Effective date: October 26, 2026
Last updated: October 22, 2026
Bible Connect offers a space to explore the Bible, save verses, follow your progress and ask questions through Ask. This policy explains how we handle personal information in the app and its account, support and subscription services.
Privacy at a glance
- We use account information and saved content to provide and synchronize your app experience.
- Ask conversations are saved. Requests are sent through Lovable AI Gateway to Google Gemini.
- Optional Firebase Analytics in the Android app runs only after you consent. We do not use the Advertising ID, demographics or interest reporting, and we do not use analytics for advertising.
- Google Play Billing handles purchases. We do not receive your full payment card details.
- You can delete your account in the app or request deletion by email. Account content is otherwise retained for up to two years after your last use, subject to limited exceptions.
- Bible Connect is intended for people aged 18 and above.
For privacy questions, email voledostudio@gmail.com. The data controller’s details appear in Section 14.
1. About this policy
“Personal data” means information identifying you or reasonably linked to you. “We,” “us” and “our” refer to the individual operating Bible Connect, identified in Section 14. Independent processing by third-party providers is also governed by their privacy notices.
2. Information we process
Account: Google Sign-In provides information allowed by the requested permissions, such as your email, Google identifier and display name. Lovable Cloud manages authentication, internal account identifiers and session records. We do not receive your Google password.
Preferences and progress: Bible version and language, saved verses, My Candle progress, streaks and activity dates, Ember balance and usage, and Access status are stored to deliver features and synchronize devices.
Ask: We save your questions and generated answers. Your question and relevant conversation context are sent through Lovable AI Gateway to Google Gemini, including personal information you enter.
Purchases: We process product details, transaction identifiers, purchase or receipt information and entitlement status to verify purchases and restore access. Google Play Billing handles payments; we do not receive full card numbers or security codes.
Technical data: We and our providers process IP addresses, timestamps, authentication and error records, and app and operating-system details to operate and secure the service. The Firebase libraries included in the Android app may create a Firebase Installation ID when the app starts (see Section 6).
Approximate country: When you use the app, signed in or as a guest, our hosting provider supplies a two-letter country code (for example RO or ES) derived from your connection, and we store it once on your profile. We use it only for aggregated analysis of where our readers are and for future product planning, not for availability, language, prices or offers. We do not store your IP address on your profile and do not use GPS or location permission; if no country can be determined, nothing is stored.
Optional Analytics: With your consent, see Section 6.
Support: We process your email, messages and attachments when you contact us.
3. Purposes and legal bases
Where the GDPR applies, we rely on:
- Contract: account authentication, requested features, content synchronization, Ask history, purchase verification and service-related support.
- Legitimate interests: service security, troubleshooting, other enquiries and legal claims, and aggregated country-level analysis of our reader base for product planning, subject to your rights, including your right to object.
- Consent: optional Firebase Analytics.
- Legal obligations: applicable accounting, tax and other statutory requirements.
If information necessary for a requested feature is missing, we may be unable to provide it. Refusing optional measurement does not prevent access to unrelated features. Special-category data also requires an applicable additional legal condition, as explained below.
4. Information you choose to share
We do not require you to declare your religion or denomination. Selecting a Bible version does not, by itself, establish your religious beliefs. However, messages or other account content may reveal beliefs, health information or other sensitive details depending on what you share.
Avoid unnecessary identifying details, sensitive information and information about others. Where special-category data is processed, an applicable condition under Article 9 GDPR is required; if explicit consent is relied upon, it must be obtained before that processing. This policy itself does not constitute consent.
We do not use Ask content or saved verse text to build advertising profiles based on religion, or send that content as analytics or advertising event parameters to Firebase Analytics or Meta.
5. Service providers and advertising
Lovable Cloud, operated by Lovable, provides hosting, database storage, user authentication, file storage and backend infrastructure to operate and support Bible Connect under applicable agreements. Lovable AI Gateway routes Ask requests to Google Gemini; this processing is separate from saved conversation history.
Provider privacy information:
- Lovable: cloud infrastructure and AI gateway.
- Google: Google Sign-In, Gemini, Firebase Analytics and Firebase Cloud Messaging.
- Google Payments: Google Play Billing.
- Meta: Facebook and Instagram advertising campaigns.
Providers acting on our behalf operate under applicable data-processing arrangements. Some also process information independently under their own notices. Advertising on Meta does not itself install a Meta SDK or Pixel in the app.
We may disclose relevant data where legally required or lawfully necessary to address abuse, protect users or handle legal claims. Special-category data requires an additional applicable legal condition.
6. Tracking and your choices
Necessary authentication and device storage support your session and requested features.
Firebase Analytics (optional, Android app). With your consent, we use Google Analytics for Firebase (Google Ireland Limited in the EEA, UK and Switzerland; Google LLC elsewhere) to measure how the app is used: screens and features used, engagement, retention, app version, device model, operating system, language and approximate location (country, region, city) that Google derives from your connection. Our code sends only a fixed list of event names and technical parameters; it does not send verse text, Ask questions or answers, Reflections, your name, email or account identifier. Analytics is off until you choose "Accept all" or turn on Product Analytics in "Manage options". Advertising storage, advertising user data and ad personalization remain denied in all cases, and data sharing with other Google products and services is disabled in our Analytics settings.
