Privacy notice

Reading and private study

Reading, topic search, downloaded context, daily meditations and personal notes work without an account. Preferences, bookmarks, study sessions, notes and saved AI conversations are stored on your device. Verbum does not automatically upload your journal. Device backups and exports are controlled by your device settings and the destination you choose.

Sign in with Apple

An account is needed for AI assistance. Apple handles sign-in; Verbum does not receive your Apple password and does not request your name or email from Apple. The service stores a pseudonymous account identifier, an account token used to associate purchases, a session identifier and encrypted Apple authorization information needed for account deletion.

What an AI request shares

Before your first AI request, the app asks you to allow sharing. Your question, the supplied Bible text, language, study method and step, optional life area, editorial context and up to two earlier question/answer exchanges are sent through Verbum’s Cloudflare service to OpenAI. Private study notes are not automatically included. Personal information you write in your question is part of the request you choose to send.

The Verbum database does not store question or answer bodies. Saved conversations remain on your device, and server request-body logging is disabled. Text-study requests use OpenAI’s response-storage-disabled setting. OpenAI documents separate abuse-monitoring retention, generally up to 30 days under standard controls, plus caching and applicable exceptions. OpenAI states that API data is not used for training by default unless the customer opts in; provider processing is not a promise of zero retention.

Subscriptions, security and retention

Apple handles payments. Verbum checks subscription information to authorize AI and keeps account-linked request identifiers, usage counts and timestamps to enforce allowances and recover failed requests. Verbum does not receive payment card details from Apple.

Account and encrypted authorization records remain while your account exists. Usage and processed-request metadata expire after approximately 120 days. Hashed network-address buckets used for security expire after about one day; expired sign-in challenges are cleaned up automatically. Providers process network information to operate their services. Verbum uses no advertising or cross-app tracking.

Your choices

You can decline AI sharing and keep using local study features. Export or erase local notes and conversations in the app. Signing out removes saved login credentials from the app; it does not delete the server account.

Use Settings → Account → Delete Account to request server-account deletion and revocation of Apple authorization. A temporary Apple revocation failure is reported so you can retry. Usage records may remain until their retention period ends to prevent allowance abuse. Server-account deletion leaves your local journal in place.

Deleting an account does not cancel an Apple subscription. Manage or cancel it through Apple’s subscription settings.

Contact and providers

For privacy or support requests, contact the operator using the email below. If you email us, we receive your email address and the content you choose to send and use them to respond. Cloudflare, OpenAI and Apple operate under their respective service terms and privacy practices.

Visual study and illustrations

Verbum Visual adds maps, book-specific journeys and AI-generated illustrations. Maps use bundled Bible-place data and Apple MapKit; the app does not request your device location. Geographic coverage and disputed identifications are shown in the app.

With your permission, the selected Bible passage, reading language, edition, illustration style and the description you enter are sent through Cloudflare to OpenAI’s Image API. Private journal notes and your photo library are not sent. Artistic details may be imagined. The Image API has provider-specific retention controls; the text assistant’s store:false option is not a promise of zero image retention.

A generated image is encrypted in Verbum’s database temporarily for delivery recovery. It can be recovered for one hour; the encrypted copy is deleted when the app confirms saving, or at the next hourly cleanup after expiry (normally within two hours of generation). Prompts and descriptions are not stored in the server database or request logs. Request identifiers, per-account attempt counts, credit reservations and delivery metadata are retained for approximately 120 days. Failed or expired undelivered images release the personal credit; attempt limits still apply.

Saved images, their Scripture reference, edition, language, style and description remain on your device after cancellation. Shared image exports include the Scripture reference and an AI-generated label. Delete local data in Settings to erase the local gallery; server-account deletion removes temporary server image copies. Device backups and destinations you share to have their own retention.

Purchase restoration

To restore subscriptions across installations, Verbum stores the original Apple transaction identifier, latest transaction identifier, plan, Apple environment, verified status, expiry and verification time linked to your pseudonymous account. Sign-in and last-seen times support account recovery and service monitoring. Signed transaction payloads, passwords and payment card details are not stored in this purchase register. Purchase records remain while the server account exists and are removed on account deletion. Restoration rechecks Apple; remaining answer credits do not extend an expired subscription.

AI study plans

With your explicit sharing choice, Verbum sends your study-goal description, chosen day count, language, edition and relevant Bible passages to the OpenAI API to prepare a plan. Personal journal notes are not attached. Goals may reveal personal or religious interests; include only details you choose to share.

One completed AI plan uses one answer from the existing monthly allowance. Cloudflare makes an encrypted completed result available for recovery for one hour; it is cleared after the app confirms local saving or by the next hourly cleanup after expiry, within two hours of completion. Failed or expired undelivered plans restore that answer once. Request identifiers, a content fingerprint and delivery state are removed by the hourly cleanup after 24 hours, within 25 hours, and content-free usage records follow the existing retention policy. Saved plans and meditations stay in the device journal.

Calendar and encyclopedia sources

The Catholic calendar, devotional periods and short saint introductions are bundled in the app. Saint photographs and artwork, and full Wikipedia articles, load from Wikimedia when viewed. Wikimedia receives your network address and the public image or article requested. Your private notes are not sent to Wikimedia. The app displays source links and image licences.