Privacy Policy

Gospelkeep is designed so that your private prayer life does not need to become server data.

In particular:

• private prayer text in your Keep is stored locally on your device, not in Gospelkeep's server-side account database;
• prayer dictation audio is not retained by Gospelkeep and is not uploaded to Gospelkeep servers;
• private Keep searches run locally on your device;
• your Catholic or Orthodox tradition selection is kept locally and is not sent to Gospelkeep's account backend as a religious profile;
• Gospelkeep does not use private prayer content to target advertising or marketing;
• Gospelkeep does not sell private prayer content or use it to build advertising profiles.

Your device may include app data in Apple-provided device backup, restore, Quick Start, or device-transfer services according to your Apple and device settings. Gospelkeep does not operate those Apple backup systems and does not use them to read your private prayer text.

Depending on how you use Gospelkeep, local app data may include:

• private prayers and drafts;
• Gospel references and context associated with a prayer;
• timestamps and local lifecycle state for Kept or Recently Removed prayers;
• your selected Catholic or Orthodox tradition;
• local reminder preferences;
• cached public Gospelkeep content and narration;
• local app settings;
• local entitlement or cache state needed for the app to operate.

Private Keep data is not uploaded to Gospelkeep's server-side account database.

When you remove a prayer, Gospelkeep may keep it locally in Recently Removed for the app's documented recovery period. Under the current V1 design, removed prayer records are retained locally for up to 14 days before permanent local deletion, unless restored sooner.

You can read Gospelkeep public devotional content before creating an account. An account is required for account-dependent features such as beginning or saving into your Keep under the current product model.

If you create or use a Gospelkeep account, Gospelkeep may process:

• an opaque Gospelkeep or Supabase user identifier;
• your email address, including an email supplied through Sign in with Apple where Apple provides one;
• authentication provider information;
• account creation and lifecycle information;
• access-period information, such as the start and end of included account access;
• legitimate account or security state required to operate authentication and deletion;
• purchase or subscription entitlement state as described below.

If you sign in using email, Gospelkeep sends a six-digit one-time sign-in code to the email address you provide. You enter the code in the app, and Gospelkeep uses it only to authenticate that sign-in attempt. The sign-in flow does not send an email confirmation link or require a separate email-address confirmation step before sign-in.

Gospelkeep uses Supabase for authentication and account infrastructure.

If you use Sign in with Apple, Gospelkeep may securely process Apple account-linkage information needed to authenticate the account and, where applicable, revoke Gospelkeep's Apple authorization when you delete your Gospelkeep account. Gospelkeep does not receive your Apple ID password.

Purchases are processed through Apple and the App Store. Gospelkeep does not receive your full payment-card details.

Gospelkeep may use RevenueCat to determine purchase and entitlement status. Information processed for this purpose may include:

• an app or account identifier;
• App Store product and transaction identifiers;
• subscription or entitlement status;
• purchase, renewal, expiration, or cancellation-related status supplied through Apple or RevenueCat.

The price, billing period, currency, and product terms shown by Apple at the time of purchase control the purchase transaction.

For the limited Founding Lifetime offer, Gospelkeep keeps a server-side record associating the account identifier with a founding slot, the slot's status, and the times it was claimed or later restored. Before a slot is permanently claimed or a Founding Lifetime entitlement is restored, the App Store purchase is verified server-side against RevenueCat. This record contains no prayer content. It is used to prevent overselling the capped offer and to honour the entitlement afterwards.

Deleting your Gospelkeep account does not necessarily cancel an Apple subscription. If you have an active Apple subscription, you should manage or cancel it through Apple's subscription-management controls. You do not need to cancel first in order to request deletion of your Gospelkeep account.

Gospelkeep uses server infrastructure to deliver public Gospelkeep content such as published Gospel readings, patristic material, Prayer Library content, Related Scripture, and other approved public content.

A search for public Gospelkeep content may be sent to Gospelkeep's public-content backend so the search can be performed. Public search queries are not joined to your private Keep prayer text and are not used by Gospelkeep to build a religious-interest profile about you.

Private Keep search is separate and remains on-device.

Gospel and Fathers narration is delivered as pre-generated public media. Gospelkeep may use Cloudflare infrastructure, including Cloudflare R2 and CDN services, to deliver narration and other static assets.

As with ordinary internet services, infrastructure providers may process technical connection information such as IP address, request time, requested asset, user-agent or device and network information, and security or diagnostic information necessary to deliver and protect the service.

Narration requests do not contain your private prayer text.

If you choose prayer dictation, Gospelkeep uses Apple's speech and audio frameworks according to the capabilities available on your device.

Under the Gospelkeep V1 design:

• prayer audio is not retained by Gospelkeep;
• prayer audio is not uploaded to Gospelkeep servers;
• recognized prayer text remains part of the same private local prayer field used for typing.

If on-device speech processing is unavailable, Gospelkeep may offer typing instead rather than uploading private prayer audio to a cloud transcription service.

If you enable reminders, Gospelkeep may request permission to schedule local notifications on your device. Reminder settings are used to provide the reminder experience you configure.

