Privacy Policy

1. Introduction

Your privacy matters to us. This Privacy Policy explains how Uplift Digital Studios LLC (“we,” “us,” or “our”) collects, uses, discloses, and protects information when you use the Be Encouraged mobile application or visit https://beencouraged.app (together, the “Services”).

The Services offer Scripture-centered encouragement. We aim to collect only what we need to deliver the experience, understand whether it works reliably, and protect it from misuse. This policy also explains the choices and privacy rights that may be available to you.

2. Scope

This policy applies to information processed through the mobile app and our public website. It does not apply to a third-party app, website, or service that you choose to open from the Services, including a Bible service or an app selected through your device’s share sheet. That third party’s privacy policy governs its own practices.

3. Information you provide

The current app does not ask you to provide a name, email address, phone number, mailing address, payment information, profile, prayer request, testimony, or other user-submitted content.

If you contact us for support or with a privacy request, we receive the information you choose to provide, such as your email address, message, attachments, and any technical details you include. Please do not send sensitive personal information that is not needed for us to respond.

4. Information collected automatically

Anonymous authentication. On launch, the app creates or reuses an anonymous Firebase Authentication account. This produces a randomly assigned user identifier that allows the app to authenticate securely to our backend. We do not currently associate that identifier with a name, email address, or other profile information. Firebase Authentication may also process technical information such as an IP address and user-agent information for security and abuse prevention.

Usage and interaction information. In release builds, Firebase Analytics automatically collects app-instance identifiers; app and device information; session statistics; approximate location derived from an IP address; and information about how the app is used. We configure the mobile Analytics SDKs so they do not collect mobile advertising identifiers (such as the Android Advertising ID or Apple’s Identifier for Advertisers), and we disable ads-personalization signals by default. We also record limited product events, such as app opens and session duration; reminder choices and opens; onboarding completion; sharing actions; opening the Scripture section of an encouragement (as an aggregate event, without recording which passage was viewed or the passage text); and the Bible-link service and translation selected when you open an external Bible app. Our custom analytics events do not include your anonymous authentication identifier, email address, a specific Scripture reference, the full text of Scripture or an encouragement, or content entered by you.

Diagnostics. Firebase Crashlytics collects information needed to identify and resolve crashes and other errors. Depending on the event, this can include installation and session identifiers, crash traces, error messages, timestamps, app version, device model, operating-system version, device state, memory or disk information, and whether a device appears rooted or jailbroken. Logs we add to Crashlytics are designed not to include contact details, authentication identifiers, or full Scripture or encouragement text. When a passage fails to load or an external Bible link fails to open, a diagnostic log may include the Scripture reference solely for troubleshooting.

Website delivery and analytics. When you visit our website, our hosting and network providers may process standard request information such as your IP address, browser or device type, requested page, and request time to deliver the site, maintain security, and prevent abuse. On the marketing website, if you choose Accept Analytics, we load Google Analytics (GA4) to measure page views, store download button clicks, and related first-party traffic. Until you accept, we do not load the Google Analytics script and do not set Google Analytics cookies. After acceptance, Google Analytics may set first-party cookies such as `_ga` and `_ga_<container-id>` (typically retained for up to two years) to distinguish visitors and persist session state, and Google may process technical information such as IP address and browser or device type as part of providing the Analytics service. We configure Google Analytics so Google signals and ads-personalization signals are disabled, and Consent Mode keeps advertising-related storage and signals denied even after you Accept Analytics. We also store your Accept or Reject choice in local browser storage under `be_encouraged_analytics_consent` so we can remember it on later visits. We do not place advertising or remarketing pixels on the marketing website, and we do not stitch marketing-site analytics identifiers to the mobile app’s anonymous authentication identifier.

Faith-related context. Using a Scripture-centered app may reveal or suggest an interest in Christian faith. We do not use Analytics or diagnostics to assess your beliefs, spiritual condition, or need for pastoral care, and we do not use them to target third-party advertising. We do not send specific Scripture passages or text to Analytics, and we do not build a history of viewed passages in Analytics.

