The short version
Gloryian exists to help you read the Bible, study and pray. We collect what we need to run those features and keep the community safe, and nothing more. We do not sell your personal information, we do not show ads, and we do not track you across other companies' apps or websites.
Who we are
Gloryian (the app and gloryian.com) is operated by Guini Productions LLC, a Florida limited liability company based in Miami, Florida ("Gloryian", "we", "us"). Ruben Guinovart leads Gloryian. We are responsible for the personal information described here. Contact: support@gloryian.com.
Information you give us
Account: email address, display name, password (we store only a salted hash, never the password itself), date of birth (to apply our age rules), optional country (for parental-consent rules), and the email of a parent or guardian when consent is needed. The apps do not ask for or save a phone number.
Sign in with Apple or Google: if you use these, we receive a verified identifier and the email address the provider shares with us (with Apple this can be a private relay address). We never receive your Apple or Google password.
Your study and devotional content: highlights, notes, saved verses, reading and story progress, reading plans, memory verses, prayer-journal entries, your chosen companion, tradition and settings.
Community content: prayer requests, messages and posts in prayer rooms, church rooms, groups and live Bible studies, plus reactions, reports you file and room membership. A private prayer journal is visible only to you. A prayer request is visible to members of that room; an anonymous request hides your name from those members, and moderators can still see who posted it. Live-study chat is visible to the people in that room. A published sermon is available to members allowed to play that church's sermons.
Ask: a question you type or speak is sent to our servers so the answer can be shown on your screen. We do not save an Ask conversation on the server, and we do not use questions or answers to train models. If you report an answer, we keep that report and a short excerpt with the other moderation notes for 1 year. The Bible chapter in the reader stays the stored translation.
Voice: when you tap the microphone, the recording is sent to our own speech-to-text service. That service holds it in a temporary file only while it turns it into text, then deletes the file, including when transcription fails. We do not add that recording to your account. Live audio in a prayer room or live study is relayed to the people in the room and is not kept, unless the host starts a study recording. The host must attest consent. Everyone in the room can see that a recording is on. A room that admits a minor is not recorded. The recording is stored as that church's sermon and can be played only by members allowed to hear it. Read-aloud of a Bible verse or a stored story is generated by voices we run. We cache that generated audio so the same passage can play again. It is not a recording of you.
Purchases and giving: your plan, its status and renewal date, and a transaction reference from Apple, Google or Stripe. For church gifts: the church, amount, currency, date and the name and email for the receipt. We never see or store full card numbers.
Support: emails you send to support and our replies.
Information collected automatically
Sessions and security: device type, operating system, app version and last-active time for each signed-in device, so you can review and sign out devices, and records needed to prevent abuse.
Notifications: a push token if you allow notifications.
Crash and error reports: when something breaks, the app sends an error message, a short technical trace, the platform and the app version to our own servers. We remove email addresses, tokens and long numbers before saving it. We do not use a third-party crash or analytics SDK.
Server logs: standard request logs (such as IP address, time and the page or API called) for security and troubleshooting.
Read-aloud: when you listen to Scripture, the text is turned into speech by voices we run ourselves. We do not store a recording of what you heard.
We do not collect precise location, contacts, photos or advertising identifiers, and we do not use cookies or SDKs for advertising or cross-site tracking.
How we use information
To provide Gloryian: create and secure your account, sync your study across devices, run reading, listening, Ask AI and prayer features, send reminders you turn on, process subscriptions and gifts, and answer support requests.
To keep people safe: apply age rules and parental consent, moderate community content (see the Community Guidelines), respond to reports, and detect and prevent fraud, spam and abuse.
To improve reliability: investigate crashes and errors, and measure the load on our servers.
To meet legal duties: keep tax and payment records, respond to valid legal requests, and enforce our Terms.
We do not use your notes, prayers or questions to build advertising profiles, and we do not sell or rent personal information.
AI features and moderation
Ask, the companions, read-aloud, speech-to-text and the safety classifier run on models we host. If the self-hosted Ask model is unavailable and the Amazon Bedrock backup is turned on, that question and the instructions needed to answer it are sent to Amazon Bedrock in the United States, on Amazon Web Services, only to produce the answer. We do not send questions, prayers or voice to any other AI company, and we do not use them to train models.
All text people post in community spaces, including prayer requests and prayer-room messages, is checked automatically by our moderation system, and some items are reviewed by trained human moderators. If a message suggests that someone may be in danger, the app shows crisis resources.
AI answers can be wrong. They are not professional, medical, legal or pastoral advice.
Legal bases (EEA, UK and similar laws)
Where laws such as the GDPR apply, we rely on: performance of our contract with you (running your account and the features you use); legitimate interests (security, moderation, fraud prevention and fixing errors, balanced against your rights); consent (optional notifications, and parental consent where required; you can withdraw it at any time); and legal obligation (tax, payment and safety records).
Religious beliefs can be sensitive data. Your notes, prayers and tradition are used only to provide the features you choose, are never used for advertising, and are shared only as described below.
Who we share information with
Service providers working for us under contract, only to run Gloryian: Amazon Web Services (AWS), United States (us-east-1), for hosting, databases and storage; Amazon Simple Email Service (Amazon SES) for account and support email; Stripe for website subscriptions and church gifts; Apple (App Store, Sign in with Apple, Apple Push Notification service) and Google (Google Play Billing, Google Sign-In, Firebase Cloud Messaging) for in-app purchases, optional sign-in and notifications; and Expo's push service to deliver notifications to the mobile app.
