Divine Breath is a Christian devotional, Bible, reflection, and spiritual chat app. This policy says what we collect, why, and where it goes. We use it to run the app, build your plan, answer you, protect accounts, process subscriptions, measure our ads, send reminders, and improve the app. We never sell your prayers or anything you write.
We may collect account information such as email address, user ID, display name, first name, authentication provider, and optional profile image. We may collect devotional preferences, Bible markers and reading progress, study series progress, your chosen Bible translation, your reminder times and choices, your phone's language and time zone, reflection and chat content you submit, subscription status, notification token, usage events, crash logs, diagnostics, app performance data, and support request information.
You can use the app before you create an account. In that case we create an anonymous account ID for you, and your phone makes a random install key. Section 8 explains both.
Our servers see your IP address, as every server does. We use it only to limit abuse: we keep a one-way hash of it (for an IPv6 address, of its first half) in short-lived rate-limit counters for up to two days, and when you make a Community profile we keep a keyed one-way hash of it with that profile for 30 days, so we can count the new profiles that come from one network (section 11). We do not store the address itself. The network also tells us your country, which we use to decide where your text may be sent (section 6) and which offers apply (section 9).
If you use Community, we collect your Community profile and what you post there (section 11). If you buy a one-time item, we keep your balances and purchase history (section 12). Section 13 covers the other features, such as invite links, the screen-time limit, study series, Comfort, and the free audio Bible chapter. Section 14 covers our website's start page.
iPhone waitlist (website). If you leave your email on our iPhone page (divinebreath.app/iphone), we collect that email address and a short label for the page or link you came from. Netlify, which hosts this website, also records the IP address, browser type and referring page with each submission, and screens submissions for spam. We use the email only to tell you if a Divine Breath iPhone version becomes available. We do not use it for advertising and share it with no one except Netlify and the service providers Netlify uses to run the form, such as its spam filter. To have it deleted, write to support@divinebreath.app from, or naming, the address you entered.
When you set up the app, we keep every setup screen you see and every answer you give, your faith and feelings included, and the words you write about what you carry (section 7).
If you choose a custom profile image, the app may request photo library access or use the system photo picker. This access is used only so you can select and upload your profile image. If you own or administer a Community group, you can also upload a group photo; it is stored privately and shown to other readers only after a person on our team approves it (section 11). We do not use photos for advertising or tracking.
We use information to authenticate users, provide devotionals, Bible tools, plans, study series, reflection, chat, reminders, subscription validation, account export and deletion, abuse prevention, safety handling, analytics, ad measurement, diagnostics, customer support, and to improve the app.
We do not sell personal information. The app shows no ads. We use your device's advertising ID and a measurement provider, AppsFlyer, to see which of our own ads lead to installs and subscriptions. The app sends AppsFlyer events such as finishing setup, starting a trial, and subscribing, a value score made from how you use the app, and your age group and gender. AppsFlyer shares these reports with the platforms we advertise on, such as Meta. Your faith, your feelings, what you carry, and anything about your health are never put into these events. We give RevenueCat a random account number to manage your subscription, and we give the same number to AppsFlyer, never your name or email address, so a subscription can be matched to the ad that led to it; RevenueCat also receives your advertising ID, and these providers may use your IP address to estimate your country. This measurement starts when you accept on the first screen of the app (section 7), in every country. You can reset or delete the advertising ID in your Android settings. We share limited information with service providers needed to run the app, including Supabase, Cloudflare, Firebase, RevenueCat, AppsFlyer, Apple App Store, Google Play, and our email delivery providers ZeptoMail and Resend. Cloudflare carries our videos and tells the app which country you are in, so it sees your IP address. Slack receives alerts for our team that hold only an ID and a time, never your text. Our AI features send text to two outside AI companies, DeepSeek and OpenAI. Section 6 explains exactly what they receive.
Divine Breath does not run its own AI models. DeepSeek handles every AI feature first, except where this policy says OpenAI alone. OpenAI is a backup: if a DeepSeek request fails, Divine Guide chat and the daily devotional retry the same request with OpenAI, so the same text can reach both companies. The app on your phone never contacts these companies; every request goes from our servers.
