Privacy policy — GospelArc

This policy covers the GospelArc app, published by LyteFast, and this website. GospelArc is in development and not yet on the App Store. It describes the app as it stands in the current development build, and we will update it before release.

At a glance

What you do in GospelArc is stored on your device. There is no account.
The app has no server, no analytics, no advertising and no third-party SDK. It sends your notes, progress and settings to no one, including us.
Your data can leave the device in three ways you control: a device backup you make, a file you choose to export, or a verse you choose to share.
Tapping a source link opens another website, and Apple handles purchases. Both are described below.
This website sets no cookies, uses no analytics and loads nothing from other websites. It is hosted by Cloudflare, which processes connection data to deliver it.

Who is responsible

The controller responsible for the processing described here is:

LyteFast SAS (société par actions simplifiée) au capital de 1,00 € 60 rue François Ier 75008 Paris France Email: stephane.sprauer@gmail.com Commercial register: RCS Paris 988 054 227 VAT number: FR27988054227

The GospelArc app

What the app stores on your device

Your study data: Journey progress and its dates, highlights, bookmarks, notes and reflections, your recall schedule and answers (whether each was correct, not the words you typed), and personal routes, including any you import from a file.
Your settings: Book set, reading length, study perspective, date style, reader typeface, text size and spacing, haptics, reminder choice and hour, recall pace, gentle rendering of martyrdom accounts, the journey you last opened, and whether you have finished the introduction.
A purchase marker: One flag recording that this device has held the purchase or had one pending. It holds nothing you wrote and unlocks nothing: access comes only from the App Store’s records.
Screen selections: iOS keeps which Atlas segment you were on and which journey you picked on two history screens, so the app can reopen where you left it.

If the app fails to start, it writes a technical line to the device’s own log. The app sends that line nowhere.

Your notes, route titles and step notes can hold anything you type. Notes and study choices may reveal religious belief, and study dates show when you studied. This data stays on your device unless you move it in one of the ways described here. It stays until you delete it, run Delete All, or delete the app. The app sets no file protection of its own on this store, so the iOS default applies.

What the app does not collect

The app does not ask for or read your name, email, address, location, contacts, photos, health data, advertising identifier or a device identifier. It requests no camera, microphone, location, contacts, photo or tracking permission. The map in Origins & Witnesses is a drawing stored in the app and does not use your location. What you type into a search field is neither saved nor sent.

Sync and backups

GospelArc does not use iCloud sync. If you back up your device, to iCloud or to a computer, the backup can include your GospelArc data. Those backups are held by the service or computer you chose, and restoring one can bring back data you later deleted in the app.

Reminders

Reminders are off by default. iOS asks for permission only when you turn on “Remind me when items are ready”. They are local notifications scheduled by your device, with no remote push. The text is fixed and contains nothing personal, and at most 7 are pending at a time. If you turn reminders off, pending ones are removed; delivered ones stay in Notification Center until you dismiss them.

When something leaves your device

Source links

When you tap a source link, the page opens in a Safari view inside the app. The link goes to a web address stored in the app, and the site sees what any website sees, such as your IP address and browser details. The app adds nothing to the address, sends none of your data and reads nothing back. The current content links to pages on 182 different web host names, Wikipedia among them, and each site has its own privacy practices. We have not reviewed them and make no promise about them. The Bible text and licence links on the app’s Licenses screen work the same way.

Support, privacy and terms links

Once their addresses are set in the app, links to these pages open in the same way. If the app fails to start, a Contact Support link then opens in your default browser.

Purchases

The optional Expanded Journey Library is to be sold through the App Store. Apple handles payment and shows its own purchase sheet. The app never sees your payment details and sends us nothing about you, because there is no server of ours for it to send to. To check a purchase, the app asks Apple’s StoreKit service: when you open the purchase screen or tap Restore Purchases, and at launch on a device that has held the purchase or had one pending. Apple’s handling of this is covered by Apple’s privacy policy. Before release, this section will also say how we handle the reports Apple gives developers through App Store Connect.

