BibleBranch · MKavak Apps
Privacy notice · 31 October 2026
Guest study
You can read, search, save notes and explore without signing in. Study data is stored in a separate local profile. Removing the app or clearing data can remove local study. Export important work before doing so. Purchase restoration restores store access, not notes.
Optional accounts and cloud backup
Firebase Authentication processes your email, sign-in provider and account identifier to provide an optional account. Passwords are handled by Firebase; they are not included in analytics or support drafts. Account and guest libraries are separate. Signing in does not automatically upload your guest library.
When you choose Google Sign-In, Google may process profile information such as your name, email address and phone number, account and device identifiers, coarse location inferred from your IP address for fraud prevention, usage data and technical information. BibleBranch does not request phone-number or location permissions and does not read a phone number from your Google profile. Google sign-in processing can occur even when optional product analytics are off. We do not use data for advertising or cross-company tracking. Google privacy information: https://policies.google.com/privacy.
When you explicitly create a cloud backup, your saved passages, notes and trail visits are sent to Google Cloud Firestore. These may reveal religious interests or beliefs. Backup is optional: read the confirmation before uploading. Cloud data is protected in transit and at rest by the provider; this is not end-to-end encryption. We can process cloud records to operate the service. Existing backup restoration and deletion remain available without an active Plus subscription.
Optional password reset and verification emails
These emails are sent only when you request them in the app. If custom email delivery is enabled, the app sends the request to a Cloudflare Worker. The Worker verifies the Firebase App Check token and, for verification requests, the Firebase ID token. It uses the request IP address to validate and rate-limit the request. Its quota store records keyed hashes of the email address and IP address with timestamps, rather than the raw values. To create a one-time action link, the Worker sends the account email address to Firebase Identity Toolkit, along with the Firebase ID token for verification or the request IP address for password resets. The Worker and Resend process the recipient address, localized message and action link to prepare and deliver the email. The message contains account-authentication information only; it does not include saved passages, notes or trail data. This custom route is optional; while it is disabled, the app uses Firebase’s built-in email flow.
Purchases
Apple or Google processes payment. RevenueCat verifies subscription access and receives store transactions and a pseudonymous app user identifier. If you sign in, your account ID can link Plus access across devices and may associate a guest purchase with your account. We do not receive your card number. Store purchase and financial records may be retained as required by the stores and applicable law.
Optional diagnostics
Product analytics is off until you enable it in Settings and can be disabled there. Events exclude note text, search queries, selected passages and trail titles. Crash reporting is off by default. If you enable it in Settings, the app may send reports for certain app errors; automatic Crashlytics collection stays off. Reports may include technical error and device or app information. We do not sell study data or use it for advertising.
Service operation and security checks
During startup, when Firebase is available, the app requests app-update settings from Firebase Remote Config on supported platforms. Remote Config uses a Firebase Installation ID to select the settings returned to the app. On iOS release builds, Firebase App Check also requests app attestation through Apple App Attest, with DeviceCheck as a fallback. These functional and security requests can involve installation identifiers, attestation material and other technical data. They are separate from optional product analytics and crash reports and may occur even when both are off. Firebase privacy information: https://firebase.google.com/support/privacy.
Widgets, sharing and support
Widgets show only the content you configure on system Home Screen surfaces and, on iOS, the Lock Screen; reading activity requires your choice. Notes are not automatically included. Sharing exports your selected content to an app you choose. Support opens a draft in your email application; review the technical app information before sending. We do not send support email automatically.
Your choices and deletion
Use Settings to export or clear the active local library and change analytics preferences. Use Account to delete your cloud study and sign-in account after verification. A minimal technical deletion marker may remain in the cloud to prevent another signed-in device from recreating deleted study; it contains no notes or passages. Account deletion does not cancel a store subscription: manage it in Apple or Google subscription settings. Contact [email protected] for privacy/access/deletion questions, including purchase-service identifiers. Do not email passwords or payment details.
Providers may process data outside your country. Their privacy information: https://firebase.google.com/support/privacy and https://www.revenuecat.com/privacy. This notice must be updated if the service or collection practices change.