What we send. Divine Guide chat sends the message you type, the last few messages of that conversation (10 for free accounts and 20 for premium, a Deep Thinking answer included), your age group and gender when you gave them at setup, and the preferences saved on your account, if any. An older account may hold what you said you need, your familiarity with Scripture, your preferred practice, your daily rhythm, and your Christian tradition. "Explain this verse" sends the verse reference and the verse text from our own Bible database, plus the same saved preferences, if any; you type nothing into it. The weekly reflection summary sends up to 30 of your reflection entries from the past seven days with their dates, plus the same saved preferences, if any. Reflections are stored encrypted, but our server decrypts them to build this summary and sends the text to DeepSeek, capped at the first 800 characters of each entry. Your morning notes are reflections too, so they go into this summary. The daily devotional sends only the Bible verse and no personal information. The plan you ask for when you set up the app sends the words you write for it, your topics, how long you have carried it, your age group, and your gender, with our own words for its first day, and a morning note sends the note and our own words for one plan day, as section 7 describes.
A saved Christian tradition is religious information about you. We send it so replies fit your background, and we instruct the AI not to favor any denomination.
What we never send. We never send your name (except a held Community name, below), email address, account ID, device identifier, payment details, profile photo, notification token, or your Bible highlights, notes, and reading history. Requests reach DeepSeek and OpenAI with nothing attached that identifies your account. Anything you type can still identify you, so please take care with names and personal details.
Crisis language. Our safety check reads your chat messages, the words you write at setup, your morning notes, and what you post in Community. If it finds crisis language, the reply shows help lines: call or text the Suicide & Crisis Lifeline in the US, text HOME to 741741, or find a line in your country at findahelpline.com. Our safety log stores only a one-way hash of a flagged chat message, and no text for the other features; the message itself stays in your encrypted chat history until you clear it.
Where your text goes. DeepSeek states that it processes and stores data in the People's Republic of China, and its terms allow it to use inputs and outputs to improve its services. Our requests carry no training opt-out or zero-retention signal, so we cannot promise that text sent to DeepSeek is excluded from model training or deleted on a set schedule. OpenAI processes data in the United States; under its API terms this data is not used to train its models and is kept up to 30 days for abuse monitoring. Provider terms reviewed August 2026. For readers in the European Union and the United Kingdom, the words you write for your plan and a morning note that shapes tomorrow's plan day go to OpenAI only for that purpose, never to DeepSeek (section 7). A morning note is also one of your reflections, so a weekly reflection summary includes it and sends it to DeepSeek with your other reflections, in every region.
What we keep. Chat messages and reflection entries are stored encrypted on our servers. Our AI usage records hold your account ID, the model name, token counts, timing, and estimated cost, never the text of prompts or replies. Two exceptions store AI text with your account: the premium "Explain this verse" feature saves the one-line main idea so the app can show it again, and reporting an AI reply or an AI-written plan keeps an encrypted copy of it with the reason you gave so we can review it, which is kept even if you later clear your chat history.
Community texts (posts, group messages, prayer requests, blessings, and group names and descriptions) go to the same AI partners to be checked against the Community rules, and a prayer request goes to them so that a prayer can be written for it (section 11). For readers in the European Union and the United Kingdom, and for any reader whose region the app cannot tell, that goes to OpenAI only. Your Community name is not sent with them. A few times a day, OpenAI alone takes a second look at items our fixed rules held or readers reported, which can include a held Community name and up to three reasons readers wrote in their reports (section 11).
A note on AI answers. AI-generated reflections can be wrong or incomplete. Scripture always comes from our Bible database, never from the AI. Divine Breath is not a therapist, counselor, or substitute for pastoral care.
When you start the app we ask a short set of questions and offer you a seven-day plan. This section says what we keep and where each answer goes.
Your agreement. Under the Continue button of the first setup screen the app says: "By continuing you agree to our Terms · Privacy." Tapping Continue is your agreement. It accepts our Terms of Service and this Privacy Policy, and with them that our AI partners process your answers, including your faith and your feelings, to build your plan and to improve the app; that analytics and ad measurement run; and that reminders and offers may come by notification. We record that you agreed, the version of that line, and the time, with your install key and your account (or your anonymous ID until you sign in). There is no other consent screen or box. To withdraw, delete your account in Settings or write to support@divinebreath.app.
On your phone during setup. Your answers are kept in a private file in the app's own storage while you set up. That file is left out of Android backups. It is removed from your phone the next time the app starts after you finish setup, or sooner if you start the setup over, and in any case when you uninstall the app. After setup the app keeps one small file in the same private folder with only your chosen need, your first-week topics and your gender, so that it can order what it shows you in Discover; it is removed when you sign out.
