← Back to Graeya

Graeya Privacy Policy

Last Updated: August 2026

Effective Date: June 2025

This Privacy Policy describes how Grace Guide LLC ("Grace Guide," "we," "us," or "our") collects, uses, stores, and shares information when you use the Graeya mobile application and related services (the "App").

By using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.

For questions, contact us at [email protected].

1. WHO WE ARE

Data Controller:

Grace Guide LLC

Email: [email protected]

This policy applies to the Graeya app distributed through the Apple App Store, Google Play, and other platforms where we make the App available.

2. INFORMATION WE COLLECT

Graeya is designed to minimize unnecessary data collection. Depending on how you use the App, we may collect the categories below.

A. Information stored locally on your device

Some data never leaves your device unless you choose cloud sync features (see Section 2B):

  • Appearance and app settings (themes, colors, cross icon, translation choice, and related preferences)
  • Bible favorites, highlights, notes, journal entries, and study progress (stored locally at minimum)
  • Notification schedule preferences (for example, study reminders and Graeya Inspiration opt-in)
  • Custom background images you upload from your photo library (stored on your device only)
  • Saved broadcast/inspiration messages cached for offline viewing
  • Subscription or access status cached locally after store verification
  • Data used to power optional home screen widgets (for example, verse text and related display data kept on your device)
  • A stable install-scoped device identifier (UUID) used to register your device for push notifications

B. Information stored in the cloud (Google Firebase)

When Firebase is available and you use features such as notifications, optional sign-in, or cloud sync, we may store:

Account and identity

  • Firebase user ID (including anonymous IDs created automatically on mobile for push and device registration)
  • Email address, authentication provider, and email verification status (if you create an account or sign in with Google, Apple, or email/password)
  • Display name (if you provide one or it is supplied by a sign-in provider)
  • Limited account/device identity fields used to operate sync and notifications (for example, auth type, email verification flag, provider IDs, platform, and last-seen timestamps)

Legal acceptance

  • If you accept the Terms and Privacy Policy, we store an acceptance record (document versions and hashes, time, device ID, platform, app version, auth type, and email if available) in your account and in a retention audit collection used to demonstrate acceptance.

Synced app content (when signed in, including anonymous accounts where sync is enabled)

  • Bible favorites
  • Verse highlights and associated notes
  • Journal entries and journal groups
  • Study progress and related study inputs
  • Synced app preferences (for example, theme, translation, and cross icon selections)
  • Sync metadata (for example, last sync time, app version, and platform)

Journals, highlight notes, and study responses are optional and written by you (typed or dictated). Do not enter information you do not want stored. If you use cloud sync (including a guest session on iOS/Android), that text is stored in our cloud database associated with your Firebase user ID so it can restore on your devices. We do not use it for advertising.

Push notifications and devices

  • Firebase Cloud Messaging (FCM) device token
  • Notification permission status
  • Device platform (iOS or Android), app version, and last-seen timestamps
  • FCM topic subscriptions (for example, all-users messages; optional Graeya Inspiration if you opt in)

Feedback and ratings (if you submit them)

  • Star rating (1–5)
  • Optional written feedback
  • Platform and app version
  • A server-side link to your Firebase user ID (submissions are not displayed publicly as App Store reviews)

Diagnostics and analytics (optional; you may disable in the App)

  • If you leave optional analytics and crash reporting enabled (it is on unless you turn it off in Menu → About → Privacy & Data), we use Firebase Analytics and Firebase Crashlytics. Analytics may include automatic SDK events (for example app open/session and device/app metadata) as well as notification-engagement events we log. Crash reports may include device model, OS, app version, and diagnostic stack traces. You may disable new collection going forward; data already sent to Google is retained under Google’s practices.

C. Information we do NOT collect

We do not intentionally collect:

  • Precise GPS or continuous location data
  • Your contacts, address book, or call logs
  • Microphone recordings or voice-note audio files
  • Payment card numbers (subscriptions are processed by Apple or Google)

Graeya does not access the microphone. Verse playback uses on-device text-to-speech (the speaker only). If you use your keyboard’s built-in dictation, that feature is provided by your device or keyboard (for example Apple or Google), not by Graeya; we receive only the resulting text. See Section 7B.

D. Information from third-party sign-in

If you choose Google Sign-In or Sign in with Apple, we receive information from that provider according to your choices and their policies (which may include email address and name). We use this information only to authenticate you and operate your account.

