Privacy Policy for CP Devotional

Effective date: August 8, 2026  ·  Last updated: October 10, 2026

This Privacy Policy explains how CP Devotional ("the App", "we", "us", or "our") collects, uses, and protects information when you use our mobile application.

By using CP Devotional, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account, we collect:

• Email address — used to create and secure your account, and to log you in.
• Password — stored only as a securely hashed value; we never store or have access to your plain-text password.
• First and last name — shown to other users where applicable (e.g., public profile).
• Bio (optional) — a short free-text description you may choose to add to your profile.
• Profile photo (optional) — an image you may choose to upload from your device to use as your profile picture.

When you use certain features of the App, we collect the following:

• Ratings — the App's backend can store a 1–5 star rating without any identifying information linking it back to your account, but this is not currently offered through any screen in the App.
• Comments — the text of comments you post on a devotion, associated with your account and visible to other users. Each comment also carries a random ID that the App creates when you start writing it, so that if your connection drops and you send it again, it isn't posted twice. The ID contains no information about you or your device.
• Reactions — a Like or Love you place on a devotion or comment, associated with your account.
• Quiz scores — when you choose Save Score after a Daily Quiz, the score for that day's devotion, associated with your account. Saving again after a retake replaces it. Only you can see your scores, under My quiz scores in the App, which lists your 10 most recent and an overall total across all of them; they are not shown to other users.
• Volunteer Patriot status — whether you've opted in to the Volunteer Patriot program, and if you later opt out, the reason you select (and any free-text explanation you provide).
• Suggestions — the text of any suggestion you submit as a Volunteer Patriot, associated with your account and visible to admins for review.
• Notifications — when someone likes, loves or replies to one of your comments, we keep a record of it for you: who did it, which comment, and whether you've read it. Only you can see your notifications, under the bell on the website or More → Notifications in the App. They are deleted along with the comment, the reply or either account.
• Notification settings — whether you want push notifications at all, and for reactions and for replies. They are saved on your account so they apply on every device.
• Push notification token (mobile App only, and only if you allow notifications) — a token that identifies the App on your device to the push delivery service, linked to your account so notifications reach you. It is removed when you sign out, and when the delivery service tells us the App is no longer installed or allowed to notify you.

1.2 App Content You Interact With

The App offers the following features:

• Daily Devotions — devotional readings and reflections curated and displayed to you. You do not submit content for this feature, but you may Like, Love, or comment on a devotion (see Section 1.1).
• Testimonies — written testimony stories curated and displayed to you. You do not submit content for this feature.
• Gospel Music — worship and praise audio tracks that stream for in-app playback from Cloudflare R2, our cloud storage provider. Playing a track does not send any personal information to a third party; R2 only receives a request for the audio file itself, with no account or profile data attached. On mobile, playback can continue in the background when you leave the app (e.g. to use another app or lock your device), and stops when you close the app from your recent apps — this does not involve any additional data collection.
• Devotion Narration (Listen) — an audio reading of each devotion, available for today's devotion and for past devotions in Recent Devotions and the Archive, streamed for in-app playback from Cloudflare R2, the same way as Gospel Music. The audio, including its background music, is created once per devotion on our servers, before anyone listens, so pressing Listen does not send any personal information to a third party; R2 only receives a request for the audio file itself. On mobile, playback can continue in the background (e.g. with your device locked) without any additional data collection.
• Shared Devotion Links — a shared devotion's text includes a link to the devotion on our website and a link to the App on Google Play. On Android, a devotion link shared through the App (e.g. via the Share button) opens directly in the App on devices where it's installed, instead of a web browser, using Android's standard App Links verification. This is handled by the operating system and does not involve any additional data collection or new permissions.

1.3 Information We Do Not Collect

CP Devotional does not collect:

• Precise location data
• Contacts or media from your device, other than a profile photo you choose to upload
• Payment or financial information
• Advertising identifiers
• Analytics, crash, or usage-tracking data of any kind (the App does not include any third-party analytics, advertising, or crash-reporting SDKs)

1.4 Automatically Collected Information

We do not use analytics or tracking SDKs. Our backend servers may log standard technical information (such as IP address and request timestamps) as part of normal server operation, for security and troubleshooting purposes only. This information is not used to build advertising profiles and is not shared with third parties.

Connection retries. If loading something doesn't get an answer within 30 seconds, the App and website try once more on their own before showing a "Couldn't reach CP Devotional" message. They never resend something you post (such as a comment) on their own. This sends nothing beyond the original request.

Update checks. When you open the App, it asks Google Play on your device whether a newer version is available, and asks our server which is the oldest version still supported. This lets it tell you about a new release or, when your version is no longer supported, ask you to update. Neither request sends account or personal information. If you choose to update from inside the App, the download and installation are handled by Google Play on your device, under Google's own privacy policy.

