Privacy Policy for YHWH's Word

Effective date: 2026-11-08

YHWH's Word (the "app") is a Bible study app published by Infinity Wings ("we", "us", "our"). This policy explains what information the app handles, why, who helps us process it, how long we keep it, and the choices you have.

The short version

• You can use the app without an account. Without an account, your progress, bookmarks, notes, and settings stay on your device.
• Signing in with Google is optional. If you sign in, we store your account and a summary of your progress so it can sync across devices and power leaderboards and groups.
• No ads, no advertising IDs, no crash-reporting tools, and we never sell your information.
• We do record how the app is used, so we can see which parts help and which confuse. These records say that something happened, never what you read or wrote: no verse text, no notes, no searches, no names. See Section 2.
• Some profile details are visible to other users when you sign in: your display name, avatar emoji, and study stats. Your email address is never shown to other users.
• You can delete your account at any time from inside the app or by contacting us.

1. Information stored only on your device

When you use the app, it saves the following in the app's private storage on your phone. This information is not sent to us unless you sign in, and even then only the items listed in Section 2 are synced.

• The profile you create during setup: a display name you choose, an avatar emoji, and your starting books
• Quiz progress: answers, scores, missed questions for review mode, streaks, streak freezes, achievements, ranks, and your Bible IQ history
• Reading progress, reading streaks, and your active reading plan
• Bookmarks and any notes you write on them
• Your language, Bible translation, and theme choices
• Wake with the Word alarm times, days, and labels
• Reminder and notification preferences

Bookmarks, notes, quiz history, reading progress, and alarm settings are never uploaded, even when you are signed in.

If Android backup is turned on for your device, Android may include the app's local data in your device backup, which is stored in your own Google account under Google's terms. You control this in your device settings.

2. Information we collect

How the app is used (analytics). This is the one thing we collect whether or not you have an account. The app keeps a short record of what happens as you use it, and sends those records to our own database. Each record contains:

• what happened, from a fixed list (for example: the app was opened, setup was finished, a quiz was completed, a chapter was marked read, a reminder was tapped, a subscription screen was shown)
• numbers and labels that describe it, such as a book name, a chapter number, a difficulty, a score out of five, which onboarding step, or which mood you chose
• an install identifier: a random code the app creates the first time it runs and keeps on your device. It is not your advertising ID, not your device's ID, and is not linked to your name or email
• your account identifier, but only while you are signed in
• the app version, whether you are on Android or iOS, your device's language setting, and the date

These records never contain the text of a verse, a quiz question, a note or bookmark you wrote, anything you searched for, your display name, or your email address. They say that something happened, never what you read or wrote. We use them only to understand which parts of the app help people and which get in the way, to measure how many people finish setup and come back, and to judge whether what we spend on reaching new readers is worth it. Only we can read them; even signed-in users cannot read their own records back.

If you erase the data on your device (Section 10), the install identifier goes too, and the app creates a new one.

The rest of this section applies only if you sign in with Google. Sign-in uses Google through our authentication provider, Supabase. When you sign in:

From your Google account. Google shares your name, email address, a link to your Google profile picture, and your Google account identifier. The app does not display your profile picture.

Account records. Supabase creates a user ID for you and keeps sign-in records such as when you signed in, plus session tokens that keep you signed in. Session tokens are also stored on your device.

Synced progress. To back up your progress and show leaderboards, the app uploads: your display name, avatar emoji, XP, rank, current and longest streak, streak freezes, total questions answered and answered correctly, which books are unlocked, your per-book progress, and your Bible IQ.

When you first sign in, your display name may be filled in from your Google account name. You can change it at any time in Profile.

Groups. If you create or join a church or study group, we store the group's name, emoji, and six-character join code, who created it, who its members are, each member's role, and when they joined.

Invite codes. If you earn invite codes, we store each code, whether it has been used, and, when someone redeems it, which account redeemed it and when.

Friends (if you use Friends). We store your personal friend code and the list of accounts you are friends with, with the date each friendship began.

Technical information. Like most online services, Supabase automatically records technical details with each request, such as IP address, device and browser type, and time of the request. These records are used for security, abuse prevention, and troubleshooting.

3. Information we do not collect

• We do not collect your precise or approximate location.
• We do not access your contacts, photos, files, or calendar.
• The app does not record audio or use your microphone.
• We do not use advertising IDs, advertising networks, third-party analytics services, or crash-reporting tools. The usage records in Section 2 go only to our own database.
• Our usage records never include the text of a verse, a quiz question, a bookmark, a note, or anything you type or search for.
• There are no in-app purchases at this time, so we do not collect payment information.

4. How we use information

We use the information above only to:

• Provide the app's features: syncing and restoring your progress, leaderboards, groups, invite codes, and friends
• Understand how the app is used, so we can fix what confuses people, build what is actually used, and judge whether what we spend on reaching new readers is worth it (the records in Section 2)
• Create and manage your account, and keep you signed in
• Keep the service secure and prevent abuse
• Respond to you when you contact us

We do not use your information for advertising, we do not build advertising profiles, and we do not make automated decisions about you that have legal or similarly significant effects.

