Privacy Policy

Gospelkeep is designed so that your private prayer life does not need to become server data.

In particular:

• private prayer text in your Keep is stored locally on your device, not in Gospelkeep's server-side account database;
• prayer dictation audio is not retained by Gospelkeep and is not uploaded to Gospelkeep servers;
• private Keep searches run locally on your device;
• your Catholic or Orthodox tradition selection is kept locally and is not sent to Gospelkeep's account backend as a religious profile; if in-app analytics is on, it is sent only as an anonymous category on a single onboarding event, not linked to your account (section 13);
• in-app analytics and ad measurement never include prayer or Keep text, anything derived from it, which prayers you open, your search text, or your name;
• the app uses third-party advertising tools from Meta to learn which of Gospelkeep's ads brought you to the app, only while the usage statistics switch is on, and you can turn it off at any time in Settings > Account (section 11);
• Gospelkeep does not use private prayer content to target advertising or marketing;
• Gospelkeep does not sell private prayer content or use it to build advertising profiles.

Your device may include app data in Apple-provided device backup, restore, Quick Start, or device-transfer services according to your Apple and device settings. Gospelkeep does not operate those Apple backup systems and does not use them to read your private prayer text.

Depending on how you use Gospelkeep, local app data may include:

• private prayers and drafts;
• Gospel references and context associated with a prayer;
• timestamps and local lifecycle state for Kept or Recently Removed prayers;
• your selected Catholic or Orthodox tradition;
• your profile: the name you give, your age range, and your tradition;
• local reminder preferences;
• your usage statistics choice and, while it is on, a random install ID (section 13) and data Meta's advertising tools keep on your device (section 11);
• cached public Gospelkeep content and narration;
• local app settings;
• local entitlement or cache state needed for the app to operate.

Private Keep data is not uploaded to Gospelkeep's server-side account database.

Your profile. Gospelkeep may ask for a name, an age range, and your tradition. Age ranges start at 18. Your profile is stored on your device. Your name never leaves your device. Your age range and tradition are not sent to Gospelkeep's account backend, RevenueCat, or our email provider; they reach Gospelkeep only as anonymous categories in in-app analytics, if analytics is on (section 13). Your profile is included when you use Export, and it is deleted when you use Delete Account.

When you remove a prayer, Gospelkeep may keep it locally in Recently Removed for the app's documented recovery period. Under the current V1 design, removed prayer records are retained locally for up to 14 days before permanent local deletion, unless restored sooner.

You can read Gospelkeep public devotional content before creating an account. An account is required for account-dependent features such as beginning or saving into your Keep under the current product model.

If you create or use a Gospelkeep account, Gospelkeep may process:

• an opaque Gospelkeep or Supabase user identifier;
• your email address, including an email supplied through Sign in with Apple where Apple provides one;
• authentication provider information;
• account creation and lifecycle information;
• access-period information, such as the start and end of included account access;
• legitimate account or security state required to operate authentication and deletion;
• purchase or subscription entitlement state as described below.

If you sign in using email, Gospelkeep sends a six-digit one-time sign-in code to the email address you provide. You enter the code in the app, and Gospelkeep uses it only to authenticate that sign-in attempt. The sign-in flow does not send an email confirmation link or require a separate email-address confirmation step before sign-in.

Gospelkeep uses Supabase for authentication and account infrastructure. Sign-in code emails are sent through our email provider, Resend, which processes your email address and message-delivery information to deliver them.

If you use Sign in with Apple, Gospelkeep may securely process Apple account-linkage information needed to authenticate the account and, where applicable, revoke Gospelkeep's Apple authorization when you delete your Gospelkeep account. Gospelkeep does not receive your Apple ID password.

Purchases are processed through Apple and the App Store. Gospelkeep does not receive your full payment-card details.

Gospelkeep may use RevenueCat to determine purchase and entitlement status. Information processed for this purpose may include:

• an app or account identifier;
• App Store product and transaction identifiers;
• subscription or entitlement status;
• purchase, renewal, expiration, or cancellation-related status supplied through Apple or RevenueCat.

The price, billing period, currency, and product terms shown by Apple at the time of purchase control the purchase transaction.

For the limited Founding Lifetime offer, Gospelkeep keeps a server-side record associating the account identifier with a founding slot, the slot's status, and the times it was claimed or later restored. Before a slot is permanently claimed or a Founding Lifetime entitlement is restored, the App Store purchase is verified server-side against RevenueCat. This record contains no prayer content. It is used to prevent overselling the capped offer and to honour the entitlement afterwards.

