Bible Awake
Privacy
Effective and last updated September 15, 2026
This policy explains how Bible Awake handles information when you use the Bible Awake iPhone app, its API, and this public website.
Information kept on your device
Your alarm times, labels and schedules, challenge configuration, selected wallpaper and sound, downloaded scripture content, and language preference are stored locally on your device. Removing the app removes that local app data, subject to normal device backups. Removing the app does not cancel an App Store subscription.
Photo of a Cross challenge
With camera permission, a photo is processed temporarily on your iPhone only to confirm that a capture succeeded, then discarded. It is not saved to your photo library or app storage, uploaded, or collected. This version does not analyze whether the photo contains a cross. If capture is unavailable, you can choose a verse challenge instead.
What we collect
For subscription verification and protected content, our server receives a random app-installation UUID, platform and app version, product ID, and Apple-signed transaction information. We validate it with Apple, then retain hashed Apple transaction identifiers, subscription environment and state, expiration, grace-period and revocation dates, and hashed short-lived access tokens. We do not retain raw transaction JWS values or bearer tokens.
Native app and optional server telemetry
Bible Awake 1.0 (build 7) does not send product-usage, alarm, challenge, session, timing, analytics or client-crash telemetry. The server includes optional telemetry endpoints used by older or other clients. If one of those clients uses them, it may send pseudonymous event, session and installation UUIDs; app/build, operating-system and platform information; time-zone offset; permission state; generated alarm IDs and configuration categories; scheduling, wake and challenge outcomes; and hashed client-error messages. The telemetry schema rejects high-risk fields such as alarm labels, scripture text, contact details, receipts and tokens. Raw event telemetry received through those endpoints is configured for deletion after 90 days; installation records and deidentified aggregate reports may be kept longer.
Website, API and operational logs
Our website and API run on the owner's Hostwinds VPS using IIS and may process IP address, requested URL, date and time, browser or device user agent, referrer, content type, request size and correlation IDs in standard server and error logs. Error records may also contain exception messages, stack traces and other diagnostic details. Redaction rules remove configured sensitive fields, but do not guarantee that every exception detail is sanitized. The owner has not enabled visitor analytics or advertising tools. The public site loads fonts from Google, so your browser sends Google your IP address and ordinary request headers. A language cookie remembers your site language; authenticated administration areas use necessary sign-in and security cookies.
How it is used
We use purchase and installation information to verify and restore subscriptions across your installations and deliver subscribed content. We use server request and error information to operate and secure Bible Awake and diagnose failures, and support information to answer your requests. If optional or older clients send event telemetry, we use it to measure reliability and improve the service. We do not sell personal information, share app or customer data for advertising, or use it for targeted advertising.
When information is shared
Apple processes purchases, billing, cancellation and signed subscription records under Apple's terms and privacy policy. Hostwinds processes data as the VPS provider hosting the website, API and support email, and Google receives web-font requests as described above. The owner does not share app or customer data for advertising. We may disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.
Retention
Bible Awake 1.0 (build 7) does not send event telemetry. For optional or older clients that use the server telemetry endpoints, raw event telemetry is configured for deletion after 90 days. That setting does not delete subscription, installation, notification-idempotency, aggregate, support, server access-log or error-log records. Those records are kept as reasonably needed to provide access, support restores, prevent fraud, operate and secure the service, answer support requests and meet legal obligations. Support correspondence and any enabled VPS backups follow the owner's configured retention settings.
Your choices and deletion requests
You can change permissions in iPhone Settings, cancel or manage the subscription through Apple, and remove device-local data by deleting the app. To ask for access, correction or deletion of server-side information, email support. We may need an installation identifier or support details to locate records, and may retain limited information where law, security, fraud prevention or an unresolved transaction requires it. Deidentified aggregate data cannot be linked back to an installation.
Security
We use transport encryption, cryptographic verification of Apple-signed data, certificate-chain validation, hashed tokens and transaction identifiers, access controls, and redaction rules. No system is perfectly secure; contact us promptly if you believe your information or Bible Awake access has been compromised.
Children
Bible Awake is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. A parent or guardian who believes a child provided information should contact us for deletion.
Changes to this policy
We may update this policy as Bible Awake or legal requirements change. We will post the revised policy here and change the effective date; material changes may also be announced in the app.
Contact
Contact Bible Awake support with privacy questions or requests: