Privacy Policy
Effective Date: February 5, 2026
This Privacy Policy describes how Grace ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our mobile application Grace (the "App"). We are committed to protecting your privacy and ensuring transparency about our data practices.
Summary: We collect minimal data necessary to provide our Bible reading and spiritual guidance services. We do not sell your personal information. We do not track you across other apps or websites.
1. Information We Collect
1.1 Information You Provide Directly
- Account Information: When you create an account, we collect your email address and optional display name.
- Profile Preferences: Your selected Bible version preferences, notification settings, and reading goals.
- User Content: Notes, highlights, and bookmarks you create within the App.
- AI Chat Conversations: Questions and messages you send to our AI biblical guidance feature to provide personalized Scripture-based responses.
- Onboarding Responses: Your answers to optional onboarding questions to personalize your experience.
1.2 Information Collected Automatically
- Usage Data: Pages viewed, features used, reading history, streak data, and time spent in the App.
- Device Information: Device model, operating system version, unique device identifiers, and App version.
- Log Data: IP address, access times, and crash reports for troubleshooting purposes.
1.3 Information We Do NOT Collect
- Precise location data
- Contacts or address book information
- Photos or media from your device
- Health or fitness data
- Financial or payment card information (payments are processed by Apple)
2. How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide core App functionality | Account info, preferences, user content | Contract performance |
| Personalize daily verses and content | Preferences, usage data, onboarding responses | Legitimate interest |
| Provide AI biblical guidance | Chat conversations, preferences | Contract performance |
| Track reading streaks and progress | Usage data | Contract performance |
| Send push notifications (if enabled) | Device tokens, preferences | Consent |
| Improve App performance and fix bugs | Device info, log data, crash reports | Legitimate interest |
| Respond to support requests | Account info, device info | Contract performance |
3. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
We may share your information only in the following circumstances:
3.1 Service Providers
We work with trusted third-party service providers who assist us in operating the App:
- Cloud Hosting: To store your account data and content securely.
- AI Processing: To power our biblical guidance feature. Your conversations are processed securely and are not used to train AI models.
- Analytics: To understand App usage patterns and improve our services (aggregated, non-identifying data only).
3.2 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect the rights, property, or safety of Grace, our users, or others.
3.3 Business Transfers
If Grace is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:
- Account Data: Retained until you delete your account.
- Usage Data: Retained for up to 24 months for analytics purposes, then aggregated or deleted.
- AI Chat History: Retained for up to 90 days to provide conversation context, then automatically deleted.
- Log Data: Retained for up to 12 months for troubleshooting, then deleted.
After account deletion, we may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention) for up to 30 days.
5. Data Security
We implement industry-standard security measures to protect your information:
- Encryption of data in transit (TLS/SSL) and at rest (AES-256)
- Secure authentication and access controls
- Regular security assessments and monitoring
- Limited employee access on a need-to-know basis
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
6. Your Rights and Choices
6.1 Access and Portability
You can request a copy of your personal data by contacting us at privacy@mydailygrace.org. We will provide your data in a commonly used, machine-readable format within 30 days.
6.2 Correction
You can update your account information directly in the App settings, or contact us to correct inaccurate data.
6.3 Deletion
You can delete your account at any time through the App settings (Settings > Account > Delete Account). Upon deletion:
- Your account and profile will be permanently removed
- Your notes, highlights, and bookmarks will be deleted
- Your AI chat history will be deleted
- Deletion is completed within 30 days
6.4 Notification Preferences
You can manage push notifications through your device settings or within the App at any time.
6.5 Opt-Out of Analytics
You can opt out of analytics collection in the App settings (Settings > Privacy > Analytics).
7. Tracking and Advertising
We do not track you across other companies' apps or websites. We do not use your data for targeted advertising.
Grace does not:
- Use advertising identifiers (IDFA) to track you
- Share data with data brokers
- Display third-party advertisements
- Participate in cross-app tracking
In accordance with Apple's App Tracking Transparency framework, we do not request permission to track because we do not engage in tracking activities.
8. Third-Party Services
Our App may contain links to third-party websites or services (e.g., Bible publisher websites). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
9. Children's Privacy
Grace is not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under these ages.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@mydailygrace.org. We will take steps to delete such information promptly.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. We ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant authorities.
11. California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: Request information about the categories and specific pieces of personal information we have collected.
- Right to Delete: Request deletion of your personal information.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise these rights, contact us at privacy@mydailygrace.org or use the in-app deletion feature.
12. European Residents (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):
- Access: Request access to your personal data.
- Rectification: Request correction of inaccurate data.
- Erasure: Request deletion of your data ("right to be forgotten").
- Restriction: Request restriction of processing.
- Portability: Receive your data in a structured, machine-readable format.
- Object: Object to processing based on legitimate interests.
- Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise these rights, contact us at privacy@mydailygrace.org. You also have the right to lodge a complaint with your local data protection authority.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes:
- We will update the "Effective Date" at the top of this policy
- We will notify you via email or in-app notification for significant changes
- We will post the updated policy on this page
Your continued use of the App after the effective date of the revised policy constitutes acceptance of the changes.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: privacy@mydailygrace.org
- Support: support@mydailygrace.org
We will respond to your inquiry within 30 days.
15. App Store Privacy Details
In accordance with Apple's App Store requirements, here is a summary of our data practices:
| Data Type | Collected | Linked to Identity | Used for Tracking |
|---|---|---|---|
| Email Address | Yes | Yes | No |
| Name | Optional | Yes | No |
| User Content | Yes | Yes | No |
| Usage Data | Yes | No | No |
| Device ID | Yes | No | No |
| Crash Data | Yes | No | No |