Privacy policy

1. Who we are

Verse Caller and versedove.com are published by Moonlanes (“we”, “us”). We decide how the personal data described here is used, so we are its controller under the General Data Protection Regulation (GDPR).

Privacy questions

privacy@versedove.com

Support

support@versedove.com

We have not appointed a data protection officer. Every privacy question goes to privacy@versedove.com, and we answer it ourselves.

2. What stays on your phone

Verse Caller does its main work on your phone. The information in this section is stored in the app’s private storage and used there. It isn’t sent to us or to our partners, and we can’t see it. If your phone backs up to your Google account, Android’s own backup copies part of it there, never to us (4.9).

Contacts

The app reads your contacts to show names and photos on calls, so you can choose people for their own verse or theme, so you can pray for the people who call you, and for birthday blessings. It reads your first name from your own contact card for Today’s greeting. It changes a contact only when you ask it to: to make a hymn that person’s ringtone.

Calls

When a call comes in or goes out, Android gives the app the phone number and the state of the call. The app uses them on your phone to find the contact and choose the verse. Phone numbers, your contacts’ names and call times are never sent to us or to our partners.

Verse Caller works in one of two modes:

• Full mode: Verse Caller is your phone app. Setup offers it first wherever your phone allows it, and it is the only mode on Android 8, 9 and 10. Its Phone screen shows your recent calls from Android’s call log, and the app keeps its own list of the calls it handled (number, time, length and whether you answered) for 90 days.
• Lite mode (Android 11 and newer): Verse Caller is your caller ID & spam app, and your usual phone app keeps handling your calls.

The app also keeps your recent missed calls for a week, so you can call back or pray for the person, and each call-back reminder, with the person’s name and number, until a day after it rings. None of these call records ever leaves the phone, not even in a backup.

The verses from your calls

The app keeps a short history of the verses it showed: which verse, for which contact, on which day and in which part of the day (such as morning or evening). It never records the time of a call, how long it lasted, or whether you answered. Each entry is deleted after 90 days, unless you keep that verse with ♡; the app also counts your verse calls, for milestones. This history never leaves the phone, not even in a backup. It fills Verses from my calls, keeps a verse from coming back too soon for the same person, and suggests who could get their own verse.

Your faith, prayers and reading

Your faith mode (Christian, Catholic or Just exploring), your prayer list and answered prayers, the verses you save, your reading plans and streak, and what you read in the Bible. They are never sent to us, to analytics or to ad networks.

Your settings and downloads

Which verse, theme and hymn belong to whom, your reminders, the numbers you block, your blessing replies, speed dial and other settings, and the Bibles, themes and hymns you downloaded, so they work offline.

3. Permissions the app asks for

Android asks you before the app can use most of these. You can change them at any time in your phone’s settings; features that need a permission stop working without it.

Verse Caller doesn’t ask for your location, microphone, camera or text messages. It never records calls and never reads your messages. A reply you send with Text back goes out as 4.7 explains.

4. What leaves your phone, and why

This is everything that leaves your phone. Apart from Android’s own backup to your own Google account (4.9) and the messages you choose to send (4.7), your contacts, your calls, your prayers and what you read never leave it.

4.1 App usage and crash reports: Google Analytics for Firebase and Firebase Crashlytics

When

The app asks everyone first, wherever you live, right after you choose Christian, Catholic or Just exploring. Until you tap Allow, it sends nothing about how you use it and no crash reports; if you tap Don’t allow, it sends none at all. Crash reports from before your answer are deleted, never sent. You can change your answer at any time in More → Settings → Privacy & data → App usage and crash reports.

What is sent

When you first open the app and how often and how long you use it; which parts of the app you open (such as Today, the Bible or Settings), never what you type or read; the setup steps you finish, the permissions you allow, whether Check this phone worked, and which help articles you read; the Premium offers you see, trials and purchases with their price; where the app shows ads, the ads shown, what they earned and your ad privacy choice; how you found the app (a shared link, a Play Store search or a campaign, as Google Play reports it); whether you have Premium or a trial, whether Verse Caller works in Lite or Full mode, and the test groups you are in; your phone’s brand and model, Android version, the app version and your language; your approximate location (country, region and city), which Google works out from your IP address without keeping the address; and a random app ID, not your name, phone number or Google account.

Crash reports add what went wrong and where in the app’s code, the app usage events just before it, your phone’s free memory and storage, counts of how often your verse screen showed in time on calls and why it didn’t (never who called, their number or when), and a Crashlytics installation ID.

Never sent

Your faith setting, or anything that shows it, such as Catholic mode, the Rosary or the Angelus; which Bible you use and what you read or search in it; your prayers, your plans and the verses you see or save; the names of the themes and hymns you choose; your contacts, who called you and when, and which verse came with which call. Verse Caller has no advertising ID to send.

