Privacy Policy

Reveal is a Bible reading and study app. This policy describes, in plain language, what data Reveal collects, how it is used, who processes it on our behalf, how long it is kept and how you can delete it. We do not run advertising, ad-tracking pixels, or third-party advertising networks in Reveal, and we do not sell your personal data.

We describe our security honestly: your content is stored in managed cloud infrastructure with encryption in transit and encryption at rest. It is not end-to-end encrypted, and a small number of authorized personnel can technically access stored records when required for operations, support, security, abuse investigation or legal compliance.

Reveal is owned and operated by Into Innovations, LLC ("Reveal," "we," "us"), registered in the State of Georgia, United States, and acting as the controller of the personal data described here. Contact: connect@jochanae.com.

• Account: email address, authentication identifiers, and account timestamps.
• Sign-in with Google or Apple: if you use social sign-in, we receive the identity information the provider returns (such as your email address, provider user ID and, where supplied, name and avatar). We do not receive your password.
• Profile: optional display name, handle, avatar image and bio. A handle or public profile you choose is visible to others.
• Preferences: reading, voice, theme, notification and feature settings.

• Reading positions, reading history and resume points.
• Highlights, bookmarks, notes, ink/handwritten note canvases and attachments.
• Vault items, collections, study baskets and saved references.
• Poems, sermons, sermon versions and snapshots, plans and study records.
• Deep Dive history and generated study material you save.

This material is private to your account unless you deliberately publish or share it (for example to a group board or a shared moment).

Selah is Reveal's reflection companion. When you are signed in, your Selah conversation history is stored in your account so that it is there when you return. Selah messages are retained until you delete the conversation or delete your account.

• Text you send to Selah, and the context you attach to it, is transmitted to third-party AI providers to generate a response. Providers used include Anthropic, OpenAI and Google models accessed through the Lovable AI Gateway. Provider handling is governed by their own terms; we do not control their internal processing.
• We do not use your private notes, Selah messages or ledger entries to train our own AI models, and we do not pass them to AI providers except in the request you initiate.
• User-initiated handoffs: some Deep Dive actions open an external service such as ChatGPT or Perplexity with the text you chose to send. Once you continue there, that service's privacy policy applies.
• AI usage telemetry: we log model, feature, token counts, cost and latency for AI requests so we can operate quotas, control abuse and manage cost.

Reveal is a general-audience app. Accounts are created and operated by adults or older users who can agree to our Terms; Reveal does not offer child accounts, child logins, or child-initiated purchases. Anyone may read Scripture in the public Reader without an account.

• Kids profiles are created by the account holder inside their own account. Each profile stores a first name or nickname, a reading tier (4–6, 7–9, 10–12), a colour, story progress and favorites.
• We ask for a first name or nickname rather than a full legal name, and the interface says so.
• Kids profile data is stored under the account holder's account, is controlled and deletable by them, and is not used for advertising, profiling or AI model training.
• Kids Lock is an optional device containment feature, not a separate login or a security boundary. It keeps the app on Kids screens until a grown-up enters the PIN. It does not protect against device-level access or a determined adult user.
• Adults may use Kids content themselves; nothing about Kids implies a child user.

We do not knowingly collect personal information directly from children. If you believe a child submitted information to us directly, contact us and we will remove it.

If you join or lead a group, or post to community and board surfaces, that content is shared beyond your private account:

• Group membership, roles and leader permissions are visible to group leaders.
• Public Board content — announcements, teachings, flyers, media and group profile information — is visible to anyone with the link when the board is published.
• Community posts, comments, prayer and encouragement submissions, RSVPs, reactions and shared moments are visible according to the surface you post to.
• Microphone and audio: if you record audio testimony or an audio attachment, your browser asks for microphone permission and the resulting recording is uploaded and stored, then shown to the audience of the surface you posted to.
• Live gatherings record participation state and shared reading position while active.

