YOUR WORDS. YOUR SPACE.

Privacy policy

Updated 20 October 2026 · Developer: Oana Rinaldi

The Bible Explained provides offline Bible reading, historical and biblical prayers, original reflections and optional paid study tools. No account, advertising, analytics, tracking or location permission is required.

What stays on your device

Saved passages, highlights, notes, prayers, reading preferences, calendar entries and reminder schedules are kept in the app's local storage. We do not receive your journal. Your operating system may include app data in device backups according to your own backup settings. Exported journal files go only where you choose to share them. Deleting local data in Settings removes the app's saved journal and reminders; copies you exported or device backups must be managed separately.

Bible downloads

English WEB and the Romanian draft New Testament are included with the app. When you select another available edition, its public scripture file downloads over HTTPS from our Cloudflare service and is checked against the bundled source checksum before offline storage. The download does not attach your journal or require an account. Cloudflare necessarily receives network information such as the requesting IP address. We do not create a reading-history database from these downloads.

Optional AI explanations

Before using AI, the app asks for explicit consent. When you choose Explain or submit a question, your selected Bible passage, prayer or saint commemoration, its source/reference, nearby scripture where applicable, question, selected explanation perspective and answer language are transmitted over HTTPS through Cloudflare to OpenAI. A question may reveal religious beliefs or other sensitive information you choose to include. Your private notes and other journal items are never automatically attached. Only the specific reading you choose to explain is sent; long readings use an opening excerpt. The app separately asks for consent before explaining prayer or saint content. Do not include personal information you do not want processed.

The service uses OpenAI's API with response storage disabled. We do not save prompts or answers in our database or intentionally log request bodies. OpenAI and Cloudflare process requests under their own service and retention policies; this is not a promise of zero retention by those providers. Requests necessarily expose technical network information such as IP addresses to the providers. Processing may occur outside your country, including in the United States. See OpenAI privacy, OpenAI API data controls, and Cloudflare privacy. Turn off AI consent in Settings to stop future AI submissions. Reading and searching do not require AI consent.

Optional AI artwork and private gallery

The artwork studio asks for separate consent. Only the title, inspiration text and art style you choose, plus a pseudonymous wallet identifier, are transmitted through Cloudflare to OpenAI to generate an image. Your text or resulting image may reveal religious beliefs or other personal information you choose to include. No journal note or other prayer is automatically attached. The images endpoint follows OpenAI’s applicable API data and abuse-monitoring policies; disabling Responses storage for explanations does not mean zero provider retention for images.

Generated images are stored privately in Cloudflare R2. A server ledger stores their title, style, creation time, status and wallet association. We do not retain your full inspiration text in this gallery database or intentionally log request bodies. Gallery access requires a verified Apple purchase identity or authorized complimentary credential. Images are not published to a community or used for advertising. You can download/share an image or delete it from the cloud gallery inside the app. Deletion removes the cloud image and its title; a minimal job identifier/status remains to prevent duplicate charging. Downloaded or shared copies must be managed separately. Generated images are artistic interpretations, not historical evidence or scripture.

Biblical maps

The atlas uses bundled OpenBible geographic references and Apple MapKit. No device-location permission is requested, and the app does not attach your journal or personal location to map requests. Apple supplies map content and necessarily processes map/network requests under its policies. Ancient identifications are sometimes approximate or disputed.

Purchases and service protection

Apple handles payments and subscriptions. We do not receive your card details. To authorize paid AI requests, our server verifies Apple-signed purchase details, including app and product identifiers, transaction identifiers, subscription validity and environment. Daily usage counters use a hash of the original purchase identifier; they are retained for up to 35 days. Refund and revocation records are kept until one day after the related subscription period expires. Image-credit purchases use Apple’s consumable in-app purchase system. The server verifies the signed receipt and wallet-specific appAccountToken before adding credits, and finishes delivery only after the wallet is credited. Credit balances, purchase and refund identifiers, wallet hashes and minimal generation records are retained while needed to honor non-expiring credits, deliver artwork and prevent receipt replay. Successful images use one credit; failed or expired generation jobs return the reserved credit. Purchased credits remain usable after a subscription expires. Contact us to request removal of wallet/service records; deleting financial replay-protection records may be restricted by applicable retention needs. These records are used only to deliver the paid service and prevent abuse. They are not used for advertising or tracking.

