Skip to content

Privacy Policy, September 28, 2026 version

Version: September 28, 2026 to October 8, 2026
  • Current
  • September 28, 2026 to October 8, 2026

This is an earlier version of our Privacy Policy. It applied from September 28, 2026 to October 8, 2026. Read the current Privacy Policy

Daily Christians: Privacy Policy

Last Updated: September 28, 2026
Effective Date: September 28, 2026

We at SIMPLISIO INNOVATION SRL (together with our affiliates, “Daily Christians”, “we”, “our” or “us”) respect your privacy and are strongly committed to keeping secure any information we obtain from you or about you. This Privacy Policy describes our practices with respect to Personal Data that we collect from or about you when you use our mobile application and services (collectively, “Services”).

1. Data Controller

If you are located in the European Economic Area (EEA), Switzerland, or the United Kingdom, SIMPLISIO INNOVATION SRL is the controller responsible for the processing of your Personal Data as described in this Privacy Policy.

  • Company: SIMPLISIO INNOVATION SRL
  • Address: Bucharest, Sectorul 3, Strada Nerva Traian, Nr. 27-33, Birou 6, Bl. B, Etaj 1, Ap. 6, Romania
  • Registration: Nr. Registrul Comertului: J40/14613/2021, CUI: 44791098
  • Contact: [email protected]

2. Religious Data & Your Consent

Daily Christians is an app designed to support your Christian faith and daily growth. By its nature, the app processes data that may reveal your religious beliefs, including prayer content, Bible study activity, habit tracking, and faith-related conversations with our AI assistant.

Under GDPR Article 9, data revealing religious beliefs is considered a “special category” of personal data requiring explicit consent.

By creating an account, you explicitly consent to the processing of data related to your faith and daily practices as described in this Privacy Policy.

Any content you voluntarily submit (messages, prayers, notes, journal entries) is processed based on your active choice to provide it. You can withdraw consent for specific content at any time by deleting it within the app. You can withdraw consent entirely by deleting your account.

3. Data We Collect: By Feature

Data minimization: Most features are optional, and we only collect the data described below if you actually choose to use that feature. Account & Profile data (Section 3.1) and basic analytics/crash diagnostics (Section 6) apply regardless of which features you use, since they support the app itself. If you use the app in Guest Mode (Section 9), none of this data is shared with us at all: you can still fully use offline features like habit tracking, prayer, and Bible reading, with everything stored only on your device.

3.0 Pre-Launch Mailing List

If you sign up to be notified about our launch (before the app is available), we collect:

  • Email address: to send you a notification when the app launches and occasional updates about the app’s development
  • IP address: for fraud prevention (detecting spam signups)
  • Consent timestamp: recording when you gave consent (GDPR compliance)

Your email is stored securely and used for launch notifications and occasional updates about Daily Christians. You can unsubscribe at any time via the unsubscribe link in any email or by contacting us. We do not share your email with third parties for marketing purposes. After launch, your pre-launch email is not linked to any app account unless you choose to create one with the same email.

3.1 Account & Profile

When you create an account, we collect:

  • Email address: for authentication, account management, and password reset
  • Username and display name: chosen by you during onboarding
  • Profile photo: optional, uploaded by you
  • Denomination: selected during onboarding to personalize your experience
  • Referral source: how you found the app (if provided). If you were referred by another user, your account may be linked to theirs for referral tracking, which may support a future ambassador rewards or commission program (see Section 3.10)

We also store your account creation date, timezone, and subscription status.

Age verification: During account creation, we verify your age to comply with international child safety laws. Your age is used only for this check and is not stored on our servers. See Section 9 (Children & Guest Mode) for details.

3.2 Trackers (Habit Tracking)

When you use the habit tracking feature, we collect:

  • Tracker definitions: name, type, icon, target values, frequency, whether the habit is positive or negative
  • Daily logs: date, completion status, value/quantity, notes, and journal entries
  • Trigger descriptions: if you choose to record what triggered a behavior (e.g., for addiction recovery trackers)
  • Streak data: current streak, longest streak, total successful days
  • Goals and goal history: your targets and how they changed over time
  • Challenges: solo goals you set with start/end dates and progress. For challenges shared with other users, see Section 3.9 (Social Challenges)
  • Reminders: times, days, and custom messages for your reminders

Sensitivity note: Tracker data may reveal religious practices (e.g., prayer frequency) or health information (e.g., addiction recovery). Trigger descriptions are particularly sensitive. This data is stored securely and only you can see it. When you name a custom tracker, the name alone goes through our automatic safety check first (Section 3.12).

