IEUM Privacy Policy

Reading and information on your device

You can read the available Scripture and explore scenes without creating an IEUM account. Reading preferences, guest verse marks, and downloaded public content can remain on your device. The app does not upload Bible search terms as a saved search history.

An unsaved draft or recording is not the same as a saved account record. Until you choose to save or share it, it stays in the current app experience. Leaving that screen or closing the app may discard unsaved work. Downloads and files you export are controlled by your device and the apps you choose to receive them.

While you write a reflection in the app, “Keep a draft on this device” is on by default, so the reflection and prayer you are writing are saved as a draft on this device until you save them to your account. On a shared device, turn this option off or delete the draft. Drafts written while signed in are removed from this device when you sign out or delete your account. When a sign-in ends because it expired, its draft stays on this device so the writing is not lost; the next time someone signs in, the app shows only its passage and date and asks whether to keep writing it or remove it. Drafts written while signed out, My Verse Book (its title and the locations of the verses you chose), guest highlights, and your last reading place are not linked to your account, so they stay on this device after account deletion. However, a draft you were writing while signed out moves to that account’s drafts if you sign in without closing the app, and guest highlights and underlines that you move with “Move to my account” after signing in are saved to your account and removed from this device. When a stored My Verse Book cannot be read and is repaired or started again, a copy of the original record is set aside on this device; up to five copies are kept, and the oldest is removed first. Whether or not you are signed in, “On this device” in Account and privacy (the gear) lets you choose records kept only on this device and clear them: your reading record, reading plans, prayer notebook, reflection drafts, My Verse Book and its set-aside copies, guest highlights and journey progress, your last reading place, and My time with the Word (reminder times). Cleared records cannot be restored. “Clear them from this device too,” on the screen that confirms account deletion, clears them the same way, and removing the app also removes them. Whether you agreed to the Community Guidelines and your reminder settings are also stored on this device.

While you are signed in, this device keeps a copy of the verse marks (highlights and underlines), bookmarks and reading place last loaded from your account, so you can still see them without a connection. Offline, this copy can be viewed but not changed. Each sign-in also stores a random tag made for that sign-in and the time the server says the sign-in ends, so the app can tell you before it ends and can tie your Community Guidelines agreement to that sign-in only. This information is not sent to our servers. It is removed when you sign out or delete your account, and after a sign-in expires it is removed or replaced at the next sign-in.

Account and sign-in information

When you sign in, we use an identifier from your sign-in provider to recognize your IEUM account and protect access to its records. Depending on the provider and the information you authorize, the sign-in service can also supply your name and email address. You can choose a separate display name for a group or invitation.

The native app uses a session credential to access your account. A native session expires after 30 days unless revoked earlier. The temporary code used to finish native sign-in expires after 2 minutes and can be used once. You may need to sign in again when a session expires. These validity periods describe access credentials, not a retention period for your notes.

You can also sign in with a separately issued invited account. We store its assigned username, display name, and a securely hashed password. We do not store or log the plaintext password. Account deletion removes the login record and password hash. Invited accounts have the same ordinary permissions to save, share, and delete their records.

Information you choose to save

Saved content can include your written reflections and prayers, passage references, narrator and recipient labels, voice recordings or uploaded audio, bookmarks, verse highlights, reading position, journey progress, drafts of journeys you create, and revisit settings or replies. We associate these records with your account so you can return to them.

Prayers and reflections can reveal religious beliefs and other personal information. You choose what to write or record. Avoid including information about another person without permission. We use your saved content to provide the features you request, rather than to generate a live AI conversation.

Records that may reveal religious beliefs

Because IEUM is a service for reading and reflecting on Scripture, the prayers, reflections, and recordings you save, and the notes you share, can reveal your religious beliefs. Laws such as the GDPR and Korea’s Personal Information Protection Act treat religious beliefs as sensitive information, so we handle this content as follows.

IEUM does not ask about your religion, denomination, or faith and does not collect it as a separate field. Such content appears only in records you choose to save or share. Writing and recordings you have not saved are not sent to our servers.

Saved records are used only to keep them for you, show them again when you ask, and deliver the shares you choose. We do not analyze them to infer your religious views, use them for advertising, or show them to other users automatically. Content reaches a group, a published journey, or an invitation only when you choose the record and where it goes. You can delete saved records at any time.

Private records and content you share

Your personal library is private in the app unless you choose a sharing action. Private means that ordinary access is limited by account permissions; notes and audio are processed by the service and its storage providers and are not end-to-end encrypted.

When you share a note in a group, group members can see the chosen text and your group display name. The separate narrator and recipient fields are not added to the group post, but anything you wrote inside the note is visible. Attached audio is shared only when you select that option.

Published journeys can expose their title, guide name, description, commentary, questions, and selected audio to anyone with the link. Invitation pages can expose the name and message you enter, alongside the selected scene and Scripture. Your private reflections and voice recordings are not automatically added to an invitation.

Links can be forwarded. Recipients can save content or make copies. Withdrawing a link or deleting your IEUM copy does not remove screenshots, exported files, or copies held by other people.

Microphone, files, and reminders

The microphone is used when you choose to record and grant the device permission. You can write instead or select an audio file. Saving or sharing audio sends the selected recording to the online service.

Export and share actions send the selected content to the destination you choose. A calendar file you import is handled by your calendar app; IEUM does not need to read your calendar to create that file. Revisit settings show a saved reflection on a later visit. They do not by themselves send a push notification.

