Privacy Policy
Effective November 7, 2026
- There is no account. What you write in the app never leaves your iPhone.
- No ads, no tracking across apps and websites, and we never sell data.
- Anonymous usage statistics, which you can turn off in the app.
- Payments are handled by Apple. We never see your card or your Apple ID.
Who we are and what this covers
Engineering Bits, LLC, a Wyoming limited liability company (“Engineering Bits”, “we”, “us”), makes the Upheld iPhone app and runs this website. This policy covers both, and we are responsible for the personal data it describes (its “controller”). Our address is 7345 W Sand Lake Rd, Ste 210, Office 6683, Orlando, FL 32819, United States. Contact: vl [at] engineeringbits.xyz.
What stays on your iPhone
Everything you enter or choose in Upheld is stored on your device. There is no account and no copy on our servers. What you type never leaves your iPhone:
- your first name;
- your notes and your answers to the questions at the end of readings;
- what you search for in the Bible and the prayer library.
Your other choices, such as your answers to the opening questions, highlights, bookmarks, saved prayers, the days you have completed, your reminder time and appearance settings, are stored on the device too. While anonymous usage data is on, the app reports some of them as short ids, such as the id of a topic or a prayer, as described below.
Reminders are scheduled on the device itself, and the home screen widget reads the verse from the app on the device. If you back up your iPhone to iCloud or a computer, this data is part of that backup under Apple’s terms. Deleting the app deletes it from the phone.
What leaves your iPhone
- Recorded audio. The first time you play a recording, the app downloads it from our server, which runs on Cloudflare. Like any web request, this carries your IP address and basic device information. It does not carry your name or anything you have written.
- Anonymous usage data. To learn which parts of the app help and which do not, the app sends events such as “a prayer was opened” or “a day was completed”, with the app version and the id of the topic, prayer or verse involved. It also sends a few choices as ids: your answers to the opening questions, your reminder hour, Bible translation and appearance, whether you use the widget, and whether you subscribe. Events are tied to a random identifier created by the app, not to your name, email, Apple ID or the device’s advertising identifier. No free text is ever sent: not your name, your notes, your answers to readings or your searches. The events are processed for us by our analytics provider. Sharing is on when you install the app; you can turn it off at any time under You → Share anonymous usage data, and from then on the app sends no usage events.
- Purchases. Subscriptions are bought and billed through the App Store. Apple tells us, through our subscription service RevenueCat, which product was bought, when, in which country, and whether it is active, renewed, cancelled or refunded. The app also asks RevenueCat directly whether your subscription is active, a request that carries your IP address like any other. Subscription records are tied to a random identifier, not to your name or payment details. RevenueCat passes events such as a trial starting to our analytics provider so that we can count them.
- Crash reports. If you have chosen to share analytics with app developers in your iPhone’s settings, Apple passes us anonymous crash and performance reports.
- Messages you send us. If you email us, we receive your email address and whatever you write.
Sensitive information
Using a Bible app can say something about your religious beliefs, and the topics you choose, such as health, marriage or grief, are personal. That is why they stay on your device. The only trace of them in usage data is the id of a topic, not linked to who you are.
This website
The website is served by Cloudflare, which processes your IP address, browser type and the page you asked for in order to deliver it and protect the site from abuse. The website has no accounts and no forms, and uses no cookies, analytics or advertising trackers.
What we do not do
- We do not show ads.
- We do not track you across other companies’ apps or websites, which is why the app never asks for permission to do so.
- We do not use your device’s advertising identifier or your precise location.
- We do not sell or rent personal data, and we do not share it for advertising.
Who we share data with
Only the providers that run the service for us, each limited to its part: Apple (the App Store, payments, crash reports), RevenueCat (subscription status), Cloudflare (the website and audio downloads), our analytics provider (anonymous usage data) and our email provider. We may also disclose data when the law requires it, or as part of a merger or sale of the business, in which case this policy continues to apply to it.
Retention
Data on your device stays until you delete it or the app. Anonymous usage data is kept for up to two years. Subscription records are kept as long as tax and accounting law requires. Emails are kept for up to two years after the conversation ends. Cloudflare keeps its technical logs under its own policies.
Your rights
Depending on where you live, including the EEA, the UK and US states such as California, you may have the right to access, correct, delete or export your personal data, and to object to or restrict certain processing. Because the app does not know who you are, most of your data can only be reached on your device, where you can delete it yourself. For anything else, email vl [at] engineeringbits.xyz. We reply within 30 days. You also have the right to complain to your local data protection authority.
US state privacy rights
Residents of California, Colorado, Connecticut, Texas, Virginia and other US states with privacy laws may have the right to know what personal data we hold about them and get a copy, to correct it, to delete it, and to opt out of its sale, of targeted advertising and of profiling. We do not sell personal data, share it for cross-context behavioral advertising, use it for targeted advertising or profile you, so there is nothing to opt out of. To use the other rights, email vl [at] engineeringbits.xyz; you may also ask someone to act for you. If we decline a request, you can appeal by replying to our answer, and if the appeal is declined too, you can complain to your state attorney general. We will not treat you differently for using these rights.
Children
Upheld is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it.
International transfers
We are based in the United States. Data is processed there and in other countries where our providers operate.
Changes
When we change this policy we will post the new version here and update the effective date. If a change affects what the app sends, we will say so in the app before it takes effect.
Contact
Engineering Bits, LLC, 7345 W Sand Lake Rd, Ste 210, Office 6683, Orlando, FL 32819, United States. Email: vl [at] engineeringbits.xyz.