Privacy Policy

Effective date: September 25, 2026

Two Sparrows: Bible Widget ("Two Sparrows" or "the App") is developed and published by Valerii Loveiko ("we", "us"). This policy explains what the App keeps on your device, what it sends to outside services and why, how long anything is kept, and the choices you have.

Summary: No account, no name, no email. Your choices, saved verses and settings stay on your device. If you type or say what's on your heart and allow AI matching, the text goes through our server to an AI service that only picks verse references from the App's library; we do not store it. Purchases are handled by Apple and RevenueCat under a random ID. No ads, no analytics or tracking SDKs, no selling of data.

1. Data stored only on your device

We cannot see this data. Your device backups may include it, depending on your Apple settings. Deleting the App deletes it.

2. Data sent to outside services

2.1 Finding a verse in your own words (optional)

"Tell me in your own words" is optional: you can always choose a feeling instead. Nothing you write leaves your iPhone until you allow it. Before the first request, the App asks "Before we look for your verse" and explains where your words go. If you choose "Find on my iPhone instead", verses are matched on your device and nothing is sent. You can change this at any time in Settings → "How Two Sparrows works" → "Use AI to match my words" (off means on-device matching only), or hide the feature entirely with "Scripture only — no AI matching".

When you have allowed it, the App sends to our server (a Cloudflare Worker): your text (up to 500 characters), the translation code, your device's language and region setting, the App version and the App's random purchase ID (see 2.3). Our server passes only your text to DeepSeek, an AI service operated from the People's Republic of China, with instructions to answer with verse and prayer IDs from the App's library. The AI never writes Scripture, prayers or advice; every ID is checked against the library, and the words you see come from the Bible text in the App. DeepSeek processes the text under its own terms and privacy policy. If our server or DeepSeek is unavailable, the App picks verses on your device instead.

Our server does not store or log your text. It logs only the length of the text, the feeling category chosen and whether the AI answered, without your purchase ID.

The App first checks your words on your device. If they suggest you may be in danger, nothing is sent: the App shows the 988 Suicide & Crisis Lifeline above verses chosen on your device. This check is not recorded or sent anywhere.

Speaking instead of typing: speech is turned into text by Apple's speech recognition, on your iPhone when it supports on-device recognition; otherwise Apple processes the audio under Apple's privacy policy. The App keeps no recording, and only the resulting text is used as described above.

2.2 Listening to a verse or prayer

When you tap Listen and the recording is not already on your device, the App downloads it from our server. The request contains the verse or prayer ID, the voice, the translation code, the App version and the App's random purchase ID (used to confirm that you subscribe). Recordings are made from the public-domain text with a synthetic voice (Google Gemini text-to-speech). Only the library text is sent to Google, never anything about you.

2.3 Purchases

Subscriptions are processed by Apple; we never see your name or payment details. The App uses RevenueCat to know whether your subscription is active. RevenueCat creates a random ID for your installation of the App and receives purchase information (product, dates, trial and renewal status) and technical details such as device model, iOS version, App version and region. Our server sends that random ID to RevenueCat to check whether a subscription is active, so paid features like on-demand recordings are served only to subscribers. Apple and RevenueCat process this data under their own privacy policies.

2.4 Our server

Cloudflare runs our server. To protect it from abuse, the server keeps daily request counters keyed by the random purchase ID and by IP address, and a short cache of whether a purchase ID has an active subscription. Counters are deleted after about two days; cache entries within about a week after they expire. Cloudflare's own service logs are kept for a few days. We do not use IP addresses to identify you or your location.

2.5 Sharing a verse

"Share this verse" makes the picture on your device. It leaves your device only through the share sheet, to the app or person you choose. "Save to Photos" asks for permission to add the picture to your photo library; the App cannot read your photos. "Send to someone" adds a line you choose and, unless you switch it off, a link to Two Sparrows on the App Store; nothing identifies you in it.

3. Notifications

If you allow them, the evening prayer reminder is scheduled on your device at the time you choose. No push server is used, and there are no marketing notifications.

4. At a glance

WhatGoes toWhyKept
Your own words (only if you allow it)Our server → DeepSeekPick verse referencesNot stored by us; DeepSeek under its terms
Random purchase IDRevenueCat, our serverSubscription status, abuse limitsRevenueCat under its policy; our server ≈ 2–7 days
Purchase historyApple, RevenueCatSubscriptionUnder Apple's and RevenueCat's policies
IP addressCloudflare (our server)Deliver requests, abuse limits≈ 2 days (counters), a few days (logs)
Speech audioOn device, or AppleTurn speech into textNot kept by the App
Settings, saved verses, progressYour device onlyThe App and widgetsUntil you delete the App

5. What we do not do

6. Children

The App is not directed to children under 13, and we do not knowingly collect personal information from them.

7. Your choices and rights

Depending on where you live (for example the EU, UK or California), you may have rights to access, correct, delete or object to processing of your personal data. We process the limited data above to provide the App you asked for (the own-words feature only when you use it) and to protect our server from abuse. We do not sell or share personal data as those laws define it. Data may be processed in the United States (Cloudflare, RevenueCat, Google) and in China (DeepSeek, only when you use your own words).

8. Changes and contact

We will update this page if the App's data practices change and change the effective date above. Questions or requests: sergejkar@gmail.com.

Two Sparrows: Bible Widget · Valerii Loveiko · sergejkar@gmail.com