Churches you join or give to: that church's administrators see what they need to run it, such as your name, membership and gifts to that church.
Other members: what you post in a room is visible to the people in that room. Prayer requests marked anonymous hide your name from members, but moderators can see who posted them.
Legal and safety: when the law requires it, to protect someone's safety (for example a credible threat or the exploitation of a child), or to enforce our Terms.
Business transfer: if Gloryian is merged, sold or reorganised, information may pass to the new operator under this policy, and we will tell you first.
We do not sell or "share" personal information for cross-context behavioural advertising, as those terms are defined in California law.
Children
You must be at least 13 to create your own account. We do not knowingly collect personal information from children under 13 without verifiable parental consent, as required by the US Children's Online Privacy Protection Act (COPPA). Younger children can use the Kids area only through a profile a parent manages.
Where the digital-consent age is higher than 13 (up to 16), a parent or guardian must approve the account by email before it gets full access. The approval email includes a link the parent can use to turn features off or withdraw approval. Withdrawing locks the account at once. The account is then deleted after 30 days, or immediately if the parent chooses delete now. That 30-day deletion is a scheduled job in the account service.
Children under 13 cannot give to churches. Members aged 13 to 17 can give only after a parent or guardian approves giving through an emailed link; we store the parent's email encrypted only until they decide, a scrambled (hashed) copy to limit repeat requests, and the date of the decision.
Accounts of people under 18 are private by default, cannot subscribe, have their prayer requests reviewed before they appear, cannot post links or contact details, and decisions about them are reviewed by two moderators.
If you believe a child under 13 has given us personal information without a parent's consent, email support@gloryian.com and we will delete it.
How long we keep information
We keep account data while your account exists. Canceling a subscription ends the paid plan. It does not delete the account, and the account can still open Gloryian videos that we have published. When you delete your account, your study data (highlights, notes, saved verses, progress, plans, memory verses, journal) and any private social handle are erased at once; your name, email and birth date are removed; your sessions end; and your community posts stay in their rooms but are shown as "Deleted user". We do not keep the handle, the email, or a contact method after that deletion except where the sections below say a hash or a tax record stays.
Moderation notes and the excerpts of messages our moderation system flagged are kept for 1 year, then the text is erased automatically by the hourly moderation job; a bare record (the category and the strike) stays so the three-strike system stays fair.
Crash reports are written into the server logs after email addresses, tokens and long numbers are removed. They are not stored on the account. The AWS layout in this project sets those logs to be kept for 30 days and database backups to be deleted after 35 days. That layout is configuration in the repository. It is not, by itself, a running production service. Payment and giving records are kept as long as tax and accounting law requires.
If an account is permanently banned under the Community Guidelines, we keep a one-way scrambled (salted hash) of the email address so it cannot return. A phone number or device identifier is hashed only if one was already stored. The apps do not collect either. We cannot turn a hash back into the original value.
Your choices and rights
Everyone can: view and edit their profile; download a copy of their data (You › Account and security); turn notifications off; and delete their account in the app (You › Security › Delete my account) or by following gloryian.com/delete-account.
Depending on where you live, you may also have the right to know what we hold, to get a copy, to correct it, to delete it, to restrict or object to some uses, to data portability, and to withdraw consent. In the EEA and UK you can complain to your data-protection authority.
To make a request, email support@gloryian.com from your account address. We may need to verify your identity, and we answer within 30 days (or sooner where the law requires). An authorised agent may act for you with your written permission.
US state privacy rights
Residents of California (CCPA as amended by the CPRA), Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, New Hampshire, Tennessee, Minnesota, Maryland, Nebraska, Kentucky, Indiana, Rhode Island and other states with similar laws have the rights to know, access, correct and delete personal information, and to opt out of its sale, of targeted advertising and of profiling. Gloryian does not sell personal information, does not share it for cross-context behavioural advertising, and does not build advertising profiles, so those opt-outs have nothing to turn off. The apps do not read a Global Privacy Control header, because there is no advertising choice for that signal to change.
Categories we collect (California terms): identifiers (email, name, account ID); customer records (purchase references); characteristics (date of birth for age rules); commercial information (plan and gift history); internet activity (sessions, logs); sensitive information you choose to give (notes, prayers, tradition and Ask questions can show religious beliefs; account login). We use that sensitive information only to provide the feature you chose. We disclose these categories only to the service providers listed above, for business purposes. We do not collect a phone number, a device identifier, precise location, contacts, photos or an advertising identifier.
We will not treat you differently for using your rights. If we deny a request, you may appeal by replying to our answer; we will explain the result.
Security
Data is encrypted in transit, passwords are hashed, sign-in tokens are kept in secure storage on your device, and optional two-step verification is available. Access to personal data is limited to people who need it. No system is perfectly secure; if a breach affects you, we will notify you as the law requires.
International users
Gloryian is run from the United States and our servers are in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States, with the safeguards the law requires.
Changes to this policy
If we change this policy we will post the new version here and update the effective date. For significant changes we will also tell you in the app or by email before they take effect.
Contact
Guini Productions LLC, a Florida limited liability company based in Miami, Florida. Email: support@gloryian.com. Effective November 7, 2026.