You can change notification permissions through iOS settings.

If you contact us at support@gospelkeep.com, we receive the information you choose to send, such as your email address, message, troubleshooting details, and attachments.

Please avoid sending private prayer text or other sensitive information in a support message unless it is genuinely necessary for the support request. Information voluntarily sent to support is no longer confined to the on-device Keep and may be processed through our email or support providers for the purpose of responding to you.

We may retain support correspondence for as long as reasonably necessary to resolve the request, maintain security or business records, comply with law, or establish or defend legal claims.

Gospelkeep may offer optional marketing emails about Gospelkeep, including product updates, new features, devotional releases, offers, launch news, surveys, or other Gospelkeep-related communications.

Creating a Gospelkeep account does not by itself mean that you have agreed to receive promotional email where consent is required.

Where required, Gospelkeep will send promotional email only with appropriate consent. Marketing messages will identify Gospelkeep and provide a clear way to unsubscribe. You can also ask us to stop marketing emails by contacting support@gospelkeep.com.

If you unsubscribe, we may retain a minimal suppression record so that we can remember not to send you further promotional messages. Unsubscribing from promotional marketing does not prevent necessary service, security, purchase, account, privacy, or legal communications.

If Gospelkeep uses an email service provider, that provider may process your email address, consent or subscription status, message-delivery information, and, where enabled and legally permitted, campaign engagement information such as delivery, opens, clicks, and unsubscribe events. Gospelkeep will not provide your private prayer text, Keep content, tradition selection, or private religious profile to an email-marketing provider for targeting or segmentation.

Gospelkeep may advertise Gospelkeep on third-party platforms, search engines, social networks, app marketplaces, or other marketing channels.

When you see or interact with a Gospelkeep advertisement, the advertising platform may process information under its own privacy policy. Depending on the platform, your settings, and applicable consent requirements, this may include:

• that an ad was displayed or clicked;
• campaign or referral identifiers;
• browser or device identifiers;
• IP address and approximate location derived from it;
• a conversion event such as visiting a Gospelkeep page or installing or opening the app;
• other advertising information permitted by your platform or privacy settings.

On the gospelkeep.com website, Gospelkeep uses the Meta Pixel and Google Analytics, both delivered through Google Tag Manager, to measure and improve Gospelkeep's advertising. These website technologies may record that a Gospelkeep webpage was viewed, that the App Store link was tapped, device and browser information, an IP-derived approximate location, and cookie or similar identifiers used to connect these events. Section 12 describes these technologies in more detail and explains how to opt out.

The Gospelkeep iOS app does not include the Meta Pixel, Google Analytics, or any other third-party advertising SDK. These technologies run only on the gospelkeep.com website, not inside the app.

Where Gospelkeep uses advertising measurement, remarketing, pixels, cookies, or similar technologies, we provide the opt-out described in section 12, and additional consent or opt-out choices where required by applicable law or platform rules.

Gospelkeep does not provide private prayer text, Keep entries, private prayer searches, prayer audio, or your Catholic or Orthodox tradition selection to advertising platforms for targeting, audience creation, or personalized advertising. The website has no access to that information in the first place — it exists only in the iOS app, on your device.

Because Gospelkeep is a religious devotional service, interaction with Gospelkeep content or advertising may itself allow a third-party platform to make its own inferences under that platform's policies. Gospelkeep does not authorize third-party advertisers to receive your private Keep data or use Gospelkeep-held sensitive religious information for targeted advertising.

The Gospelkeep iOS app does not need to display third-party advertising in order for Gospelkeep to market the service externally. If Gospelkeep later introduces materially different advertising or tracking practices inside the app, this Privacy Policy and the app's disclosures will be updated before those practices are used.

The gospelkeep.com website uses Google Tag Manager (container GTM-WGJGVMZP) to load two website technologies:

• Meta Pixel — records that a Gospelkeep webpage was viewed and that the App Store link was tapped, for measuring and improving Gospelkeep's advertising on Meta's platforms (Facebook and Instagram);
• Google Analytics — records website usage such as pages viewed and the App Store link being tapped, for understanding and improving the website and, together with the Meta Pixel, for advertising measurement.

Both use cookies or similar browser identifiers and may process device and browser information, an IP-derived approximate location, and referring or campaign information such as which advertisement or link brought you to the site. Neither receives your private Keep prayer text, prayer audio, private Keep search queries, or your Catholic or Orthodox tradition selection.

Opting out. Either of these stops Meta Pixel and Google Analytics from loading on gospelkeep.com:

• use the toggle below, on this page; or
• turn on Global Privacy Control in your browser or a browser extension — gospelkeep.com detects this signal automatically and will not load either technology, with no further action needed from you.

This opt-out is aimed primarily at rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), which requires businesses to honor Global Privacy Control as a valid opt-out signal, and at similar universal-opt-out-signal rights under other U.S. state privacy laws, such as Colorado's Privacy Act. Gospelkeep's advertising currently targets the United States only. This is not legal advice. Gospelkeep has not obtained a state-by-state legal opinion covering every U.S. state privacy law; if you need a compliance determination for a specific state, consult a lawyer licensed there.

