Privacy Policy

Last updated: October 10, 2026

1. Information We Collect

When you sign in with Google, we receive:

• Profile information: Name, email address, and profile photo
• Google ID: A unique identifier for your Google account

When you use the Service, we also collect:

• User content: Sermon notes, transcripts, study-question answers, devotional progress, Scripture Bites, and other text you create
• Usage data: Pages visited, features used, and interaction patterns (via Google Analytics 4)
• Acquisition and launch measurement: A random pseudonymous journey ID, normalized campaign source keys, the Votional route used, coarse destination type, and timestamps needed to measure whether an approved launch link leads to sign-in and product use. This ledger does not contain sermon, note, transcript, devotional, or Scripture text.
• Audio data: If you use live transcription, audio is streamed in real time to Deepgram for transcription. We do not store the raw audio on our servers.
• Payment information: Processed and stored by Stripe. We do not store credit card numbers.
• Push notification tokens: If you enable notifications, we store your browser's push subscription endpoint and keys so we can send you daily devotional reminders.
• App activity: Streak history, login timestamps, and engagement metrics so the streak and reminder features work.
• Mobile app install attribution: If you install the Votional iOS or Android app, the AppsFlyer SDK in the app collects install and app-open events, device and network information, a device identifier, and campaign information so we can measure which ads led to the install. See Mobile App Install Attribution (AppsFlyer) below.
• Meta SDK in the iOS app: The Votional iOS app includes Meta's Facebook SDK, which sends Meta app events (install, app opens, account sign-up, and onboarding completion), device information, and, only if you allow tracking in Apple's App Tracking Transparency prompt, your device's advertising identifier (IDFA). See Meta SDK and App Tracking Transparency (iOS) below.

2. How We Use Your Information

• To provide and improve the Service
• To authenticate your identity and maintain your session
• To process subscription payments via Stripe
• To provide requested features including Deep Dive, devotionals, Scripture Bites, and live transcription
• To send timed daily devotional reminders if you opt in to push notifications
• To analyze usage patterns and improve the user experience
• To measure whether approved launch and referral routes lead to successful onboarding and genuine product activation
• To measure which advertising campaigns lead to installs of our mobile apps (install attribution) and to prevent attribution fraud
• On iOS, if you allow tracking, to measure and optimize our ads on Meta platforms (Facebook, Instagram) using data that is linked with data from other companies' apps and websites

3. Third-Party Services and Data Sharing

To power the Service, the following third parties may process your data on our behalf (except Meta Platforms, which acts as an independent controller, as noted below):

• Google (OAuth): Verifies your identity at sign-in. We request only your email and profile name.
• Google processing services: Processes your sermon text to generate Deep Dive analysis, devotional content, and Scripture Bites.
• Google Analytics 4: Aggregated and pseudonymized usage analytics. GA4 may set first-party cookies and collect a client identifier.
• Stripe: Processes subscription payments and stores billing information. Triggers webhook events for subscription state changes.
• Deepgram: Processes live audio for real-time transcription. Audio is streamed via secure WebSocket and is not retained by Deepgram or by us beyond the live session.
• Railway: Hosts the application servers and database (US-region infrastructure).
• Resend: Sends transactional and devotional email when configured.
• Web push providers: Browser-vendor push services (Mozilla autopush, Google FCM, Apple APNs) deliver notifications.
• AppsFlyer: Mobile measurement provider that attributes installs of our iOS and Android apps to the ad campaigns that led to them. See Mobile App Install Attribution (AppsFlyer).
• Meta Platforms (independent controller, not our processor): Receives app events and device information from the Meta SDK in our iOS app, and the IDFA if you allow tracking, to attribute and measure our ads on Facebook and Instagram and to target and deliver ads. Meta does not process this data on our behalf: under the Meta Business Tools Terms it is an independent controller of this SDK, ad-attribution, and ad-targeting data. See Meta SDK and App Tracking Transparency (iOS).