Deleting your Gospelkeep account does not necessarily cancel an Apple subscription. If you have an active Apple subscription, you should manage or cancel it through Apple's subscription-management controls. You do not need to cancel first in order to request deletion of your Gospelkeep account.

Gospelkeep uses server infrastructure to deliver public Gospelkeep content such as published Gospel readings, patristic material, Prayer Library content, Related Scripture, and other approved public content.

A search for public Gospelkeep content may be sent to Gospelkeep's public-content backend so the search can be performed. Public search queries are not joined to your private Keep prayer text and are not used by Gospelkeep to build a religious-interest profile about you.

Private Keep search is separate and remains on-device.

Request a prayer. You can ask Gospelkeep to add a prayer to the Prayer Library. The text you type is sent only when you tap Send. It is stored anonymously in Gospelkeep's Supabase database, together with the app version, and is not linked to your account or your device. We use requests only to decide which prayers to add. Because a request is not linked to you, we cannot find or delete it for you later, so please do not include your name, contact details, or other personal information in a request.

Gospel and Fathers narration is delivered as pre-generated public media. Gospelkeep may use Cloudflare infrastructure, including Cloudflare R2 and CDN services, to deliver narration and other static assets.

As with ordinary internet services, infrastructure providers may process technical connection information such as IP address, request time, requested asset, user-agent or device and network information, and security or diagnostic information necessary to deliver and protect the service.

Narration requests do not contain your private prayer text.

If you choose prayer dictation, Gospelkeep uses Apple's speech and audio frameworks according to the capabilities available on your device.

Under the Gospelkeep V1 design:

• prayer audio is not retained by Gospelkeep;
• prayer audio is not uploaded to Gospelkeep servers;
• recognized prayer text remains part of the same private local prayer field used for typing.

If on-device speech processing is unavailable, Gospelkeep may offer typing instead rather than uploading private prayer audio to a cloud transcription service.

If you enable reminders, Gospelkeep may request permission to schedule local notifications on your device. Reminder settings are used to provide the reminder experience you configure.

You can change notification permissions through iOS settings.

If you contact us at support@gospelkeep.com, we receive the information you choose to send, such as your email address, message, troubleshooting details, and attachments.

Please avoid sending private prayer text or other sensitive information in a support message unless it is genuinely necessary for the support request. Information voluntarily sent to support is no longer confined to the on-device Keep and may be processed through our email or support providers for the purpose of responding to you.

We may retain support correspondence for as long as reasonably necessary to resolve the request, maintain security or business records, comply with law, or establish or defend legal claims.

Gospelkeep may offer optional marketing emails about Gospelkeep, including product updates, new features, devotional releases, offers, launch news, surveys, or other Gospelkeep-related communications.

Creating a Gospelkeep account does not by itself mean that you have agreed to receive promotional email where consent is required.

On the website. The email signup form on gospelkeep.com is provided by Kit, which processes the name and email address you enter to add you to our mailing list.

In the app. When you create an account, we share your email address with the service providers that run our email and in-app purchases, along with whether you have made a purchase and the date you created your account. You are added to our email list marked as unsubscribed, and we send you no marketing emails unless you tick the box to receive emails from Gospelkeep. The box is unticked unless you choose it. Our email provider may record whether our emails are delivered and which links you click. You can unsubscribe with the link in any email, or turn marketing emails on or off at any time with the email switch in Settings > Account. Deleting your account removes you from the list.

Where required, Gospelkeep will send promotional email only with appropriate consent. Marketing messages will identify Gospelkeep and provide a clear way to unsubscribe. You can also ask us to stop marketing emails by contacting support@gospelkeep.com.

If you unsubscribe, we may retain a minimal suppression record so that we can remember not to send you further promotional messages. Unsubscribing from promotional marketing does not prevent necessary service, security, purchase, account, privacy, or legal communications.

If Gospelkeep uses an email service provider, that provider may process your email address, consent or subscription status, message-delivery information, and, where enabled and legally permitted, campaign engagement information such as delivery, opens, clicks, and unsubscribe events. Gospelkeep will not provide your private prayer text, Keep content, tradition selection, or private religious profile to an email-marketing provider for targeting or segmentation.

Gospelkeep may advertise Gospelkeep on third-party platforms, search engines, social networks, app marketplaces, or other marketing channels.

