Effective date: 14 July 2026 · Last updated: 24 July 2026
Bible Streak is operated by Reachly Apps (Reuben Obery) ("Reachly Apps", "we", "us", "our"). This Privacy Policy explains what personal data we collect when you use the Bible Streak mobile app and this website (together, the "Services"), why we collect it, who we share it with, and what rights you have.
The short version.
What you write in your private reflections is stored on your device, not in our database. When you use the AI reflection feature, that text is sent to our AI providers to generate a response, and is not kept by us afterwards. We use analytics and advertising tools to understand how the app is found and used. Reflections you choose to post to the Community feed are public to other Bible Streak users, and chat messages are visible to the people in that conversation — both are stored in our database so they can be shown to those people. We never sell your personal data for money. You can delete your account and data from inside the app at any time.
For UK and EU data protection purposes, Reachly Apps is the data controller of personal data processed through Bible Streak.
Reachly Apps (Reuben Obery)
3 Madeira Road, Clevedon, North Somerset, BS21 7TJ, United Kingdom
Email: [email protected]
Bible Streak is a Bible-reading app, so the data we handle can reveal your religious beliefs. Under UK and EU data protection law this is a "special category" of personal data and receives extra protection. This includes:
Where your reflection text lives. The full text of what you write is stored in secure storage on your device. It is deliberately excluded from our cloud database. What we sync to our database is metadata about the reflection (such as the date, the inferred theme, and whether it has been analysed), not the words themselves. The exception is described in Section 3: to generate an AI reflection, the text is transmitted to our AI providers at the moment you use that feature.
Payments are handled by Apple. We never receive or store your card details.
Synced data — your account, streaks, social connections, Community posts, comments, reactions, chat messages, support conversations and report records — is stored in Google Firebase (the Firestore database and, for images such as profile photos, Firebase Storage). Our backend runs in Google Cloud's United States region (us-central1), so this data is stored and processed in the United States under the safeguards in Section 7. Access is controlled by security rules tied to your signed-in account:
| Content | Who can see it |
|---|---|
| Private reflections / journal entries | Only you — stored on your device, not in our database (Section 2B) |
| Profile, streak and progress data | You, and friends you have connected with |
| Community posts, comments, "Amen" reactions | All Bible Streak users, with your display name and photo |
| Friend chat messages | You and the friend(s) in that conversation |
| Support / "chat with us" messages | You and our team |
| Reports and blocks | Our team |
We (as the operator) can access stored data where necessary to run the Services, moderate content, respond to support requests, and meet legal obligations — and not otherwise. If you delete a Community post, it is removed from the feed, but we cannot recall copies other users have already seen or saved.
If you decline App Tracking Transparency, we and our partners do not use the IDFA to track you. Limited privacy-preserving measurement (such as Apple's SKAdNetwork and aggregated reporting) may still take place, consistent with Apple's rules.
Read this section carefully. Bible Streak uses artificial intelligence to write short reflections back to you. This means text you write about your spiritual life leaves your device and is processed by third-party AI companies outside the UK.
When you use an AI reflection or weekly summary feature, we send the following to our AI providers:
The request goes from your device to our secure backend (Google Cloud Functions), which forwards it to OpenRouter (a US-based AI routing service), which routes it to Moonshot AI, the provider of the Kimi model that generates the response. Your text therefore leaves the United Kingdom and is processed in the United States and, depending on routing, in other countries including China. See Section 7 on international transfers.
We do not store your reflection text on our servers after the response is generated, and we do not use it to train any model of our own. Our AI providers handle it under their own terms and privacy policies.
To keep people safe, the AI feature also flags whether a reflection appears to describe self-harm, suicidal thoughts, or acute crisis. If it does, the app shows you supportive content and a way to reach out for help. This is an inference about your possible mental health and is treated as sensitive data.
This is an automated, best-effort signal only. It is not monitored by a human, it is not a safeguarding or emergency service, and it may miss things or get them wrong. If you are in crisis, please contact your local emergency services or a crisis line such as the Samaritans (116 123 in the UK).
AI reflections are machine-generated. They are not pastoral, spiritual, therapeutic, medical or legal advice, they can be wrong, and they are not the voice of God or of any minister. Use your own judgment, and see the Terms of Use.
