Privacy Policy
Holy Hush ("we", "us") is a prayer and Bible app with an AI companion, available on the web and on mobile. It is operated by Fibipals, an independent developer. This policy explains what information we collect when you use Holy Hush, why, who we share it with and the choices you have.
- We collect what we need to run the app: your account, your preferences and what you write in it.
- Your prayers, intentions, notes and conversations are private. We never sell them or use them for advertising.
- To answer you, the AI companion sends your messages to our AI provider. They are not used to train AI models.
- You can download or delete your data, or your whole account, at any time.
1. What we collect
Information you give us
- Account details: email address, first name (optional), and an identifier from Apple or Google if you sign in with them.
- Quiz and profile answers: for example your Christian tradition, preferred Bible translation, what you would like prayer for (such as worry or grief), how often you pray, and your reminder time.
- Your content: prayers you save, prayer intentions, journal notes and your conversations with the companion.
- Support messages you send us.
Information collected automatically
- Usage data: pages and screens viewed, features used (for example "prayer marked as done"), quiz steps completed, and how you arrived (such as a link or ad campaign).
- Device data: device and browser type, operating system, language, time zone, and IP address (used to estimate country or region).
- Cookies and similar technologies: to keep you signed in, remember your quiz progress and measure how the site is used. See Cookies below.
- Push token: if you allow reminders on your phone.
Information from others
- App stores (Apple, Google, through RevenueCat) tell us whether your subscription is active, its plan and renewal dates. Payments are handled by the store: we never receive your card or bank details.
- Apple or Google share your email (or an Apple relay address) and name when you choose to sign in with them.
2. How we use information
- To provide Holy Hush: create your account, write and show your daily prayer, run the companion, save your journal, sync between web and phone.
- To personalise: match prayers and Scripture to your tradition, translation and what you asked prayer for.
- To keep people safe: automatically check companion messages for crisis signs and show emergency resources, and prevent abuse of the service.
- To handle subscriptions: unlocking Premium, renewals and cancellations.
- To communicate: sign-in codes, replies to your support messages, service updates, and, if you choose, prayer reminders.
- To improve Holy Hush: understand which features help, fix bugs, and measure our marketing. We use usage data for this, not the content of your prayers or conversations.
- To comply with law and protect our rights.
If you are in the European Economic Area or the UK, we rely on these legal bases: performing our contract with you (running the service), your consent (sensitive information, optional cookies, reminders), our legitimate interests (security, improving the service, measuring marketing, which we balance against your rights) and legal obligations.
3. The AI companion
The companion uses AI from two third-party providers, and the app asks for your permission before your first message is sent. Anthropic (Claude) writes the reply: it receives your messages in the conversation and the details needed to answer, such as your first name, tradition and what you asked prayer for. Under its commercial terms, Anthropic does not use this data to train its models. Voyage AI finds matching Bible verses: it receives the text of your message. Bible verses shown in replies are loaded from our own Bible database, not written by the AI.
AI replies can be wrong. They are not pastoral, medical, legal or professional advice. You can turn the companion off in Settings and keep using the Bible, prayers and journal. Conversations are stored encrypted so you can read them later, and you can delete them at any time.
4. Who we share information with
We do not sell your personal information. We share it only with service providers that process it for us under contract, to run Holy Hush:
| Provider | Purpose | Information involved |
|---|---|---|
| Anthropic | Generates prayers and companion replies from what you write | Your messages, prayer requests, quiz answers needed for the reply |
| Voyage AI | Finds Bible verses that match a companion message (AI text search) | The text of the message you send to the companion |
| ElevenLabs | Turns prayer text into audio, including your personal prayers when you choose to listen | Prayer text |
| Apple (App Store), Google (Google Play) and RevenueCat | In-app purchases and subscription status | Purchase and subscription records, an app user id |
| PostHog | Product analytics: which features are used, where people drop off | Usage events, device and browser data, approximate location from IP. Never your prayers, intentions, notes or chats |
| Resend | Sending sign-in codes and service emails | Email address, email content |
| Vercel | Hosting the website and API | Request data, logs |
| Database host | Storing your account and content | Everything stored in your account |
| Cloudflare R2 | Storing prayer audio files | Audio files (not linked to you for library prayers) |
| Expo (push notifications) | Delivering reminders to your phone | A device push token |
Advertising. If we run ads, our website may use advertising pixels (such as Meta or TikTok) that learn only that someone visited the site, signed up or started a subscription, so we can measure campaigns. They never receive your quiz answers, prayers, intentions, notes or conversations, and the mobile app does not track you across other companies' apps. Some US state laws may call this "sharing"; you can opt out at any time by contacting us.
We may also disclose information if required by law, to protect someone's safety, or as part of a merger or sale of the service (in which case this policy continues to apply to your information).
5. Cookies
We use necessary cookies to keep you signed in and to remember your quiz progress, and analytics cookies (PostHog) to understand how the site is used. Analytics never record what you type, and session recordings, if used, hide all text on the page. Where the law requires it, we ask before setting non-essential cookies. You can also block cookies in your browser settings.
6. How long we keep information
- Your account and content: for as long as your account is open.
- After you delete your account: removed within 30 days, and from backups within a further 30 days.
- Payment and tax records: as long as the law requires (often up to 7 years).
- Unfinished quiz sessions without an account: deleted after 90 days.
- Analytics data: up to 2 years, then deleted or anonymised.
7. Your choices and rights
- Access and export: download your data from Settings, or ask us.
- Correct: edit your profile in Settings.
- Delete: delete individual items, or your whole account in Settings or on our delete account page.
- Withdraw consent and turn things off: the AI companion, reminders and marketing emails can each be turned off.
- Object or restrict: ask us to stop certain processing, such as analytics.
Depending on where you live (for example the EEA, UK, California and other US states) you have rights to access, correct, delete and port your information, to object to or restrict processing, to opt out of the sale or sharing of personal information and of targeted advertising, and to limit the use of sensitive information. We honour these requests for all users. We will not treat you differently for using them. To make a request, email holyhush@fibipals.com from the address on your account; we may need to verify your identity. You may also complain to your local data protection authority.
8. Security
We protect information with encryption in transit (HTTPS), encryption of conversations at rest, access controls and limited staff access. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
9. International transfers
We and our providers are mainly based in the United States, so your information may be processed there. Where the law requires, we use safeguards such as the European Commission's Standard Contractual Clauses.
10. Children
Holy Hush is not for children under 13 (or the higher minimum age in your country). We do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.
11. If you are in crisis
Holy Hush is not an emergency service. If you are thinking about harming yourself, call or text 988 (Suicide & Crisis Lifeline, US) or call 911. Outside the US, contact your local emergency number.
12. Changes to this policy
We will post any changes here and update the date above. If a change is significant, we will tell you by email or in the app before it takes effect.
13. Contact
Fibipals, an independent developer. Email: holyhush@fibipals.com.