What we learn from your setup. To learn which plans help people, and which lead to a trial or a subscription, our servers keep a record of your setup with a random install key and your account (or your anonymous ID until you sign in), for every reader in every country, from the first screen. Our website's start page adds to the same record (section 14).
Where your answers go. Your age group and your gender go to Google Firebase Analytics, as two settings of your app profile, to AppsFlyer with the events of section 5, and to our AI partners with your plan request and your Divine Guide messages (section 6). Apart from your age group and gender, your setup answers go to no analytics or advertising partner. What you need, what you would change, how long you have carried it, your tradition, your Bible choice, your topics, and your answers while we prepare your plan are never put into AppsFlyer or Meta events. Apart from what our AI partners process for your plan and your replies (section 6), your answers about your faith and what you carry stay only on our own servers: they never go to an ad network, and we use them only to improve Divine Breath and for our own reader groups.
Your Bible choice. The Bible you pick in setup is saved as your Bible translation setting with your account (or with your anonymous ID until you sign in), so the Bible opens in it. You can change it in the Bible reader or in Settings. It is not one of the answers we send to our AI partners (section 6).
Your tradition. We store your tradition and your Bible choice with your account (or with your anonymous ID until you sign in) and count them, so that new readers of a tradition see which Bible most readers of that tradition chose, as "Most chosen by … readers"; a tie shows no label. Your tradition may change the order of the Bibles you are offered. It changes no verse, no text, and no price. It is not part of your plan request. Deleting your account removes it, and your data export includes it.
Your words about what you carry. The plan step has a box where you can write what you are carrying. You can leave it empty. Above the button the app says: "Only our AI partner processes your words to create your personal plan. Everything you share stays private and protected. We never sell your words." Here is what happens to your words.
Ready-made plans. If you do not write anything, or the plan does not pass the checks, you follow one of our four ready-made first weeks. For a ready-made week we keep only your progress: which day you are on, your pace, and the dates. The words of a ready-made week come from the app, not from you.
Your plan and its progress. For every plan we keep, with your account or your install, its origin (ready-made or AI-written), its status, your pace, the days you finished, and the dates. We keep these as long as you have the account. A plan that you never start is deleted after 30 days. The AI-written plan name and titles are cleared 365 days after the plan ends. The cross you draw to start your plan is not saved.
Reporting a plan. On an AI-written plan you can choose Report and a reason from a short fixed list. We keep an encrypted copy of the plan name and titles with that reason and show it to our team, for 365 days. We keep one report for each plan. Reporting needs an account.
Your morning note. When you finish a day's steps, the app may ask what is on your heart this morning. What you write is saved encrypted in your journal as a reflection tied to that day, like any other reflection.
Using the app without an account. You can start without signing in. We then create an anonymous account ID for you, and the app creates a random install key on your phone. It identifies this installation, not you, and it is not your advertising ID. The app sends it with some requests so that your plan and your progress stay with this installation. The install key is part of the normal Android backup of the app, so a restored phone can find it. While you have no account we keep under the anonymous ID whatever you create: your progress, your study progress, your settings, your hearted audio, the plan you started, your setup record, your Divine Guide messages and reflections (encrypted), your Bible markers, anything you post in Community, your purchases and balances (section 12), and your notification token.
When you sign in. The app moves what you built without an account to your new account: everything listed above and a running gift (section 9). If both the anonymous profile and your account already hold the same kind of record, the account's record wins; for study progress, the finished days of both are joined. The anonymous profile is then deleted.
Return key. The app can ask for a return key, a random string kept in your phone's backup, so that a restored or reinstalled phone can find its earlier progress. We keep only a one-way hash of it, with the anonymous ID and install key. Keys that were used, replaced, or never matched an account are deleted 180 days after their last change.
Profiles left unused. An anonymous profile that has not been used for 90 days is deleted, unless something still needs it: a subscription that ended less than 90 days ago, or a sign-in that has not finished. Our safety log entries for crisis findings are deleted after 30 days.
Two-day gift. If you close the first upgrade page, you may receive two days of Premium with no card. To give it only once, our servers keep a record with your install key, the account it first went to, its start and end, the number of anonymous IDs that used it (at most two), and your country as the network shows it. In some countries we do not offer it. The record stays with the install key after you delete your account, so the same installation cannot take a second gift; a record with no account is deleted 400 days after the gift ends.
