Privacy policy

Last updated October 15, 2026

Who we are

Holy Spark is operated by Individual Entrepreneur Roman Barabanov, based in Georgia. This policy covers the Holy Spark iPhone app and holyspark.app. You can contact us at support@holyspark.app. Our business details are on the terms page.

The short version

You do not need a Holy Spark account. Notes, saved verses, preferences, and reading progress are kept on your device. We do not sell personal information or show ads in the app. We advertise Holy Spark on Facebook and Instagram, and if you allow tracking when the app asks, we use Meta’s tools to learn which of our ads led to an install or a subscription. We use Apple and RevenueCat for purchases, Meta to measure our ads, PostHog to see how the app is used and what goes wrong, and Cloudflare to deliver this website and downloadable study content.

Your reading data

The app stores your saved verses, personal notes, reading and plan progress, reading history, and preferences locally. Its widgets can access relevant data through a shared container on the same device. We do not upload your notes or personal reading library to our servers.

Holy Spark does not operate a cloud sync service. Depending on your Apple settings, app data may be included in device backups managed by Apple. Those backups are subject to Apple’s settings and privacy practices.

Purchases and subscriptions

Apple processes payments. We do not receive your full payment card details. RevenueCat helps validate purchases, restore access, and manage subscriptions. It processes purchase history, transaction and product identifiers, subscription status, and an automatically generated app user identifier. We do not attach your name or email address to that identifier in the app.

We use RevenueCat’s subscription reporting and experiments to understand purchases, trials, and which offers work. How the app is used and what goes wrong is measured separately, with PostHog, described below.

Read RevenueCat’s Privacy Policy and Apple’s Privacy Policy for more about these services.

Measuring our ads with Meta

We advertise Holy Spark on Meta’s apps, such as Facebook and Instagram. To learn whether those ads work, the app includes Meta’s software development kit (SDK). It starts only after you answer Apple’s tracking question, which the app asks once, the first time you open it, before showing any prices. Until you answer, nothing is sent to Meta.

If you allow tracking, Meta receives your device’s advertising identifier, an identifier Meta’s SDK creates for this installation, technical information about your device (such as model, operating system, language, time zone, and IP address), the fact that the app was installed and opened, and subscription events: a trial started, a subscription purchased, or a trial turned into a paid subscription, with its price and currency. The app sends these through Meta’s SDK when they happen on your device; RevenueCat does not share them with Meta. Meta can combine this with information it holds to attribute installs and purchases to our ads and to show our ads to people likely to be interested, as described in Meta’s Privacy Policy.

If you ask Holy Spark not to track, your advertising identifier is not shared. Meta’s SDK still reports installs, app opens, and subscription events without it, and Meta limits how it uses events from people who asked not to be tracked.

Meta never receives what you read, save, note, or search in Holy Spark. You can change your choice at any time in iPhone Settings › Privacy & Security › Tracking.

How the app is used, and what goes wrong

To see which features are used and to fix what breaks, the app sends PostHog, our analytics provider, anonymous usage events and crash reports. Events describe what happened, such as a first-open screen being shown, a study being opened, a reading plan being started, or a download failing, with counts and settings such as your Bible translation, your reading plan, and whether you subscribe. They never include what you read, write, note, or search. Each installation gets a random identifier that is not linked to your name, email address, or Apple Account; deleting the app removes it. PostHog stores this data in the European Union and does not keep your IP address. Crash reports contain technical details about the app and device at the moment of the crash.

Read PostHog’s Privacy Policy for more about this service.

Website and study delivery

Cloudflare hosts this website and downloadable study content. When your device requests a page or study, Cloudflare processes technical information such as your IP address, request URL, time, and browser or device information to deliver content and protect the service. A study URL identifies the book and chapter requested.

This website has no analytics scripts, advertising pixels, sign-up form, or contact form. We do not set cookies for analytics or advertising. Cloudflare may process security-related information as described in its Privacy Policy.

Support email

If you email us, we receive your email address and the information you include. We use that information to respond and resolve your request. Our email provider processes those messages to deliver and store them. Please avoid sending sensitive information that is not needed for support.

Why information is processed

Where data protection law requires a legal basis, we process information as needed to provide requested services, including purchases and support; for our legitimate interests in keeping the service secure, understanding subscription performance, and seeing how the app is used so we can improve it and fix problems; with your permission, given through Apple’s tracking question, to measure our advertising; and to comply with legal obligations. Optional device permissions, such as notifications and tracking, can be changed in iPhone Settings.

Retention and deletion

Local reading data remains on your device until you delete it or remove the app and its data. Device backups may retain earlier copies until you manage or delete those backups with Apple.

Purchase records are retained as needed to provide and restore access, handle billing disputes, prevent fraud, and meet legal obligations. Support messages are retained as needed to resolve the request and related follow-up. Service providers may retain technical records according to their own applicable policies and legal obligations.

Contact us to request deletion of information we control. Deleting app data does not cancel an Apple subscription or necessarily delete transaction records Apple must retain.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to restrict or object to certain processing. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it. You may also complain to your local data protection authority.

To make a request, email support@holyspark.app. We may need information to verify the request. We cannot retrieve reading data that is stored only on your device.

International processing

Our service providers operate internationally, so information may be processed outside your country, including in the United States. Where required, transfers are subject to safeguards provided under applicable law and the relevant provider’s agreements. Contact us for information about safeguards that apply to your data.

Children’s information

We do not ask children to provide personal information or create accounts. If you believe a child has provided us personal information through support, contact us so we can address it and delete information where appropriate.

Changes to this policy

We may update this policy as the app or our practices change. The date above shows the latest update. We will provide additional notice of material changes where required.