3.3 Prayer

When you use the prayer feature, we collect:

  • Prayer subjects: categories you create to organize your prayers
  • Prayer intentions: the content of your prayer requests, answer status, and testimony
  • Prayer journal entries: your personal reflections linked to prayers
  • Prayer check-ins: session dates, duration, which intentions you prayed for, and reflection notes
  • Prayer statistics: aggregated data such as streaks, total check-ins, and total time spent in prayer

All prayer data is stored securely and is only accessible by you.

3.4 Bible Reader

  • Bible text is stored locally on your device (SQLite database) and is never transmitted to our servers
  • Bookmarks, highlights, and notes: your annotations on Bible passages, including verse references, colors, labels, and personal notes. These are synced to our servers so you can access them across devices
  • Custom labels: label names you create to categorize Bible passages
  • Device identifier: a device ID is associated with each annotation to enable multi-device sync

3.5 AI Bible Assistant

When you use the AI Bible Assistant feature, we collect:

  • Your messages: the questions and prompts you send to the AI assistant
  • AI responses: the generated replies stored for your conversation history
  • Conversation metadata: titles, creation dates, message counts, token usage

How AI processing works: Your messages are sent to our AI service provider for processing. We use OpenRouter, which may route your request to various underlying AI model providers (such as Anthropic, OpenAI, or Google) depending on the model selected. Messages are processed ephemerally: they are not stored by our AI providers and are not used to train AI models. We configure our AI services to disable any sharing of inputs, outputs, and feedback for model training purposes where such options are available. We store your conversation history in our secure database (Supabase) for your reference.

Content safety: We use automated content filtering to promote safe interactions. Logs of filtered content (category, confidence, action taken) are stored for safety monitoring. These logs do not contain the original message content. This filtering is fully automated: no human reviews your messages unless you report an issue.

AI providers: We may add or change AI providers in the future. Every provider we use states that it does not use your content to train AI models. For AI chat, we use providers that process your messages without storing them. The provider that runs our automatic safety checks (Section 3.12) may keep the text it checks for as long as it needs to run and secure its service.

Important: AI-generated responses are not professional counseling, therapy, or medical advice. They are provided for informational and inspirational purposes only.

3.6 Community & Groups

When you participate in community groups, we collect:

  • Group memberships: which groups you belong to, your role, and join date
  • Messages: text messages you send in group chats, including replies and mentions
  • Shared images: photos you upload to group conversations
  • Poll responses: your votes on group polls
  • Reactions: emoji reactions you add to messages
  • Reports: if you report inappropriate content, the report reason and status
  • Subscription tier badge: if you subscribe to Pro or Max, a badge showing your tier is displayed next to your name in group chats, feedback ideas, and update posts

Visibility: Community messages, images, polls, reactions, and subscription tier badges are visible to other members of the group. Anonymous posting may be available for certain message types. However, anonymous messages are still linked to your account internally for moderation purposes.

If you report inappropriate content, the reporter’s identity is not shared with the person being reported.

Content moderation (automated and human): Messages posted in community groups are subject to moderation:

  • Pre-post filter: All messages pass through an automated content filter before posting to block clearly harmful content (hate speech, slurs, threats; see Section 3.12).
  • Post-report review: When a message is reported, an automated review evaluates the content along with report context and either (a) automatically removes it if a violation is highly likely, (b) dismisses the report if the message is clearly benign, or (c) queues it for human admin review when the case is ambiguous.
  • Enforcement actions: Users with repeated or severe violations may receive temporary (30 minutes to 7 days) or permanent community access restrictions. Personal features (trackers, prayer, Bible reader, AI Bible Assistant) remain available during community restrictions. You can appeal any restriction by emailing [email protected].
  • Self-harm content: Content expressing personal struggles with depression or self-harm is not removed. Our community is designed to support people through hard times. Crisis resources are offered when such content is detected, and moderators are notified so they can offer pastoral support.
  • Ban records: Moderation data (your reports, moderation verdicts, ban history) is stored on our servers and retained per Section 12. You may request access to or deletion of this data via the rights described in Section 13.