First-year discount. We may offer a discounted first year to some readers who have never subscribed or started a trial. To do this our servers keep an offer record with your account, your install key, its state, its start and end, your time zone, and the time we plan to show it, and the app tells us whether Google Play offers you the introductory price. We may send up to two notices about it, only to readers who allowed notifications. The offer record stays with your install key after you delete your account, so the same installation does not get a second window; a record with no account is deleted 400 days after it ends. The full price terms are always shown before you buy.
Reminders and offers may come by notification; accepting on the first screen agrees to them, and your phone also asks for its own notification permission. Reminders are scheduled on your phone. We send a morning letter, which is your daily plan letter, and evening letters. When you set up the app with the newer questions, the daily plan letter is set to the top of the hour in which you finished setup (finish at 09:40 and it comes at 09:00 each day; finish at 04:05 and it comes at 04:00), even when that hour is at night, and the evening letter comes at 21:00. You can change the time of the plan letter, or turn it off, in Settings. The evening letter has no switch of its own in Settings; you turn it off in your phone's notification settings. If you were already a reader before this change, you keep your morning time and your own on or off choices, and an evening letter that was on now comes at 21:00. We save your reminder times and choices with your account settings. In your first week and around an offer, we may send extra notifications. Your trial reminder appears only in the app from day 5 until your first charge, showing the end date, the store price and how to cancel in Google Play. "Tips and invitations" in Settings turns off the invitations of your first week (the word game and free-question notes); the reminder that your day is open still comes while one of your daily letters is on. You can turn all notifications off in your phone's notification settings. Our servers may change the words of a letter that is already scheduled, using a silent message that carries no content. For this we keep your notification token with your account and install key. We do not use exact-alarm permissions.
Community is where readers pray and talk together. It has chats and groups, Live Prayers, My Prayers, and World Events. The Community terms are part of our Terms of Service, which you accept on the first screen of the app; please read them before you write.
What other readers see. Your Community name is either your first name or a handle you choose, and a person on our team may review a name before it shows. Other readers see your Community name, the text you post and, beside your group messages, the profile picture you chose from the ones the app offers (never a photo you uploaded). Group messages are seen by the members of that group; a public group is visible to everyone. A prayer request you make is shown in Live Prayers with your Community name, to readers who join it. Other readers can share your prayer request by link, with its title and its text. A number of readers (for example, how many are praying) is shown only when at least 5 readers make it up.
What we collect. Your Community profile (name, handle, whether you may post), the version of the Terms you accepted, your groups and memberships, your messages, prayer requests, blessings, reactions and the prayers you joined, the people you blocked, the reports you filed, which prepared prayers we showed you so that you are not shown the same one again soon, any offer to make a prepared prayer your own, a last-seen time that we keep for at most one day, and a keyed one-way hash of the network your profile was made from, which we keep for 30 days (section 2). A group owner or admin can add a group photo; it is stored privately and shown to others only after a person on our team approves it.
My Prayers, Together 7 days, and World Events. When you mark a prayer request answered or ask for it again, we keep that with the request, together with a topic our server guesses from its words (for example, health), used to fit what is shown with it. An update you add to a request (that it was answered, or a short note) is shown to the readers who prayed for it. "Just for me" prayers are a list that only you see: we keep each title and text encrypted, with any reminder you set and the date you marked it answered, until you delete it or your account. When you do Together 7 days in a group, we keep the plan, the day you started and the days you marked. In World Events we keep the events you asked to be reminded of, and the countries you prayed for with the week you prayed. Your data export includes all of these, and deleting your account deletes them.
How we check what you write. Every post, group message, prayer request, blessing, and group name and description is checked before it is shown, first by fixed rules, then by our AI partner, which reads the text (not your Community name, which the fixed rules check). A few times a day, OpenAI takes a second look at items the fixed rules held or readers reported, with a Community name the fixed rules held and up to three reasons from the reports; it may close an item as harmless or release a held one, and leaves the rest to a person on our team. For readers in the European Union and the United Kingdom, and for any reader whose region the app cannot tell, the AI partner is OpenAI only; for other readers it is DeepSeek first, with OpenAI as backup. When you make a prayer request, our AI partner also writes a prayer for it, and the prayer is always marked "Written by AI". Some prayers are prepared in advance by our team with AI. They are shown with the "AI" label, or under a reader's own Community name only after that reader chooses "Make it my prayer".