Optional complimentary access

People who have been granted complimentary Premium access can restore it with Sign in with Apple. We request no name or email address. Apple provides an app-specific identifier and a signed authentication token; these are sent to our Cloudflare service to verify identity and access. The service retains the authorized owner’s hashed identifier and signing configuration. A permanent access credential is stored securely in the device Keychain. It authorizes the same AI service and daily usage allowance as Premium. Authentication tokens are not intentionally logged or saved in our database. This does not create a general app account or upload your journal. Access can be revoked by the developer; contact us about identity or access records. Signing in does not cancel any existing Apple subscription.

Notifications and accessibility

Prayer reminders and timer alerts are scheduled locally after you grant permission. Notification wording does not contain your prayer or note text. Disable notifications in the app or iOS Settings. Read-aloud uses Apple's speech synthesizer and installed voices; it does not send your private journal to our AI service.

Your choices and rights

You can read without signing in, decline AI, change languages, export your journal, delete local data and cancel your subscription in your Apple Account settings. Deleting the app or local data does not cancel an Apple subscription. For requests about service records, contact us; we may need a transaction reference to locate records without collecting more identity information than necessary. We do not sell personal information.

Children and content

The app is not directed specifically at children. Scripture contains mature historical themes; AI interpretation may make mistakes and is not a substitute for qualified pastoral, medical or other professional advice.

Android and Google Play

On Android, Google Play handles payments. Our Cloudflare service checks Google purchase tokens with the Google Play Developer API before authorizing Premium or delivering image credits. It acknowledges subscriptions and consumes credit-pack purchases only after verified delivery. Only purchase-token hashes, order identifiers, wallet associations and refund records are retained in the service ledger; raw Google purchase tokens are not retained server-side. Google refunds are reconciled before credit grants and artwork generation. Android purchase credentials are encrypted using Android Keystore and excluded from backups. The Android journal is also excluded from automatic app backup; use Export my journal before uninstalling or changing devices.

Because Google eventually stops accepting expired purchase tokens, Android also stores a signed wallet-only credential. It preserves access to already purchased credits and the private gallery after Premium expires, without granting Premium. You can explicitly export a separate image-credit recovery file and import it on another installation. This file grants access to the credit wallet and gallery: keep it private and share it only with a destination you choose. It is not included in your journal export. Google Play restores current subscriptions; expired-wallet recovery after reinstalling requires your recovery file.

Android maps display bundled OpenBible places using Leaflet and OpenStreetMap tiles. OpenStreetMap necessarily receives network information, including your IP address and the tile area requested; your device location and journal are not attached. No location permission is requested. Android read-aloud uses Android text-to-speech and available voices. Depending on the installed speech engine and voice, the engine provider may process speech text; no private journal is automatically sent to our AI service. Reminders use Android notifications and may be delayed by battery-saving settings.

Android complimentary access

Optional Google sign-in is used only to verify an explicitly authorized complimentary developer identity. Google provides a signed identity token, which may contain profile details such as an email address or name; our service verifies its signature, audience, fresh challenge and subject and does not retain the token or those profile details. The developer retains only the explicitly authorized subject hash in server configuration. The resulting revocable access credential is kept encrypted in Android Keystore-backed storage. It does not create a general app account, upload your journal or cancel an existing Google Play subscription.

Reports about generated content

Android offers Report a concern beside AI explanations and generated artwork. Submitting it sends a short reading or artwork reference, a selected reason and the verified pseudonymous wallet identifier to Cloudflare. It does not attach your journal, prompt, question, answer or image. Reports are used to investigate harmful or inaccurate output, are rate limited and are retained for up to 35 days.

Contact

For privacy questions or rights requests: oanaunciuleanu@gmail.com. Material policy changes will be published here with an updated date.