Blessie

Privacy Policy

Last updated 18 September 2026

This policy explains what the Blessie app ("Blessie", "we", "us") does with your data. The controller is Heaven Factories s.r.o., company ID 24360431, Dlouhá 3403/2b, Moravská Ostrava, 702 00 Ostrava, Czech Republic. Write to [email protected] with any question about it.

The short version

  • Blessie has no account. It never asks for an email, a phone number or a password.
  • Your saved verses, reflections, conversations, streak and settings live on your phone. We hold no copy.
  • When you start a devotional, a prayer or a verse explanation, your message and a little context go through our server to OpenAI, with storage turned off. Nothing is sent until you do.
  • We collect usage and crash data under a random identifier so we can fix bugs. It carries no verse, note or name.
  • If you allow tracking in Apple's prompt, we measure which ad or link brought you to Blessie, using AppsFlyer and your device's advertising identifier. Decline and none of that happens.
  • We do not show ads inside Blessie and we never use what you write to train models.

What stays on your phone

The Bible itself is bundled with the app, so reading it sends nothing anywhere. Verses you save, reflections you write, every conversation with Blessie including the daily devotionals and prayers, your streak and goal, the answers you gave during onboarding (your first name, how you feel, your tradition, the topics you chose) and your settings are stored on the phone. Deleting the app deletes them.

Reminders are local notifications scheduled on the phone. The daily verse in a reminder or a widget is picked on the device from the app's own list and is not fetched from anywhere.

Talking to Blessie

The daily devotional, the daily prayer, and any verse explanation you ask for are written by a language model (OpenAI) through a server we run. This is the only part of the app that sends what you write off the phone, and only when you use it.

  • What is sent: your message, the earlier turns of that conversation, the verse you are talking about, and the context Blessie needs to answer well: your first name, the topics you chose, the practice and goal you told us about, how you said you feel today, today's verse, your language and today's date.
  • What is not sent: your other conversations, your saved verses, your reflections, and anything else on the phone.

Requests go to OpenAI with storage turned off, so OpenAI does not keep them and does not use them to train models. To check whether you have an active trial or Blessie Premium, the app signs in to our server anonymously the first time you pray with Blessie or ask it to explain a verse. That gives you a random id. It carries no name, email or device fingerprint. Our server keeps that id. It does not store your messages or Blessie's replies.

Usage and crash data

To see which screens confuse people and which builds crash, the app sends product analytics and error reports. These events carry a random device identifier, the screen name, the onboarding step, the app version, the device model and OS version, and a stack trace when something breaks. They carry no verse, note or name.

Attribution and the tracking prompt

On iPhone, Blessie shows Apple's App Tracking Transparency prompt once. It asks whether we may use your device's advertising identifier to see which ad or link brought you to the app. This is the only tracking Blessie does, and it happens only if you tap Allow.

  • If you allow it: AppsFlyer, our attribution provider, receives your advertising identifier, the campaign or link you came from, install and app-open events, your device model and OS, and coarse location worked out from your IP. We use this only to measure our marketing, and it may be matched with the ad network that referred you.
  • If you decline: no advertising identifier and no attribution data leave the phone. Blessie works exactly the same.
  • Never included: your verses, notes, conversations, streak or your answers about faith. None of that ever goes to AppsFlyer or any advertising partner.

You can change your mind any time in iOS Settings, Privacy & Security, Tracking.

Purchases

Blessie Premium is billed by Apple or Google, who are the sellers of record. They tell us that a receipt is valid. They do not give us your card number, address or billing details. We keep the receipt and the same random id so your subscription survives a reinstall and so Blessie knows what to unlock. See the subscription terms.

Permissions

Blessie asks for notifications only when you turn a reminder on. It does not ask for the camera, contacts, precise location or photos. On iPhone it shows Apple's tracking prompt once (see Attribution above); if you decline, nothing is tracked. Widgets read the verse plan the app writes into a shared container on the phone; they make no network requests.