Why

To see which features people use, find and fix problems, and decide what to build next.

How long

Google keeps app usage data linked to the random app ID for up to 14 months, and crash reports for 90 days.

4.2 The app’s settings: Firebase Remote Config

What is sent

The app asks Google’s Firebase Remote Config for its current settings at most every 12 hours, and right away when we publish a change while the app is open: which features are on, the offers to show, and the test groups some features use. The request includes a Firebase installation ID (a random ID for this installation of the app), the app version, your Android version, your phone’s language, region setting and time zone, and your IP address. Once you allow app usage reports, it also includes what those reports keep about your phone and your use of the app (4.1), such as Lite or Full mode and whether you have Premium. It never includes your faith, prayers, what you read, your contacts or your calls.

Why

To turn features on or off, fix problems quickly and run tests without an app update.

Your choice

The app needs its settings to work, so it asks for them whatever your answer about app usage reports.

How long

Google keeps the installation ID until it is deleted, and removes the related data within 180 days after that.

4.3 Purchases: RevenueCat and Google Play

What is sent

To RevenueCat: a random app user ID, created on your phone and not linked to your name, email address or phone number; what you bought and when, the price and currency, the Google Play order number and purchase token, trial and renewal status, your store country, the app version, your device type, and your IP address as part of each request; and two markers, whether you have had a free taste of Premium and whether you have seen a special offer, so neither is repeated. If you allow app usage reports, RevenueCat also gets the random app ID of those reports (4.1), so purchases can be counted in them; it is removed when you turn the reports off.

Why

To unlock what you paid for, restore it on a new phone, show your plan and the date a trial ends, handle refunds and withdrawals, and prevent fraud.

Payments

Google Play takes all payments. We never see your card, bank or billing details. Google Play gives us order details (such as the order number, product, price, date and country) so we can handle refunds and withdrawals.

Withdrawals

Where the law of the country you live in gives you a right to withdraw from a purchase, you can do so within 14 days (terms of use, section 8). When you do, we use the purchase details (the Google Play order number, product, date and price) and your email address, to confirm the withdrawal and refund you through Google Play. The app prepares that email for you, with the product, its price and the purchase date, and your email app sends it. We keep that record for as long as consumer and tax law require.

How long

While you have purchases in the app, so you can restore them, and afterwards as long as tax and consumer law require. You can ask us to delete your RevenueCat record at any time; if you still own a purchase, Restore purchases brings it back from Google Play.

4.4 Google Play

Google Play delivers the app and its updates, takes payments, handles refunds, and shows the in-app review prompt. When you install the app from a shared link, Google Play passes what the link carries to the app (the “install referrer”), so the app can open the shared verse or theme for you (4.7). We also receive statistics from Google Play that don’t identify you (installs, crashes, ratings), and the reviews you post publicly. Google’s privacy policy applies to Google Play.

4.5 Ads, only without Premium: Google AdMob

People who don’t have Premium may see ads in the themes: now and then a tile among the themes, and a short video they choose to watch to keep a theme. As a test, some people may also see a full-screen ad now and then, after a theme is applied or when they come back to the app. Ads never appear on your calls, verses, prayers or the Bible. For anyone with Premium or a trial, and for some people without it as a test, the app never asks for an ad. Remove ads turns the ads off; a video to keep a theme still plays when you choose one.

Before the first ad

The app asks whether our ad partners may use data about your device and the ads you see, to measure them: in the EEA, the UK and Switzerland with Google’s consent form, and elsewhere with its own question. No ad loads before you answer. If you don’t allow it, you get limited ads, and Google restricts how it processes your data. Change your answer at any time in More → Settings → Privacy & data → Ad privacy choices.

Never personalized

Verse Caller has no advertising ID, and it tells the ad software to show only ads that aren’t personalized. Ads that aren’t personalized still use limited data, such as your IP address and device information, to show an ad and prevent fraud. Ad networks never get your faith, prayers, contacts or calls, or what you read.

What is sent

Your device model, Android version, language, screen size and network type, your IP address (which gives an approximate location), an app set ID (an ID the ad software gets from Google Play services, not the advertising ID), the app’s name and version, your consent choice, and which ads were shown, tapped or watched to the end.

Who receives it

Google AdMob, Google’s ad service, which chooses each ad from the advertisers bidding through Google. If other ad networks join, they will be named here before they receive anything.

Google’s consent check

When the app starts, Google’s consent software (the User Messaging Platform) checks with Google, using your IP address, whether a consent form is needed where you are. It does this for everyone, and it stores the answer and your consent choice on your phone, where the ad software reads them.

Why

To show the ads that pay for the free version, count views and taps, keep the same ad from repeating too often, and prevent fraud.

How long

Google keeps ad data under its own policy (link in section 6).

