Privacy Policy

Effective Date: March 12, 2026

RhemaFlow ("we", "our", "the app") is a faith-based declaration app that helps you speak Scripture-based affirmations over your life. This policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

Account Information

• When you sign in with Google or Apple, we receive your name, email address, and profile photo from your provider.
• If you use the app as a guest, no personal information is collected.

User-Generated Content

• Declarations you create and save, including the text, Bible verse references, selected category, and atmosphere preference.
• AI-generated images associated with your saved declarations (Pro subscribers only).

App Preferences

• Notification settings (enabled/disabled, preferred time).
• Default atmosphere and category selections.

Usage Data

• We track the number of declarations you generate each day to manage free-tier usage limits. This count resets daily and is linked to your user ID.

Device Identifiers

• We collect your device's Android ID or iOS Identifier for Vendor to prevent abuse of free-tier limits across multiple accounts on the same device. This identifier is used solely for usage enforcement and is not used for advertising or cross-app tracking.

Subscription Data

• If you subscribe to RhemaFlow Pro, your purchase is processed by Google Play or the Apple App Store. We use RevenueCat to verify your subscription status. We do not collect or store your payment card details.

2. How We Use Your Information

• To provide the app experience — generating personalized faith declarations using Google Gemini AI, text-to-speech audio using ElevenLabs, and background images (Pro) using Google Gemini AI.
• To save your content — storing your declarations and favorites so they persist across sessions.
• To manage your subscription — verifying your subscription status and enforcing daily usage limits for free-tier users.
• To prevent abuse — using device identifiers and daily counters to ensure fair usage of free-tier resources.
• To send reminders — delivering local daily notifications at your chosen time if enabled.
• To authenticate your account — verifying your identity so your data is private and accessible only to you.

3. Third-Party Services

We use the following third-party services to operate the app:

• Firebase (Google) — authentication, database storage, file storage, and cloud functions. Firebase Privacy Policy
• Google Gemini AI — generates declaration text and images based on your selected category and mood. Your category and mood selections are sent to this service for processing but are not stored by us beyond the generated output.
• ElevenLabs — generates text-to-speech audio for your declarations. The declaration text is sent to ElevenLabs for audio synthesis. ElevenLabs does not store your data after processing. ElevenLabs Privacy Policy
• RevenueCat — manages subscription status and entitlements. Your user ID and purchase receipts are shared with RevenueCat to verify your subscription. RevenueCat Privacy Policy
• Google Sign-In / Apple Sign-In — used for authentication only. We do not access your contacts, calendars, or other account data.
• Google Play / Apple App Store — processes subscription payments. We do not have access to your payment details.

4. Data Storage and Security

• Your data is stored in Firebase (Google Cloud) with security rules that restrict access to your account only.
• Generated images are stored in Firebase Storage and associated with your user ID.
• Daily usage data is stored server-side and is not retained beyond what is necessary to enforce daily limits.
• We do not store data locally on your device beyond temporary audio cache files that are cleaned up after playback.
• All data is transmitted over encrypted connections (HTTPS).

5. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes. Your data is only processed by the third-party services listed above as necessary to provide the app's functionality.

6. Your Rights

• Delete individual declarations — you can delete any saved declaration and its associated image from within the app.
• Delete your account — you can delete your account and all associated data from the app settings. This permanently removes your profile, declarations, and stored images.
• Manage your subscription — you can cancel or manage your subscription at any time through Google Play or the App Store.
• Sign out — you can sign out at any time from the settings screen.
• Data access and portability — you may request a copy of your personal data by contacting us.

7. Children's Privacy

RhemaFlow is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.

8. Permissions

The app may request the following device permissions:

• Internet — required to communicate with Firebase and AI services.
• Notifications — for optional daily declaration reminders.
• Audio playback — to play generated speech and background atmosphere music.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated effective date. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us