Safety. If your post, message, or prayer request contains crisis language, you see help lines (section 6) and we write a safety log entry. Our team gets an alert that holds only an ID and a time, never your text.
Reports and blocks. Anyone can report or block from any post, message, or profile, in private groups too. A person on our team reads reports every day and may remove content, mute, or suspend an account. We keep your report and any reason you wrote (the reason may go to OpenAI for the second look above), and, for reports of illegal content only, the name and email you choose to give so we can tell you our decision; we delete those details afterwards. When you are told that your content was removed, you get the reason and the term it broke. While a report about child safety or illegal content is open, we keep a restricted copy of the reported content as evidence, and we keep it for one year after a report to an authority. Resolved reports are deleted after 180 days.
When you leave. Deleting your account removes your messages, requests, blessings, reactions, and profile. A group you own goes to its longest-standing admin or member, and is deleted if no one else is left. Your export includes your Community data (never other readers' text).
You can buy one-time items through Google Play: packs of Guide questions, Breath Credits, streak freezes, and streak repairs. Premium subscriptions are also bought through Google Play, and the store sets their price, renewal, trial, and cancellation terms. For every purchase, Google Play processes the payment and RevenueCat tells our servers about the purchase (section 5).
What we keep. Your balances (credits, freezes, repairs, question packs with their expiry), a history of what changed them (date, kind, amount, reason), what you unlocked with credits (a Bible-study series, or a month of Premium), your purchases (the store, the store's transaction ID, the product, the date, the state, and the price and currency), and any broken-streak records. Breath Credits are virtual credits. They cannot be exchanged for money, and each price shown in credits also shows its price in money. A pack of Guide questions can be used only for the number of days shown before you buy.
When your free questions run out. We may still write the next answer. We keep it encrypted, and its text is not sent to your phone until you open it with a purchased question, Premium, or your next daily question.
Deleting your account. Your balances and history go with your account. A purchase record stays without an owner, only so a retried store message is never credited twice, and is deleted 90 days after the purchase.
Invite friends. Each account has a personal invite code that starts with "r_" followed by random letters and numbers. It is in your invite link, and the links you share for a blessing, a verse, a devotional, or audio carry it too. The code does not hold your name. We do not count or reward invites.
Bible-study series. The study library groups short plans by topic, for example grief or anxiety. When you mark a day of a study plan done, our servers save your progress: the plan, the days you finished, when you started, and when you finished it, with your account (or with your anonymous ID until you sign in). A study day pays no credits and moves no streak. Some plans are free. A series otherwise opens with Premium, which includes it, or when you unlock it with Breath Credits (section 12). The Bible text in a study day always comes from our Bible database. Your data export includes your study progress, and deleting your account deletes it.
Hearts and Saved. When you tap a heart on a verse, an audio piece, an affirmation, a study day, a video, a reading plan, or a study plan, our servers save which one you saved and when, with your account (or with your anonymous ID until you sign in), so your Saved page comes back when you sign in again or reinstall the app. We save no title, topic, or text with it. When you listen to an audio piece for 10 seconds without Premium, we also save which piece you started and when, so that a piece you started stays open to you. Your data export includes your hearts and the pieces you started, and deleting your account deletes them.
Comfort. The "For your heart" shelf opens short guided paths: a verse, a breath, naming what you carry, and a blessing. If you write what you carry, our servers first check it for crisis language (if they find it, you also see help lines and we write a safety log entry), then keep it encrypted as a hand-over in your Carried list, with its topic, its status, and the days we check in with you, 7, 30 and 90 days later in your time zone. For a hand-over about grief you may add a name and a date; the name is kept encrypted too. Your hand-overs are shown only to you, and they are never sent to our AI partners, in an email, or in a notification. When you finish a path we keep its topic, how long it took, and whether it felt lighter if you say, with no words. When you hold others in prayer, we keep the topic and your local date. We show how many readers are carrying or holding something only when at least 5 readers make up the number. Your data export includes your hand-overs, finished paths and prayer holds, and deleting your account deletes all of them.