Export All My Data creates one JSON file and opens the iOS share sheet. A route can be exported as JSON, Markdown or PDF, and a verse can be shared with its reference and a credit line. Nothing leaves until you choose where it goes, and the practices of that destination are then your choice. The temporary export file is removed when the share sheet closes, on the next export, or on Delete All; if a share is interrupted it can remain until one of those happens or iOS clears it. Copying a source’s citation places bundled citation text on the system clipboard.

Importing a route

You can pick a route file of up to 1 MB through the iOS file picker. If the file is in a cloud service, that service may fetch it.

iOS itself

iOS and Apple’s services do their own network work, which the app does not control and this policy does not cover.

Export and delete

You need no account and no help from us for either of these. In the app, open Settings, then Privacy.

Export All My Data gives you a copy of your notes, highlights, bookmarks, progress, recall history, personal routes and settings. The app cannot read this file back, so it is a copy and not a way to restore.
Delete All My Data removes those items, resets your settings and the screen selections described above, removes pending and delivered reminders and removes temporary export files. It cannot be undone.
You can also delete single highlights, bookmarks, notes and routes where you see them.

What Delete All does not remove

The purchase marker described above. It stays on purpose, so that a buyer’s purchase and a pending Ask to Buy still work after a relaunch.
Your App Store purchase and Apple’s records of it, which Apple holds.
Files you already shared or saved, and device backups made before the deletion.
A source citation you copied, which stays on the system clipboard until iOS replaces it.
The iOS notification permission, which only you can change in iOS Settings.

Rows are deleted through the app’s database; the store file itself is not overwritten, so this is not a forensic wipe. Deleting the app removes its data under normal iOS behaviour, but backups stay. Offloading the app keeps the data.

This website

This website is a set of static pages. It sets no cookies, uses no analytics or tracking, contains no forms and loads no scripts, fonts or images from other websites. It is hosted for us by Cloudflare, Inc., and served as static assets of Cloudflare Workers. When you visit, Cloudflare processes technical connection data, such as your IP address, the page requested, the time and your browser’s user agent, to deliver the pages and to protect the service against abuse. We do not collect data about visitors ourselves.

When you contact us

If you write to us, for example to report a mistake in the study content or a broken source link, we process your email address, your message and anything you include. We use them only to answer you and, where you report a mistake, to check and correct the content. Please do not send your private notes: we do not need them. Your messages are stored by our email provider, Google (Gmail).

Purposes and legal bases

Data in the app is processed by the app on your device, under your control, to provide the features you use. We do not receive it.
Delivering this website relies on our legitimate interest in a secure, working website (Art. 6(1)(f) of the EU General Data Protection Regulation, GDPR).
Answering your messages relies on our legitimate interest in answering enquiries and correcting the content (Art. 6(1)(f) GDPR) or, where you ask us to do something for you, on steps taken at your request (Art. 6(1)(b) GDPR).

Recipients

Hosting: Cloudflare, Inc., which hosts this website for us.
Email: Google (Gmail), which stores the messages you send us.
Apple, for purchases through the App Store, under its own terms and privacy policy.
The websites of the sources you choose to open, under their own policies.

For Cloudflare and Google (Gmail), the countries where data is processed and the safeguards for transfers outside the EU and the EEA are being confirmed and will be listed here before the app’s release.

How long data is kept

Data in the app is kept on your device until you delete it, as described above.
We do not collect data about visitors to this website ourselves. Cloudflare may keep connection logs to deliver and protect the website; how long it keeps them is being confirmed and will be stated here before the app’s release.
Messages you send us are kept only as long as needed to deal with your request, unless the law requires us to keep them longer.

Your rights

Depending on the law that applies to you, you have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a data protection authority, such as the authority of the EU country where you live. Because the app sends us none of your data, we hold no copy of it and cannot look it up, correct it or delete it for you: Export and Delete All do that on your device. We hold personal data about you only if you write to us.

Right to object. Where we rely on our legitimate interest (Art. 6(1)(f) GDPR), that is to deliver this website and to answer your messages, you have the right to object to that processing at any time, on grounds relating to your particular situation (Art. 21 GDPR). To object, contact us using the details below.

To exercise your rights or ask a question, contact us:

Children

The app has no account and does not ask for anyone’s age.

Changes to this policy

If what the app or this website does with data changes, this page changes with it, and the date at the top of the page changes too.