Privacy Policy

The following is saved in the app's private storage on your phone and is never sent to us:

• Language, calendar region and theme settings
• Prayer reminder times, the Angelus and feast-day alert settings, and your own reminders
• Bible highlights and notes
• Saint and surprise stories you have opened, so they can be read again offline
• Your Catholic baby-name shortlist
• Rosary progress (how many Rosaries you have prayed)
• Your Ask (AI chat) conversation history

Uninstalling the app or clearing its storage permanently removes this data. You can also clear your Ask conversation at any time with the delete icon in the chat.

Ask answers questions about Scripture, the saints, prayer and the liturgical year. It only sends anything when you send a question. Each time, the app sends the following over an encrypted (HTTPS) connection to our server, which passes it to OpenAI to generate the answer:

• The question you typed
• The most recent messages of your current conversation (up to 12), so follow-up questions make sense
• Your phone's current date, time and time zone, and today's liturgical season and feast or saint — so the answer fits “today”
• The app's language setting, so the answer can be in your language
• Only if you use “Plan your date with AI” in the baptism or wedding guide: the month you chose, that month's liturgical days, and any note you typed
• Only when a new story is written: the saint's name or the Bible story chosen (the story is then kept on your phone)

We do not store or log the text of your questions or the answers. OpenAI processes them as our service provider under its API data-usage policy: API data is not used to train OpenAI's models by default, and may be retained by OpenAI for a limited period (up to 30 days) for abuse monitoring.

Ask runs on Google Firebase (Google Cloud, United States). To give every phone its free questions, keep the service from being abused and honour subscriptions, we store only:

• An anonymous Firebase user ID. Created automatically and silently — there is no login. It contains no name, email or phone number.
• A one-way hash of a device identifier (derived from the app's Android ID; the raw ID never leaves your phone), with the number of free questions used, short-lived rate-limit timestamps and when it was last used.
• If you subscribe: a one-way hash of your Google Play purchase token (never the token itself), which hashed devices use the subscription (at most two), your plan, and question counts for the current day and month.

This data is used only to run Ask. It is kept while you use the feature or your subscription is active, and you can ask us to delete it at any time (see “Your choices” below).

To stop other programs from misusing Ask, the app uses Firebase App Check with Google Play Integrity. Google checks that requests come from the genuine app installed from Google Play on a real device. Google processes these integrity signals under its own privacy policy; we receive only a pass/fail result.

The app offers an optional one-time PRO unlock and optional monthly AI subscriptions (AI Pro and Premium). All payments are processed by Google Play. We never receive your card or payment details. Google Play gives the app a purchase record, which the app and our server use only to confirm what you have bought — for subscriptions, our server verifies it with Google on each Ask request.

Restore purchases (in Settings and on the upgrade screens) simply asks Google Play again which purchases your Google account owns. It sends nothing new to us; restoring an AI subscription on another phone uses one of its two device places.

You can manage or cancel a subscription at any time in Google Play (Play Store → Profile → Payments & subscriptions), or from the link inside the app.

The app uses Google Play's in-app review prompt and in-app update prompt. These are provided by Google Play under Google's privacy policy; the app does not send us any data through them.

• Google — Google Play (purchases, subscriptions, reviews, updates, Play Integrity) and Firebase (anonymous authentication, App Check, and the server that runs Ask). See the Google Privacy Policy.
• OpenAI — generates Ask answers. See OpenAI's privacy policy.

We do not sell your data, share it for advertising, or give it to anyone else.

This app contains no advertisements and no analytics or advertising SDKs. The Android Advertising ID permission is explicitly removed from the app.

The app asks only for what its features need. Every permission in the current version is listed below:

• POST_NOTIFICATIONS: Shows the prayer reminders, Angelus bell, daily verse and feast-day alerts you turn on (Android 13+).
• SCHEDULE_EXACT_ALARM: Delivers those reminders at the exact times you choose.
• RECEIVE_BOOT_COMPLETED: Restores your scheduled reminders after the phone restarts.
• WAKE_LOCK / FOREGROUND_SERVICE: Keeps the device awake just long enough to deliver a reminder reliably (used by Android's standard background-work library).
• VIBRATE: Vibration for reminders and gentle haptics in the guided Rosary.
• INTERNET / ACCESS_NETWORK_STATE: Used for the optional Ask (AI chat) feature, for Google Play purchases and subscriptions, and for in-app updates and reviews. The calendar, Bible, reminders and saved stories work without it.
• com.android.vending.BILLING: Lets you buy PRO or an AI subscription through Google Play.
• Google Play services permissions (RECEIVE, READ_GSERVICES): Declared automatically by Google's Firebase libraries that the Ask feature relies on. The app does not send you push messages or read your Google account data.

• Don't use Ask — then nothing you write leaves your phone, and no data about you is kept on our servers.
• Clear your conversation with the delete icon in Ask.
• Ask us to delete your server data (the hashed device and subscription records) by emailing support@zecrari.com. Because we hold no name or email, include the approximate date you last used Ask so we can help; the app's Send feedback screen can start that email for you.
• Cancel a subscription in Google Play at any time.
• Turn off notifications or revoke any permission in your phone's settings.

Everything the app sends travels over encrypted HTTPS. On our side, only hashes are stored (never your raw device ID or purchase token), the database is closed to all direct access from the app, and the OpenAI key never leaves our server. Data on your phone is protected by Android's standard app sandbox.

This app is not directed at children under the age of 13, and we do not knowingly collect personal information from children. The Bible stories for children are meant to be read with a parent. If you believe a child has used Ask in a way that concerns you, contact us and we will delete the related data.

Our server and Firebase database are located in the United States, and OpenAI may process requests in the United States. By using Ask, you understand that this data is processed there.

We will update this policy when the app changes, and the date at the top will show the latest version. Significant changes will also be mentioned in the app's release notes. Continued use of the app after a change means you accept the updated policy.

Your use of the app is also governed by our Terms & Conditions.

Questions about this policy or your data: support@zecrari.com.

Catholic Calendar: Bible is an independent app and is not affiliated with any diocese, church, or denomination.