3.7 Journey (Lessons & Paths)

When you use the learning journey feature, we collect:

  • Progress data: which lessons and action plan items you have completed, and when

3.8 Feedback & Updates

When you interact with the feedback board or app updates, we collect:

  • Feature ideas: title, description, and category of ideas you submit
  • Comments: your comments on feature ideas
  • Upvotes: which ideas you upvoted
  • Update reactions: your reactions to app update posts

Your display name and profile photo are shown alongside your feedback contributions.

3.9 Social Challenges

When you create or join a challenge with friends, we collect:

  • Challenge details: goal type, start/end dates, and (for rolling challenges) recurring period settings
  • Challenge text: the name, description, goal label and commitment note you write. Before others see it, our automatic safety check (Section 3.12) reviews it and guesses its language, so public challenges are shown to people who speak that language. If the check blocks it, we keep a short copy so our team can review the decision.
  • Participation: who joined, your progress, and whether you completed each period
  • Connections: accepting a challenge invite from another user creates a mutual “connection” record between your accounts, so you can be invited to future challenges more easily
  • Sharing choices: you control whether your name and your specific goal are shown to other participants, using per-challenge visibility settings. A challenge creator can also make a board fully anonymous, so only “Someone” is shown instead of participant names
  • Encouragements: “praying for you” style taps sent between named participants
  • Reports: if you report a public challenge for inappropriate content, the report reason and status

Visibility: on a shared challenge board, other participants can see your name (unless you’ve chosen anonymity) and your streak/progress (unless you’ve chosen not to share your specific goal). Public/discoverable challenges may be visible to users beyond your immediate friends.

Sensitivity note: certain goal categories (e.g., addiction-recovery goals) are never stored in a form that could reveal the specific struggle to other participants, even when identity/goal sharing is enabled.

Anti-cheat measure: while a tracker is committed to an active challenge, certain edits to that tracker are temporarily locked to preserve the integrity of shared progress. This does not involve any additional data collection beyond what’s described above.

3.10 Ambassador Program & Referrals

  • Group hosting applications: if you apply to host a community group, we collect the group name you propose and your written reason for applying. This is private to you and our admin team.
  • Referral/commission tracking: if you are an ambassador and someone you referred subscribes to a paid plan, we record the referral relationship, subscription tier, and a calculated reward amount, to support a potential future ambassador rewards or commission program. We do not currently have an active commission payout system; this data capture exists to support one if/when it launches.

3.11 Verse of the Day

  • Read status: whether you’ve opened a given day’s verse
  • Likes: verses you’ve liked, which contribute to an aggregate (non-identifying) like count shown to all users

This engagement data is used to power your personal experience (e.g., marking verses as seen) and is not shared with other users individually.

3.12 Automatic safety checks

To keep people safe, an AI safety check reads the text you write in these places:

  • Community messages: before they post, and again if someone reports them
  • Usernames and display names: when you choose or change them
  • Challenges: names, descriptions, goal labels and commitment notes, and again if someone reports a public challenge
  • Feedback board: ideas and comments
  • Custom tracker names: even though only you see them
  • AI chat: your questions and the AI’s answers

We send only the text being checked (and, for reports, the report reasons), never your email or account details. The checks run through OpenRouter on AI models from Google, OpenAI and TypeSafe (Section 10), and none of them use it to train AI. When a check finds clear harm, the text is not posted; feedback posts wait for a person to review them instead. Sharing a personal struggle is not treated as harm. If you think a check got it wrong, write to [email protected].

4. Notifications

  • Push notification token: your device’s Expo push token, stored to deliver notifications. Collected only with your permission.
  • Device name and platform: stored alongside your push token for notification delivery
  • Notification preferences: your granular settings for each notification channel (daily reminder, verse of the day, streak alerts, weekly summary, do-not-disturb window, sound, vibration)

Content restriction: Push notifications will never contain sensitive personal data such as prayer content, tracker details, chat messages, or community conversations. Notifications are limited to generic reminders, subscription status, and feature announcements.

