Privacy Policy — Beloved: AI Bible
Effective date: August 10, 2026 Last updated: August 10, 2026
Beloved: AI Bible ("the app", "we", "us") is operated by デルフィー合同会社 (Delphi LLC). This policy explains what information the app handles, how, and your choices. Questions: privacy@delphigk.com.
Summary (the short version)
- No account, no sign-up. The app works anonymously. We do not ask for your name, email, or password to use it.
- We never store your conversations. When you use AI chat, the words you write are sent to our AI provider so it can answer you — but we do not keep them on our servers. We store only anonymous metadata (that a message was sent, plus timing and cost), never the content of your messages or the replies.
- Most of your data stays on your device. Your saved verses, reading progress, streak, reading-plan progress, chosen language/translation/tradition, and your chat history are stored locally on your phone, not on our servers.
- AI chat messages are sent to our AI provider to generate replies. When you use the AI Bible chat or verse interpretation, the text you send and the Bible passage you are reading are transmitted to our servers and to Anthropic (the Claude AI provider) to produce a response.
- Notifications and analytics are optional. Push notifications only send data if you turn them on. Analytics/crash reporting run only where enabled in the build.
- We measure our ads, not you. So we know whether an install came from one of our ads, the app reports installs and app opens to Meta. It shows no ads inside the app, never sends Meta anything you read or write, and on iOS it asks your permission first — declining is fine and costs you nothing.
Information the app handles
1. Stored only on your device (not sent to us)
The app uses your device's secure on-device storage for:
- App preferences: interface language, country/region, faith tradition (Catholic or Protestant), chosen Bible translation, and theme.
- Activity: saved/favourited verses, reading progress and last-read position, reading streak, and reading-plan progress.
- Free-tier usage counters (e.g. how many free AI questions you've used this week).
- Onboarding responses, which may include a first name you optionally provide and short reflection answers.
- Your AI chat conversation history, which is kept on your device.
If you delete the app, this on-device data is removed with it. You can also clear specific data in-app (e.g. Settings → Clear chat history).
2. Information sent to our servers
- AI Bible chat & verse interpretation. When you send a message or request an interpretation, the message text and the Bible passage/verse context you are viewing are sent to our backend (biblechatdelphi.netlify.app, built on Netlify Functions and Supabase) and to Anthropic to generate a reply. We do not store the content of your messages on our servers — your chat history stays on your device. For safety, cost control, and abuse prevention we log only anonymous event metadata: that a chat turn happened, plus its language, region, faith tradition, country, timing, and token/cost totals — never the message text. (Retention: 90 days, then auto-deleted.) If you opt in (in Settings), we may also derive anonymized language-pattern features from your messages — your register, common expressions, and vocabulary, but never the content, meaning, names, or any personal details — and keep them only in aggregate to help the app read more naturally in your language. This is off by default, can be turned off at any time, and never includes crisis-related messages.
- Onboarding reflection (when used). If you complete the onboarding reflection, your reflection text may be sent to the AI to generate a personalised closing verse.
- Push notifications (only if you enable them). If you turn on notifications, we store a device push token together with your language, region, faith tradition, and country code so we can send relevant, localised notifications. You can turn this off at any time in Settings → Notifications or your device settings.
- Anonymous content requests. The app fetches Bible text, devotionals, reading plans, the holy calendar, and attributions from our database. These are public, anonymous reads.
We do not collect your name (beyond an optional first name kept on your device), email address, contacts, photos, or precise location.
Sensitive (special-category) data. Your faith tradition (Catholic or Protestant) is a religious-belief signal, which laws such as GDPR (EEA), LGPD (Brazil) and PIPA (Korea) treat as sensitive/special-category. Where it reaches our servers — stored with your push registration, and as one dimension of the anonymous chat metadata above — it is tied only to your random device ID, never to your identity, and used solely to serve content and notifications matching your tradition. Our basis is your consent, given when you choose your tradition during onboarding.
3. Analytics & diagnostics (where enabled)
Where enabled in the build, we use:
- PostHog — product analytics (e.g. which screens and features are used), tied to a random device identifier, not to your identity.
- Sentry — crash and error diagnostics to help us fix bugs.
These help us understand usage and stability in aggregate. They do not collect the content of your chats or your saved verses.
4. Subscriptions (when available)
When in-app subscriptions are available, purchases are processed by Apple or Google and managed via RevenueCat. We receive subscription status (active/expired) but not your full payment details. Apple/Google handle the payment itself under their own privacy policies.
5. Audio (when available)
When Bible audio is available, narration is streamed from Faith Comes By Hearing (FCBH). Streaming requests are subject to FCBH's terms.
6. Advertising measurement
We advertise the app on Meta's platforms (Facebook and Instagram). So that we can tell whether someone installed Beloved because of one of those ads — and for nothing else — the app includes the Meta SDK, which reports app installs and app opens to Meta Platforms, Inc. If you make a purchase, the fact and amount of that purchase may be included.
- There are no ads inside the app. Beloved has no ad space and serves you no third party's advertising. This is measurement of our own marketing, not an advertising business built on you.
- Your content is never part of it. Nothing you read, save, write, or ask — verses, chats, reflections, reading progress, prayer or reflection answers, or your faith tradition — is sent to Meta.
