Privacy policy

This policy explains what data the Bible Bond app and website use, what for, and what stays only on your iPhone. In short: what you write and read stays on the device; the app needs no sign-up; we use anonymous usage data to improve the app and to process purchases.

Updated 30 October 2026.

Who is responsible

Bible Bond is made by NTPCO, an independent developer in Madrid, Spain. For any question or request about your data, write to contact@ntpco.tech.

What stays only on your iPhone

This data is stored on the device and is never sent to us or to anyone else:

the Bibles and everything you read, your streak, XP, level and your Garden;
notes, saved verses, prayer requests and your “Prayed” and “Answered” marks;
the name you type and the profile photo you choose;
your reminder times and your tradition and translation preferences;
the widget's verse, kept in the app's own space on the device.

If you delete the app, this data is deleted with it.

Features that run on the device

Notifications: the morning and night verses are local notifications scheduled on the iPhone. We use no notification server.
Apple Intelligence: short reflections and “Explain simply” are written by Apple's model on the iPhone itself, on devices that support it. The text is not sent to us. These reflections are labelled as generated on device and may contain mistakes.
Listen: reading aloud uses the voices installed on the iPhone.
Profile photo: you pick a photo from your library; the app keeps only a small copy, on the device.
Sharing: when you share a verse or your week, the image is made on the device and goes only to the app you choose (Instagram, for example).

Usage data: Amplitude

To understand how the app is used and to improve it, we send usage data to Amplitude, stored in its European Union data centre. These are events such as “opened a chapter”, “finished the rosary”, “chose a feeling” or “went through an onboarding step”, with details such as the card type, the book, the translation or the tradition chosen. We never send the text of your notes or prayer requests, your name or your photo.

Technical data goes with the events: device model, iOS and app version, language and an approximate location (country and city) that Amplitude derives from the IP address. You are identified by a random code created by the app (for example biblebond_ followed by numbers and letters), kept in iCloud Keychain so it stays the same if you reinstall the app. The code contains no name, email or phone number.

Session Replay: Amplitude also records how screens are used (taps, scrolling and the sequence of screens) so we can find confusing parts and bugs. Recording uses the strictest masking mode: all text on screen is covered before it leaves the device, so your notes, prayers and name never appear.

Purchases: RevenueCat and Apple

In-app purchases are made through the App Store and payment is processed by Apple: we never see your card details. We use RevenueCat to know which purchases are active on your device. RevenueCat receives the same random code, the purchase history and the App Store receipt.

Ads and attribution: Meta

When we advertise Bible Bond on Facebook and Instagram, we use the Meta SDK to know how many installs came from those ads. The SDK records app install and open events in aggregate. Your iPhone's advertising identifier (IDFA) is collected only if you tap “Allow” on Apple's tracking request, which appears after the app's introduction. If you don't allow it, the IDFA is never collected, and you can change your choice at any time in Settings › Privacy & Security › Tracking. Purchases reach Meta through RevenueCat, on the server, without data such as your name or email.

Legal bases

We process usage and purchase data on the basis of our legitimate interest in maintaining, protecting and improving the app, and to perform the contract when you make a purchase. The IDFA is used only with your consent, given in Apple's tracking request. In the European Union the GDPR applies; in Brazil, the LGPD.

How long we keep it

Usage data in Amplitude is kept for up to 24 months. Session recordings are kept for Amplitude's standard period, which is much shorter. Purchase data is kept as long as tax and accounting obligations require.

Your rights and deleting your data

You can ask to access, correct, delete or export your data, or object to its use, by writing to contact@ntpco.tech. To delete the data held by Amplitude, RevenueCat and Meta, send an email with the subject “Delete my data”; we reply and delete it within 30 days. Data that lives only on the device is deleted when you delete the app. You can also complain to the data protection authority in your country.

Children

Bible Bond is not directed at children under 13 and we do not knowingly collect children's data. If you believe a child has sent us data, write to us and we will delete it.

This website

This site uses no cookies. To count visits and taps on the App Store button we use Umami, hosted by us, which uses no cookies and does not store your IP address. The site's tools (reading plan, verses, rosary) run in your browser; what you tick in them is stored only in your browser. Fonts are served by the site itself.

Changes

If this policy changes, the date at the top changes too. Important changes will also be announced in the app.