Demographics and advertising. We do not use age, gender or interest reporting, the Android Advertising ID (removed from the app) or Google signals, and we do not use analytics data for advertising.
Withdrawing consent. You can change your choice at any time in Account → Privacy choices. When you withdraw, collection stops and the Analytics data and app-instance identifier stored on your device are reset. Data already sent to Google before withdrawal is kept according to our Analytics retention setting.
Your consent record. Your choice, its date and the text version are stored on your device. If you are signed in with Google, the same minimal record (your account identifier, your Analytics decision, its date, the text version and when it last changed) is also stored with your account so we can demonstrate and respect your choice. It is never sent to Firebase Analytics. Reinstalling the app or clearing its data removes the device record, and the choice screen appears again.
Notifications and Firebase identifiers. The Android app includes Firebase Cloud Messaging. When the app starts, the Firebase libraries may automatically create a Firebase Installation ID and a messaging token and communicate them to Google, regardless of your Analytics or reminder choices; these are needed for the app's Firebase services to work and are not linked to your Bible Connect account. Only when you turn on reminders and allow notifications do we store the messaging token with your account, solely to send the reminders you chose. Turning reminders off stops delivery; deleting your account removes the stored token.
Withdrawal does not affect earlier lawful processing, delete your account or cancel a subscription. For assistance, contact voledostudio@gmail.com.
7. International processing
Providers may process data outside your country and the European Economic Area, including in the United States. Where required, transfers use applicable adequacy decisions or European Commission Standard Contractual Clauses, with supplementary safeguards where necessary. Contact us for details and copies of relevant safeguards, subject to lawful redactions.
8. Retention and backups
Account and saved content: retained while your account is used and for up to two years after your last use, then deleted or irreversibly anonymized, subject to limited lawful exceptions. Earlier deletion can be requested. The period runs from last use, not account creation.
Measurement data: identifiable analytics data under our control is retained only as necessary, for no longer than two years after the last relevant activity. Shorter Firebase settings may apply. Technical and support records: retained as needed, normally no longer than two years after the relevant event or last support interaction.
Legal records: limited transaction, consent and compliance records may be retained for statutory periods or necessary legal claims, restricted to those purposes. Sensitive data additionally requires an applicable Article 9 condition.
Account deletion: on confirmation, authentication and associated personal app data are deleted immediately from the active production database, subject to those exceptions. This includes the profile, progress, saved verses, Ember wallet and app transaction records, streaks, reminder tokens and Ask history.
Backups: residual copies may remain in daily disaster-recovery snapshots for approximately 14 days, until removed through the rolling cycle. They are not accessible to users or public callers. Deletion instructions are reapplied following restoration.
These periods do not determine independent Google Play records or AI-provider request logs. Gateway and model-provider logging, retention and any model-improvement use depend on the applicable service arrangements; this policy does not promise zero retention or no training.
9. Rights and deletion
Use Account → Delete account to delete your account and associated data. Without the app, email voledostudio@gmail.com, subject “Bible Connect — Account deletion”, identifying your account email. You may also request deletion of a particular conversation or other content without deleting the account. We may reasonably verify identity.
Depending on applicable law, you may request access, correction, erasure, restriction and portability; object to legitimate-interest processing; and withdraw consent. Contact the email above. Under GDPR, we normally respond within one month; any lawful extension is explained within that month. Requests are normally free, subject to legal exceptions; justified erasure requests are handled without undue delay.
Uninstalling does not delete your account. Account deletion does not delete your Google account or necessarily cancel billing. Manage subscriptions through Google Play → Payments & subscriptions → Subscriptions.
You may complain to your competent supervisory authority, including where you live or work or an alleged infringement occurred. In Spain: Agencia Española de Protección de Datos (AEPD).
10. Minimum age
Bible Connect is for people aged 18 and above. Under-18s must not create accounts or submit personal information. If we learn of such collection, we investigate and take appropriate steps, including deletion where required. Please notify us by email.
11. Security
We use appropriate technical and organisational measures and limit access to what is necessary to operate and support the service. No transmission or storage method is completely secure.
12. AI responses
Ask responses can contain errors and are not professional advice. We do not use Ask for solely automated decisions producing legal or similarly significant effects on you.
13. Changes
We may update this policy as the service, practices or legal requirements change. We update the date and provide additional notice of material changes where appropriate. Any new consent required by law must precede the relevant processing; continued use does not replace it.
14. Data controller and contact
Bible Connect is operated by Violeta Enescu, an individual based in Spain and the data controller responsible for this processing.
Email: voledostudio@gmail.com
Postal address: Carrer Britania 21, Alicante, Spain, 03540