Rating prompt. The App keeps a few simple counters on your device, such as how many days you've opened it and how many daily quizzes you've finished. Once you've used it for a while, it may use these counters to ask Google Play to show its rating dialog. The counters never leave your device and are not sent to us. Whether the dialog appears, and any rating or review you leave, is handled entirely by Google Play under Google's own privacy policy. We are not told whether you rated the App.

2. How We Use Your Information

We use the information we collect only to:

• Create and authenticate your account
• Provide access to the App's features (Daily Devotions, Testimonies, and Gospel Music)
• Display your display name, bio, and profile photo, where applicable
• Show your comments and reactions to other users, and let you manage them
• Tell you when someone likes, loves or replies to your comments, in the App and, if you allow it, by push notification
• Review and respond to suggestions submitted through the Volunteer Patriot program
• If you serve on the CP Devotional team (as a Steward, Curator or Volunteer Patriot), send you operational messages by email from the Founder or a Steward. These go only to team members, never to other users, and replies go to the person who wrote them
• If you're made a Curator or a Steward, send you one welcome email saying so, with what the role involves and how to get started. It is signed by the person who made the change, and replies go to them
• Maintain the security and integrity of the App
• Respond to support requests you send us

We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes.

3. How Your Information Is Stored and Secured

• Your password is hashed using industry-standard cryptographic hashing (bcrypt) before storage — we cannot recover your original password.
• Your login session is managed using a signed authentication token, stored securely on your device.
• Your data is stored in a private database that is not publicly accessible.
• We take reasonable technical and organizational measures to protect your information from unauthorized access, alteration, or disclosure. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

4. Third-Party Services

CP Devotional's backend uses the following third-party services to generate content on our servers. These providers do not receive your account credentials, email address, or personal profile information:

• Anthropic (Claude API) — used to help generate devotional and testimony written content.
• Suno — the source of the music tracks used in Gospel Music and of the background music in devotion narration. Tracks are reviewed and uploaded by our team from Suno, not generated per-user or per-request.
• Cloudflare R2 — cloud storage that hosts uploaded song audio files and devotion narration audio, streamed directly to your device for playback.
• Google Cloud Text-to-Speech — used to create the audio narration of each devotion from its published text. Only the devotion's own text is sent; no user information is involved.
• Bible API (bible-api.com) — used to retrieve Bible verse text.

These services process content generation requests on our behalf and do not receive your personal account information.

Push notifications. If you allow notifications in the mobile App, they are delivered through the Expo Push Service (run by Expo, the maker of the framework the App is built with) and Google Firebase Cloud Messaging, which delivers them to Android devices. To send one, these services receive your device's push token and the notification itself: the other person's display name, what they did (liked, loved or replied), the date of the devotion, and for a reply, a short excerpt of the reply (up to about 80 characters). They do not receive your email address or password. Expo's and Google's own privacy policies apply to that delivery. The App does not start itself or run anything in the background when your phone turns on; a notification only arrives when someone reacts to or replies to your comment.

Email. The emails we send you (verifying your email address, resetting your password, replies to your suggestions, a welcome email if you're made a Curator or Steward, and team messages if you're on the team) are delivered through Resend, an email delivery service. To send one, Resend receives your email address, your first name and the message itself. It does not receive your password. Resend's own privacy policy applies to that delivery. We keep a record of each team message (its subject, text, who sent it and how many people it went to), but not the list of recipients' addresses.

5. Data Retention

We retain your account information for as long as your account remains active. If you would like your account and associated personal data deleted, you may request deletion at any time (see Section 8). Anonymous content (such as a star rating, described in Section 1.1), which is not linked to your account, may continue to exist in the App after account deletion, as it cannot be tied back to you.

To delete your account: email uzo.developer@gmail.com with the subject line "Delete My Account." We will delete your account and associated personal data within 30 days of receiving your request.

6. Children's Privacy

CP Devotional is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us using the information below and we will take steps to delete such information.

7. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you (your saved quiz scores, for example, are listed under My quiz scores in the App)
• Correct inaccurate personal information (e.g., by updating your name or bio in the App)
• Request deletion of your account and associated personal information
• Withdraw consent to processing, where applicable

Turning notifications off. In the App, go to More → Preferences → Notifications to turn off push notifications, or only those for reactions or for replies. On the website, the same reaction and reply settings are in Preferences. You can also block notifications for CP Devotional in your phone's settings at any time. In-app notifications under the bell or More → Notifications are always kept, so you can still see them when push is off.

To exercise any of these rights, contact us using the information in Section 8.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

Email: uzo.developer@gmail.com

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically for any changes. Continued use of the App after changes are posted constitutes acceptance of those changes.