3. HOW WE USE INFORMATION

We use information to:

  • Provide core App functionality (Bible reading, study, favorites, journal, themes, and audio reading via on-device text-to-speech)
  • Sync your content and preferences across devices when you are signed in
  • Deliver push notifications and inspiration messages you request or allow
  • Operate optional accounts and restore your data after sign-in
  • Process and verify subscriptions through Apple App Store or Google Play (we do not receive your full payment credentials)
  • Display aggregate in-app rating statistics (not individual feedback text)
  • Improve reliability through optional crash reporting
  • Understand optional notification engagement through analytics
  • Protect the App and our services against abuse (for example, Firebase App Check attestation where enabled)
  • Respond to support requests and enforce our Terms of Service
  • Comply with applicable law

We do not sell your personal information. We do not use your synced Bible notes, journals, or similar personal content for advertising.

4. LEGAL BASES FOR PROCESSING (EEA, UK, AND SIMILAR JURISDICTIONS)

Where applicable law requires a legal basis, we rely on:

  • Performance of a contract — to provide the App and subscriptions you request
  • Legitimate interests — to secure, maintain, and improve the App, prevent abuse, and understand aggregate usage (balanced against your rights)
  • Consent — for optional push topics, optional analytics/crash reporting, photo library access, and where required for certain sign-in or marketing communications
  • Legal obligation — where we must retain or disclose information under law

You may withdraw consent where processing is consent-based by changing in-app settings or contacting us. Withdrawal does not affect prior lawful processing.

5. CLOUD SYNC, ACCOUNTS, AND ANONYMOUS USE

  • You may use many features without creating a registered account.
  • On iOS and Android, an anonymous Firebase account may be created automatically to support push notifications and device registration.
  • Optional sign-in (Google, Apple, or email/password) links your data to a registered account and enables cross-device sync.
  • Email/password accounts may need to verify email before personal content can be written to cloud sync; guests and Google/Apple sign-in are handled as described in the App.
  • Cloud data is associated with your Firebase user ID and protected by authentication and Firestore security rules so that other users cannot access your account data.
  • Synced personal content is stored so your devices can restore and sync it. Authorized operators who manage the App’s backend may access cloud data only as needed to operate, secure, and support the service (for example, account deletion or abuse investigation)—not for advertising or sale of your content.
  • Uninstalling the App removes local data from your device but does not delete cloud data for registered accounts unless you delete your account first (see Section 11).

6. PUSH NOTIFICATIONS

If you enable notifications, we use Firebase Cloud Messaging and (on iOS) Apple Push Notification service (APNs) to deliver messages.

  • You may disable notifications in App settings and in your device system settings.
  • Graeya Inspiration and similar topics are opt-in where indicated in the App.
  • Disabling notifications stops new pushes but may not immediately remove historical device registration records; inactive tokens are updated or omitted on subsequent registrations.

7. PHOTO LIBRARY (CUSTOM BACKGROUNDS)

If you choose "Upload image" for a custom background overlay, the App accesses photos you select from your device library. Those images are saved locally on your device and are not uploaded to our servers.

7A. SHARING AND HOME SCREEN WIDGETS

  • If you use your device’s native share features, content you choose to share is sent to the destination app or service you select (for example, Messages or email). That destination’s privacy practices apply to what you share.
  • Optional home screen widgets display information from the App on your device home screen. Widget content is generated on your device from App data and is not a separate cloud product; anyone who can see your device screen may see widget content.

7B. KEYBOARD DICTATION

Text fields in the App (for example journals, notes, and study responses) accept text from your device keyboard. If your keyboard includes a microphone or dictation control, you may use it. That dictation is provided by your operating system or keyboard app (such as Apple or Google), not by Graeya. Graeya does not access the microphone, does not run speech recognition, and does not receive or store audio. We receive only the text that is inserted into the field, and we store and sync that text the same way as text you type.

Verse audio playback uses on-device text-to-speech (speech synthesis) and does not record your voice.

8. SUBSCRIPTIONS AND PAYMENTS

Paid subscriptions are processed by Apple App Store or Google Play. The App verifies subscription status on your device using Apple or Google store APIs and may cache that status locally to grant access. We do not receive or store your full payment card number. Store transactions are governed by Apple’s or Google’s privacy policies and terms. Deleting your Graeya account does not cancel an App Store or Google Play subscription; you must manage or cancel subscriptions in your store account settings.

9. ANALYTICS AND CRASH REPORTING (OPTIONAL)

Firebase Analytics and Firebase Crashlytics help us improve reliability and understand how the App is used, including notification engagement. Collection is on unless you turn it off (see Section 2).

  • You may disable optional analytics and crash reporting at any time in Menu → About → Privacy & Data.
  • When disabled, new analytics events and crash reports should not be collected from that device going forward. Data already sent to Google is retained under Google’s practices.
  • Disabling this setting does not affect core App functionality, cloud sync, or push notifications.

Crash reports may include device model, operating system version, app version, and diagnostic stack traces. We configure collection to be off in debug builds.

