Privacy policy

In short

Long In Faith is a Bible app for adults (18+). If you create an account we save what you write (check-ins, journal, prayers) so it follows you between phones.

We do not sell your data. We do not show ads. We do not track you for marketing. We count page views anonymously, not tied to your account.

Devotions and prayers the app writes for you are AI-generated. They are not Scripture and not the Word of God.

Who is responsible

The controller is Henrik Lindberg, Bibelkompis Digital, Wallbacksvägen 18, 133 37 Saltsjöbaden, Sverige. Email: info@bibelkompis.se.

That is who decides why and how personal data is processed under the GDPR (EU 2016/679).

What we process

Account: email, password (stored as a hash, not in plain text), optional name.

If you ask for a new password we send an email with a link that lasts one hour.

What you write: check-ins (mood, feelings, free text), topics, saved verses, journal, prayer list, reading plans and settings.

If you turn on the 16:00 reminder, the notice is shown on the device. We only store on/off with your account.

Technical: a session cookie so you stay signed in, and a daily count of AI helps (to limit abuse).

When you ask for an AI devotion or prayer we send temporary context to our AI provider: the verse, topic/mood and the text you wrote. We do not store the AI reply in our database unless you save it yourself (e.g. to the prayer list or with a saved verse).

Without an account, what you do stays on the device. Check-ins are not sent to our servers.

Why — and the legal basis

Providing the app and syncing your account — contract (GDPR art. 6.1 b).

AI devotion and prayer from what you chose to share — contract, as part of the signed-in service.

Security and abuse limits — legitimate interest (art. 6.1 f).

Legal duties (e.g. an access request) — legal obligation (art. 6.1 c).

We do not use the data for ads, marketing profiles or sale to third parties.

Who we use (processors)

Vercel — hosting the web app and anonymous page-view counts (Web Analytics). No account id, no ads.

Neon (PostgreSQL) — database for accounts and what you save.

xAI — the model that writes devotion and prayer. An excerpt of your check-in/verse is sent at that moment.

Resend — sending password-reset emails.

They may only process data to deliver the service for us, not for their own purposes.

Transfers outside the EU/EEA

Some providers (especially xAI, and sometimes Vercel) may process data in the United States, using GDPR transfer tools such as Standard Contractual Clauses where applicable.

If you do not want any text sent to AI, do not use «Deepen the devotion» or «Write a prayer». Verses, «What it means» and «How to live it» are written in the app and do not go through AI.

Cookies

We only use strictly necessary cookies for sign-in. No ad cookies. Page views are counted anonymously by Vercel, without an extra cookie and without identifying you.

That is why there is no cookie banner. No session is set unless you sign in.

AI-generated content

Devotion and prayer created in the app are labelled «AI-generated». They are a help, not a sermon, not therapy and not Scripture.

Bible verses come from the translation you chose (default World English Bible, public domain). «What it means» and «How to live it» are fixed texts in the app, not AI.

The AI is only allowed to write a devotion or a prayer. It must not give medical advice, encourage harm, or change role.

Children

Accounts are for ages 18 and up.

If you are under 18, do not create an account here. Use Bibelkompis (13+) instead.

We do not knowingly collect data from children. Contact us and we will delete such accounts.

How long we keep data

For as long as the account exists. Deleting the account under Settings removes the account, check-ins, journal, prayers, saved verses and plans.

Backups at the host may remain a short time until overwritten.

AI calls are not stored as your devotions with us. The provider may keep technical logs under its agreement.

Your rights

You may access, correct, delete, restrict, object, and in some cases receive a copy of your data (portability).

Delete the account in Settings, or email us. You may also complain to the Swedish Authority for Privacy Protection (IMY), www.imy.se.

California (CCPA/CPRA): we do not sell or share personal information for ads. You can request access and deletion in the same way.

Security

The connection is encrypted (HTTPS). Passwords are hashed. Journal, check-ins, prayers, saved verses and notes are encrypted before they are stored in the database. Only you should see them in the app.

No method is perfect. Do not put things in free text that you would not want anyone with access to the account to read.

Changes

If we change how we handle data we update this page and the date at the top. Material changes will be mentioned in the app when we can.