5. Information stored on your device

The app stores preferences and operating state on your device, including your reminder setting and time, Bible service and translation preferences, appearance preference, onboarding and reminder-prompt state, inactivity-reminder timing, and cached encouragement content for offline use. The app also uses bundled, encrypted Bible databases stored on the device.

Local notifications are scheduled through your device’s operating system. We do not currently send remote push-notification campaigns or store a cloud push token for marketing messages.

This device-local information is not uploaded to us merely because it is stored by the app. It generally remains until you change the relevant setting, clear the app’s storage, or uninstall the app.

6. How we use information

We use information to provide and maintain the Services; authenticate the app to our backend; deliver current and discoverable encouragement content; remember device-local preferences; measure whether features are useful; understand general usage and performance; diagnose crashes and errors; respond to support and privacy requests; protect the Services, our users, and others; enforce applicable terms; and comply with law.

We do not use personal information to make decisions about your eligibility for employment, credit, housing, insurance, health care, education, or another similarly significant service.

7. Legal bases for processing

Where applicable law requires a legal basis, we process information as needed to provide the Services you request and perform our agreement with you; for our legitimate interests in operating, securing, improving, and understanding the Services, balanced against your rights; with your consent where consent is required; and as needed to comply with law or protect legal rights. You may withdraw consent at any time where processing is based on consent, without affecting earlier processing.

8. How we disclose information

Service providers. Google LLC and its affiliates process information for us through Firebase Authentication, Cloud Firestore, Firebase Analytics, Firebase Crashlytics, Google Analytics (for the marketing website), and website or cloud infrastructure. Service providers that process information on our behalf are subject to contractual terms or other obligations requiring appropriate data protection.

At your direction. When you open an external Bible link, the destination receives the passage reference and translation contained in the link and may receive standard connection information such as your IP address. When you use the system share sheet, an app or person you select receives the text or image you choose to share. We do not control what those recipients do with information you send.

Legal and safety reasons. We may disclose information when we reasonably believe disclosure is required by law or legal process; necessary to protect the rights, safety, or integrity of the Services, our users, or others; or appropriate to investigate fraud, security issues, or violations of our Terms of Use.

Business transfers. Information may be reviewed or transferred as part of a merger, financing, reorganization, sale of assets, insolvency, or similar transaction. We will handle the information as required by applicable law.

We may also disclose information with your consent or at your direction. We do not sell personal information, we do not disclose information to data brokers, and we do not exchange personal information for money. We do not share personal information for cross-context behavioral advertising.

9. Advertising and automated decisions

The Services do not currently display third-party advertising. We do not collect mobile advertising identifiers for Analytics, and we configure Firebase Analytics and marketing-site Google Analytics for first-party product and traffic measurement only—not for Google Signals enrichment, ads personalization, remarketing, or deciding which spiritual content you should receive based on a personal profile. We do not intentionally disclose personal information for cross-context behavioral advertising, and we do not use personal information for automated decision-making that produces legal or similarly significant effects.

10. Retention

We retain information only for as long as reasonably needed for the purposes described in this policy, including to provide the Services, maintain security, resolve disputes, and satisfy legal obligations. Retention depends on the kind of information and the system in which it is stored.

Anonymous Firebase Authentication records are generally retained until we initiate deletion of the associated account. Google states that Firebase Authentication security logs containing IP addresses are kept for a few weeks and that other authentication information is removed from live and backup systems within 180 days after account deletion is initiated.

Firebase Crashlytics generally keeps crash data and associated installation identifiers for 90 days before beginning removal. User-level and event-level Google Analytics data is retained according to our configured property setting, for no longer than 14 months under the standard settings currently available to us; aggregated reports may remain available longer. Website-hosting security logs, including IP information, may be retained by the hosting provider for a few months. These periods may change if a provider changes its service, so we periodically review them.