If you turn on daily verse reminders, your reminder time and the Bible verses for the next 30 days are scheduled as local notifications on your device. Your device delivers them; they do not pass through our servers. When you open the app near the end of that period, the reminders are scheduled again at the same time, and turning reminders off cancels all scheduled reminders. You can change notification permission in your device settings.

Services that help operate IEUM

The release app uses Vercel for server hosting and private audio storage, and Turso for database storage. Server functions and the database are provisioned in Japan (Tokyo); audio storage is provisioned in the United States (Washington, D.C. region). Apple handles authentication. These providers process the identifiers, saved content, and technical information needed to deliver the features you request. External Bible sources, calendar apps, and sharing destinations have their own privacy practices.

If you contact support, we receive the contact information and content you send. Reports can include the reported content, account or content identifiers, your reason, and information needed to review the issue. Blocking requires recording the relationship between the accounts. We use this information to respond to requests and operate safety controls.

The IEUM app includes the fonts it uses to display text, so showing an app screen does not send a request to an outside font service. Invitation pages shared from the app display text in the system fonts already on the viewer’s device and do not load fonts from elsewhere.

Online requests also involve technical connection information needed to deliver and secure the service. Please contact us about the handling of your information or the services involved.

Where your information is processed

We use the providers below to operate IEUM, or your device communicates with them directly. Information is sent over encrypted network connections when you use the app or website, so it can be processed outside your country, including in Japan and the United States.

If you do not want your account and records processed in these locations, you can choose not to create an account or request account deletion. Features that need an account, such as saving and sharing, are then unavailable.

Information, purposes, and retention

The table below lists the information our servers process, why we process it, and how long we keep it. Drafts, your reading record and reading plans, your prayer notebook, My Verse Book and its set-aside copies, guest highlights you have not moved to your account and your guest reading place, the copy of your signed-in verse marks, bookmarks, and reading place, the sign-in tag and end time, your Community Guidelines agreement, reading preferences, and reminder settings stay on your device and are not sent to our servers, so they are not listed. They are removed when you clear them on the device or remove the app.

Keeping and deleting information

Saved account content remains available while it is stored in IEUM. You can delete individual notes and their attached audio, remove your own group shares, leave groups, and request deletion of your IEUM account. Revoking an invitation or withdrawing a journey closes its public link; that action alone is not a request to erase every stored version.

Account deletion removes your account-associated saved records and the shared content controlled by IEUM, including your uploaded audio. Groups you own are closed; other members retain their own original private notes. Access credentials are revoked. If deleting an audio file fails temporarily, a deletion task is kept for retry and deletion remains pending until that work is complete.

Support messages and safety reports are used to resolve the request or issue for which they were provided. Contact us if you want to request access, correction, or deletion of information in that correspondence. We may need to verify that the request concerns your account.

Deleting IEUM data does not delete your account with Apple or another sign-in provider, or files and calendar events you exported to another app. The account-deletion page explains the available controls.

How we protect information

Connections between the app and our servers are encrypted (HTTPS). Access to records and audio is limited by account permissions, and audio files are kept in private storage. Sign in with Apple tokens are encrypted on the server, invited-account passwords are stored only as hashes, and your device keeps the IEUM session in its protected credential storage. Records are not end-to-end encrypted, so the service and its storage providers can process them.

Your choices and questions

You can read without signing in, choose what to save, decline microphone access, decide what to share, and remove saved content. For privacy requests, account-access problems, or a concern about a child’s information, contact support@aboutusforyou.com. Please do not send passwords or sign-in codes.

We update this policy when our data practices change. The published version and its update date are available on this page.

Your privacy rights

Depending on where you live, you may have the right to access your personal information, correct it, delete it, receive a copy of it, object to or restrict certain processing, and withdraw consent you have given. In the European Economic Area and the United Kingdom, these rights come from the GDPR and the UK GDPR, and you can also complain to your local data protection authority. California residents have the right to know what personal information we collect, use, and disclose, and to ask us to delete or correct it. We will not treat you differently for exercising these rights.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

To exercise these rights, use the in-app controls to view or delete your records, remove your shares, or delete your account, or email support@aboutusforyou.com. An authorized agent can also make a request for you. We may need to verify that the request concerns your account, and we respond within the time required by applicable law.

IEUM does not ask your age at sign-up and is not designed for young children. If you believe a child’s information was saved without a parent’s permission, contact support@aboutusforyou.com.

Privacy contact

AboutUsAgency, Inc. is the controller of the personal information processed through IEUM. For privacy questions, requests, or complaints, contact AboutUsAgency, Inc. at support@aboutusforyou.com.

Deletion protection

A minimal account deletion marker is kept to prevent delayed requests from recreating deleted records. It does not contain your reflection text or audio.

Sign in with Apple

You can sign in with Apple in the app. We verify Apple’s signed identity token, application identifier, and one-time nonce on our server. Apple email is used only when verified. Apple authorization tokens are encrypted on the server and used to validate or revoke authorization. Your device stores an opaque IEUM session in its protected credential storage.

Deleting your account also requests revocation of Apple authorization. If Apple is temporarily unavailable, encrypted revocation information remains only for cleanup; return to the deletion screen to retry. If a token exchange ended without a recoverable token, we explain how to revoke the app in Apple account settings. A minimal deletion marker is retained to prevent an in-flight request from recreating deleted data.

Previous website accounts

The release app uses a separate service. Records in the earlier OpenAI-hosted website are not automatically copied or linked to the new app. We preserve that website and its data; access to or migration of those records depends on restoring access to the original service. Korean and English app accounts and records are separate.