Privacy Policy
Last updated Oct 27, 2026
Righteously Faithful, LLC ("we," "us," "our") operates the Righteously mobile app (the "App"). This Privacy Policy explains what information the App collects, how we use it, who helps us provide the App, and the choices you have. The App is offered in the United States only.
The short version
• We collect what the App needs to work for you: your account details, your reading and prayer activity, your journal, and your subscription status.
• Your journal is private to your account, and our team does not open journal content.
• Payments are handled by Apple on iPhone and iPad, and by Google Play on Android. We never see or store your card number.
• We do not sell or share your personal information for advertising.
• You can delete your account and its data from inside the App at any time.
Information we collect
Your account. Your email address and the display name you choose. If you sign in with Google, or with Apple on iPhone, we may receive your name and email address from Google or Apple. If you sign in with Apple, Apple may share a private relay email address with us instead of your own email address. We record which way you signed in, so the App shows the right options (for example, Change Password only for email accounts).
Your password. Passwords are handled by our sign-in provider, Supabase, and stored only in scrambled (hashed) form. We never see your password.
Your activity in the App. To give you the Daily Path, streaks and progress, we store:
• which daily tasks you completed (the devotional, the prayer, the Bible reading) and on which day;
• your streak and best streak;
• your Bible reading progress, the chapters you completed, and your recently viewed chapters;
• your Journey progress through the books of the Bible;
• the verses you highlight;
• whether you have opened the KJV reading guide, so the App can label it for you.
Your journal. The entries and drafts you write in My Journal, with their title, category and any prompt or verse you chose. Your journal is private to your account: the App's database only lets your own account read or change your entries, and our team does not open journal content.
Reminders and notifications. If you allow notifications, we store the reminder time you choose, your phone's time zone offset (so the reminder arrives at your local time), and your answers to the App's notification prompt.
Your subscription. If you subscribe, we store your plan, its renewal or end date, whether a cancellation or a plan change is pending, whether you hold a Founding Member spot, any Family Plan or promotional code you joined with, and the purchase details Apple (on iPhone and iPad) or Google Play (on Android) gives us through RevenueCat: the plan, its price, the purchase and renewal dates and status, and the store's transaction identifiers. We never receive your card number.
Redeeming a code on iPhone. On iPhone and iPad, codes are redeemed on our website. When you tap Redeem on Our Website, the App opens that page with a link that works once and only for a few minutes, so you don't have to sign in again. The page keeps a short sign-in only while it is open, stores nothing in your browser, and signs itself out after your code is redeemed.
How you use the App (analytics). We record how features are used, for example which tabs are opened, when a devotional or prayer is completed, when the journal is used, when a Journey book is read, when the Premium page is viewed, which notifications you open, and, if you subscribe, which plan you chose, so we can improve the App. We record this only while you are signed in. We never send the words of your journal, your prayers or any other personal text, your name or your email address.
Information from your phone. Your phone's local date (so "today" is your today), and, if the App runs into an error, technical details about the error (see "Crash reports").
On Android, when you create an account or start a purchase, we ask Google Play to confirm that the request comes from the genuine Righteously app on a genuine device. We keep Google's answer (for example whether the app and device passed Google's checks) for 180 days to help prevent fraud, then delete it automatically. It does not include your contacts, messages, location or anything you write in the app.
What we do not collect. The App does not ask for your location, contacts, photos, camera or microphone. On Android it asks only for internet access, for notifications (and the permissions notifications need to arrive and to show a badge on the App's icon), and for access to Google Play's billing service, so you can subscribe through Google Play.
How we use information
• To create and run your account and sign you in.
• To show your daily devotional, prayer and reading, and to keep your streak and progress.
• To keep your journal, highlights and progress available on any device you sign in on.
• To send the reminders you asked for.
• To send your account emails, and a one-time welcome email when you join, start Premium, start or join a Family Plan, or redeem a code.
• To process and manage your subscription, including the Founding Member and Family Plans and promotional codes.
• To understand how the App is used and improve it.
• To find and fix errors and keep the App secure.
• To answer you when you contact us.
Who helps us run the App
Each of these service providers receives only what it needs to do its job for us.
• Supabase: our database, sign-in and server functions. Your account, activity and journal are stored here, in the United States (Northern Virginia).
• Apple In-App Purchase: payments and subscriptions on iPhone and iPad. Apple receives your payment details directly when you subscribe through the App Store, under Apple's own privacy policy. Apple tells us, through RevenueCat, which plan you bought, its price, the purchase and renewal dates and status, and its transaction identifiers.
• Google Play Billing: payments and subscriptions on Android. Google receives your payment details directly when you subscribe through Google Play, under Google's own privacy policy. Google Play tells us, through RevenueCat, which plan you bought, its price, the purchase and renewal dates and status, and its transaction identifiers.
• RevenueCat: checks purchases with Apple and Google Play and tells our server about each purchase, renewal, cancellation, failed payment and refund, so your Premium stays in step with your App Store or Google Play subscription. RevenueCat receives your account's identifier (the same random identifier our database uses for your account), the plan you bought, its price, the purchase and renewal dates and status, and the store's transaction identifiers. We do not send it your name, email or journal.
• Google: sign in with Google, if you choose it.