Device-local preferences, notification state, and cached content remain until you change a setting, clear app storage, or uninstall. Support correspondence is retained for as long as reasonably needed to respond, maintain appropriate business records, and meet legal obligations.

11. Your choices and deletion

Notifications. You can decline notification permission, turn reminders off in the app, or change notification permission in your device settings. Turning off notifications does not affect the app’s core content.

External links and sharing. Opening a Bible service and sharing content are optional actions that you control.

Device-local information. You can reset some preferences in the app. Clearing the app’s storage or uninstalling generally removes the app’s local information, subject to your operating system’s backup and restoration behavior. Uninstalling does not by itself delete information that was previously received by Firebase.

Analytics and diagnostics. The current app does not include a separate in-app control for Firebase Analytics or Crashlytics collection. You may stop future collection by discontinuing use and uninstalling the app, and you may contact us at support@beencouraged.app with a privacy request. Before public release in a location that requires additional consent or withdrawal controls, we will need to provide those controls or configure collection accordingly.

Website analytics. On the marketing website you can choose Accept Analytics or Reject Analytics when prompted. You can change that choice later through Cookie Settings in the site footer. Rejecting analytics or later withdrawing consent stops future Google Analytics collection on that browser, clears Google Analytics cookies we can remove from the site, and keeps the site usable. You may also limit analytics by adjusting your browser’s cookie or tracking settings, using browser privacy features, or discontinuing use of the website.

Access and deletion requests. You may ask us at support@beencouraged.app to access or delete information associated with you. Because the current app uses an anonymous identifier and does not collect contact information, we may need additional technical information to locate a record, and in some cases we may be unable to link a record to you reliably. We will explain what we can verify and do. We may retain limited information when required by law or reasonably necessary for security, fraud prevention, or legal claims.

12. Security

We use safeguards appropriate to the nature of the information we process. These include authenticated access to protected backend content, deny-by-default database rules, encryption in transit, and provider-supported encryption at rest for relevant Firebase services. No security measure or method of transmission is perfect, so we cannot guarantee absolute security.

13. International data transfers

We are based in the United States. Google states that Firebase Authentication is operated from U.S. data centers and that other Firebase services may use global infrastructure. If you use the Services from another country, information may be processed in the United States and other places where our providers operate. Where required, we rely on contractual protections or other lawful transfer mechanisms intended to protect information across borders.

14. Children’s privacy

The Services are intended for a general audience and are not directed to children under 13. You must be at least 13 years old to use the Services. We do not ask users to provide their age, so we generally do not know a user’s age. If we learn that we have collected personal information from a child under 13, we will delete it or take other steps required by law. A parent or guardian who believes that a child under 13 has used the Services or provided personal information to us may contact us using the information below.

15. Privacy rights

Depending on where you live and subject to legal exceptions, you may have rights to know about and access personal information; correct or delete it; receive a portable copy; restrict or object to processing; withdraw consent; opt out of certain disclosures, targeted advertising, or profiling; and appeal a decision about a request. You may also have the right to complain to a privacy or data-protection authority. We will not discriminate against you for exercising a right provided by law.

To make a request, email support@beencouraged.app and describe the right you want to exercise. We may need to verify the request, but we will not ask for more information than reasonably necessary. An authorized agent may submit a request where applicable law permits it, subject to appropriate verification. If we cannot fulfill a request, we will explain why and provide appeal information when required.

16. Changes to this policy

We may update this Privacy Policy as the Services or applicable requirements change. We will post the revised policy on this page and update its effective date. If a change materially affects how we use previously collected personal information, we will provide additional notice or obtain consent when required by law.

17. Contact us

The controller or business responsible for the practices described in this policy is Uplift Digital Studios LLC. Questions and privacy requests may be sent to support@beencouraged.app (placeholder — replace with a monitored privacy address before publication).