When you see or interact with a Gospelkeep advertisement, the advertising platform may process information under its own privacy policy. Depending on the platform, your settings, and applicable consent requirements, this may include:

• that an ad was displayed or clicked;
• campaign or referral identifiers;
• browser or device identifiers;
• IP address and approximate location derived from it;
• a conversion event such as visiting a Gospelkeep page or installing or opening the app;
• other advertising information permitted by your platform or privacy settings.

On the gospelkeep.com website, Gospelkeep uses the Meta Pixel and Google Analytics, both delivered through Google Tag Manager, to measure and improve Gospelkeep's advertising. These website technologies may record that a Gospelkeep webpage was viewed, that the App Store link was tapped, device and browser information, an IP-derived approximate location, and cookie or similar identifiers used to connect these events. Section 12 describes these technologies in more detail and explains how to opt out.

The Meta Pixel and Google Analytics run only on the gospelkeep.com website, not inside the app. The Gospelkeep iOS app does not include Google Analytics and does not show third-party ads.

Third-party advertising in the app. Starting with version 1.2.0, the Gospelkeep iOS app includes third-party advertising tools from Meta, so we can learn which of our ads on Facebook and Instagram brought someone to Gospelkeep. The app tells Meta only when you:

• open the app;
• create an account;
• start a free trial, with the plan and its price;
• make a purchase, with the plan and its price.

Meta also receives basic device information, such as your phone model, software version, and IP address, and an ID that Meta's tools create on your phone. The app never sends Meta your name, email address, account ID, prayers, which prayers you open, your searches, or your tradition. Meta handles this information under its own privacy policy.

Apple's tracking prompt. Once, right after you create an account, the app explains why it asks and then, if you tap Continue, shows Apple's "Allow tracking" prompt. Meta receives your phone's advertising ID, a code Apple gives your phone for ads, only if you allow tracking. If you tap Not now or say no, it is not shared. You can change your answer at any time in iOS Settings > Privacy & Security > Tracking. Gospelkeep may also use Apple's own privacy-preserving ad measurement, which tells Meta that an install came from its ad without telling Meta who you are.

Turning it off. Meta's tools run only while the "Share usage statistics" switch in Settings > Account is on. It is the same switch as in-app analytics (section 13), with the same default: on outside the European Union, the European Economic Area, the United Kingdom, and Switzerland, with a notice when you sign up, and off in those regions until you opt in. Turning the switch off stops anything more going to Meta. Because we never send Meta your account ID, deleting your Gospelkeep account cannot remove what Meta already has; you can manage that in Meta's own settings.

Where Gospelkeep uses advertising measurement, remarketing, pixels, cookies, or similar technologies, we provide the opt-outs described in this section and in section 12, and additional consent or opt-out choices where required by applicable law or platform rules.

Gospelkeep does not provide private prayer text, Keep entries, private prayer searches, prayer audio, or your Catholic or Orthodox tradition selection to advertising platforms for targeting, audience creation, or personalized advertising. The website has no access to that information in the first place, because it exists only in the iOS app, on your device. Inside the app, Meta receives only what is listed above.

Because Gospelkeep is a religious devotional service, interaction with Gospelkeep content or advertising may itself allow a third-party platform to make its own inferences under that platform's policies. Gospelkeep does not authorize third-party advertisers to receive your private Keep data or use Gospelkeep-held sensitive religious information for targeted advertising.

The Gospelkeep iOS app does not need to display third-party advertising in order for Gospelkeep to market the service externally. If Gospelkeep later introduces materially different advertising or tracking practices inside the app, this Privacy Policy and the app's disclosures will be updated before those practices are used.

The gospelkeep.com website uses Google Tag Manager (container GTM-WGJGVMZP) to load two website technologies:

• Meta Pixel — records that a Gospelkeep webpage was viewed and that the App Store link was tapped, for measuring and improving Gospelkeep's advertising on Meta's platforms (Facebook and Instagram);
• Google Analytics — records website usage such as pages viewed and the App Store link being tapped, for understanding and improving the website and, together with the Meta Pixel, for advertising measurement.

Both use cookies or similar browser identifiers and may process device and browser information, an IP-derived approximate location, and referring or campaign information such as which advertisement or link brought you to the site. Neither receives your private Keep prayer text, prayer audio, private Keep search queries, or your Catholic or Orthodox tradition selection.

