Privacy Notice

Last updated August 17, 2026

This privacy notice for Data Driven Development FZ-LLC ("Company," "we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

Bible Flows is a Bible reading and daily devotional app. You do not create an account, and we do not ask for your name, email address, phone number, or a password. The single most important thing to understand about your privacy in this app is that the text you type in the morning flow is sent to our servers and to a third-party AI provider in order to generate your devotional. Section 3 explains this in full.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at general@aicaloriecounter.com

Summary of Key Points

Do we collect personal information? Very little. There are no accounts. We do not collect your name, email address, phone number, password, contacts, precise location, or advertising identifiers. The app signs you in anonymously, which produces a random per-device identifier.

What do you provide to us? The free-text you type in the morning flow describing how you are feeling or what is on your mind, which may be sensitive because of what you choose to write. If you complete an evening flow, the short answers you type to fill in its closing prayer are also saved with that day's entry. Apart from optional reminder settings, that is all you give us.

Do we process your writing with AI? Yes. Your text is sent to a third-party large language model provider (OpenAI and/or Anthropic) to generate your devotional content. See Section 3.

How long do we keep what you write? The free-text you type in the morning flow is held only in a temporary generation record that expires and is routinely deleted. The devotional generated for you — its verse and prayer — is saved, so that the app's Journey tab can show it back to you, until you ask us to delete it. See Section 7.

Is your Bible reading tracked? No. Your bookmarks, last reading position, font size, translation choice, and search index stay on your device and are not uploaded to us.

Do we sell your information or show ads? No. We do not sell or share personal information for advertising, and the app contains no advertising or attribution SDKs.

How do you delete your information? Contact us at general@aicaloriecounter.com. See Section 15.

Table of Contents

  1. What information do we collect?
  2. How do we process your information?
  3. How is what you write processed by AI?
  4. Crisis and safety screening
  5. When and with whom do we share your information?
  6. Bible text, audio, and other third-party content
  7. How long do we keep your information?
  8. How do we keep your information safe?
  9. What are your privacy rights?
  10. Children's privacy
  11. Do we use advertising, analytics, or tracking?
  12. International data transfers
  13. Controls for Do-Not-Track features
  14. Do we make updates to this notice?
  15. How can you review, update, or delete the data we collect from you?

1. What Information Do We Collect?

Information you disclose to us

In Short: The free-text you type in the morning flow, the short answers you type in an evening flow, and, if you turn them on, your reminder settings.

Before your morning flow is generated, the app asks you a short set of questions about how you are feeling and what is on your mind. Some are answered by tapping an option or a scale, and some ask you to write freely in your own words, including short and longer free-text answers and fill-in-the-blank sentences. Every answer you commit, including all free text exactly as you typed it, is sent to our servers so that a devotional can be generated for you.

Because you choose what to write, these answers may include sensitive personal information, such as details about your mental or emotional state, your relationships, your health, or your religious beliefs. Please do not include information you would not want processed as described in this notice, and in particular do not include other people's personal information, financial account details, or government identifiers.

The questions themselves are configured by us on the server and delivered to the app, so they may change over time without an app update.

Partway through a flow you may also, optionally, be asked to name a person you wish to hold in mind. If you provide a name, it is sent to us and stored with that day's entry. Please note that this is another person's information, and you should only enter a name you are comfortable sharing with us on the basis described in this notice.

The evening flow may also ask you to type short answers that personalize its closing prayer. If you complete an evening flow, those answers are sent to our servers and saved as part of that day's entry, so that the prayer can be shown back to you later exactly as you experienced it. They are used only for that purpose and are never sent to any AI provider.

Information created automatically

In Short: An anonymous per-device identifier, the calendar date of your entry, and ordinary technical logs.

We collect:

Information you provide if you enable reminders

In Short: A push notification token, your platform and timezone, and the reminder times you chose — stored only if you set up reminders.

The app can send you an optional push notification reminding you of the morning and evening flows. If you set up reminders, we store on our servers: the push notification token issued to your device by Firebase Cloud Messaging (a technical identifier that lets us send notifications to your device; it is not linked to your name or any account), whether your device is Android or iOS, your device's timezone, and the reminder times and days you chose. Notifications are delivered through Firebase Cloud Messaging, operated by Google. To trigger reminders at your chosen local time we use a third-party scheduling service, EasyCron, which receives only your anonymous uid, which reminder to fire, and your chosen schedule and timezone — never anything you have written and never any devotional content.

If you turn a reminder off, its schedule is paused and no further notifications are sent for it. Your notification token and reminder settings remain stored while reminders are configured; the token is removed when our system detects it is no longer valid (for example, after you uninstall the app and a delivery attempt fails), and you can have all of this information removed by requesting deletion as described in Section 15.