5. Subscriptions & Payments

  • Subscription status: whether your subscription is active, cancelled, or expired
  • Purchase history: processed and stored by RevenueCat (our subscription management provider)
  • Payment information: we never collect or see your credit card, billing address, or payment details. All payment processing is handled entirely by Apple (App Store) or Google (Play Store)

6. Analytics & Diagnostics

  • App usage analytics: screen views, feature interactions, session data. Collected via Firebase Analytics to help us understand how the app is used and improve it. Legal basis: Legitimate interest with opt-out available.
  • Crash reports: stack traces, device model, operating system version, app version. Collected via Firebase Crashlytics to identify and fix bugs. Legal basis: Legitimate interest.
  • Performance metrics: app load times, API response times. Collected via Firebase Crashlytics.

Analytics data is not linked to your identity for crash and performance data. Usage analytics are linked to your account to understand feature adoption.

7. Country Detection & Embargo Enforcement

We determine your country using Cloudflare’s infrastructure-level geolocation to comply with US export regulations (OFAC sanctions). This works as follows:

  • When you sign in or create an account, the request passes through a Cloudflare Worker
  • Cloudflare resolves your IP address to a 2-letter country code at the network edge
  • Our application code never accesses, logs, or stores your IP address
  • The country code is used only to check against sanctioned countries and is then discarded
  • This check is performed at authentication and periodically when the app is opened

If you are located in a sanctioned region (currently: North Korea, Iran, Syria, Cuba, Russia), you will be unable to use the service.

Age-gate use: If you enter an age below your country’s minimum threshold during onboarding (see Section 9), the detected country code is also retained locally on your device (in secure app storage) solely to calculate the lockout duration until you meet the age requirement. This country code is never transmitted to our servers and is removed when you meet the age requirement or delete/uninstall the app.

Legal basis: Legal obligation (OFAC compliance); legitimate interest in protecting minors (age-gate).

8. How We Use Your Data

We use your Personal Data for the following purposes:

  • To provide the Service: processing your data to deliver habit tracking, prayer, Bible reading, AI Bible Assistant, community, and journey features
  • To improve the Service: analyzing usage patterns and crash data to fix bugs and develop new features
  • To communicate with you: sending push notifications (with your permission), subscription updates, and important service announcements
  • To ensure safety: content filtering in AI Bible Assistant, community moderation, and preventing misuse
  • To comply with the law: OFAC sanctions enforcement, tax record keeping. We may also disclose your data if required by law, court order, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others

We do not sell your Personal Data. We do not use your data for advertising. We do not share your data with data brokers.

Business transfers: If we are involved in a merger, acquisition, or sale of assets, your Personal Data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

9. Children & Guest Mode

Age Requirements

The minimum age to create an account varies by country:

  • 13 years: United States, United Kingdom, Canada, and others
  • 14-15 years: Austria, France, Italy, Spain, and others
  • 16 years: Germany, Romania, Netherlands, Poland, and others (also the default for unlisted countries)
  • 18 years: India, Brazil, South Africa, Turkey

During account creation, we verify your age using your country’s threshold. See our full age threshold list in the app.

Guest Mode

Users who do not meet the minimum age, or who choose not to create an account, can use the app in Guest Mode:

  • All data is stored locally on your device only
  • No data is transmitted to our servers
  • No personal information is collected (no name, email, or identifiers)
  • No analytics or crash reporting is active for guest users
  • Guest data may be lost if the app is uninstalled or device data is cleared

Managing Guest Data

Although guest data never reaches our servers, under GDPR we are still considered the data controller for data processed through our app. You have full rights to export and delete your guest data:

  • Export your data: Settings > Data Management > Export My Data. Your data is generated on-device in JSON or CSV format and shared via your device’s native share sheet.
  • Delete your data: Settings > Data Management > Delete Account. All guest content (trackers, prayers, Bible annotations, journal entries) is permanently removed from your device. This requires biometric authentication and a two-step confirmation.
  • What is preserved after deletion: Your language preference, theme, Bible tradition selection, and age-verification status (for legal compliance) are kept so you can continue using the app without re-configuring it. Everything else is wiped.
  • Uninstalling the app: Also removes all local guest data permanently (equivalent to deletion).

