Your space.
Your information.

This policy covers Everbelong and Light to Keep, operated by Bits & Shovels.

On your device

Reading preferences, bookmarks, study progress, conversations and saved prints are stored on your device. There is no account registration, advertising, cross-app tracking or third-party analytics. Device backups are controlled by your Apple settings.

Prayers and shared lights

In Light to Keep, names and prayer words stay on your device and are never sent to our service or AI provider. If you share a light, respond to one, or mark a prayer or reflection with map sharing enabled, we store a random request identifier, your installation hash, the daily verse date and artwork choice, an optional rounded geographic area and radius (or a city selected in an older version), a timestamp and the connection between shared lights. Map sharing is on by default and requires your location permission. You can turn it off and keep a reflection private. The app requests approximate, foreground-only location, rounds it to a 0.02-degree grid on your device before saving or sending it, and the server rounds it again. We do not store or publish your precise location or a location history from background tracking. Lights cover at least roughly one mile, with larger areas when the device supplies less accurate locations. The map shows anonymous totals for these broad areas; a shared link shows its verse and the number of lights in that chain. Anyone with the link can view it or pass it on. Your geographic area is not shown on the shared page. A recipient contributes their own area only when they choose to receive or reflect, permit location, and enable map sharing in the app or on the web. The browser rounds coordinates before sending them, just as the app does. The browser map uses OpenStreetMap tiles; that provider receives your network address and the approximate map viewport, but not your private light link. Opening a shared link does not disclose their location to its sender.

Browser responses use a random, essential HTTP-only cookie, valid for 90 days, to remember and remove your response. You can remove it from the original page or Your browser lights while that cookie remains. App users can remove each prayer and its link, or use Delete my app data. Map glows fade with a three-day half-life and disappear after fourteen days without renewal. Daily contributions build brightness, capped at one contribution per installation or browser, area, and UTC day. Saved moments and shared-light records stay until removed. Other people’s responses are independent and remain when you remove yours. Messages you add in your sharing app go to the recipient through that app; we do not receive them.

When you use AI

After you consent, selected verses and artwork styles, or your questions and recent conversation, are sent over HTTPS through our server to OpenAI. Questions may contain sensitive information such as religious beliefs or personal identity. Do not send information you do not want processed by this provider. We do not store conversation content on our server.

OpenAI may retain API inputs and outputs for abuse monitoring, generally up to 30 days, subject to legal and safety exceptions. API data is not used for model training by default. See OpenAI’s privacy policy and API data controls.

Service records

We store hashed installation identifiers and session credentials to authenticate requests. Usage counters enforce free and paid allowances. Custom artwork is private to your installation and is removed from the server within 25 hours. Daily artwork is generated in advance from public scripture, is shared by all readers and is retained as daily editions. Private prayers are never used for artwork generation. Sessions expire after 90 days. Daily counters are retained for up to two days; monthly counters through the end of the current month. Network addresses are processed by our hosting and security providers and hashed for abuse limits. Records are used for app functionality, security and cost control, not advertising.

Purchases

Apple handles payments. We verify signed subscription transactions and process product identifiers, expiration dates and transaction identifiers to provide paid access and honor refunds. We never receive your payment card details. Refund and revocation records are retained to prevent reuse of revoked purchases.

Support

If you contact us, we store the email address and message you provide for up to 90 days to handle your request. Avoid sending private conversations unless needed. You may request access or deletion through support.

Your choices

You can revoke AI consent in Settings and continue using offline features. “Delete my app data” removes your local history, prayers, received lights, saved prints, your shared-light links and map contributions, and server sessions and custom artwork; an internet connection is needed for server deletion. Anonymous abuse counters expire on the schedule above. Delete the app to remove its local storage. Cancel subscriptions separately in your Apple account. Content you explicitly export or share is controlled by you and the receiving app.

Children and availability

These apps are intended for people aged 13 and older and are not crisis or medical services. Data may be processed in the United States and other countries where our providers operate. Contact us through support about privacy questions or requests.