Information we do not collect

We do not collect your name, email address, phone number, postal address, or password. There is no sign-up, sign-in, or account. We do not collect your contacts, calendar, photos, microphone, camera, health data, or precise location. We do not collect advertising identifiers (such as the Apple IDFA or the Google Advertising ID), and the app does not present an App Tracking Transparency prompt because it does not track you across apps or websites.

Information that stays on your device

In Short: Your Bible reading data is local to your device and is not uploaded to us.

Your Bible reading activity is stored only in local storage on your device, in a local database and in your device's app preferences. This includes your bookmarks, your last reading position, your chosen font size, your chosen Bible translation, and the local search index used to search scripture offline. We do not receive, store, or have any access to this information. It is removed when you delete the app, and it is included in your device's own backup only if you have enabled a device or cloud backup that covers app data — a setting controlled by Apple or Google, not by us.

2. How Do We Process Your Information?

In Short: To generate your devotional, to show you your past devotionals, to keep your daily flow coherent over time, to send reminders you enable, to keep the app secure, and to comply with law.

We process the information described above to:

Where the laws of your jurisdiction require a legal basis for processing (for example the GDPR in the EEA or the UK GDPR), we rely on your consent, given by choosing to submit what you write; on the performance of our agreement with you, to deliver the app's core function; and on our legitimate interests in securing the service and protecting users. You may withdraw your consent at any time by not submitting further entries and by requesting deletion as described in Section 15. Where what you write reveals religious beliefs or health information and is treated as a special category of data, we rely on your explicit consent, given by submitting that text.

3. How Is What You Write Processed by AI?

In Short: The text you type is sent to our servers and then to a third-party AI provider, which generates the devotional. This is the most significant disclosure in this notice.

The devotional content in the morning flow is generated by artificial intelligence, not written in advance by a person. To produce it:

  1. The text you type is transmitted over an encrypted connection to our backend, which runs on Google Cloud Functions.
  2. Our backend combines your text with our own instructions and, where relevant, short summaries of your previous days' entries.
  3. That combined text is sent to a third-party large language model provider, which returns the generated devotional.

The AI providers we use are OpenAI and Anthropic. Both are configured in our system, and which one handles a given request depends on our current server-side configuration, which we may change at any time without notice to you. You should assume that what you write may be sent to either provider.

Your text is sent to these providers through their business and developer APIs, under their terms for business customers. We do not permit these providers to use what you write to train their models. Their handling of the data they receive is governed by their own privacy terms, and we encourage you to review them:

These providers may retain the text they receive for a limited period for abuse monitoring and legal compliance, in accordance with their own policies. We do not send your anonymous uid, and we do not send your name or contact details, because we do not have them.

AI-generated content can be inaccurate, inappropriate to your situation, or theologically imprecise. It is not reviewed by a person before you see it, and it is not professional, medical, psychological, or spiritual advice. Please see our Terms of Service.

4. Crisis and Safety Screening

In Short: Before any devotional is generated, what you write is checked for a narrow set of acute distress signals. If one is found, we show support resources instead of generating content.

We care about what happens if you write something that suggests you are in danger. Before any content is generated, the text you submit is scanned on our servers against a small, deliberately narrow set of patterns indicating self-harm, suicidality, or acute danger.

If one of those patterns is matched:

This screening is automated, is not a clinical assessment, and will not detect every expression of distress. It is not a substitute for emergency services or professional care. If you are in immediate danger, contact your local emergency number.

5. When and With Whom Do We Share Your Information?

In Short: With our AI providers, with Google as our cloud infrastructure provider, and where the law requires it. We do not sell your information.

We share information in the following circumstances only:

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

6. Bible Text, Audio, and Other Third-Party Content

In Short: Chapter audio is streamed from a third-party host, and flow images are delivered from our Firebase Storage.

When you play the audio for a Bible chapter, your device streams that audio directly from a third-party media host operated on Amazon Web Services infrastructure in the United States. That request necessarily reveals your device's IP address and the chapter you requested to that host. We do not send it your anonymous uid or anything you have written, and the request is not associated with your entries. Amazon's handling of that request is governed by its own terms and is not covered by this notice.

Images used in the daily flows are delivered from our own Firebase Storage bucket, operated by Google on our behalf.

The app may contain links to third-party websites or services that are not affiliated with us. We do not guarantee the safety or privacy of any information you provide to such third parties, and any data they collect is not covered by this notice.