• Apple: sign in with Apple on iPhone, if you choose it.
• OneSignal: push notifications. OneSignal receives your account's identifier and your device's notification token, so a reminder reaches your phone. We do not send it your name, email or journal.
• Sentry: crash and error reports, with technical details about the error, the App version and your device type. We have turned off the sending of personal information, screenshots and screen layouts.
• Mixpanel: the feature usage described above ("How you use the App").
• Resend: sends the App's emails: account emails (confirming your email address and resetting your password), security notices (for example when your password is changed), and a one-time welcome email when you join, start Premium, start or join a Family Plan, or redeem a code. Resend receives your email address and, for the welcome emails, your name.
• Cloudflare: hosts the web pages that open from those emails and from links in the App (for example, the page where you redeem a code on iPhone, and the page about deleting your account).
The Bible text in the App is the King James Version, which is in the public domain, and it is stored by us.
We may also disclose information if the law requires it, or to protect the rights and safety of our users or of us.
Notifications
Reminders are optional. If you allow them, the App sends at most one reminder a day, at the time you choose, and only on days you have not finished your Daily Path. You can turn them off in the App (Profile, Notifications, Push Notifications) or in your phone's settings at any time. Verse of the Week is a notification with one verse from the Bible, sent once a week on Sunday morning. It is on when you start; you can turn it off in the App (Profile, Notifications, Verse of the Week) or in your phone's settings. To send it, our notification service (OneSignal) keeps a label on your device's notification record showing that it is switched on.
Crash reports
When the App runs into an error, it may send a crash report to Sentry so we can fix it. Reports are set not to include personal information, screenshots or screen layouts.
Bot protection
To protect account sign-up and sign-in from bots and abuse, we use Cloudflare Turnstile. When you sign up, sign in or reset your password, Turnstile checks information from your device to tell real people from automated traffic. Cloudflare's handling of that information is described in the Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/
How long we keep information
• Your account and everything linked to it (activity, journal, highlights, progress, settings, our record of your sign-ins, and the results of the device checks made when you signed up or bought a subscription): while your account exists. When you delete your account, it is deleted from our database at once, and the record our notification service (OneSignal) holds for you is deleted with it.
• Backups: our database keeps daily backups for 7 days, so deleted information can remain in a backup for up to 7 days before it is gone.
• Payment records: Apple and Google keep their own records of payments and subscriptions as the law requires, under their own privacy policies. Deleting your account does not delete Apple's or Google's payment records.
• Purchase history at RevenueCat: kept, linked to a random account identifier (not your name or email address), until we ask RevenueCat to delete it. Email legal@righteouslyapp.com to ask.
• Usage records at Mixpanel: linked to a random account identifier (not your name or email address); Mixpanel deletes them automatically after 2 years. Email legal@righteouslyapp.com to have them deleted sooner.
• Records with nothing that identifies you: if you used a promotional code or a family code, held a Founding Member spot, or a payment of yours needed a person to look at it, we keep that the code was used, the spot was taken or the check was made, with no link to you, so codes, spots and payments are counted correctly.
• Email delivery records: our email provider (Resend) keeps a record of each email we sent you, including your email address, for 30 days.
• Crash reports: kept by Sentry for up to 90 days.
Deleting your account
You can delete your account at any time in the App: Profile, Delete My Account. Deleting your account does not cancel a subscription you bought through Google Play or the App Store, because those are managed by Google and Apple. Cancel it first in Google Play (Android) or in Settings on your iPhone or iPad. Once deleted, your account, journal, highlights and progress cannot be recovered. Step by step instructions, how to ask without the App, and how to delete only some of your data: https://app.righteously.app/delete-account
Our website
Our website, righteously.app, is hosted by Webflow. If you use the contact form, we receive the name, email address and message you send, and Webflow delivers it to our support inbox. We use it only to answer you, and we keep it in our support inbox only as long as we need it to help you.
The website does not use advertising or analytics cookies; it sets only a security cookie from Cloudflare that ends when you close your browser. It loads its fonts from Google Fonts.
Children
The App is for people 13 and older. We do not allow accounts for children under 13, including as members of a Family Plan, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at legal@righteouslyapp.com and we will delete it.
Security
We protect your information with access rules in our database that limit each account to its own data, encrypted connections, short sign-in sessions that renew automatically, and password rules that refuse passwords known from data breaches. No system is perfectly secure, and we cannot guarantee absolute security.
Your choices and your rights
• Change your display name (Profile, Edit Profile).
• Change your password (Profile, Change Password, for email accounts).
• Turn reminders on or off.
• Cancel your subscription (Profile > My Subscription > Manage Subscription, which takes you to your subscriptions in Google Play on Android or the App Store on iPhone and iPad).
• Delete only some of your data, or your whole account: see https://app.righteously.app/delete-account.
To see or delete your data. Anyone can ask to see the personal information we hold about them, or ask us to delete it, by emailing legal@righteouslyapp.com from the email address on the account. We will respond within 45 days.
Changes to this policy
When this policy changes, the "Last updated" date at the top of this page changes with it. If a change is significant, we will also email you.
Contact us
Privacy questions: legal@righteouslyapp.com. Help with the App: support@righteouslyapp.com.
