Back to InSpiritInTruth

Privacy Policy

Last updated: 20 August 2026

InSpiritInTruth is a devotional app, and a devotional app works best when you can be honest in it. That means some of what you tell us is genuinely personal — what you are struggling with, what you are praying about, what you are carrying. This policy explains, in plain language, what we collect, why, who else touches it, and how to get it back or get rid of it.

The short version

  • We do not sell your personal information. Not to advertisers, not to anyone.
  • There are no ads in InSpiritInTruth, and no ad tracking.
  • What you write when you ask for a tailored devotional is used to write it — and then not kept. We store the devotional, not your words. It is not used to train anyone's AI model.
  • You can read, export, correct or permanently delete everything we hold about you, at any time.
  • The rest of this document is the detail behind those four statements.

Who we are

InSpiritInTruth is built and operated by For The Rest Of Us, a solutions studio based in Johannesburg, South Africa. In this policy "we", "us" and "our" mean For The Rest Of Us, and "the app" means the InSpiritInTruth mobile app together with this website at inspiritintruth.net.

We are the responsible party (under South Africa's Protection of Personal Information Act) and the data controller (under the UK and EU GDPR) for the information described here. For anything in this policy, write to legal@fortherestofus.app.

What we collect

We collect the following kinds of information, and only what we actually need. Most of it comes from using the app; the last one only applies if you give on our website.

  • Account information — your email address, and your name or display name if you give one. If you sign in with Apple or Google we receive a unique identifier and the email you choose to share, including Apple's private relay address if you opt to hide your real one. We never receive your Apple or Google password.
  • What you share for a tailored devotional — the words you write when you tell the app what you are going through, feeling, facing or curious about. This is the most sensitive thing you give us, and it is the one thing we deliberately do not keep. It has its own section below.
  • Your practice in the app — devotionals you read or save, verses you bookmark, notes and reflections you write, your streak, and the themes you explore.
  • Subscription records — whether your account has an active Premium subscription, so the app knows what to unlock. We never see or store your full card number, CVV, or bank details.
  • Technical information — device type, operating system version, app version, language and region, and your notification token if you turn notifications on. We use this to keep the app working, not to build a profile of you. We do not currently use any analytics or crash-reporting tools at all; if that changes, this page and our App Store privacy labels change with it.
  • Giving details — if you give on our website, your first name, surname and email address. We ask for a name so a receipt, a reply, or the email telling you where the kindness share went can address you as a person rather than an inbox. These are held by Paystack, our payment processor, not on our own servers. Giving is entirely optional and none of it is linked to your app account.

The sensitive part, treated as such

Two categories of what we hold are treated as special or sensitive personal information by law: information revealing your religious beliefs, and anything about your health — including mental and emotional health. Using a devotional app reveals the first. Writing “I am anxious about my marriage” or “I am grieving” reveals the second.

We handle this on the basis of your explicit consent, which you give by choosing to write it and asking for a devotional. You are never required to share anything to use the app: the weekly devotionals, the Bible reader, daily verses, bookmarks and notes all work without you telling us a single personal thing.

So we do not store it. Your words are used to write your devotional and are then discarded — they are not saved to your account, and there is no copy on our servers for anyone here to open, no copy to leak in a breach, and no copy we could be compelled to hand over. That is not a policy we promise to follow; it is the way the app is built. What we do keep about the request is deliberately shapeless: which feeling you tapped, how long you asked for, and how many characters you typed. None of it can reconstruct a word of what you said.

It is never published, never shown to another reader, never shared with any church or organisation, never sold, and never used to target you with anything.

The devotional that comes back is a different matter, because it is yours to keep: it is saved to your library so you can read it again, and it stays until you delete it. It is private to your account. Deleting it from the app removes it from our systems.

One honest limit: to write your devotional at all, your words have to reach the model that writes it. That journey is described in the next section.

How we use your information

  • To create your account, sign you in and keep it secure.
  • To write tailored devotionals from what you share, and to show the finished devotionals to you again later in your library. What you wrote to get there is not retained.
  • To keep your bookmarks, notes, plans and streak in sync across your devices.
  • To send the notifications you have asked for, and nothing else. You choose whether to receive them and can turn them off at any time, in the app or in your device settings.
  • To keep your Premium subscription in step across your devices, and to honour cancellations.
  • To find and fix faults, understand which features are used, and make the app better.
  • To respond when you contact us for support.
  • To meet our legal obligations, including keeping financial records for the period the law requires.

The AI that writes your devotionals

Tailored devotionals are generated using Claude, a large language model provided by Anthropic. When you ask for one, the text you wrote is sent to Anthropic's API together with our instructions and the scripture references involved, and the devotional comes back to us and then to you.

Anthropic processes that text on our behalf as our service provider. Under our commercial terms with them, your text is not used to train their models. We do not use it to train any model either, and we do not sell or share it. Once the devotional comes back, we keep the devotional and discard what you wrote.