AI reflections are an optional feature. Where the law requires your explicit consent to process sensitive data of this kind, we rely on the consent you give when you choose to turn AI reflections on and submit a reflection. You can withdraw that consent at any time by turning AI reflections off in Settings or by not using the feature, and you can ask us to delete data associated with it. Withdrawing consent does not affect processing that already took place lawfully.
| What we do | Legal basis (UK/EU GDPR) |
|---|---|
| Create and authenticate your account; run streaks, sessions, reminders and social features; deliver premium access | Performance of a contract |
| Store and display your reading and reflection history within the app | Performance of a contract, and your explicit consent for sensitive faith-related content |
| Generate AI reflections and weekly summaries; automated wellbeing flagging | Your explicit consent |
| Publish your Community posts, comments and reactions to other users; deliver chat and support messages | Performance of a contract, and your explicit consent for faith-related content you choose to publish |
| Review reports, moderate content and enforce blocks | Legitimate interests (keeping the Services safe) |
| Product analytics, reliability, troubleshooting, fraud and abuse prevention, business reporting | Legitimate interests |
| Advertising attribution and measurement; use of the advertising identifier | Your consent (via App Tracking Transparency and in-app choices) |
| Push notifications | Your consent (device permission) |
| Meeting legal, tax and regulatory obligations | Legal obligation |
We share personal data with the following categories of processors and partners:
| Provider | Purpose |
|---|---|
| Google / Firebase (Auth, Firestore, Cloud Functions, Storage, Messaging, Remote Config, Analytics) | Accounts, database, backend, push, analytics |
| Google Sign-In, Apple (Sign in with Apple) | Authentication |
| OpenRouter | Routing AI requests |
| Moonshot AI (Kimi) | Generating AI reflections |
| Apple App Store, RevenueCat, Adapty | Payments, subscriptions and entitlements |
| AppsFlyer, Meta (Facebook), TikTok for Business | Advertising attribution and measurement |
| Sentry | Crash and error reporting |
We may also disclose data where required by law, regulation, subpoena or court order, and in connection with a merger, acquisition or sale of assets, in which case we will tell you.
We do not sell your personal data for money. However, our use of advertising and measurement partners such as Meta and TikTok may count as "selling" or "sharing" personal information for cross-context behavioural advertising under California law. See Section 10 for how to opt out.
| Data | How long we keep it |
|---|---|
| Account and profile data | For as long as your account is open, then deleted within 30 days of account deletion |
| Reflection text | On your device until you delete it or remove the app. Not retained on our servers. |
| Reflection metadata (themes, dates, streaks) | For as long as your account is open, then deleted within 30 days of account deletion |
| Data sent to AI providers | Not stored by us. Our AI providers may retain it briefly for abuse prevention under their own policies. |
| Community posts, comments and reactions | Until you delete them or your account; removed from the feed on deletion |
| Chat messages | For as long as the conversation exists, then deleted with your account |
| Support conversations | Up to 2 years after the thread is resolved, so we can follow up on recurring issues |
| Reports, blocks and moderation records | Retained while needed to keep the Services safe, including after account deletion where necessary |
| Subscription and purchase records | Up to 7 years, to meet UK tax and accounting obligations |
| Analytics and attribution data | Up to 14 months, or the retention period set by the provider |
| Crash and diagnostic logs | Up to 90 days |
We are based in the UK, and several of our providers process data outside the UK — principally in the United States, and, in the case of the AI model provider, potentially in China. Some of these countries are not covered by a UK or EU adequacy decision.
Where we transfer personal data internationally, we rely on appropriate safeguards, such as UK adequacy regulations, the UK International Data Transfer Addendum, or Standard Contractual Clauses with our providers. For the AI reflection feature, we also rely on your explicit consent to the transfer, which you give when you choose to use the feature. You can ask us for more detail about the safeguards in place by emailing us.
We use technical and organisational measures designed to protect your data, including transport encryption (HTTPS/TLS), secure on-device storage for reflection text, authenticated access to our backend, database access rules, and restricted access to production systems. No system is completely secure, but we work to protect your information and to limit who can reach it.
Depending on where you live, you have the right to:
You can delete your account and associated data from inside the app, in Settings. To exercise any other right, email [email protected]. We will respond within one month.
You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk, or to your local data protection authority in the EU.
If you are a California resident, you have the right to know what we collect, to delete it, to correct it, to limit the use of sensitive personal information, and to opt out of the "sale" or "sharing" of your personal information for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.
To opt out of sharing for advertising purposes, decline the App Tracking Transparency prompt, turn off personalised advertising in Settings, or email us at [email protected] with the subject "Do Not Sell or Share My Personal Information".
Bible Streak is not intended for children under 13, and we do not knowingly collect personal data from them. In parts of the EU the minimum age for consent to online services is higher (up to 16); if you are under the applicable age in your country, please use the app only with the involvement of a parent or guardian. If you believe a child has provided us with personal data, contact us and we will delete it.
The Services may link to or integrate with third-party services. Their practices are governed by their own privacy policies, not this one.
We may update this policy from time to time. We will post the updated version here with a new "Last updated" date, and where the change is material we will tell you in the app or by email.
Reachly Apps (Reuben Obery)
3 Madeira Road, Clevedon, North Somerset, BS21 7TJ, United Kingdom
Email: [email protected]