Guest access and service records
The first release uses guest accounts and does not offer Apple, Google or other sign-in. We generate a random identifier in iOS Keychain and an associated service account to provide access, allowances and purchase verification. These identifiers are pseudonymous, not proof that your information is anonymous. Keychain data may survive reinstallation.
Essential service records include app and system versions, device model, language, time-zone settings, request context, usage allowances, push tokens you enable and Apple transaction information. Apple processes payment; we do not receive your payment-card details or Apple ID password.
Your content and faith information
Depending on the features you choose, your device holds recordings, imported text, transcripts, notes, conversations, prayers, highlights, reading progress, preferences and onboarding answers. The current onboarding asks for a name or nickname and faith-related answers; an age range can be skipped. These answers remain on your device unless you allow personal-content cloud sync.
Faith answers, prayers, reading activity and material submitted to AI may reveal religious beliefs or other sensitive information. Do not include another person's private or sensitive information without the necessary permission.
Separate choices for cloud AI and personal-content sync
Before your first cloud AI request, the app asks for explicit permission to send the necessary recording, text, question and context to Supabase and the disclosed transcription or AI provider. This may include religious or other sensitive information. Cloud processing also stores submitted AI content and results to provide the requested feature, even if personal-content sync is off.
Personal-content sync is a separate choice covering your profile answers, prayers, highlights, notes and reading progress. You may decline either choice and continue using available local features. Change or withdraw a choice in Profile → Privacy and cloud services. Withdrawal stops new transfers covered by that choice; it does not undo lawful earlier processing or immediately cancel work already submitted. Use account deletion to remove existing cloud account content.
Providers and purposes
Supabase provides the backend, storage and optional personal-content sync. Soniox transcribes submitted audio and provides some generated speech. Google Gemini, Anthropic and OpenAI are disclosed AI providers; server configuration selects the provider for a particular task. YouTube URL transcription uses Google Gemini's documented video input. A material change to the disclosed processing requires an updated notice and, where required, renewed permission.
Apple provides StoreKit purchases, push delivery, on-device speech and system permissions. Live Apple speech recognition is restricted to on-device processing in this release. Feedback may include a message, optional email, device/app details and request context; Resend delivers support and operational notifications. We do not sell your information or use it for third-party targeted advertising.
Device permissions
Microphone access records material you choose to capture. Speech recognition supplies live text when supported on device. Camera access adds a note photo or scans a Bible passage. Selected photos and original camera images stay on the device; recognized text may be processed or synced under your cloud choices. Saving an insight card requests Photos add-only access.
Notifications and Screen Time access are requested for their respective features. You can change these system permissions in iPhone Settings. A system permission is separate from permission to share personal content with cloud providers.
Read to Unlock
Selected app, category and website tokens, schedules, reading goals and timer progress are stored locally in the app's shared container. Read to Unlock does not upload selected app identities or app usage history. App-wide reading progress may sync only when personal-content sync is allowed.
Pause or stop blocking in the app, or revoke Screen Time permission in iPhone Settings. Deleting account data clears the personal blocking state and restrictions.
YouTube and sharing
A public YouTube URL, video identifier and content needed for the requested transcription are sent to Google Gemini after your cloud AI permission. We use the official oEmbed endpoint for a title; the app does not download YouTube audio or video. Public transcript results may be reused in a shared cache with a 24-hour expiry, separate from personal account content. The embedded player connects directly to YouTube under its privacy terms.
Creating a share link makes selected content available to anyone holding that link. Review it first. Revoking a link or deleting your account stops access through the link, but cannot erase copies another person already saved. A prayer's private setting controls sharing; it does not by itself disable cloud sync.
Retention and deletion
Local content remains until you delete it or remove the app, subject to iOS Keychain and backup behavior. Submitted AI content and allowed synced content remain in your cloud account until deleted. Use Profile → Your data → Delete account to remove the guest account, associated content and share access. Deleting only the app does not request cloud deletion.
When accepted, account access and live database content are removed; Storage and Soniox cleanup can complete asynchronously. The app keeps a private deletion receipt so you can check progress. Our cleanup target is within 30 days; delayed requests continue to retry and are flagged for support follow-up. Contact support with the receipt reference if completion is delayed.
Completed deletion records and receipts expire 30 days after completion; raw account identifiers and file paths are cleared from the completed cleanup record. A pseudonymous owner reference is retained only to associate late provider cleanup with the deletion request, and expires with that record; it is not anonymous. A hashed device identifier used to prevent invitation-reward abuse expires 180 days after the claim. A random Keychain identifier remains for subsequent guest access. Apple transaction records are kept where needed to verify purchases and prevent revoked purchases being restored; they do not keep your deleted notes or prayers.
Backups, infrastructure logs, provider records and support communications have separate retention rules determined by their purpose and applicable obligations. Contact us for a particular record or a deletion request. Deleting an account does not cancel an Apple subscription; cancel it in Apple subscription settings.
Purposes, legal bases and international processing
Where a legal basis is required, essential guest service and purchase processing supports the service contract; optional cloud AI and sensitive personal-content sync rely on your explicit permission; necessary security and invitation-abuse prevention serve legitimate interests; legally required records support legal obligations. Religious and other sensitive content receives the additional protection applicable to that information.
Our providers may process information outside your country. Applicable transfer requirements, including an adequacy decision or approved contractual safeguards where needed, must be met. Contact support for the relevant processing locations and safeguards or to request further information.
Your rights and requests
Contact support@calvityai.com to request access, correction, deletion or a copy of information connected to your guest account. Where applicable, you may withdraw consent, request portability or restriction, object to processing, or complain to your local data-protection authority. Withdrawal does not affect processing that was lawful before it.
We verify requests using only necessary account or receipt information and respond within applicable legal time limits. Use “Bible Pocket Privacy Request” in the subject. Do not email full recordings, payment credentials or identity documents unless a secure verification process is arranged.
Website, security and young users
Marketing pages have no advertising trackers, analytics scripts, registration or payment forms. Appearance preferences stay in your browser; hosting and security services receive normal delivery information, including IP addresses and request details. External services have their own privacy terms.
We use transport encryption, iOS file protection and Keychain, and server access controls. These measures do not make cloud content end-to-end encrypted. Protect your device and contact support if you suspect a security issue.
The service is not directed at children below the minimum age to consent to digital services in their country. Where guardian authorization is required, cloud features must not be used without it. Contact support if a child's information was submitted without required authorization so it can be removed.
Contact and changes
Provider: Calvity AI (Bible Pocket team). Privacy and service contact: support@calvityai.com. We publish policy changes here and notify users of material changes in the app or website. New processing requiring permission is not authorized merely by continued use.