No server-side request is required for guest data deletion, because no server copy exists.

Data Migration

When a guest user later creates an account, their locally stored data can be migrated to our servers. This requires your explicit consent, and you are informed what data will be migrated before confirming.

COPPA Compliance

In compliance with COPPA (US), GDPR Article 8 (EU), and the UK Age Appropriate Design Code, we do not knowingly collect personal information from children under 13 (or the applicable age in your country). Users below the minimum age are limited to Guest Mode with local-only data storage. If we discover we have inadvertently collected information from a child below the minimum age, we will delete it promptly. If you believe a child has provided Personal Data to us, please contact us at [email protected].

10. Third-Party Services

We use the following third-party services to operate the app. Each receives only the data necessary for its purpose:

Supabase (database & authentication)

  • Receives: All user data listed in this policy
  • Purpose: Backend database, user authentication, data storage
  • Data is encrypted at rest and in transit
  • Privacy: https://supabase.com/privacy

OpenRouter (AI processing)

  • Receives: Chat messages (your questions and the AI’s responses) and the text sent for automatic safety checks (Section 3.12)
  • Purpose: Generating AI responses and running safety checks
  • Processing is ephemeral: messages are not stored and not used for model training
  • Privacy: https://openrouter.ai/privacy

TypeSafe (automatic safety checks)

  • Receives: The text being checked (Section 3.12), sent through OpenRouter. Never your email or account details
  • Purpose: Deciding whether text breaks our community rules
  • Does not use your content to train AI models. May keep the text it checks for as long as reasonably necessary to run its service
  • Privacy: https://typesafe.ai/legal/privacy-policy

Apple (Sign in with Apple)

  • Receives: Authentication request. If you choose “Hide My Email,” Apple generates a private relay email address that forwards to your real email
  • Purpose: Secure authentication without creating a password
  • Privacy: https://www.apple.com/legal/privacy/

Google (Sign in with Google)

RevenueCat (subscription management)

Firebase Analytics (usage analytics)

Firebase Crashlytics (crash reporting)

Cloudflare (network & embargo enforcement)

  • Receives: Your IP address (resolved to country code at the network edge)
  • Purpose: Embargo enforcement, network security
  • Your IP address is not stored by our application
  • Privacy: https://www.cloudflare.com/privacypolicy/

Apple App Store / Google Play Store (payments)

  • Receives: Your payment information (we never see this data)
  • Purpose: Processing in-app purchases and subscriptions
  • Governed by Apple’s / Google’s privacy policies

11. Legal Bases for Processing (EU/UK Users)

Under GDPR, we process your data on the following legal bases:

Explicit Consent (Article 9) + Contractual Necessity (Article 6(1)(b))

  • Data that reveals religious beliefs (prayer content, Bible annotations, habit tracking, AI Bible Assistant conversations about faith, community discussions, denomination) is processed under both Article 9 explicit consent and Article 6(1)(b) contractual necessity. Article 9 consent is required in addition to the Article 6 basis because this data falls under GDPR’s “special categories.”
  • You provide Article 9 consent when creating your account. You can withdraw it by deleting your account.
  • Content you voluntarily submit is processed based on your affirmative action of providing it. You can withdraw consent for specific content by deleting it.

Contractual Necessity (Article 6(1)(b))

  • Account data (email, username, profile): Required to create and manage your account
  • Subscription data: Required to fulfill your subscription

Legitimate Interest (Article 6(1)(f))

  • Analytics (Firebase Analytics): Improving app functionality and user experience. You can opt out.
  • Crash reporting (Firebase Crashlytics): Identifying and fixing bugs to maintain service quality

Legal Obligation (Article 6(1)(c))

  • Country-level geolocation: OFAC sanctions compliance
  • Financial records: Tax compliance (retained for 7 years)