Opting out. Either of these stops Meta Pixel and Google Analytics from loading on gospelkeep.com:

• use the toggle below, on this page; or
• turn on Global Privacy Control in your browser or a browser extension — gospelkeep.com detects this signal automatically and will not load either technology, with no further action needed from you.

This opt-out is aimed primarily at rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), which requires businesses to honor Global Privacy Control as a valid opt-out signal, and at similar universal-opt-out-signal rights under other U.S. state privacy laws, such as Colorado's Privacy Act. Gospelkeep's advertising currently targets the United States only. This is not legal advice. Gospelkeep has not obtained a state-by-state legal opinion covering every U.S. state privacy law; if you need a compliance determination for a specific state, consult a lawyer licensed there.

Other cookies may still be used for basic site functions such as security and session management. You can also control cookies generally through your browser or device settings. This policy does not authorize silently adding undisclosed trackers beyond what is described here.

The Gospelkeep iOS app uses TelemetryDeck, an analytics provider based in Germany, to understand how the app is used so we can improve it. The app does not include TelemetryDeck's software; it sends a small, fixed set of events directly to TelemetryDeck through Gospelkeep's own minimal sender.

Your choice. In-app analytics is on by default, and the app tells you so when you sign up. You can switch it off at any time with the "Share usage statistics" switch in Settings > Account. If your App Store country or region is in the European Union, the European Economic Area, the United Kingdom, or Switzerland, it stays off and nothing is sent unless you opt in, either when you sign up or later with the same switch. When the switch is off, nothing is sent to TelemetryDeck, and Meta's advertising tools in the app stop too (section 11).

What is sent. While analytics is on, the app may send:

• the steps you reach in the app, such as onboarding, creating an account, the paywall, purchase events, setting a reminder, and export;
• that the app was opened;
• that you started or finished a Rosary, with the set of mysteries you chose;
• that you kept a prayer, as a count only, with nothing about which prayer it was or what it says;
• that you turned the usage statistics switch on, or turned the email switch on or off;
• when a search finds no results, the area of the app that was searched, but never what you typed;
• when you tap a search result, the area it belongs to, such as the Prayer Library, but never which result;
• error-type codes;
• the app version;
• your age range and tradition, as anonymous categories on a single event when you finish onboarding;
• a random install ID created on your device, which is not linked to your Gospelkeep account. Turning analytics off deletes it; if you turn analytics back on, a new one is created.

Anonymous content totals. Separately, the app counts on your device how many times you open public content in each area: the Prayer Library, the Rosary, and Related Scripture. It sends only anonymous daily totals for each area, never which prayer, mystery, or passage you opened. These totals carry no install ID or any other identifier.

What is never sent. In-app analytics never includes your prayer or Keep text or anything derived from it, which prayers you open, your search text, your name, your email address, or your account ID. Analytics data is not joined with your account and is not shared with Meta or any other advertising platform. TelemetryDeck never receives your advertising ID. Advertising in the app is covered separately in section 11.

Diagnostics. The app uses Apple's MetricKit to receive crash and performance diagnostics from your device. The app turns them into error-type codes and sends those codes only while analytics is on. Gospelkeep may also receive crash reports and diagnostics from Apple when you choose to share app analytics with app developers in your device settings.

If Gospelkeep introduces a materially different analytics provider or data practice, the relevant disclosures will be updated before use.

We use information only for legitimate purposes such as:

• providing and maintaining Gospelkeep;
• authenticating users and operating accounts;
• providing public Gospelkeep content and search;
• determining subscription and entitlement status;
• providing narration and other public media;
• maintaining security, preventing abuse, and diagnosing failures;
• understanding how the app is used, where in-app analytics is on, and deciding which prayers to add;
• responding to support and privacy requests;
• sending marketing communications where permitted;
• measuring and improving Gospelkeep marketing where permitted;
• complying with legal obligations and enforcing our terms;
• protecting Gospelkeep, our users, and others.

We do not use your private Keep prayer text to personalize advertising.

We may disclose limited information to service providers that help us operate Gospelkeep, such as providers for:

• authentication and public backend infrastructure, for example Supabase;
• App Store payments and entitlement processing, including Apple and RevenueCat;
• public media delivery and security, for example Cloudflare;
• website hosting and technical infrastructure;
• in-app analytics, for example TelemetryDeck, as described in section 13;
• measuring Gospelkeep's ads inside the app, for example Meta, as described in section 11;
• support or email delivery, including sign-in codes and our email list, for example Resend;
• the website email signup form and mailing list, for example Kit;
• marketing or advertising services, only as described in this policy and subject to applicable consent or opt-out requirements;
• professional advisers, security providers, or authorities where reasonably necessary or legally required.

