This policy covers the Faith: Bible Chat & Study mobile app and the services behind it. It describes what we actually store, which is a shorter list than most apps of this kind, and what we hand to other companies in order to run it.
Data controller. Boltt Infraventures Limited, a company registered in England and Wales under number 16819964, registered office Silverstream House, 45 Fitzroy Street, London, England, W1T 6EB. We are the controller of the personal data described here, and you can reach us about any of it at faith@doodl.co.
1. What we collect
Your account
Signing in is handled by Clerk. Depending on how you sign in, we receive your email address, your name, and — if you use Google sign-in — the basic profile information Google returns. We store an internal account record keyed to your Clerk user ID.
Optional details you choose to give
Once, and not again if you decline, the app may ask for a few optional details: gender, age band, a phone number, and whether you are willing for us to share your details with partners. Every field is optional and the sheet can be dismissed without answering.
If you tell us you are under 18, no phone number and no sharing consent is stored, even if the fields were filled in before you selected your age band. This is enforced in code on the way to disk and on the way to our server, not only in the form.
Your conversations
Chat sessions and messages are stored on our servers so your history is available across devices and reinstalls. This includes what you asked, what the assistant replied, and the verse citations attached to the reply.
Usage needed to run the free tier
We store a per-day count of AI messages against your account. This exists so a free allowance survives a reinstall or a switch of device — it is a number per day, not a record of what you asked.
Purchases
Subscriptions and one-off purchases are processed by Google Play or the Apple App Store and managed through RevenueCat. We never see or store your card details. We keep the purchase record: which plan, the amount and currency, the store transaction identifier, the renewal date, and whether it is set to cancel. Gift codes, pay-it-forward contributions and group licence seats are stored the same way.
On your device only
Your reading progress, streak, bookmarks, last-read position, theme, reminder time, offline chapters, and any temporary unlocks earned by watching a video are stored on your device and are not uploaded. Deleting the app removes them.
Diagnostics and analytics
We use Firebase Analytics, Crashlytics and Performance Monitoring to see which screens are used, to receive crash reports, and to find slow requests. These carry an app instance identifier and device information such as model, OS version and app version. Crash reports may include a stack trace from the moment of the failure.
Advertising
Free accounts see ads served by Google AdMob, including rewarded videos you choose to watch in exchange for temporary access. AdMob may use your device's advertising identifier to select and measure ads. You can reset or limit that identifier in your device settings, and on iOS you are asked before any tracking identifier is used. Faith Pro removes all ads.
2. How your questions are answered
When you ask something, your message and the relevant scripture passage are sent to Google Gemini, which generates the reply. Google processes that request under its own terms as our service provider. Do not put information into a chat that you would not want processed this way — a conversation is a good place for a question about a passage and a poor place for medical, financial or legal details about yourself or anyone else.
3. Why we hold it, and our legal basis
Under the UK GDPR we have to have a lawful reason for each thing we process. Here they are, in plain terms.
| What | Why | Legal basis |
|---|---|---|
| Account and email | To sign you in and attach your history and entitlement to you | Performance of our contract with you |
| Chat sessions and messages | So your conversations survive a reinstall and a change of device | Performance of our contract with you |
| Daily AI message count | To apply the free allowance fairly across devices | Performance of our contract with you |
| Purchase records | To grant Pro, honour gifts and seats, and reconcile refunds | Contract, and legal obligation for tax and accounting records |
| Optional details you chose to give | To understand who the app is being built for | Your consent — withdrawable at any time |
| Sharing details with partners | Only if you explicitly agreed to it | Your consent — withdrawable at any time |
| Crash reports and performance data | To fix what breaks and keep the app secure | Our legitimate interest in a working, secure app |
| Analytics | To see which features are used and worth keeping | Our legitimate interest in improving the app |
| Advertising identifiers | To show and measure ads on free accounts | Your consent where the law requires it |
4. Who else receives it
We share data only with the services required to run the app:
- Clerk — authentication and account management
- Google Gemini — generating answers to your questions
- Google Firebase — analytics, crash reporting, performance, and the remote settings that control app behaviour
- Google AdMob — advertising on free accounts
- RevenueCat — subscription and purchase management
- Google Play and Apple — payment processing
- Vercel and our database provider — hosting and storage
- Cloudflare R2 — hosting the audio recordings
We do not sell your personal information. We do not share your details with any partner unless you explicitly gave that consent in the optional details sheet, and you can withdraw it at any time in Profile → Account → Your Details.
5. How long we keep it
Account data, conversations and purchase records are kept while your account exists. Daily usage counts are kept only as long as they are useful for applying limits. Purchase and gift records may be retained after deletion where we are required to keep them for tax, accounting or fraud-prevention purposes.
6. Deleting your account
You can delete your account from inside the app: Profile → Account → Delete Account. It deletes rather than deactivates. Erased outright:
- Your sign-in account
- Every conversation and message
- Your usage counts and the optional details you gave us
- Your membership of any group
- Scheduled reminders, and every file the app wrote on your device
Payment records are anonymised rather than erased. We are required to keep records of money for tax and accounting purposes, so payments, contributions to the pay-it-forward pool and issued gift codes stay — but your identifier is stripped from them permanently, so what remains is an amount and a transaction, unlinked to you and unlinkable back to you. If you had applied for a funded subscription, the reason you wrote is deleted outright.
If that fails for any reason, email faith@doodl.co from the address on the account and we will delete it for you.
7. Your rights
Under the UK GDPR and equivalent laws you have the right to:
- Ask what personal data we hold about you, and get a copy
- Have inaccurate data corrected
- Have your data erased — the in-app Delete Account does this immediately
- Restrict or object to how we use it, including profiling for ads
- Receive your data in a portable, machine-readable form
- Withdraw consent at any time, where consent is the basis. Withdrawing does not undo what was lawful before you withdrew
Email faith@doodl.co and we will act on it, free of charge, normally within one month.
If you are unhappy with how we handled it, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority in your own country. We would rather you told us first so we can fix it.
8. Children
Faith is not directed at children under 13, and we do not knowingly collect personal information from them. Users who tell us they are under 18 have phone number and partner sharing switched off automatically, as described above. If you believe a child has given us personal information, email us and we will remove it.
9. Security
Data is transmitted over encrypted connections and stored with reputable providers. No system is perfectly secure, and we will not pretend otherwise — but we hold as little as the app can work with, which is the only protection that never fails.
10. International transfers
We are based in the United Kingdom and several of our providers are based in the United States, so your data may be processed outside the UK and the European Economic Area.
Where that happens we rely on an adequacy decision where one exists, and otherwise on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses agreed with each provider, together with the technical safeguards they apply.
11. Changes to this policy
If we change this policy we will update the date at the top, and we will tell you in the app when a change is material.
12. Contact
Boltt Infraventures Limited
Silverstream House, 45 Fitzroy Street, London, England, W1T 6EB
Company number 16819964
faith@doodl.co