The Steward Ledger lets you privately record contributions such as tithes, offerings and dues. Entries are private to your account and are not shared with your group, published, used for advertising, or used to train AI models. They are stored in our managed database with encryption in transit and at rest, not end-to-end encrypted. Reveal does not connect to your bank or brokerage.

• Reveal Premium is billed through Stripe. Stripe collects and processes your payment details directly; we do not receive or store full card numbers.
• We store subscription records — status, plan, period dates, customer and subscription identifiers, and payment-failure events — so we can grant access, show billing state and send billing notifications.
• Group giving: where a group has configured its own payment links or a Stripe Connect payout destination, donations flow to that group's payment provider under that provider's terms, and we store the resulting configuration and reconciliation records.
• Where a group participates in Ministry Partnership, we store attribution and accrual records associating qualifying paid Premium months with that partner.

• Push notifications: if you enable them, we store your browser or device push subscription and delivery/read events for the notifications we send.
• Email: we send account, billing and (if you opt in) digest emails, and we log send, delivery, suppression and unsubscribe state.

Reveal uses cookies and browser local/session storage for sign-in sessions, theme and reading preferences, Kids Lock state, offline caching and dismissed prompts. We do not use advertising cookies or third-party ad trackers. Reveal also registers a service worker to support offline reading and installed-app behaviour.

• Standard server and hosting logs (IP address, user agent, timestamp, request path) used for security, abuse prevention and debugging.
• Client error reports, including error message, stack trace, route and — when you are signed in — your account identifier, so we can fix crashes.
• Aggregate feature and AI usage counters used for quotas and capacity planning.

We rely on the following processors and services to operate Reveal:

• Supabase — database, authentication, storage and server functions.
• Cloudflare and Lovable — hosting, edge delivery and deployment.
• Stripe (including Stripe Connect) — payments, subscriptions and group payouts.
• Anthropic, OpenAI and Google AI models, accessed through the Lovable AI Gateway — AI responses and study generation.
• Google Cloud Text-to-Speech — spoken Scripture and story narration.
• Google and Apple — optional sign-in.
• Google Fonts — typography delivery.
• Our transactional email provider — account, billing and notification email.

If you choose a handoff to ChatGPT, Perplexity, Zoom, a group's payment link, or another external destination, that service acts independently under its own policy.

• To provide, restore and sync the features you use.
• To authenticate you and keep your account secure.
• To process subscriptions and group giving configuration.
• To send notifications and email you have enabled or that concern your account.
• To debug, prevent abuse and enforce quotas and our Terms.
• To comply with legal obligations.

Where the GDPR or similar law applies, we rely on performance of a contract (providing the app), legitimate interests (security, abuse prevention, product reliability), consent (notifications, microphone, optional email) and legal obligation. Content about religious belief may be treated as a special category of data in some jurisdictions; you provide it voluntarily and can delete it.

• Account and content data is kept while your account exists.
• You can delete individual items (notes, Selah conversations, Kids profiles, posts) in the app at any time.
• You can delete your account, which removes your account record and associated personal content. Content you published to a group or public board may persist where a group retains its own copy; contact us if you need it removed.
• Operational logs and backups are retained on a short rolling schedule and expire in the ordinary course; deletion is therefore effective but not always instantaneous.
• Billing and transaction records are retained by us and by Stripe as required for financial and legal recordkeeping.

Reveal is operated from the United States, and our providers process data in the United States and other countries. If you use Reveal from outside the United States, your data is transferred and processed there.

• Request a copy of the personal data associated with your account.
• Correct account and profile information in the app.
• Delete individual content or your entire account.
• Withdraw consent for notifications, microphone access or optional email.
• Depending on where you live, object to or restrict certain processing, or lodge a complaint with your data protection authority.

To exercise a right, email connect@jochanae.com.

We may update this Privacy Policy. Material changes will be reflected by updating the "Last updated" date above, and where appropriate we will notify you in the app. Continued use of Reveal after changes constitutes acceptance of the updated policy.

Into Innovations, LLC
Georgia, United States
connect@jochanae.com