Limit screen time. The screen-time limit lists the apps you recently used and lets you set a daily limit for each. It uses Android's usage access, display over other apps, and a foreground service. The usage numbers are read on your phone and are not saved. The limits you set (an app's package name and a number of minutes) stay on your phone. Android may include those limits in your phone's own backup or in a phone-to-phone transfer. None of this reaches our servers, analytics, or advertising partners. You can turn each permission off in your phone settings.
Divine Guide style choices. You can choose the length, depth, and tone of Guide answers and how many verses it cites. We save the four choices with your settings. They change only the style we ask the AI for; they change no safety step and no Scripture.
Free chapter of the audio Bible. To give one free chapter a day, our servers keep one-way hashes of your account and your install key, with the chapter and the day, for three days. Your time zone setting picks the day. The hashes hold no name and no ID that you could recognize.
Free Deep Thinking answers. To give free Deep Thinking answers each month, our servers keep one-way hashes of your account and your install key, with the month and a count, until at most one month after that month ends, also if you delete your account sooner. Your time zone setting picks the month. The hashes hold no name and no ID that you could recognize.
Synthetic voices. Catalogue audio, such as the audio Bible and meditations, is read by synthetic voices that we render ourselves ahead of time, and every player has a small flag to report a problem. Some screens, such as the daily greeting, play a short recording on their own; your phone's volume controls it. We never send what you write to a voice service.
Home-screen widgets. Widgets show verses, your streak, and a reading thread from a small store on your phone that the app fills while you use it. A widget makes no request of its own, and its data is cleared when you sign out.
Bible translations. The reader offers the World English Bible, the King James Version, and the Berean Standard Bible, and in Spanish and Brazilian Portuguese also Biblica® Open Nueva Biblia Viva™, Reina-Valera 1909 and Biblica® Open Nova Bíblia Viva™. Settings, Bible translations lists each license and source. The World English Bible is in the public domain. The King James Version is in the public domain in the United States. The Berean Standard Bible is dedicated to the public domain (CC0 1.0). Reina-Valera 1909 is in the public domain. Biblica® Open Nueva Biblia Viva™ and Biblica® Open Nova Bíblia Viva™ are made available by Biblica, Inc. under the Creative Commons Attribution-ShareAlike 4.0 International License (CC BY-SA). The Berean Standard Bible leaves out 16 verses on textual grounds; we do not fill them from another translation. Choosing a translation changes only which text you read.
Cancel survey. Before you leave to cancel a subscription, we may ask (at most once in 30 days) how disappointed you would be without Divine Breath. You can skip it. Your answer is one of three fixed choices, saved with your account. There is no free text. Cancelling is never blocked.
Our website has a start page (divinebreath.app/start) that asks the same kind of questions as the app's setup, so that you can begin before you install the app. This section describes it as it works when it opens to readers.
Server-side measurement and session recording. When enabled, our servers send verified trial, subscription, renewal, and website lead events to Meta, using hashed account identifiers and limited event details. The /start page may load the Meta pixel and record the page after its server settings allow it. The browser masks every input and marked answer before compressed session recordings reach our own server. Faith, feelings, and struggle answers are never sent to Meta or a recording provider. Session recordings are deleted after 90 days, and account deletion removes recordings linked to the account.
Your agreement. The first step of the page carries the same line as the app's first screen (section 7), and continuing is your agreement, as it is in the app. We record that you agreed, the version of that line, and the time, with your visitor record.
What stays in your browser. Your answers (what you need, what you would change, how long you have carried it, your first name, your tradition, your Bible choice, your age group, your gender, and your first-week topics) are kept in your browser's local storage, on your own device, so that a reload or the Back button does not lose them. Clearing this site's data in your browser removes them. The page also asks Cloudflare, which carries our videos, which country you are in, so Cloudflare sees your IP address when the page loads, and the page keeps the answer in the same place. The page's own code sets no cookies.
What our servers store. When the page loads, our server gives your browser a random visitor key and stores a one-way hash of it (never the key), whether your region is the European Union or the United Kingdom (or cannot be told), your language, and the name of the last screen you reached. A visitor record that has no email address and no hand-over is deleted 90 days after the visitor was last seen. We may store your first name and your Bible choice with your visitor record, so that they can move to the app.