Sermon transcripts, notes, and devotional text may be processed by our AI and transcription providers only to deliver the features you request, such as live transcription, Deep Dive analysis, Daily Bread devotionals, and Scripture Bites.

Each service handles your data according to its own privacy policy. We send only the minimum data required for the feature to work and we do not sell, rent, or otherwise commercialize your personal information.

4. Analytics and Cookies

We use Google Analytics 4 (GA4) to understand how the Service is used. GA4 collects pseudonymized usage data including pages visited, session duration, and device type. We also set a first-party session cookie required for sign-in. Approved campaign links may set a separate first-party acquisition cookie and public pseudonymous journey ID so the source can survive sign-in. The private value is HTTP-only and HMAC signed; only its cryptographic hash is stored on our server, and neither value contains your identity or content.

Mobile App Install Attribution (AppsFlyer)

Our iOS and Android apps include the AppsFlyer SDK, which helps us measure which advertising campaigns (for example, ads on Meta platforms) lead people to install the app. It applies only to the native mobile apps, not to votional.com in a browser.

• What is collected: install and app-open events (with timestamps), app version, device model, operating system version, language, network information such as your IP address (which AppsFlyer maps to an approximate, city- or region-level location), and an identifier. On Android this is the Google advertising ID plus the Google Play install referrer, which tells us which campaign or link led to the install. On iOS this is the identifier for vendor (IDFV), which is specific to Votional's own apps, plus the advertising identifier (IDFA) only if you allow tracking in Apple's App Tracking Transparency prompt. AppsFlyer may also receive limited technical signals, such as launch time or battery level, for fraud detection.
• What is not collected: We do not send AppsFlyer your name, email address, account ID, or any sermon, note, transcript, devotional, or Scripture content, and we do not send it in-app events about how you use Votional.
• Tracking on iOS only with your permission: After you finish onboarding, the iOS app shows Apple's App Tracking Transparency prompt. If you tap "Allow", AppsFlyer and Meta may receive your IDFA and link install and campaign data with data from other companies' apps and websites. If you tap "Ask App Not to Track", no IDFA is collected and paid iOS installs are measured only through Apple's privacy-preserving SKAdNetwork/AdAttributionKit framework, which shares aggregated, non-device-level results with ad networks.
• Why: to attribute installs to our own advertising campaigns, measure and improve how well those campaigns perform, and detect attribution fraud. We do not use this data to show third-party ads in our apps.
• Sharing: AppsFlyer processes this data on our behalf as our service provider. To measure campaign results, attribution outcomes (for example, that an install came from a particular campaign) are shared with the ad network that ran the campaign. On Android this can include the advertising ID. On iOS this can include the IDFA if you allowed tracking; otherwise it is limited to aggregated SKAdNetwork/AdAttributionKit data.
• Retention: Under AppsFlyer's Services Privacy Policy, AppsFlyer does not retain end-user data for more than 24 months unless we direct otherwise or the law requires or allows it.
• Your choices: On iOS, you can allow or deny tracking in the prompt and change it at any time in Settings > Privacy & Security > Tracking (turning it off stops apps from receiving the IDFA). On Android, you can reset or delete your advertising ID at any time in your device settings (Settings > Privacy > Ads on most devices, or Settings > Google > Ads on older versions). Resetting gives your device a new ID, and deleting stops apps from receiving one. You can also ask AppsFlyer directly to stop measuring your device by emailing privacy@appsflyer.com.
• Deletion: When you delete your Votional account, or ask us at support@votional.com to delete your data, we forward your deletion request to AppsFlyer so it can delete the attribution data it holds about your app install.
• AppsFlyer's handling of this data is described in the AppsFlyer Services Privacy Policy.

Meta SDK and App Tracking Transparency (iOS)

Our iOS app includes Meta's Facebook SDK so we can measure and improve our ads on Facebook and Instagram. It applies only to the iOS app, not to votional.com in a browser or our Android app.

