Privacy Policy

Data We Collect

Reading the Bible on dewfall does not require an account, and you can read without giving us personal information beyond what is needed to operate and secure the Service.

When you sign in, we collect account and profile information from your social sign-in provider (currently Google), which typically includes your name, email address, and avatar image. We do not receive or store your provider password.

When you use account features, we collect the content you create — your journal entries, highlights, and reading progress. We also collect limited usage and technical data needed to run and protect the Service, such as session and authentication information, device and browser type, approximate language/region, and basic logs. If you subscribe to dewfall+, payment is processed by Polar; we receive confirmation of your subscription status but do not store full payment card numbers.

How We Use Your Data

We use your data to: provide and maintain the Service; authenticate you and keep your account secure; save and sync your reading progress, journals, and highlights across devices; generate and serve AI deep dives; operate the dewfall+ subscription and referral credits; respond to your requests; detect, prevent, and address abuse, security incidents, and technical issues; and comply with legal obligations.

We do not sell your personal data. We do not use advertising trackers, and we limit cookies and similar technologies to what is strictly necessary to operate the Service, as described below.

AI Processing of Your Data

AI deep dives are generated by Anthropic's Claude models and are keyed to a specific verse. They are shared and cached across all users and are never personalized using, and never contain, the text of any user's journal.

Separately, a private background job may send your own journal entries to an AI provider (Anthropic) for the sole purpose of inferring your recurring spiritual themes. The resulting themes are stored on your own profile to improve your personal experience and are not shown to other users. This is the only situation in which your journal text is sent to a generative AI model, and it is processed to provide a feature you have chosen to use by journaling within the Service.

In addition, when you use the in-app library search, the text of the entries you search — which may include your journal notes and highlighted verses — is processed by AI search models to rank the most relevant results for you: embeddings are generated by Cloudflare's Workers AI, and candidate results are re-ranked by Voyage AI. This processing happens only to return your own search results and is not used to personalize the shared deep dives other users see.

AI providers process this data on our behalf as sub-processors under contractual obligations. We do not permit your private content to be used to train third-party general-purpose models, except as may be necessary to provide the Service consistent with our providers' commitments.

Legal Bases for Processing

Where the EU/UK General Data Protection Regulation or similar laws apply, we rely on the following legal bases: performance of a contract, to provide the Service you request (for example, saving your journals and progress, and operating your subscription); our legitimate interests, to secure, maintain, and improve the Service and prevent abuse, balanced against your rights; consent, where required (for example, certain optional processing), which you may withdraw at any time; and compliance with legal obligations.

Where we rely on consent, you can withdraw it without affecting the lawfulness of processing carried out before withdrawal.

Sub-Processors and Third Parties

We share personal data with service providers that help us operate dewfall, under contracts that require them to protect your data and use it only to provide their services to us. Our current sub-processors and third parties include: Cloudflare, Inc. (database, storage, hosting of server functions, and Workers AI search embeddings), Anthropic (AI generation), Voyage AI (search result re-ranking), Polar (payments and subscription management, acting as merchant of record), Google (social sign-in), and Vercel (web hosting and content delivery).

We may also disclose data if required by law, to enforce our Terms, to protect the rights, safety, and security of dewfall and its users, or in connection with a merger, acquisition, or sale of assets (in which case we will provide notice consistent with applicable law).

Cookies and Local Storage

We use cookies and similar local-storage technologies only as needed to operate the Service — primarily to keep you signed in and maintain your authenticated session, and to remember basic preferences and reading state. We do not use third-party advertising or cross-site tracking cookies.

You can control cookies through your browser or device settings, but disabling strictly necessary cookies may prevent you from signing in or using account features.

Data Retention

We keep your personal data for as long as your account is active or as needed to provide the Service. Journals, highlights, reading progress, and profile data are retained until you delete them or delete your account, after which we delete or anonymize them within a reasonable period, except where we must retain certain records to comply with legal, tax, accounting, or security obligations.

Limited logs and backups may persist for a short time after deletion as part of normal operations and are then removed or overwritten in the ordinary course.

Security

We take reasonable technical and organizational measures to protect your data. Your private content — journals, highlights, and progress — is protected by row-level security so that, under normal operation, only your account can read it. Data is encrypted in transit using industry-standard protocols, and access to systems is limited to those who need it to operate the Service.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

International Data Transfers

dewfall and its sub-processors may process and store data in countries other than the one in which you live, including the United States. Where we transfer personal data across borders, we rely on appropriate safeguards required by applicable law — such as the European Commission's Standard Contractual Clauses or equivalent mechanisms — to protect your data.

By using the Service, you understand that your data may be processed in these locations as described in this Policy.

Your Rights

Depending on where you live, you may have rights to access, correct, update, port, restrict, or object to the processing of your personal data, and to request its deletion. You can access and edit much of your content directly in the app, and you can export or request a copy of your data.

To exercise your rights, contact us at [email protected]. We will respond within the time required by applicable law and may need to verify your identity before acting. You also have the right to lodge a complaint with your local data-protection authority.

Account Deletion

You can delete your account at any time. Deleting your account removes your associated content — including journal entries, highlights, reading progress, and profile data such as inferred themes — from the active Service, subject to the limited retention described in the Data Retention section above.

Shared, verse-keyed AI deep dives are not personal to you and are not deleted when you delete your account, because they contain no user content. If you need help deleting your account or data, contact us at [email protected].

Children's Privacy

The Service is not directed to children under 13 (or under the higher minimum age required in your country), and we do not knowingly collect personal data from them through account features. Reading the Bible is publicly available and does not require an account.

If you believe a child has provided us personal data without appropriate consent, contact us at [email protected] and we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice within the Service.

Your continued use of the Service after changes take effect indicates your acceptance of the updated Policy.

Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at [email protected] or +49 173 7129125, or by writing to Tejas Kumar e.U., Berlin 10245, Germany.