Privacy Policy

Information We Collect

The information we collect depends on the features you use:

• Account and authentication information. When you sign in with Google or Apple, we receive information authorized by you and the provider, which may include your name, email address, profile image, provider-specific account identifier, and authentication tokens. We do not receive your Google or Apple password.
• Devotion progress. If you use account sync, we store your reading plan, current devotion, streak count, total completions, last completion date, and related synchronization timestamps so your progress is available across devices.
• Subscription and transaction information. We receive product, purchase, subscription status, entitlement, renewal, and transaction identifiers from Apple, Google, and RevenueCat. Your full payment-card or bank-account details are processed by the applicable app store and are not provided to us.
• Device and diagnostic information. Our app and service providers may collect app version, device type or model, operating system, language, timestamps, IP address, error messages, stack traces, and similar technical information when necessary to operate, secure, and troubleshoot the Service.
• Communications. We collect the information you include when you contact us for support, request account deletion, or otherwise communicate with us.

Some preferences and activity are stored only on your device, including favorites, display settings, locally downloaded or bundled content, completion history stored locally, and the time you choose for a daily reminder. Daily reminders are scheduled on your device. Devotus does not use reminders to collect your precise location, contacts, photos, microphone recordings, or advertising identifier.

We collect information directly from you, automatically through the app and its software development kits, and from services you choose to use, such as Google, Apple, and the applicable app store.

How We Use Information

We use information to:

• authenticate users and maintain Devotus accounts;
• provide, synchronize, personalize, and improve the Service;
• process and verify subscriptions, purchases, and restored purchases;
• respond to support, privacy, and account-deletion requests;
• monitor reliability, diagnose errors, prevent fraud or misuse, and protect the Service; and
• comply with applicable law, enforce our terms, and establish or defend legal claims.

We do not sell your personal information. Devotus does not contain third-party advertising, and we do not use your personal information for cross-context behavioral advertising.

Google User Data

If you choose Google sign-in, Devotus uses the basic Google account information you authorize only to authenticate you, maintain your Devotus account, provide progress synchronization and subscription access, prevent abuse, and support the Service. We do not use Google user data for advertising.

Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. We disclose Google user data only to service providers acting on our behalf, when required by law or needed to protect rights and safety, as part of a properly notified business transfer, or with your direction or consent.

When We Disclose Information

We may disclose the categories described above to service providers that process information for us under their own terms and data-protection obligations:

• Supabase for authentication, account management, and cloud progress storage;
• Google and Apple when you choose their sign-in services;
• RevenueCat, Apple App Store, and Google Play for purchases, subscription management, entitlements, and fraud prevention; and
• Sentry for application error monitoring and diagnostics.

We may also disclose information when reasonably necessary to comply with law or legal process; protect the rights, property, security, or safety of users, the public, or the Service; investigate fraud or abuse; or complete a merger, financing, acquisition, reorganization, or sale of assets. If ownership of the Service changes, we will require the recipient to handle personal information consistently with this Policy and applicable law.

Data Retention and Security

We retain account information and synchronized devotion progress while your account is active. We retain support communications, diagnostic records, and transaction-related records only as reasonably necessary for the purposes described above, including security, dispute resolution, accounting, and legal compliance. Retention periods may differ by record type and the requirements of our service providers or applicable law.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including encrypted network transmission and access controls. Our service providers are required to provide protections consistent with this Policy and applicable platform requirements. No system is completely secure, and we cannot guarantee absolute security.

Your information may be processed in the United States and other countries where we or our service providers operate. Those countries may have data-protection laws different from those in your jurisdiction.

Account and Data Deletion

After verification, we will permanently delete your Devotus account and personal information associated with it from our active systems, including synchronized devotion progress, and direct applicable service providers to delete or disassociate corresponding data. We generally complete verified requests within 30 days. We may retain limited records only when required for legal, tax, accounting, security, fraud-prevention, or dispute-resolution purposes, and only for as long as necessary for those purposes.

Deleting your Devotus account does not automatically cancel an App Store or Google Play subscription. Cancel the subscription separately in your Apple App Store or Google Play account settings to prevent future renewal. Information stored only on your device is removed by deleting the app or clearing the app’s storage.

Your Choices and Privacy Rights

• You can decline notification permission or disable notifications in your device settings.
• You can revoke Devotus access through your Google or Apple account settings, though doing so does not by itself delete your Devotus account.
• You can request access to, correction of, or deletion of your personal information by contacting us.
• You can cancel or manage a subscription through the app store where you purchased it.

Depending on where you live, you may have additional rights concerning access, correction, deletion, portability, restriction, objection, or appeal. We will not discriminate against you for exercising a privacy right. We may need to verify your identity before completing a request.

Children’s Privacy

Devotus is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action. If you are under the age of majority where you live, use the Service only with the involvement and consent of a parent or legal guardian.

Changes to This Policy

We may update this Privacy Policy as the Service or legal requirements change. We will post the revised Policy here, update the effective date, and provide additional notice when required by law. Your continued use of the Service after the effective date is subject to the revised Policy.

Contact Us

Adam Reece Studios LLC is responsible for the personal information described in this Policy. For privacy questions or requests, contact us at hello@devotusapp.com.