Privacy Policy

Last updated: October 24, 2026

This policy explains what information the Daily Bible app (also published as Biblia Diaria and Bíblia Diária) collects on iPhone and Android, what we use it for, who we share it with and what you can do about it.

1. Who is responsible

The data controller is START NODE, S.A., Calle D, El Cangrejo, Bella Vista, Edificio Clarion Victoria, ground floor, Panama City, Republic of Panama. You can reach us at soporte@bibliadia.app.

2. What data we collect

What stays on your phone

The Bible, your saved verses, your notes and highlights, the chapter you are on, your streak and your preferences (language, translation, theme, text size and reminder time) are stored on your device. So are the translations you download.

What reaches our server

• A pseudonymous installation identifier, randomly generated by the app. It does not include your name, email or phone number.
• Usage events: which screens you open, which chapters and verses you read, the onboarding steps, whether you see an ad or open the Premium plan, whether you start a trial or make a purchase; together with the app version, the phone model and operating system, language, country and time zone. They never include what you write in your notes.
• Notification preferences: if you turn on notifications, the device’s push token, language, reminder time, time zone and streak, so we can send you the verse of the day at your time.
• Your account, only if you sign in with Apple or Google to sync across devices: the identifier that provider assigns you, your email (or the relay address if you use Apple’s “Hide My Email”) and your name if the provider shares it, together with what is synced (saved verses, notes, progress and preferences). We never receive your password.
• Technical data for each request (IP address, date and time, file requested) in the usual web server logs, for example when you download a translation.

What our providers collect inside the app

• Google AdMob and Google User Messaging Platform (UMP), only in the ad-supported version: the device advertising identifier (IDFA on iPhone, Android advertising ID), IP address, device and app data, ad interactions and your consent choices. See section 5.
• Google Firebase Analytics: an app instance identifier, usage events, device data and an approximate location (country or city) derived from the IP address. On iPhone it only uses the advertising identifier if you allow it.
• RevenueCat, the App Store and Google Play, if you buy something: a pseudonymous customer identifier, the product purchased, price, currency and subscription status. Payment is processed by Apple or Google; we never see your card details.
• Meta Platforms (Meta SDK, App Events): app usage events (install, app open, onboarding completed, trial or subscription started), device and app data, and IP address. The advertising identifier is only sent if you allow tracking on iPhone (App Tracking Transparency) or, in the European Union, the UK and Switzerland, if you give your consent. It is used to measure and optimize our advertising campaigns.

What we do not collect

We do not ask for or collect your precise location, contacts, photos, microphone or health data. We do not ask your religion, age or gender. Passage studies and explanations are prepared in advance: the app does not send your text to any artificial intelligence service.

3. What we use it for and on what legal basis

We do not make automated decisions that have legal effects on you, and we do not sell your data.

4. Who we share it with

Only with the providers we need, and only with what each one needs:

Google’s advertising partners may receive data through AdMob according to your consent choices. Beyond that, we would only share data if required by a competent authority or a legal obligation, or in a merger or sale of the company, with the same safeguards.

5. Ads and consent

• In the European Economic Area, the UK and Switzerland, and in U.S. states with privacy laws, the app shows a Google consent form (UMP) at the start. You can accept, decline or choose by purpose. If you decline, ads are not personalized.
• On iPhone, the system asks whether you allow tracking (App Tracking Transparency). If you don’t, the advertising identifier is not used.
• To change your choice: in the app, Settings → Privacy options; on iPhone, Settings → Privacy & Security → Tracking; on Android, Settings → Google → Ads (or Privacy → Ads), where you can delete or reset your advertising ID. This applies to both Google AdMob and Meta.
• Meta receives app events to measure our campaigns but does not show ads inside the app. If you withdraw tracking permission or delete your advertising ID, it stops receiving that identifier.
• California and other U.S. states: we do not sell personal information for money. Sharing the advertising identifier with Google for personalized ads, or app events with Meta for ad measurement, may count as “sharing” or “targeted advertising” under those laws; you can opt out through the consent form or the privacy options above.
• Ads disappear with the Premium subscription or the one-time “Remove ads” purchase.

6. How long we keep it

• Usage events: 24 months from when they are generated; after that they are deleted or aggregated so they can no longer be linked to an installation.
• Account and synced data: as long as you have the account; deleted within 30 days of your deletion request.
• Push token: until you turn off notifications, uninstall the app or the token stops being valid.
• Server technical logs: up to 90 days.
• Purchase data: as long as accounting and tax obligations require.
• Provider data: according to their policies (for example, Firebase Analytics keeps user-level data for up to 14 months).

7. Your rights and how to exercise them

Depending on where you live (for example under the GDPR in Europe, the LGPD in Brazil, Mexico’s LFPDPPP, or the privacy laws of California and other U.S. states), you have the right to:

• know what data we hold about you and get a copy;
• correct it if it is inaccurate;
• ask us to delete it;
• object to or restrict certain processing, and withdraw your consent at any time;
• receive your data in a portable format;
• opt out of the sharing of your data for targeted advertising;
• not be discriminated against for exercising your rights;
• lodge a complaint with your local data protection authority.

To exercise them, write to soporte@bibliadia.app. If you signed in, write from your account’s email. If not, your data on our server is only linked to a random installation identifier: tell us your phone model and the approximate date you installed the app and we will do our best to find it. We reply within 30 days (45 days where U.S. state law allows). For deleting your data, see Delete your account and data.

8. International transfers

START NODE is based in Panama, and our server and several providers (Google, Meta, RevenueCat, DigitalOcean) process data in the United States and other countries; Meta Platforms processes it in the United States and Ireland. When data leaves the European Economic Area, the UK or Brazil, we rely on the safeguards those providers offer, such as the European Commission’s standard contractual clauses or the EU–U.S. Data Privacy Framework where the provider is certified.

9. Security

All communication between the app and our server is encrypted (HTTPS). We limit access to data to the people who need it to run the service. No system is infallible: if a breach affecting you occurs, we will notify you and the authorities where the law requires.

10. Children

The app is not directed to children under 13 (or the minimum age set by the law of your country), and we do not knowingly collect their data. If you are a parent or guardian and believe your child has given us data, write to us and we will delete it.

11. Changes to this policy

If we change this policy, we will update the date above. If the change is significant, we will let you know in the app before it takes effect.

12. Contact

START NODE, S.A. · Panama City, Panama · soporte@bibliadia.app