Bible Journey Privacy Policy
Effective Date: October 6, 2026 · Android, iOS & Web
The Torch Dongil Church Bible Journey Ministry Team ("we," "us," or "our") processes personal data as described in this Privacy Policy. Our Privacy Officer is Deacon Yohan Choi, operating in Jeonju-si, Jeonbuk State, Republic of Korea.
1. Information We Process and Purposes
| Category of Data | Purpose of Processing |
|---|---|
| Account username, Firebase UID, name/nickname, email address, church role, social auth provider info (Google, Apple, Kakao, Naver) | Account registration, sign-in, account recovery, customer support, and security |
| One-way cryptographic password hash | User authentication. Plain-text passwords are never stored. |
| Bible reading progress, reflections, prayers, study notes, verse bookmarks, and highlights | Saving personal records, cross-device synchronization, and optional pastoral care within a user-selected church |
| Community posts, comments, scripture citations, display name, and report/block records | Fellowship sharing among members, content moderation, and safety enforcement |
| Notification preferences, inbox items, push tokens, installation ID, platform type, and last active timestamp | Delivering user-authorized reminders/notifications and managing registered devices |
| Church affiliation, administrative permissions, membership requests, and plan entitlements | Providing selected Church Plan benefits and pastoral care features |
| Product/transaction identifiers, subscription status, and expiration date (when paid plans are active) | Store purchase verification and restoration. We never collect or store credit card numbers. |
| Authentication failure counts, rate-limit logs, account deletion status, and moderation logs | Account protection, retry handling, abuse prevention, and dispute resolution |
Bible Journey does not use third-party advertising trackers or behavioral analytics SDKs. We do not request access to your device location, contacts, photo library, or microphone. Information independently processed by your device operating system or app store is governed by their respective privacy policies.
2. Visibility and User Choices
Church affiliation and religious devotional records may constitute sensitive personal data. If you choose to join a Church Plan using a church invitation code, authorized pastoral administrators of that church may view your reading progress and reflections and leave pastoral replies. Joining a church is optional, and once you leave a Church Plan, administrators can no longer access your records.
Community posts and comments are visible to other signed-in members. Posting anonymously hides your public display name from other users, though administrators can verify the authoring account when reviewing abuse reports. Please do not post real full names, phone numbers, third-party personal data, or confidential reflections in public posts. Community participation and push notifications are completely optional.
3. Data Retention and Deletion
Your account and personal records are permanently deleted when you request account deletion. Once server-side deletion completes, your login credentials, profile, reading progress, reflections, study notes, church affiliation, device push tokens, and personal notification inbox are permanently removed. The body text and author metadata of your community posts and comments are erased, leaving only a blank deletion placeholder where needed to preserve reply thread structure for other members.
If a temporary network or server error occurs during deletion, the task is retried with exponential backoff and audited every 15 minutes until completion. Minimal non-identifiable UID tombstones used solely to prevent accidental recreation from delayed events are purged after 90 days and contain no names, emails, or user content. Transaction records maintained independently by Apple App Store, Google Play, or authentication providers follow their respective legal retention policies.
Contact details or reference IDs submitted via external deletion requests are purged within 30 days for unverified requests and upon completion for verified requests (with minimal non-personal completion logs purged after 90 days). Deleting your Bible Journey account does not automatically cancel an active App Store or Google Play subscription.
4. Your Rights: Access, Correction, and Account Deletion
You can edit your profile or permanently delete your account and data at any time inside the app under [More → Edit Profile / Delete Account]. Recent authentication may be required for security. You can also submit a deletion request without reinstalling the app via our Account Deletion Request Page or by emailing us with your account username or registered email address (never send your password).
If you have an active paid subscription, please cancel your subscription in the App Store or Google Play settings before or after deleting your account.
5. Security Measures and Service Providers (Sub-processors)
All traffic is encrypted via HTTPS/TLS, and data access is strictly enforced via Firebase Authentication and server-side UID ownership rules. Passwords are protected using Firebase Authentication or server-side salted scrypt hashing.
- Google LLC (Firebase): Authentication, Cloud Firestore database (United States region), Cloud Functions (Seoul, Korea region), and Firebase Cloud Messaging (global infrastructure).
- Google, Apple, Kakao, Naver: Optional social sign-in identity providers selected by the user.
- RevenueCat, Inc.: Subscription receipt validation and entitlement synchronization (United States) when paid plans are enabled.
6. Changes to This Policy and Contact Us
If we make material updates to this Privacy Policy, we will notify users through the app and on this page. For any privacy inquiries, data access requests, or deletion assistance, please contact us below.