international data transfers of your devotional content, mood entries, or bookmarks.

However, when generating a devotional, your mood text and category are processed by Google's servers and are subject to Google's data transfer policies.

12.2 Regional Compliance

• European Union: GDPR compliant
• California: CCPA compliant
• Brazil: LGPD compliant
• Other Regions: We respect all applicable privacy laws

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• New app features or functionality
• Changes in legal requirements
• Third-party service updates
• User feedback and privacy enhancements

13.1 Notification of Changes

When we make significant changes:

• The "Last Updated" date will be revised
• Changes will be highlighted in the policy
• We will display a prominent notice within the app for material changes
• Where required by applicable law, we will seek your renewed consent

13.2 Review Regularly

We encourage you to review this Privacy Policy periodically. The most current version will always be available within the app and on our website.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Response Time

We will respond to your inquiry within:

• 30 days for general inquiries
• 72 hours for urgent privacy concerns
• As required by applicable law for rights requests

Complaints

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection authority.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify the relevant supervisory authority within 72 hours and will inform affected users without undue delay as required by applicable law.

Governing Language

This Privacy Policy is provided in English and Spanish. In the event of any conflict or inconsistency between the English and Spanish versions, the English version shall prevail and govern.