10. HOW WE SHARE INFORMATION

We do not sell personal information. We share information only as follows:

Service providers (processors)

  • Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging, App Check, Analytics, Crashlytics) — hosting, sync, notifications, ratings backend, abuse protection, diagnostics, and analytics
  • Google Sign-In — optional authentication
  • Apple Sign in with Apple — optional authentication
  • Apple App Store / Google Play — subscription billing and payment processing
  • Apple Push Notification service (APNs) — iOS push delivery

Legal and safety

We may disclose information if required by law, legal process, or to protect rights, safety, and security of users, Grace Guide, or others.

Business transfers

If Grace Guide is involved in a merger, acquisition, or asset sale, user information may transfer as part of that transaction subject to applicable law.

Links to third-party policies

11. DATA RETENTION

  • Local device data persists until you clear it in the App, sign out (where applicable), or uninstall the App.
  • Cloud data for your account is retained while your account is active to provide sync and related features.
  • If you delete a registered account in the App, we delete your Firebase Authentication user and the personal data stored under your user record in our database (including journals, notes, highlights, favorites, study data, devices, and preferences), then sign this device out to a new guest session.
  • We do not delete: (i) a separate legal-acceptance audit record we keep to show that Terms and Privacy were accepted (this may include your user ID, device ID, app version, and email if you had one); (ii) in-app rating submissions and the per-user rating record used to keep aggregate statistics accurate; (iii) operational notification logs; (iv) Analytics and Crashlytics information already sent to Google, which follows Google’s retention; or (v) App Store / Google Play subscription records, which you must manage in your store account. Aggregate star counts may remain with no feedback text. Guest sessions cannot use in-app account deletion; uninstalling removes local data only.

Anonymous guest sessions: signing out of a registered account returns you to a new guest session. Guest cloud data is not removed by sign-out or uninstall; use in-app account deletion for registered accounts.

12. YOUR CHOICES AND RIGHTS

All users

  • Disable push notifications in App and device settings
  • Opt out of Graeya Inspiration and similar optional topics in App settings
  • Disable optional analytics and crash reporting in Menu → About → Privacy & Data
  • Clear local favorites, journal, and study data within the App where available
  • Delete a registered account in Account settings (cloud deletion)
  • Uninstall the App to remove local device data

Registered account holders

  • Update display name where supported in the App
  • Sign out to end your session on the device
  • Request account and cloud data deletion through in-app account deletion or by emailing [email protected]

Depending on your location, you may also have the right to access, correct, delete, restrict, or object to certain processing, and to data portability. To exercise these rights, contact [email protected]. We may need to verify your request.

California residents (CCPA/CPRA)

We do not sell or share personal information for cross-context behavioral advertising as defined under California law. You may request access to or deletion of personal information subject to applicable exceptions.

EEA/UK residents (GDPR)

You may lodge a complaint with your local supervisory authority. Our contact for privacy requests is [email protected].

13. INTERNATIONAL DATA TRANSFERS

Graeya is operated from the United States. If you use the App from outside the United States, your information may be processed and stored in the United States and other countries where our service providers operate (including Google Cloud / Firebase). Those countries may have different data protection laws than your country. Where required, we rely on appropriate safeguards offered by our providers—such as the Standard Contractual Clauses and related terms in Google’s Cloud Data Processing Addendum / Firebase data processing terms—governing transfers of personal data to Google.

14. SECURITY

We use administrative, technical, and organizational measures designed to protect information, including:

  • Encryption in transit (HTTPS/TLS) for cloud communication
  • Encryption at rest provided by our cloud infrastructure (Google Firebase / Google Cloud)
  • Firebase Authentication and Firestore security rules so other users cannot access your account data
  • Firebase App Check (where enabled) to help ensure requests come from genuine App instances
  • Restricted operator access to backend systems (for example, multi-factor authentication for administrative accounts)
  • Server-side validation for sensitive operations (for example, ratings and account deletion)

Cloud sync stores your content so it can be restored on your devices. This is not end-to-end encryption that would prevent all operator access to synced content. We limit access to authorized personnel for operating, securing, and supporting the App.

No method of transmission or storage is completely secure. Please use a strong password and keep your device secure.

15. CHILDREN’S PRIVACY

Graeya is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, contact [email protected] and we will take appropriate steps to delete it.

Parents and guardians should supervise minors’ use of the App.

16. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will post the updated policy in the App (Menu → About) and update the "Last Updated" date. Material changes may also be communicated through the App or other reasonable means. Continued use after changes become effective constitutes acceptance of the updated policy.

17. CONTACT US

Grace Guide LLC

Email: [email protected]

For privacy-related requests, include "Privacy Request" in the subject line and describe your request (access, correction, deletion, or other).