5. What other users can see

When you are signed in:

• Leaderboards: other users of the app can see your display name, avatar emoji, XP, rank, streak, Bible IQ, and your totals of questions answered and answered correctly.
• Groups: members of a group you join can see the same profile details. Group names and join codes are not private, so choose a group name you are comfortable with others seeing.
• Friends: people you add as friends can see your display name, avatar emoji, XP, rank, streak, and Bible IQ.

Your email address is never shown to other users. If you prefer not to be identified, use a display name that is not your real name.

6. Notifications and the Wake with the Word alarm

Study reminders, streak reminders, optional fasting reminders, and the Wake with the Word alarm are all scheduled on your device. We do not send push notifications from a server, and no notification token leaves your device.

To work reliably, the alarm uses Android permissions to post notifications, schedule exact alarms, show a full-screen alarm over the lock screen, and re-arm itself after your phone restarts. You can turn reminders off in Profile, delete alarms on the Wake screen, or change these permissions in your device settings at any time.

When the alarm reads Scripture aloud, it uses your device's text-to-speech engine. If your engine uses an online voice, the text of the Bible passage is processed by that engine's provider under its own terms. No personal information is included. One narrated passage is an audio recording packaged inside the app; playing it sends nothing anywhere.

7. Sharing features

When you share a score card, your Bible IQ card, a group code, a friend code, or an invite code, the app opens your device's share menu and you choose where it goes. We do not receive a copy of what you share. When you copy verses, the app writes them to your clipboard; the app does not read your clipboard.

8. Who processes your information

We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing. We rely on these providers:

• Supabase hosts our database and handles sign-in. It processes your account, your synced data and the usage records in Section 2 on our behalf. We do not use a third-party analytics service: those records stay in our own Supabase project. Supabase's privacy policy: https://supabase.com/privacy
• Google provides the sign-in you choose to use. Google's privacy policy applies to your Google account: https://policies.google.com/privacy
• Google Play distributes the app and may collect information about installs and your device under Google's own policies.

We may also disclose information if the law requires it, to protect the rights, property, or safety of our users or others, or as part of a merger or transfer of the app, in which case this policy will continue to apply to your information or you will be notified of changes.

Our servers may be located outside your country, including in the United States. Where the law requires it, we rely on appropriate safeguards for these transfers, such as our providers' standard contractual clauses.

9. How long we keep information

• On your device: until you delete it. You can erase it in the app (see Section 10), or by uninstalling the app or clearing its storage. A copy may remain in your device backup if you use Android backup.
• Your account: for as long as your account exists.
• Usage records (Section 2): kept for up to 12 months, then deleted.
• When you delete your account: your account, synced progress, leaderboard entry, group memberships, friend list, friend code, and invite codes you created are deleted from our database right away, all in one step. Groups you created are deleted for all their members. If you redeemed someone else's invite code, your link to that code is removed. Your account identifier is removed from the usage records in Section 2, which leaves records that are no longer connected to you; they are deleted on the 12-month schedule above. Any remaining copies in our providers' backups are erased as those backups expire, within 30 days.
• Technical logs: kept for a short period by our provider for security and troubleshooting, then deleted automatically.
• Messages you send us: kept as long as needed to answer you and keep a record of your request.

10. Your choices and rights

• Use the app without an account. Everything except leaderboards, groups, friends, and cloud backup works without signing in.
• Sign out in Profile. Signing out stops syncing; your data on the device stays.
• Change your display name or avatar in Profile.
• Delete your account in the app at Profile > Account > Delete account. The app lists what will be deleted and asks you to confirm twice. It also offers to erase the data stored on your device at the same time (your language and theme choices are kept); if you turn that off, your progress stays on the device and you are signed out. If you no longer have the app, email [email protected] as described at https://yhwhsword.com/account-deletion.html.
• Erase the data on your device at Profile > Account > Erase data on this device (shown when you are signed out), or by uninstalling the app or clearing its storage. This also erases the install identifier used by the usage records in Section 2, so the app starts counting from a new one. It does not delete an account on our servers.
• Turn off notifications in Profile or in your device settings.

Depending on where you live (for example, in the European Economic Area, the United Kingdom, or California), you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To make a request, email us at [email protected] from the email address on your Google account so we can verify it is you. We will respond within the time the law requires, normally within 30 days. You also have the right to complain to your local data protection authority.

For users in the EEA and UK, our legal bases are: performing our agreement with you (providing account features you ask for), our legitimate interests (keeping the service secure, preventing abuse, and understanding how the app is used so we can improve it), your consent (notifications and alarm permissions, which you control in your device settings), and complying with legal obligations.

For California residents: in the past 12 months we have collected identifiers (such as name, email address, user ID, and the anonymous install identifier in Section 2), app activity (such as quiz progress, group membership, and the usage records in Section 2), and technical information (such as IP address). We use it only for the purposes in Section 4. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you.

11. Children

The app's sign-in features are not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or the higher minimum age that applies in your country). A child can use the app's offline features without an account. If you believe a child has signed in and given us personal information, contact us at [email protected] and we will delete it.

12. Security

Information sent between the app and our servers is encrypted in transit using HTTPS. Our database uses access rules that limit what each signed-in user can read and change. No method of storage or transmission is completely secure, but we work to protect your information and to keep what we collect to a minimum.

13. Changes to this policy

If we change this policy, we will update the effective date above. If a change is significant, we will let you know in the app before it takes effect.

14. Contact us

Infinity Wings
Email: [email protected]