4.6 Downloads: our content server

Bibles, themes and hymns, the lists of them, and help articles download from cdn.versedove.com, which runs on Cloudflare. The app adds nothing about you to these requests: no app ID, account or settings. Like any web server, it receives your IP address, the time, the file requested and basic details of the connection. So it learns which Bible or theme was downloaded, never what you read. This is used to deliver the files and to protect the service from abuse. We don’t keep these request logs ourselves; Cloudflare processes them briefly to run and secure the service.

4.7 Verses, themes and messages you share

When you share a verse, as a card or a message, the message carries a link to versedove.com, such as versedove.com/v/philippians-1-3?src=calls&b=kjv. The link names the verse, the Bible you read it in and the part of the app it was shared from. A shared theme’s link names only the theme, such as versedove.com/t/still-waters, and an invitation to the app links to versedove.com with the part of the app it came from. These links never contain names, phone numbers, contact details or your prayers. Anyone who has a link can see what is in it.

When someone opens a link and the app doesn’t open it directly, our website shows them that verse or theme with a link to Google Play (see section 14). If they install the app from there, the link travels with the install (the “install referrer”), so the app can open that verse or theme for them; the app reads it on the phone and keeps it only until then. If they allow app usage reports, those show only that the app came from a shared link and the part of the app it was shared from, never the verse, the Bible or the theme.

What you share, and with whom, is your choice: the app hands the message to the app you pick. Messages to a person, such as a blessing card or Message, open in your messaging app addressed to their number, and a birthday card shows their first name. Text back works for your saved contacts: in Full mode, Android itself sends the reply you pick by text message as it declines the call, as phone apps’ quick replies do; otherwise the reply opens in your messaging app, and you send it.

4.8 Reading aloud

Read aloud uses the text-to-speech engine on your phone (for example, Speech Services by Google). The app gives that engine the words to say: a verse and its reference, or the passage or prayer you chose, never a name. On calls it uses only voices that work without the internet, and elsewhere it prefers them; a voice that works online sends the words to its maker, under the engine’s own terms.

4.9 Android’s own backup

If your phone backs up to your Google account, Android’s own backup copies Verse Caller’s data there, so it can come back on a new phone: your prayers and intentions (with the names of the people you pray for), saved verses, reading-plan progress and streak, the people you chose (their names and numbers as saved, with their verse or topic, theme and hymn), the numbers you block, speed dial and the SIM you use for each contact, the themes you kept with an ad, and your settings, such as your faith mode, Bible and daily verse time. On Android 9 and newer, when your phone has a screen lock, the backup is encrypted. The history of which verse came with which call never leaves the phone, not even in a backup, and neither do the app’s call records or the Bibles and themes you downloaded.

The backup goes to your own Google account, never to us, and we can’t see it. You control it in Android’s settings (More → Settings → Backup and new phone shows you where), and Google handles it under its own terms.

4.10 When you email us

What we receive

Your email address, your message and anything you attach. When you use Email support or Report a problem in the app, it adds a short summary that you can read and remove before sending: the app version, your phone’s brand and model, Android version and language, whether Verse Caller handles your calls (Lite or Full mode) and whether pop-ups and battery use are allowed, and how your last five verse screens went. It never includes contacts, phone numbers, call times, prayers or verses. Your own email app sends it.

Why

To answer you, fix problems, and handle purchases, refunds, withdrawals and privacy requests.

Who handles it

Email to our addresses arrives through Cloudflare Email Routing and is kept in a mailbox hosted by Google (Gmail). Our replies are sent through SMTP2GO.

How long

Up to 2 years after our last message, unless we need it longer to handle a legal claim or to meet a legal duty.

5. Legal bases

The GDPR only lets us use personal data when we have a legal basis for it. These are ours:

Where we rely on legitimate interests, we have weighed them against your rights and expectations, and you can object at any time (section 9). Where the law requires consent to store or read information on your phone, we ask for it first.

Giving us data is up to you, and no law requires it. Some of it is needed for what you ask the app to do: without the Contacts permission, calls can’t show names and you can’t choose people, and without purchase data, Premium can’t be unlocked or restored.

6. Who receives data

Service providers (“processors”) handle data only on our instructions, under data processing terms. Google Play and ad networks also use data for their own purposes, as their own policies explain. When we add a partner, we list it here before it receives any data.

We may also share data when the law requires it, to protect our rights or someone’s safety, or with a company that takes over the app, which would then have to follow this policy. We don’t sell personal data for money, and we never sell your contacts, calls or prayers.

7. International transfers

Several recipients are based in, or use servers in, the United States and other countries outside the European Economic Area. When data leaves the EEA, it is protected by one of these safeguards:

• the EU–US Data Privacy Framework, for recipients certified under it;
• the European Commission’s Standard Contractual Clauses, which are part of our partners’ data processing terms;
• an adequacy decision of the European Commission, for example for New Zealand, where SMTP2GO is based.

