Five LoavesPrivacy Policy
Five Loaves is a Bible app made by Diminished Seventh, a business in Ontario, Canada, which publishes on Google Play as StudioVII. In this policy, "we" means Diminished Seventh. This page explains what the app does with your information. We kept it short on purpose, because there is not much to tell.
What we collect, and why
Your email address (only if you sign in)
Reading, Journeys, Baskets and the daily verse work without an account. Ask and verse explanations need one. To sign in, you enter your email address and we send you a one-time code. Accounts are handled by Supabase Authentication, and the code email is sent through Resend. The email address is the only personal detail we ask for. There are no passwords, names or phone numbers.
Account records on our server
When you have an account, our server keeps these records, each linked to your account:
| Record | What it holds | Why |
|---|---|---|
| Subscription status | Whether you have the Two Fish subscription, when it ends, and when it last changed. It is updated from RevenueCat. | To unlock paid features. |
| Monthly AI usage | A count of AI requests you made each month. | To apply fair-use limits. |
| Ask conversation counts | The day each Ask conversation started and how many replies it has had. Never the words of the conversation. | To apply the daily free allowance. |
| Request cost records | For each AI request: the time, the kind of request, the model used, and the number of tokens and cost. No message text. | To watch running costs. |
Saved verse explanations are stored once per verse and translation, and are shared. They are not tied to any person.
What you type into Ask and explanations
When you send a message in Ask, or ask for a verse to be explained, the text is sent through our server to Anthropic, which runs the Claude AI model that writes the reply. Anthropic acts as a service provider (a processor) for this. We do not save your messages or the replies on our server. The conversation is kept on your device only. Please do not include details you would not want processed this way, such as other people's names or health records.
Purchases
If you subscribe in the phone app, the payment is handled by Google Play or the Apple App Store. If you subscribe in the web app, the payment is handled by Stripe. We never see your card details. We use RevenueCat to manage subscriptions. RevenueCat receives your account's user ID and your purchase information so it can tell our server whether you are subscribed.
Narrated audio
The narrated verse of the day is recorded ahead of time and streamed from a public storage bucket (Supabase Storage). We made the recordings with ElevenLabs. No personal information is sent to ElevenLabs by the app. Listening requests are ordinary file downloads, and the hosting provider may keep standard technical logs.
What stays on your device
These are stored only on your phone and are not sent to us:
- Your progress in Today's Five, and your reading position.
- Your Baskets and any notes you add.
- Your Journey progress.
- Appearance settings, such as light or dark.
- Reminder settings. Reminders are local notifications scheduled by your phone. We do not run a push notification server.
- Downloaded verse audio.
- Images you make with Share as image, until you choose to share them.
Deleting the app removes all of this.
What we do not do
- We show no ads.
- We use no analytics, crash-tracking or advertising tools in the app.
- We do not sell or rent your information, and we do not use it to profile you.
- This website uses no cookies and no trackers. It loads fonts from Google Fonts, so Google may receive your IP address when you visit.
Who handles data for us
- Supabase: accounts, sign-in, database, and audio storage. Hosted in the United States.
- Resend: sends the sign-in code email.
- Anthropic: processes the text of Ask messages and explanation requests to write replies.
- RevenueCat: manages subscriptions.
- Google Play / Apple App Store: take payment for subscriptions bought in the phone app, and keep purchase records.
- Stripe: takes payment for subscriptions bought in the web app (through RevenueCat Web Billing) and keeps payment records. Stripe receives your email address and card details directly.
Because some of these providers are in the United States, your information may be processed outside Canada and may be subject to the laws of that country.
How long we keep things
Account records stay while your account exists. You can delete your account yourself in the app (Account, then Delete account), which removes your account straight away, or ask us to delete it by email. Either way, we remove your email address, subscription status and usage counts within 30 days. Request cost records are either deleted or cut loose from your account, so they no longer point to you. Backups may hold copies for a short time afterward. See how to delete your account. Purchase records kept by Google, Apple, Stripe or RevenueCat follow their own policies.
Children
Five Loaves is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has made an account, write to us and we will delete it.
Your rights
Under Canadian privacy law (PIPEDA), you can ask what personal information we hold about you, ask us to correct it, ask us to delete it, and withdraw your consent. Email us from your account's address and we will respond within 30 days. If you are not satisfied, you can contact the Office of the Privacy Commissioner of Canada. Depending on where you live, you may have similar rights under local law, and we will honour them.
Security
Data travels over encrypted connections, and the database limits each person to their own records. No system is perfectly secure, but we keep what we hold small so there is little to lose.
Changes
If we change this policy, we will update the date above. For significant changes we will tell you in the app.
Contact
Questions or requests: hello@fiveloaves.app