Last updated November 14, 2026

Privacy Policy

RhemaNote is built local first: your spiritual life belongs on your device, not on our servers. This policy explains, in plain words, what stays on your phone, what is sent and to whom, and the choices you have. The short version: we run no user database, no ads, and no trackers, and the most sensitive things you tell the app never leave your phone.

1. What stays on your device

• Your private answers. The onboarding questions about what you are wrestling with are summarized by Apple's on device intelligence. Neither the answers nor the summary are ever transmitted, to us or to anyone.
• Your content. Every sermon, transcript, study, note, prayer, saved verse, and devotional plan is stored in the app's local database on your device. RhemaNote has no accounts and keeps no cloud copy of your content.
• All audio. Recordings and uploaded audio are transcribed by a neural speech model running on your iPhone. Audio files are stored on your device only and are never uploaded.
• Scripture reading. The Bible ships inside the app, so verse lookups, reading, and search happen entirely on device and are not observed by anyone.

2. What is sent, and to whom

A few narrow things leave your device, each only when you take the action:

• Illuminating a sermon or creating a devotional. The sermon text, its title, and four safe profile fields (season, faith priorities, growth goal, and time horizon) are sent through our relay server to Anthropic's Claude API to generate the study and devotional content. Your private answers and their summary are never included in these requests.
• Asking about a passage. The passage and your question are sent through our relay to Anthropic's Claude API to generate the answer.
• Credits. The app creates a random identifier on your device, not linked to your name, email, or Apple Account. Our relay stores that identifier with your credit balance and, when you buy a pack, the App Store transaction ID, so purchases are applied once and the balance survives reinstalling the app.
• Importing a YouTube link. The video URL is sent through our relay to a transcript provider (Supadata) to fetch the video's public captions.
• Feedback and waitlist. If you send feedback or join the waitlist, the email address and message you type are delivered to our inbox by an email provider (Resend), along with a random per install device identifier so we can tell repeat reports apart. We use them only to reply and to announce the launch, never for marketing lists we did not describe.

3. Service providers

We use a small set of processors, each for one job:

• Anthropic (AI processing of sermon text). Requests are sent for processing, not used by us to build profiles.
• Supadata (public YouTube captions).
• Vercel (hosts our relay server and this site).
• Upstash (stores the anonymous identifier and credit balance for our relay).
• Resend (delivers feedback and waitlist email).
• Apple (App Store distribution and payment processing for credit packs, under Apple's own privacy terms).

Our relay server holds the API keys and forwards requests. It does not store your sermons, studies, questions, or profile fields. The only thing it keeps is the anonymous identifier, your credit balance, and purchase transaction IDs.

4. What we do not do

• No selling or sharing of personal data. Ever.
• No advertising, ad networks, or cross app tracking.
• No third party analytics SDKs inside the app.
• No accounts, passwords, or server side user profiles.
• This website sets no cookies.

5. Your choices and rights

• Delete everything: your data lives on your device, so deleting the app deletes your data. There is no server copy to chase.
• Microphone and camera permissions are optional and only requested for recording and scanning; both can be revoked any time in iOS Settings.
• Email: ask us to delete a waitlist or feedback email and we will, promptly.
• If you live somewhere with specific privacy rights (for example the EU/EEA, UK, or California), the rights to access, correct, and delete are easy here: the personal data we hold is at most the email you sent us. Write to us and we will honor the request without you needing to cite a statute.

6. Children

RhemaNote is not directed at children under 13, and we do not knowingly collect personal information from them. The app runs without any account, so no child can create a profile with us. If you believe a child has emailed us, tell us and we will delete it.

7. Security

Everything sent off device travels over HTTPS. API keys live only on the server side. Your on device data is protected by iOS's own encryption and your device passcode. No system is perfect, but our best security decision is structural: data we never collect is data no one can breach.

8. Changes

If this policy changes, the date at the top changes with it, and material changes will be called out in the app's release notes. Continued use after a change means acceptance.

9. Contact

Questions or requests: hello@rhemanote.app. We answer.