Privacy Policy

Last updated: 18 October 2026

Yesud is a Bible study app. This page explains plainly what data it stores, why, who it is shared with and how to delete it. It applies to the app (iOS and Android) and to the website yesud.bible.

1. Who is responsible

Luis Ernesto Valdés Lavaut, based in Spain.
Email for any privacy matter: privacidad@yesud.bible.

2. What is stored and why

2.1 Your account

• Username, email address and password. You choose your username (we don't ask for your real name) and it is the one shown in the ranking. The password is stored as an irreversible hash; nobody, including us, can read it.
• If you sign in with Google or Apple, we store the identifier that service gives us to recognise you and your email. The name they send us is not stored: it is only suggested to you as a username, and used only if you confirm it. We never receive your Google or Apple password.
• Avatar. Chosen from drawings that ship inside the app. No photo of you is uploaded.
• App language.

Used so you can sign in, recover your account and receive notices that affect you (a charge, a change to these terms). Legal basis: performance of the contract you accept when creating the account.

2.2 Your study progress

• Verses marked as read, points, level, tests taken (questions, answers and result) and classes earned.
• The verse lists you create.
• A technical bank of layout measurements for the reader, so reading lands precisely on your screen. It contains no text of yours.
• Where you stopped listening to the Yesud voices (book, chapter, verse and voice), so you can pick up from there on any phone.

Stored on the server so nothing is lost if you change phones. Legal basis: performance of the contract; and, because it can reveal your beliefs, your explicit consent (section 2.8).

2.3 Yesud AI

• Your questions and the answers, organised in conversations, with the sources and references the assistant used. Kept so you can come back to them.
• The documents (in-depth studies) you ask it to write. The text is stored, not the file: the Word and PDF are generated each time you download them.
• If you attach a photo (for example, handwritten questions), the image is not stored anywhere. What is kept is the text read from it, so the conversation does not lose its thread.
• A usage record for each answer: model used, amount of text processed, cost, credits charged and time taken. Used for billing and to know whether a plan is sustainable. It does not include the content of your question.
• Your permission to send your questions to the AI: when you gave it and which text you accepted. It is asked when you create your account, it is optional, and you give or withdraw it at any time in Profile → Account details. Without it, Yesud AI does not answer; the rest of the app works the same.
• If a question needs to search the internet, a search service only receives a short search made from it: never your name, your email or your photos (see section 3).

Legal basis: performance of the contract (the service you purchased) and your consent to send your questions to our AI providers; and, because it can reveal your beliefs, your explicit consent (section 2.8).

2.4 Purchases

Payments are handled by Apple (App Store) and Google (Google Play). We never see or store your card. What we store is the verified receipt the store hands us: product, transaction identifier, date and the signed receipt itself. That is what lets us recognise your purchase, handle a dispute and stop the same receipt being used on several accounts. Legal basis: performance of the contract and legal invoicing obligations.

The website's launch reservation (yesud.bible/lanzamiento) is the only thing paid for outside the stores, and we use Gumroad for it alone (Gumroad, Inc., United States), which acts as the seller: it charges you, applies your country's taxes, sends you the receipt and holds the payment details, which it handles under its own privacy policy; we never see them. From Gumroad we receive your email, the sale reference and basic payment data (the country and, where present, the last digits of the card), and we keep only the email and the reference, with which we create and send you your reservation code. We keep the code, that email and the reference to resend the code if you lose it, to apply it when you create your account with that email and to handle a refund. Legal basis: performance of the contract.

2.5 Technical data

Like any server, ours logs each request: IP address, date and time, requested path (for a search, the path includes what you search for), response code and device type. And if the app closes because of an error, it sends the server the technical error message and the point in the code where it happened, so it can be fixed. These logs are used only for security and to diagnose failures; they rotate automatically and only the most recent are kept. Legal basis: legitimate interest in keeping the service secure and working.

2.6 Notifications

On Android, nothing leaves your phone. The daily verse is prepared and shown by the device itself, so there is no token and nothing is stored on our side.

On iPhone, if you allow notifications, iOS gives us a notification token: a code issued by Apple that identifies that installation, not you. It is stored with your account and used for two things: telling you when a document you asked Yesud AI for is ready and, if you ask for the verse to stay pinned to your lock screen, pushing it there at the time you chose. It is not shared with anyone. What belongs to the pinned verse is deleted when you turn it off, and everything when you delete your account. Legal basis: your consent, which you withdraw by turning notifications off or unpinning the verse.

2.7 What is NOT collected

• Location, contacts, microphone or camera (other than a photo you choose to attach to a question, which is not stored).
• Advertising identifiers. There are no ads.
• Third-party analytics or trackers. There is no tracking SDK in the app.

The Yesud voices are recordings made in advance: the app asks our server for the chapter you are about to hear and downloads its audio from our storage at Cloudflare. That download carries neither your name nor your email. If you use the phone's own voice, reading happens on your device and the text does not leave it.