You can ask us for a copy of the safeguards at privacy@versedove.com.

8. How long data is kept

9. Your choices and rights

In the app

Open More → Settings → Privacy & data:

• App usage and crash reports: switch them off or on.
• Ad privacy choices: change your answer about ads, if you see them.
• Delete everything: erase everything the app stored on your phone. How deletion works.

You can also withdraw permissions and turn off backup in your phone’s settings, or uninstall the app.

Your rights under the GDPR

If you are in the EEA, the UK or Switzerland, you have the right to:

• access the personal data we hold about you and get a copy;
• correct data that is wrong;
• delete your data;
• restrict how we use it;
• port data you gave us, in a machine-readable format;
• object to uses based on legitimate interests;
• withdraw consent at any time, as easily as you gave it, without affecting what happened before;
• complain to a data protection authority, in particular the one where you live, where you work or where you think the problem happened.

How to ask

Email privacy@versedove.com. Verse Caller has no accounts, so we can only find data if you give us something that links it to you: for anything about purchases, your Google Play order number (it starts with GPA.). App usage data is linked only to a random app ID that we can’t look up from your name or email address; it is deleted automatically within 14 months, and deleting the app’s data or uninstalling the app starts a new ID. The installation ID of the app’s settings can’t be looked up either. We may ask for more information to confirm a request is yours.

We answer within one month. If a request is complex, we may need up to two more months, and we will tell you why. Using your rights is free.

10. US state privacy rights

If you live in a US state with a consumer privacy law, such as California, Virginia, Colorado, Connecticut, Texas or Oregon, you also have these rights:

• Know what we collect and why. This policy describes it: identifiers (the random app ID, the app user ID, the Firebase installation ID, the app set ID the ad software uses where ads run, and your IP address), commercial information (purchases), internet or other electronic network activity (app usage), and approximate location (from your IP address). We don’t collect sensitive personal information: your faith and your prayers never reach us.
• Delete and correct your personal information.
• No sale or sharing. We don’t sell personal information and don’t share it for cross-context behavioral advertising: the app has no advertising ID and asks only for ads that aren’t personalized.
• Equal treatment: we won’t treat you differently for using your rights.
• Appeal: if we turn down a request, reply to our answer or email privacy@versedove.com with “Appeal” in the subject. We will answer within the time your state’s law sets.

An authorized agent can make a request for you if they show us your written permission.

11. Children

Verse Caller is made for adults (18+) and isn’t directed to children. We don’t knowingly collect personal data from children. If you believe a child has used the app and data about them reached us or our partners, write to privacy@versedove.com and we will delete what we can.

12. Security

• Everything the app sends travels encrypted (HTTPS).
• Data on your phone stays in the app’s private storage, which other apps can’t read.
• Android’s own backup is encrypted on Android 9 and newer when the phone has a screen lock.
• We don’t run our own servers that store your data. Our partners protect it under their own security programmes, and we limit access to our partner accounts to what is needed to run the app.
• No system is perfect. If a breach puts your rights at risk, we will tell you and the authority as the law requires.

13. Automated decisions

We don’t make decisions about you based only on automated processing that have legal or similarly significant effects. Which verse comes with a call, and the suggestions in the app, are worked out on your phone.

14. This website

• No cookies, no analytics, no ads, no tracking. The pages load their fonts, styles and images only from versedove.com, and make no requests to other companies.
• Hosting. Cloudflare, Inc. hosts the site. To deliver pages and protect the site from attacks, Cloudflare processes your IP address, your browser’s details, the page you ask for and the time. We don’t keep visitor logs ourselves; we only see totals, such as the number of visits, in Cloudflare’s dashboard. Our legal basis is our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Cloudflare’s privacy policy.
• Shared verse and theme pages. When a shared link (an address starting with versedove.com/v/ or versedove.com/t/) opens in your browser, the page shows the verse or the theme the address names, and the verse in the Bible the address names when this website has it. A short script adds the link to the Google Play button, so the app can open that verse or theme for you if you install it; on an Android phone, a link under the button opens it in Verse Caller instead. When the home page opens from an invitation in the app (an address ending in ?src= and the part of the app it came from), a short script adds that part of the app to the Google Play button in the same way. These scripts run only in your browser, send nothing and store nothing on your device.
• Links to other sites. Links to Google Play and other sites take you to services with their own privacy policies, such as Google’s.

15. Changes to this policy

When the app or our partners change in a way that affects your data, we update this page and the date at the top. If a change is significant, we will also tell you in the app before it takes effect. You can ask us for earlier versions.

16. Contact

Privacy questions and requests: privacy@versedove.com. Everything else: support@versedove.com.

Full company details: legal notice.

See also: Terms of use · Delete your data