We require service providers to handle information for the purposes for which it is provided and subject to applicable privacy and security obligations.

We do not sell private prayer content. We do not provide private prayer content or local tradition selection to data brokers or advertising networks for profiling.

If applicable law treats certain advertising disclosures as a "sale," "sharing," or targeted advertising, Gospelkeep will provide the legally required choices and honor applicable opt-out rights.

Some service providers may process information in countries other than the country where you live. Their processing may therefore be subject to different privacy laws.

For example, TelemetryDeck processes in-app analytics in Germany.

Where required, Gospelkeep will take appropriate steps regarding international transfers and service-provider protections.

Gospelkeep uses reasonable technical and organizational safeguards appropriate to the nature of the information it processes. The app also relies on iOS protections such as the app sandbox, device security, Keychain or Data Protection where appropriate, and local authentication for protected app access.

No internet service or storage system can be guaranteed to be completely secure.

We retain information only for as long as reasonably necessary for the purposes described in this policy, subject to legal, security, accounting, fraud-prevention, dispute, and recordkeeping needs.

Private Keep prayer content is governed primarily by the local app lifecycle on your device.

Under the current V1 behavior:

• Recently Removed prayer records remain locally recoverable for up to 14 days before permanent local purge unless restored;
• signing out does not delete the signed-in account's local Keep; it remains hidden on that iPhone until the same account signs in again;
• deleting the Gospelkeep account is different from signing out;
• account deletion requires reauthentication;
• after successful account deletion, Gospelkeep deletes the server-side Gospelkeep account and clears that account's local Keep, including Trash or Recently Removed, on the device;
• account deletion also deletes your on-device profile;
• in-app analytics data, information sent to Meta for advertising, and prayer requests are not linked to your Gospelkeep account, so account deletion cannot identify or remove them; turning the usage statistics switch off stops further sending and deletes the random install ID on your device;
• where Sign in with Apple credentials are linked to the account, Gospelkeep attempts to revoke the relevant Apple authorization as part of the account-deletion process;
• an unsuccessful or rejected deletion attempt must not erase the local Keep;
• deleting a Gospelkeep account does not itself cancel an Apple subscription.

Where we are legally required or reasonably need to preserve a limited record after account deletion, for example for accounting, fraud prevention, legal compliance, suppression of marketing after an unsubscribe, or legal claims, we may retain only the information necessary for that purpose. This does not authorize retention of private local prayer text by Gospelkeep's server-side account system.

Depending on where you live, you may have rights concerning personal information, such as rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent.

You can:

• use in-app account-deletion controls where available;
• export your Keep and profile using Export in the app;
• switch in-app analytics and Meta's advertising tools off with the "Share usage statistics" switch in Settings > Account;
• allow or refuse tracking in Apple's tracking prompt, and change your answer in iOS Settings > Privacy & Security > Tracking;
• manage Apple subscriptions through Apple;
• change notification permissions in iOS;
• unsubscribe from promotional email using the unsubscribe link in any message, the email switch in Settings > Account, or by contacting us;
• adjust website cookie or privacy choices where provided;
• contact us regarding privacy at support@gospelkeep.com.

We may need to verify your identity before fulfilling certain requests.

Gospelkeep is a Christian devotional service, so a person's use of Gospelkeep may reveal or imply information about religious interests or beliefs.

We treat this context with particular care. In particular, Gospelkeep's design keeps private prayer text and tradition selection out of the server-side advertising or profile path. Your tradition reaches Gospelkeep only as an anonymous analytics category that is not linked to your account, and only if in-app analytics is on. It is never sent to Meta.

We do not use private prayer content or local tradition selection for advertising targeting, sell it to advertisers, or provide it to third parties to build marketing profiles.

Gospelkeep is not designed to knowingly collect children's personal information in violation of applicable law. If you believe a child has provided personal information to Gospelkeep in circumstances that require deletion or parental action, contact support@gospelkeep.com.

We may update this Privacy Policy when Gospelkeep changes, our service providers change, or legal requirements change. We will update the date above and provide additional notice where required.

For privacy questions, requests, or complaints:

Gospelkeep
support@gospelkeep.com