Who processes data for us

  • Supabase: The relay for the daily prayer and verse explanations. A random anonymous user id the app creates the first time you pray with Blessie or ask it to explain a verse. No name, no email, no verses or notes. Processed in EU servers.
  • OpenAI: Writes the devotional, the prayer and the verse explanations. What you type to Blessie, the verse you are talking about, and the context it needs to answer well: your first name, the topics you chose, how you said you feel today, and today’s date. Sent through our server with storage turned off on the OpenAI API, which OpenAI does not use for training. Processed in United States, under the EU Standard Contractual Clauses.
  • PostHog: Product analytics and crash reports. Screen names, onboarding steps, app version, device model and OS version, and error stack traces, tied to a random device identifier. Processed in EU servers (eu.i.posthog.com).
  • AppsFlyer: Attribution and install measurement — only if you allow tracking. If you allow tracking in the iOS prompt: your device’s advertising identifier, the ad or link that brought you to Blessie, install and app-open events, device model, OS and coarse location from your IP. If you decline, none of this is collected. Never any verse, note or your answers about faith. Processed in United States, under the EU Standard Contractual Clauses.
  • RevenueCat: Subscription receipts. The same random user id and the purchase receipt Apple or Google issues, so your subscription works across reinstalls and so Blessie knows what to unlock. Processed in United States, under the EU Standard Contractual Clauses.
  • Apple / Google: Payments and app delivery. Your purchase, billing and refund data. They are the seller of record; we never see your card details. Processed in Per Apple's and Google's own privacy policies.

Each of them is bound by a data processing agreement and may use the data only to provide the service to us.

What we never do

  • We do not sell your data for money, and we show no ads inside Blessie.
  • We do not use what you write to Blessie to train models, and our providers are contractually barred from doing so.
  • We track which ad brought you in only if you allow it, and never what you read, save, write or pray.
  • We do not pass your answers about faith to anyone. They stay on the phone and are only ever sent, in the context above, to write your own devotional or reply, never to analytics or advertising partners.

A word on faith data

What you tell Blessie about your faith, your tradition and how you feel toward God is personal, and under the GDPR it counts as a special category of data. We process it only because you chose to give it to a companion app for exactly that purpose, and only in the ways described here. It is never shared with analytics or advertising partners. You can leave every such question unanswered during onboarding and the app still works.

  • Performing our contract with you: running the app, writing the devotional and replies you ask for, and unlocking a subscription you bought.
  • Your explicit consent: for the answers about your faith and feelings that you choose to give, and, separately, for attribution through Apple's tracking prompt. You can skip or withdraw either at any time.
  • Our legitimate interest: keeping the app stable and secure, and understanding in aggregate how it is used.
  • Legal obligation: keeping the records that tax and accounting law requires.

How long we keep it

  • Everything on the phone: until you delete the app.
  • The anonymous relay id: up to 12 months after the last use, then deleted.
  • Analytics and crash events: up to 12 months, then deleted.
  • Attribution data (only if you allowed tracking): kept by AppsFlyer per its retention policy, typically up to a few years, and deleted sooner if you withdraw consent and ask us.
  • Subscription receipts: while the subscription is active, plus the period tax law imposes on us.
  • Support mail: while your question is open, then up to 12 months in case you write again.

International transfers

The relay and analytics are processed on EU servers. OpenAI, RevenueCat and, if you allow tracking, AppsFlyer process data in the United States under the European Commission's Standard Contractual Clauses.

Your rights

Under the GDPR you may ask for access, correction, erasure, restriction and portability, and you may object to processing based on legitimate interest. For everything on the phone the fastest route is the phone itself: delete the app and it is gone. For what our servers hold, write to [email protected]. Be aware that the relay id is anonymous by design, so we may not be able to match a mail to any rows; we will tell you what we could do. If you are in the EEA or the UK, you may also complain to your national data protection authority.

If you are in the United States

We do not sell personal information for money. If you allow tracking in Apple's prompt, sharing your advertising identifier with AppsFlyer and the ad network that referred you may count as a "sale" or "share" under California and similar state laws. You opt out simply by declining the tracking prompt, or later in iOS Settings, Privacy & Security, Tracking. We never share your verses, notes, conversations or answers about faith with anyone for advertising. California residents may also exercise the access and deletion rights described above, and we will not treat you differently for using them.

Children

Blessie is not directed at children under 13, or under 16 where local law sets that age, and we do not knowingly collect their data. If you believe a child has used the app and something needs removing, write to us.

Security

Data on the phone is protected by the phone's own storage protection. Data in transit goes over TLS. No system is perfect. If a breach ever affects you, we will report it to the relevant authority within 72 hours and tell you directly where the law requires it.

Deleting your data

You can delete everything from inside the app. Blessie signs you in anonymously, with no email and no password, and Settings has a Delete my data option that erases what is on the phone and asks our server to remove the anonymous account and everything tied to it. Deleting the app also removes what is on the phone. Cancel Blessie Premium separately in your App Store or Google Play account settings, and write to [email protected] if you want us to confirm the server side is gone.

Changes

We post any change to this policy on this page and update the date above. We announce material changes in the app before they take effect.

Contact

Heaven Factories s.r.o., company ID 24360431, Dlouhá 3403/2b, Moravská Ostrava, 702 00 Ostrava, Czech Republic. [email protected]. A person reads every mail and answers within two business days.