2.8 Data that may reveal your religious beliefs

What you read, what you listen to, your tests, your lists and what you ask Yesud AI can reveal your religious beliefs. The law treats this as special category data (Article 9 of the General Data Protection Regulation), and we only process it with your explicit consent: when you start using the app we ask for it with a box that you tick yourself, separate from these terms, and we keep the date and the text you accepted.

It is used only to provide the service described above. It is never sold, never used for advertising or profiling, and it only reaches the providers in section 3 for what is stated there.

You can withdraw your consent at any time by deleting your account (section 5): this data is erased at once. Withdrawing does not affect what was processed before. Without this consent we cannot store your progress or your conversations, so the app cannot be used with an account.

2.9 What is stored on your own phone

To open quickly and to work offline, the app keeps a few things on the phone itself. They don't leave it because of this, and we don't see them:

• Your session, in the system's secure storage (the Keychain on iPhone, the Keystore on Android), so you aren't asked for your password every time.
• An offline-use licence, also in that secure storage: a piece of data signed by our server that only says which account it belongs to and until when you can use the app offline. It renews itself every time the app talks to the server and lasts 14 days at most; after that without connecting, or if your plan has ended, the app asks you to connect for a moment to check.
• The study for chapters you have already opened (and the original-language ones), so you can read them offline without downloading them again.
• The list of your Yesud AI conversations (their titles), so the chat opens at once; the conversations themselves live on the server.
• Your preferences (theme, text size, voice, reminders) and what is needed for reading to sit right on your screen.

When you sign out, the session, the licence, the saved study and the conversation list are deleted from the phone, so the next person who uses it sees nothing of yours. If your plan or your trial ends, the app deletes the saved study as soon as it confirms it with the server. And uninstalling the app makes the system delete everything else.

2.10 Reports and users you hide

• If you report a Yesud AI answer or the name of someone in the ranking, we store who made the report, what is reported, the reason, anything you add and a copy of what was reported as it looked, so it can be reviewed. We get a notice by email.
• If you hide someone from your ranking, we store that list so as not to show them to you. That person is not told.
• If your username is reported and turns out to be offensive, we may remove you from the ranking or ask you to choose another one.

Legal basis: legitimate interest in keeping the app free of abuse and in complying with the app stores' rules.

3. Who it is shared with

Nobody, except the providers essential for the service to run, who act on our behalf and only for what is stated:

Some AI and search providers are outside the European Union (United States). They only receive the text of the question, or a search made from it, with nothing that identifies you. If you would rather that text never leave, simply do not give the Yesud AI permission, or withdraw it in Profile → Account details: the rest of the app does not need it. Gumroad is also in the United States: it only receives what you give it when paying for the reservation, as the seller and under its own policy.

We do not sell data, do not share it for advertising and do not use it to train artificial-intelligence models.

4. How long it is kept

• As long as your account exists. When you delete it, everything associated is removed at once: account, progress, conversations, documents and usage records.
• Purchase receipts may be kept for as long as tax law requires, detached from your account.
• The data of a website reservation (the code, the email used to pay and the payment reference) are kept apart from the account, because they belong to a purchase: deleting the account does not delete them. They are kept while the code can be redeemed (it does not expire) and, once it has been redeemed or refunded, for one more year, in case a claim or a refund about that payment has to be handled; then they are deleted. If you want us to delete them sooner, write to us; if the code has not been redeemed yet, it will stop working.
• Server backups are refreshed periodically and old ones destroyed; data already deleted may remain in a backup for a limited time until that backup is gone.
• Technical logs rotate automatically.
• Reports are kept for as long as they are needed to handle them and to detect repeated abuse. If you delete your account, they are no longer linked to you. The list of users you hide is deleted with your account.

5. How to delete your account

From the app: Profile → Delete my account. It is immediate and needs no request to anyone. If you no longer have the app installed, follow the instructions on the Delete account page.

Deleting the account does not by itself cancel a subscription: that is done in the subscription settings of your App Store or Google Play, because they manage the charge.

6. Your rights

You can ask to access your data, correct it, delete it, restrict its use, object to it or take it with you in a readable format by writing to privacidad@yesud.bible from your account email. We reply within the legal period of one month. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to your local data-protection authority.

7. Children

Yesud is not directed at children under 14 and does not knowingly create accounts for them. If you believe a child has created an account, write to us and we will delete it.

8. Security

All communication is encrypted (HTTPS). Passwords are hashed. Server access is restricted and protected. On the phone, the session and the offline licence sit in the system's secure storage, and the licence is signed: it cannot be altered to extend it. No system is infallible: if we detected a breach affecting you, we would notify you as the law requires.

9. Changes

If this policy changes, it will be published here with a new date. If the change affects how your data is used, we will notify you inside the app before it takes effect.