AI gets things wrong. Every devotional follows a fixed template and goes through an automated check — every verse is re-fetched from the Bible text, so scripture is never quoted from the model, and named claims and quote attributions are fact-checked. But no one here reads a tailored devotional before you do, and Scripture is always the first and governing source. If something reads as off, unbiblical, or simply wrong, please tell us at hello@fortherestofus.app — reports from readers are how this stays trustworthy.

A devotional is spiritual encouragement. It is not counselling, therapy, medical advice, or a substitute for a pastor, doctor or qualified mental-health professional. If you are in crisis or at risk of harm, please contact your local emergency services or a crisis line.

Who else processes your information

We keep this list short on purpose. Each of these is a service provider acting on our instructions, under contract, and none of them may use your information for their own purposes.

  • Supabase — accounts, authentication, and the database where your devotionals, notes, bookmarks and preferences are stored.
  • Anthropic — generates tailored devotionals from the text you share, as described above.
  • API.Bible and helloao — supply the Bible text you read. Passage requests are served without an account, and we do not send them anything that identifies you.
  • RevenueCat — manages Premium subscription status across platforms. We send it your account id, and your name and email address, so we can recognise your subscription and find your account if you contact us for help.
  • Paystack — processes gifts made on our website. Your first name, surname and email address are stored against a Paystack customer record so gifts, receipts and our kindness-report email can reach the right person; your card details go directly to Paystack. None of it reaches our own servers, and we keep no separate record of the gift. Paystack's own privacy terms govern what they hold.
  • Apple and Google — process subscription payments made through their stores under their own terms, and deliver push notifications.
  • Expo — delivers push notifications to your device.
  • We may also disclose information where the law genuinely requires it, to protect someone's safety, or to a buyer if the app is ever transferred — in which case this policy travels with it and we will tell you first.

What we never do

  • We never sell your personal information.
  • We never show you ads, and we do not use advertising or cross-site tracking technology.
  • We never share what you wrote about your own life with other users, churches, or organisations.
  • We never use your personal reflections to train AI models.
  • We never ask for your card details directly, and we cannot see them.

Where your information is kept

Your information is stored on servers operated by our providers, which are located outside South Africa — principally in the United States and the European Union. Our service providers are bound by contract to protect it to a standard consistent with POPIA and the GDPR, including standard contractual clauses where those apply.

Information is encrypted in transit and at rest. No system is perfectly secure, and we will not pretend otherwise, but we limit who can access what, and we will notify you and the relevant regulator without undue delay if a breach affects your information.

How long we keep it, and how to delete it

We keep your account information and your practice in the app for as long as your account exists. Delete your account and we remove your personal information from our live systems within 30 days, and from routine backups within 90 days.

Two exceptions: records of subscription payments are kept for as long as tax and financial law requires, and anonymised statistics that can no longer identify you may be retained. Gifts are not stored by us at all — those records live with Paystack.

You can delete your account from within the app. If you cannot reach it, email legal@fortherestofus.app from your account address and we will do it for you.

Children and young people

You need to be 18 or over to create an InSpiritInTruth account.

It is worth saying why we set it there, because a devotional app is not an obvious place to find an age limit. South African law requires a competent person's consent before anyone may process the personal information of a person under 18, and the most personal thing this app does is invite you to write about what you are actually going through so a devotional can be shaped around it. Accepting that from a child on the strength of a tick-box claiming a parent agreed would not be real consent. We would rather not collect it at all than pretend otherwise.

We do not knowingly collect information from anyone under 18. If you believe someone under 18 has given us information, contact legal@fortherestofus.app and we will delete it promptly.

None of this stops a young person reading scripture. A verse or a devotional that someone shares with them by link opens without an account, and we ask nothing of them to read it.

Your rights

Wherever you live, you can exercise all of the following with us. We do not charge for it and we will respond within 30 days.

  • Access — ask what we hold about you and get a copy.
  • Correction — fix anything inaccurate or incomplete.
  • Deletion — have your information erased, as described above.
  • Portability — receive your devotionals, notes and bookmarks in a machine-readable format.
  • Objection and restriction — object to a particular use, or ask us to pause it.
  • Withdraw consent — stop the tailored-devotional feature processing what you share, at any time, without affecting anything done before you withdrew.
  • To exercise any of these, email legal@fortherestofus.app.
  • If we do not resolve it, you may complain to the Information Regulator of South Africa (inforegulator.org.za), or to your local data protection authority if you are in the UK or EU.

Changes to this policy

When we change this policy we update the date at the top. If a change materially affects how we handle your information, we will tell you in the app or by email before it takes effect, and where the law requires it we will ask for your consent again.

Contact us

Questions, requests, or concerns about privacy: legal@fortherestofus.app. Anything else: hello@fortherestofus.app. A real person reads both.

For The Rest Of Us, Johannesburg, South Africa.