What the page adds to your setup record. The page adds what you do on it to the setup record of section 7, under the same rules, for every visitor in every country, from the first step, keyed by a one-way hash of your visitor key (never the key): which screens you saw, how long you stayed on each, when you went back or left the page, the order some choices were shown in, and every answer as the fixed choice the page offered. It never holds anything you typed: not your first name (only whether you gave one), not your words, and not your email address. This record is kept 400 days, like the app's, even after your visitor record is deleted. If you use a hand-over code in the app, it moves to your account, so your data export lists it and deleting your account deletes it; with the install code, the answers that can reveal your faith or how you feel are deleted at that moment instead of moved. We add no trial, purchase or return to the page's own record; the app's setup record does that once you continue in the app.
If you give us your email address. We store the address encrypted, with a one-way hash of it for matching and for honoring opt-outs, the version of the wording you saw, the time, and your region. Sending the address agrees to marketing mail from us, and the page says so next to the button. Every marketing mail carries an unsubscribe link. Using it stops all marketing mail to that address. Our opt-out list keeps only a one-way hash of the address, so that the opt-out stays honored. The address record itself, with the encrypted address, stays until we delete it, 365 days after you last gave it, unless it is the verified address of an account. Deleting your account deletes the email record that matches your verified address, and your data export lists it.
If you have a verified account email, we may also send occasional marketing messages after you stop using the app or your subscription ends. Each message includes an unsubscribe link, and using it stops marketing email to that address.
If you write what you carry on the page. The page follows the rules of section 7. Our servers check your words for crisis language first; if they find it, you also see help lines. Your words go to our AI partner to write your plan: to OpenAI only if you are in the European Union or the United Kingdom, or if our servers cannot tell where you are, and otherwise to DeepSeek first with OpenAI as the backup. Your words are kept encrypted, for 120 days.
If you continue in the app. The page can ask our server for two one-time hand-over codes, an app-link code and an install code. Each is good for 24 hours and works once. We keep a one-way hash of each code, and your visitor key encrypted until the code is used or replaced, and in any case within about a day after it expires. When you use a code in the app, your first name and Bible choice and the plan that went with your visitor key move to your account. With the app-link code, your kept words move with the plan. With the install code they never move: if a plan moves with an install code, those kept words are deleted at that moment instead. Once the app-link code is used, the install code stops working. The hand-over then holds that it was claimed, when, and by which account, and it stays linked to your visitor record. It does not move a subscription, a gift, or an offer. We delete the hand-over 7 days after the codes expire.
How the two codes travel. The "Open the app" button carries the app-link code in the link that opens the app: the part of https://divinebreath.app/h after the # sign or, on Android, an intent link handed to the app. It reaches no server on the way. The "Get the app" button is a Google Play link. It carries the install code as the Play install referrer, next to two neutral labels (utm_source=funnel and utm_medium=handover). Google Play keeps the referrer it was given. The AppsFlyer measurement in the app reads the same referrer and sends it with its install report (section 5). On its first launch the app reads the referrer once, takes only the code out of it, uses the code once to claim, and never logs or stores the referrer. Neither code holds an answer or anything about your beliefs, feelings, struggles, or a crisis finding. We do not use the codes for ads, and the app sends AppsFlyer nothing new of its own because of them: AppsFlyer's reading of the referrer is its standard install report.
Google Firebase Analytics, Firebase Crashlytics and Firebase Sessions start when you first open the app, in every country. They record how you use the app, crashes, and performance, so that we can understand reliability and product usage and improve the app. Firebase also receives your age group and gender (section 7), and the ad signals it uses are allowed once you accept on the first screen. Our own record of your setup, with the trials, purchases and returns we add to it and the daily table of counts that names no one, is described in section 7. Apart from your age group and gender, Firebase does not receive your setup answers, and it never receives what you wrote or anything about a crisis finding.
You can request account deletion or data export in the app. See account deletion instructions. Account deletion removes your account and its data, with the exceptions in this policy, such as the install-bound gift and offer records in section 9. You can withdraw your agreement by deleting your account or by writing to support@divinebreath.app. We retain information only as needed to provide Divine Breath, comply with law, resolve disputes, prevent abuse, and enforce agreements. The periods we use are:
Divine Breath provides spiritual reflection content only. It is not medical, mental health, crisis, legal, financial, or emergency advice. If you are in danger or need urgent help, contact local emergency services.
Residents of Washington and other states with consumer health data laws should also read our Consumer Health Data Privacy Policy at divinebreath.app/privacy/washington. It explains how we treat what you write about your struggles, and how to use your rights.
For privacy requests, contact support@divinebreath.app.