- On iOS we ask you first. After onboarding, iOS shows Apple's App Tracking Transparency prompt. If you decline, the app does not read your device's advertising identifier (IDFA) and Meta receives no identifier for you; measurement falls back to Apple's SKAdNetwork, which reports installs to us in aggregate and does not identify you. If you allow it, the advertising identifier is shared with Meta so an install can be matched to an ad.
- You can change your answer at any time in your device's Settings → Privacy & Security → Tracking. You can also limit how Meta uses data about you in your Facebook or Instagram ad settings.
Third-party services (subprocessors)
We share data only as needed to operate the app, with:
| Provider | Purpose | What it receives |
|---|---|---|
| Anthropic (Claude) | Generate AI chat / interpretation replies | Your message text + Bible passage context |
| Supabase | Database & file storage (hosted in East US (Ohio), USA) | Content reads; push-token + notification preferences (if enabled) |
| Netlify | Serverless backend / hosting | Requests routed through our functions |
| PostHog (where enabled) | Product analytics | Usage events + random device ID |
| Sentry (where enabled) | Crash/error reporting | Diagnostic/crash data |
| RevenueCat + Apple/Google (when available) | Subscription management & payments | Subscription status; payment handled by the store |
| Meta Platforms | Advertising measurement — did an install come from one of our ads? | App install / app-open events (and purchase events, if you buy); your device's advertising identifier only if you allow tracking |
| Faith Comes By Hearing (when available) | Bible audio streaming | Audio stream requests |
| Expo / Apple (APNs) / Google (FCM) | Push delivery | Device push token (if notifications enabled) |
Each provider processes data under its own privacy policy. デルフィー合同会社 (Delphi LLC) does not sell your personal information.
Children's privacy
The app is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact privacy@delphigk.com.
Crisis resources — important
The app may show crisis hotline numbers and a panic-button resource screen. The app is not a crisis, medical, or counselling service. If you are in danger or crisis, contact your local emergency number or a listed hotline. See also our Terms of Service.
Your choices and rights
- On-device data: clear it in-app (e.g. Clear chat history, Replay onboarding) or by deleting the app.
- Notifications: turn off any time in Settings or your device's OS settings.
- Ad tracking (iOS): allow or refuse at the prompt after onboarding, and change it whenever you like in Settings → Privacy & Security → Tracking. Refusing does not limit any part of the app.
- Deleting server-side data: In the app, Settings → Delete my data erases everything we hold for your device — push registration, chat metadata, and counters — in one tap, immediately and permanently. You can also email privacy@delphigk.com. Because there is no account, this is keyed to your device ID, which only your device holds. Depending on your region (e.g. GDPR/EEA, LGPD/Brazil, PIPA/Korea, CCPA/California), you may have additional rights; we honour applicable requests.
Data retention
On-device data persists until you clear it or uninstall. Server-side records are kept no longer than needed: anonymous chat event metadata for 90 days, then auto-deleted; push registrations while your device stays active (removed after 180 days of inactivity); rate-limit counters expire within ~2 days.
International transfers
Our providers may process data in countries other than yours (e.g. Supabase region East US (Ohio), USA; Anthropic and Meta Platforms in the United States). Where required, transfers rely on appropriate safeguards.
外部送信規律に基づく公表（日本の利用者の方へ）
電気通信事業法第27条の12（外部送信規律）に基づき、本アプリが利用者の端末から外部に送信する情報を以下のとおり公表します。
| 送信先 | 送信される情報 | 利用目的 |
|---|---|---|
| Anthropic（Claude） | AIチャットで入力されたメッセージ本文、および表示中の聖句 | AIによる応答の生成 |
| Supabase | ランダムな端末ID、言語・国・地域・信仰的伝統の設定、プッシュ通知トークン（通知を有効にした場合） | コンテンツの配信、通知の送信 |
| Netlify | 上記リクエストの中継 | バックエンド処理 |
| Meta Platforms | アプリのインストール・起動イベント（購入した場合はその事実と金額）、広告識別子（IDFA。トラッキングを許可した場合のみ） | 当社の広告の効果測定 |
| PostHog（有効な場合） | 利用イベント、ランダムな端末ID | 利用状況の分析 |
| Sentry（有効な場合） | クラッシュ・エラー情報 | 不具合の調査と修正 |
| RevenueCat / Apple / Google | 購入・サブスクリプションの状態 | 課金・サブスクリプションの管理 |
| Expo / Apple (APNs) / Google (FCM) | プッシュ通知トークン | 通知の配信 |
送信の停止方法： トラッキング（広告識別子の送信）は端末の「設定 > プライバシーとセキュリティ > トラッキング」から、プッシュ通知はアプリ内の「設定 > 通知」または端末の設定から、それぞれ停止できます。AIチャットのメッセージ送信は、当該機能をご利用にならないことで停止できます。
Changes to this policy
We may update this policy. Material changes will be reflected by the "Last updated" date above and, where appropriate, an in-app notice.
Contact
デルフィー合同会社 (Delphi LLC) EX Ebisu Nishi Bldg 5F, Ebisu-Nishi 2-8-4, Shibuya-ku, Tokyo 150-0021, Japan privacy@delphigk.com