• What is sent to Meta: app events (app install, app opens, completing account sign-up, and completing onboarding) with timestamps, app version, device model, operating system version, language, network information such as your IP address, an SDK-generated identifier, limited crash reports about the Meta SDK itself, and the IDFA only if you allow tracking.
• What is not sent to Meta: your name, email address, phone number, Votional account ID, or any sermon, note, transcript, devotional, or Scripture content. We do not use Facebook Login and do not send Meta "advanced matching" data.
• App Tracking Transparency: We ask for permission once, after onboarding, with the message "Votional uses this to measure which ads bring people to the app. We never sell your data." If you deny it, Meta receives no IDFA and treats your data as limited for ad tracking, and campaigns are measured with Apple's aggregated SKAdNetwork data.
• Meta's role: Meta is an independent controller of this SDK, ad-attribution, and ad-targeting data under the Meta Business Tools Terms, not a processor acting on our behalf. (AppsFlyer, described above, remains our processor.)
• How Meta uses it: to attribute installs and sign-ups to our ads, to report campaign results to us, and to target, deliver, and optimize ads. When you allow tracking, Meta may link this data with information from other apps and websites under its own policies.
• Deleting your Votional account: deletes the data we hold and stops the app from sending Meta any further data about you. Data Meta has already received is controlled by Meta; you can manage or clear it in Meta's Your activity off Meta technologies settings and as described in the Meta Privacy Policy.
• Your choices: change tracking at any time in iOS Settings > Privacy & Security > Tracking. You can also manage how Meta uses activity from other companies in your Facebook or Instagram "Your activity off Meta technologies" settings.
• Meta's handling of this data is described in the Meta Privacy Policy.

5. Data Storage, Security, and Retention

• Your data is stored in an encrypted SQLite database on Railway's US-region infrastructure (encryption at rest provided by the volume layer; encryption in transit via HTTPS/TLS 1.2+).
• Sessions are secured with HTTP-only, Secure, SameSite cookies.
• Retention: Account and content data are retained for as long as your account is active. When you delete your account, all data is permanently removed within 30 days. Backup snapshots are purged within 90 days. For mobile install-attribution data held by AppsFlyer, we forward your deletion request to AppsFlyer (see Mobile App Install Attribution).
• Acquisition measurement retention: Unlinked acquisition journeys expire after 30 days. Linked journey and allowlisted event records are retained for no more than 13 months for cohort analysis and are deleted with the linked account.
• Live audio is not retained — only the transcribed text becomes part of your saved sermon note.
• We do not sell or rent your personal information. Apart from the mobile install attribution and, on iOS with your permission, the Meta ad measurement described above, we do not share it with third parties for marketing.

6. International Data Transfers

The Service is hosted in the United States. If you access it from outside the US, your data is transferred to and processed in the US. By using the Service you consent to this transfer. Where required, our third-party processors rely on Standard Contractual Clauses or equivalent transfer mechanisms.

7. Your Rights

You have the right to:

• Access your data through the app at any time
• Delete your account and all associated data immediately and self-serve from Preferences or the public Delete Account page. If you used our mobile apps, we also forward your deletion request to AppsFlyer.
• Export your notes as JSON from the Preferences page
• Clear analytics and acquisition browser data at any time by clearing site data in your browser
• Lodge a complaint with your local supervisory authority (EU/UK GDPR users)

EU/UK/California residents have additional rights under GDPR and CCPA — including the right to object, restrict processing, and request data portability. Contact us at the address below to exercise these rights.

8. Children's Privacy

The Service is not directed at children under 13 and is intended for users 13 years of age or older. We do not knowingly collect information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete the data.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes through the app or email and update the "Last updated" date above.

10. Contact

Questions about your privacy, or want to exercise any of your rights? Email us at support@votional.com.