12. Data Retention

  • Active account data: retained until you delete your account
  • Chat history: retained until you delete individual conversations or your account
  • Tracker/prayer/Bible data: retained until you delete individual items or your account
  • Community messages: retained until deleted by you or a group administrator. If you leave a group, your messages remain visible to other group members unless individually deleted before leaving
  • Pre-launch mailing list: retained until you unsubscribe or request deletion
  • Financial records: retained for 7 years after transaction (legal obligation)
  • Analytics data: aggregated and anonymized data may be retained indefinitely
  • Crash logs: retained per Firebase Crashlytics defaults (typically 90 days)
  • Content filter logs: retained until account deletion

13. Your Rights

All Users

You can exercise these rights directly in the app:

  • Delete your account: Settings > Account > Delete Account. Requires biometric authentication. All your data is deleted immediately and permanently. This cannot be undone.
  • Export your data: Settings > Data Management > Export My Data. Choose JSON or CSV format. Your data downloads immediately to your device.
  • Delete specific content: Delete individual trackers, prayers, chat conversations, Bible notes, and community messages within the app.
  • Edit your data: Update your profile, tracker settings, and other information at any time.

EU/UK Users (GDPR Rights)

In addition to the above, you have the following rights under GDPR:

  • Right to access: View and export all your data (see above)
  • Right to rectification: Correct inaccurate data via the app or by contacting us
  • Right to erasure: Delete your account and data (see above)
  • Right to data portability: Export your data in JSON or CSV format (see above)
  • Right to restrict processing: Contact us to limit how we process your data
  • Right to object: Object to processing based on legitimate interests (analytics)
  • Right to withdraw consent: Delete content or your account at any time
  • Right to lodge a complaint: Contact your local data protection authority

Supervisory authorities:

  • Romania: ANSPDCP (Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal)
  • Your local EU/EEA data protection authority
  • UK: Information Commissioner’s Office (ICO): https://ico.org.uk

For requests not available through the app, contact us at [email protected]. We will respond within 30 days.

US Residents (State Privacy Rights)

If you are a resident of California, Virginia, Colorado, Connecticut, or Utah:

  • Right to know: What data we collect and how we use it (this policy)
  • Right to delete: Delete your account and data via the app (see above)
  • Right to correct: Edit your data via the app
  • Right to data portability: Export your data via the app
  • Right to opt out of sale: We do not sell your personal data
  • Right to non-discrimination: We will not treat you differently for exercising your rights
  • Right to appeal: If we deny a request, you can appeal by contacting us

We do not sell personal data. We do not share personal data for cross-contextual behavioral advertising.

For requests, contact us at [email protected]. We will respond within 45 days.

14. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), Switzerland, and the United Kingdom, including the United States.

When transferring data outside these regions, we rely on:

  • Standard Contractual Clauses (SCCs): approved by the European Commission under Article 46(2)(c) GDPR
  • UK International Data Transfer Agreement: for transfers from the UK

Our third-party processors (Supabase, OpenRouter, TypeSafe, RevenueCat, Firebase, Cloudflare) maintain their own data transfer safeguards. For details, see their respective privacy policies linked in Section 10.

For a copy of the safeguards we use, contact us at [email protected].

15. Security

We implement commercially reasonable technical, administrative, and organizational measures to protect your data:

  • All data is encrypted in transit (TLS/HTTPS)
  • Database data is encrypted at rest (Supabase default encryption)
  • Row Level Security (RLS) ensures users can only access their own data
  • Authentication uses industry-standard protocols (OAuth 2.0, bcrypt password hashing)
  • We use standard encryption only (TLS/HTTPS): no custom cryptographic implementations

No system is 100% secure. If you discover a security vulnerability, please contact us at [email protected].

Data breach notification: In the event of a data breach that poses a risk to your rights, we will notify affected users and the relevant supervisory authorities in accordance with applicable law (within 72 hours for GDPR).

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

  • Publish the updated version with a new effective date on this page
  • Notify you via in-app notification for significant changes
  • For material changes to how we process your data, we will seek your renewed consent where required by law
  • Your continued use of the Services after changes take effect constitutes acceptance of non-material changes

17. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights:

  • Email: [email protected]
  • Company: SIMPLISIO INNOVATION SRL
  • Address: Bucharest, Sectorul 3, Strada Nerva Traian, Nr. 27-33, Birou 6, Bl. B, Etaj 1, Ap. 6, Romania