Other cookies may still be used for basic site functions such as security and session management. You can also control cookies generally through your browser or device settings. This policy does not authorize silently adding undisclosed trackers beyond what is described here.

Gospelkeep may receive diagnostic information made available by Apple when users choose to share app diagnostics with developers. Gospelkeep may also use privacy-conscious operational measurements necessary to understand reliability and performance.

Gospelkeep's private prayer content must not be included in analytics events. Private Keep searches, prayer text, prayer audio, and religious tradition selection are not analytics payloads under the current V1 privacy model.

If Gospelkeep introduces a materially different analytics provider or data practice, the relevant disclosures will be updated before use.

We use information only for legitimate purposes such as:

• providing and maintaining Gospelkeep;
• authenticating users and operating accounts;
• providing public Gospelkeep content and search;
• determining subscription and entitlement status;
• providing narration and other public media;
• maintaining security, preventing abuse, and diagnosing failures;
• responding to support and privacy requests;
• sending marketing communications where permitted;
• measuring and improving Gospelkeep marketing where permitted;
• complying with legal obligations and enforcing our terms;
• protecting Gospelkeep, our users, and others.

We do not use your private Keep prayer text to personalize advertising.

We may disclose limited information to service providers that help us operate Gospelkeep, such as providers for:

• authentication and public backend infrastructure, for example Supabase;
• App Store payments and entitlement processing, including Apple and RevenueCat;
• public media delivery and security, for example Cloudflare;
• website hosting and technical infrastructure;
• support or email delivery;
• marketing or advertising services, only as described in this policy and subject to applicable consent or opt-out requirements;
• professional advisers, security providers, or authorities where reasonably necessary or legally required.

We require service providers to handle information for the purposes for which it is provided and subject to applicable privacy and security obligations.

We do not sell private prayer content. We do not provide private prayer content or local tradition selection to data brokers or advertising networks for profiling.

If applicable law treats certain advertising disclosures as a "sale," "sharing," or targeted advertising, Gospelkeep will provide the legally required choices and honor applicable opt-out rights.

Some service providers may process information in countries other than the country where you live. Their processing may therefore be subject to different privacy laws.

Where required, Gospelkeep will take appropriate steps regarding international transfers and service-provider protections.

Gospelkeep uses reasonable technical and organizational safeguards appropriate to the nature of the information it processes. The app also relies on iOS protections such as the app sandbox, device security, Keychain or Data Protection where appropriate, and local authentication for protected app access.

No internet service or storage system can be guaranteed to be completely secure.

We retain information only for as long as reasonably necessary for the purposes described in this policy, subject to legal, security, accounting, fraud-prevention, dispute, and recordkeeping needs.

Private Keep prayer content is governed primarily by the local app lifecycle on your device.

Under the current V1 behavior:

• Recently Removed prayer records remain locally recoverable for up to 14 days before permanent local purge unless restored;
• signing out does not delete the signed-in account's local Keep; it remains hidden on that iPhone until the same account signs in again;
• deleting the Gospelkeep account is different from signing out;
• account deletion requires reauthentication;
• after successful account deletion, Gospelkeep deletes the server-side Gospelkeep account and clears that account's local Keep, including Trash or Recently Removed, on the device;
• where Sign in with Apple credentials are linked to the account, Gospelkeep attempts to revoke the relevant Apple authorization as part of the account-deletion process;
• an unsuccessful or rejected deletion attempt must not erase the local Keep;
• deleting a Gospelkeep account does not itself cancel an Apple subscription.

Where we are legally required or reasonably need to preserve a limited record after account deletion, for example for accounting, fraud prevention, legal compliance, suppression of marketing after an unsubscribe, or legal claims, we may retain only the information necessary for that purpose. This does not authorize retention of private local prayer text by Gospelkeep's server-side account system.

Depending on where you live, you may have rights concerning personal information, such as rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent.

You can:

• use in-app account-deletion controls where available;
• manage Apple subscriptions through Apple;
• change notification permissions in iOS;
• unsubscribe from promotional email using the unsubscribe method in the message;
• adjust website cookie or privacy choices where provided;
• contact us regarding privacy at support@gospelkeep.com.

We may need to verify your identity before fulfilling certain requests.

Gospelkeep is a Christian devotional service, so a person's use of Gospelkeep may reveal or imply information about religious interests or beliefs.

We treat this context with particular care. In particular, Gospelkeep's design keeps private prayer text and tradition selection out of the server-side advertising or profile path.

We do not use private prayer content or local tradition selection for advertising targeting, sell it to advertisers, or provide it to third parties to build marketing profiles.

Gospelkeep is not designed to knowingly collect children's personal information in violation of applicable law. If you believe a child has provided personal information to Gospelkeep in circumstances that require deletion or parental action, contact support@gospelkeep.com.

We may update this Privacy Policy when Gospelkeep changes, our service providers change, or legal requirements change. We will update the date above and provide additional notice where required.

For privacy questions, requests, or complaints:

Gospelkeep
support@gospelkeep.com