7. How Long Do We Keep Your Information?

In Short: The full text you type in the morning flow is held only in a temporary generation record that expires and is routinely deleted. The devotional generated for you — its verse and prayer — is saved so you can revisit it in the app's Journey tab, and a short day summary, which includes brief verbatim phrases from what you wrote, is kept on our servers. Both are retained until you ask us to delete them.

We keep different information for different periods:

Because there is no account to close, this information is not deleted automatically when you stop using the app or delete it from your device. To have it removed, see Section 15.

8. How Do We Keep Your Information Safe?

In Short: We use encryption in transit, server-side access controls, and a deny-by-default database posture, though no method of transmission or storage is 100% secure.

We have implemented reasonable technical and organizational security measures designed to protect the information we process. All communication between the app and our servers uses encrypted HTTPS connections. Our databases are configured to deny all direct access from client applications by default; the information described in this notice can only be read or written by our own server code. Requests from the app that touch your information require a valid Firebase authentication token, and our server code only ever operates on the entry belonging to the anonymous uid that made the request. Access to our production systems is restricted to authorized personnel, and credentials for our AI providers are held in a managed secret store rather than in our application code.

However, no electronic transmission over the internet or storage technology can be guaranteed to be completely secure, and you transmit information to us at your own risk.

9. What Are Your Privacy Rights?

In Short: Depending on where you live, you may have rights to access, correct, or delete your information.

Depending on your jurisdiction, you may have the right to: access the personal information we hold about you; request correction of inaccurate information; request deletion of your information; object to or restrict our processing; withdraw consent; and, where applicable, request data portability. You also have the right not to be discriminated against for exercising these rights.

An important practical limitation applies to all of these rights. Because the app has no accounts and we hold no information that identifies you personally, we cannot connect a request from you to your data unless you give us your anonymous uid. That identifier is what our records are keyed on, and we have no other way to locate your entries. If you contact us at general@aicaloriecounter.com, we will explain how to retrieve it from the app.

If you are located in the EEA or the UK and believe we are unlawfully processing your information, you also have the right to complain to your local data protection supervisory authority.

If you are a California resident, you have the rights described above under the California Consumer Privacy Act, including the right to know what personal information we collect and how we use and disclose it, the right to request deletion, and the right to opt out of the sale or sharing of personal information. As stated in Section 5, we do not sell or share personal information, so there is nothing to opt out of.

10. Children's Privacy

Bible Flows is not directed at children under 13, and we do not knowingly collect personal information from children under 13. The app has no accounts and does not ask for age or date of birth.

If you are a parent or guardian and you believe your child under 13 has provided us with personal information through the app, please contact us at general@aicaloriecounter.com. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

11. Do We Use Advertising, Analytics, or Tracking?

In Short: No. There are no ads, no advertising SDKs, and no third-party trackers in the app.

Bible Flows contains no advertising, no advertising or ad-network SDKs, no marketing attribution SDKs, and no third-party analytics or tracking software. We do not build advertising or marketing profiles about you, and we do not track you across other apps or websites. We do not use cookies or similar tracking technologies for advertising.

12. International Data Transfers

In Short: Your information is processed on servers in the United States.

Our servers and databases are hosted in the United States, and our AI providers process data in the United States and potentially other countries in which they operate. If you are accessing the app from outside the United States, your information will be transferred to, stored, and processed in the United States and in the countries where our service providers operate. These countries may have data protection laws that differ from those in your country. Where required, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, for these transfers.

13. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. Because no uniform technology standard for recognizing DNT signals has been finalized, we do not currently respond to DNT browser signals. As described in Section 11, we do not track you across apps or websites in any case.

14. Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws and to reflect changes to the app.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page and will be effective as soon as it is accessible. If we make material changes, we will notify you either by prominently posting a notice of the changes or by a notice within the app. We encourage you to review this notice periodically.

15. How Can You Review, Update, or Delete the Data We Collect From You?

You can remove all locally stored information — including your bookmarks, reading position, font size, translation choice, and search index — at any time by deleting the app from your device. That action does not remove the information held on our servers: your saved devotionals, the day summaries, your completion records, and any reminder settings remain until you ask us to delete them.

To request access to, correction of, or deletion of the information we hold on our servers, email us at general@aicaloriecounter.com. As explained in Section 9, you will need to provide your anonymous uid so that we can locate your entries; contact us and we will explain how to find it. We will respond to your request within the period required by applicable law.

If you have questions or comments about this notice, you may contact us at general@aicaloriecounter.com or by post at:

Data Driven Development FZ-LLC
DMC-BLD05-VD-G00–491, Dubai Internet City, Dubai, United Arab Emirates