Legal

Privacy Policy

Last updated: February 19, 2026  ·  Effective immediately

1. Who we are

Holy Words ("we", "us", "our") is a free Bible study companion mobile and web application. We are committed to protecting your privacy. For any privacy question, write to support@holywords144.com.

2. Information we collect

• Account data: your email address and display name when you create an account.
• Content you create: bookmarks, prayer requests, chat-room messages, photos and videos you upload.
• Activity data: last chapter you read, reading-streak count, watched media — used to power "Continue Reading", streak badges, and "My Worship Mix".
• Server logs: IP address, user agent, timestamps. Retained for 30 days for security and abuse prevention only.
• Push subscription tokens: if you opt in to daily verse notifications, we store the endpoint your browser/device gives us. Revocable any time from Settings.

3. Information we do NOT collect

• We do not collect your precise location.
• We do not collect device advertising identifiers (IDFA / GAID).
• We do not track you across other apps or websites.
• We do not sell your personal data — ever, to anyone, for any reason.

4. How we use your information

• Operate your account (sign-in, password reset, session management).
• Deliver the features you actively use (rooms, prayer wall, bookmarks, media playback).
• Send transactional and digest emails or push notifications when you opt in. Every notification type is independently toggleable in Settings.
• Detect abuse, spam, and security violations.

5. Third-party processors

We rely on a small set of well-known service providers, each with their own privacy policy:

• MongoDB Atlas — database hosting.
• Resend — transactional email delivery.
• Cloudinary — user-uploaded media storage.
• Stripe — payment processing (Premium subscriptions). We never see or store your full card number.
• Google Sign-In via Emergent Auth (optional, only if you choose it).
• YouTube embed iframes for videos, sermons, gospel music and comedy.
• OpenAI & Anthropic Claude — for AI devotionals, sermons, and the chat assistant. No personally identifying content is sent.
• bible-api.com (public-domain scripture proxy) and MyMemory (translation cache).

6. Your rights

• Update preferences — toggle any notification type, change your name, change your email, all from Settings.
• Reset your password — via the Forgot Password flow at holywords144.com/forgot-password.
• Export your data — email support@holywords144.com and we'll send you a JSON of everything we have within 14 days, free of charge.
• Delete your account — open Settings → Delete account, or email us. Deletion is immediate and permanent: account, content, bookmarks, prayers, messages, uploads — all gone.

7. Children

Holy Words does not target children under 13 and does not knowingly collect personal information from children under 13. The cartoon and animated Bible videos are curated public YouTube content. If you believe we've collected information from a child under 13, please contact us immediately and we'll delete it.

8. Security

• All traffic is encrypted in transit with HTTPS / TLS 1.2+.
• Passwords are hashed with bcrypt at cost 12.
• Sessions use httpOnly + Secure + SameSite=None cookies with JWT short-expiry tokens.
• Web Push subscriptions are VAPID-signed.
• Stripe handles all card data — we never see, log, or store it.

9. Data retention

Account data is kept as long as your account exists. Server logs are kept for 30 days. When you delete your account, all personal data is removed within 24 hours.

10. International users

Our servers are located in the United States. By using Holy Words you consent to the transfer of your information to the United States.

11. Changes to this policy

We will post any material changes to this page and update the "Last updated" date at the top. Substantial changes will also trigger an in-app notice the next time you sign in.