The short version: Selah collects no data about you. There is no account, no analytics, no advertising and no tracking. Your prayers and journal stay on your iPhone. If you choose to turn on sync, an end-to-end encrypted copy goes to your own Google Drive or iCloud Drive, and we never receive it.
Who is responsible
Alírio de Jesus Guilherme Mambo, Alzefa Labs, c/o POSTFLEX PFX-622-266, Emsdettener Straße 10, 48268 Greven, Germany. Email: info@alzefa.com. Full details are in the Impressum.
What the app collects
Nothing. Selah does not send any information about you or your device to us. It has no account. It contains no analytics, crash-reporting, advertising or tracking code. Nothing goes to anyone else either, except the encrypted copy that the optional sync described below keeps in your own Google Drive or iCloud Drive. Apart from Google Drive sync, the app makes no network connections.
What stays on your iPhone
Your prayers, groups, answered prayers, prayer sessions, journal entries and settings are saved on your device. We cannot see them. Deleting the app deletes them from the phone, but not any copy you chose to keep in your own cloud or in a backup file (see below).
If you use your device’s backup (iCloud Backup or a computer backup), iOS may include the app’s files in it. That is controlled by your own device settings and Apple’s terms, not by us.
The Bible verses are part of the app. Selah does not fetch them from anywhere.
Reminders
Reminders are local notifications that your iPhone schedules on the device. They are not sent through any server. Selah asks for permission to send notifications, and you can say no and still use the app. The setting “Hide text in notifications” is on by default, so reminders do not show your prayers.
App lock
If you turn on App lock, Selah asks iOS to check that it is you, with Face ID, Touch ID or your device passcode. iOS does the check and tells the app only whether it worked. Selah never receives your face, fingerprint or any other biometric data.
Sync and cloud backup (optional)
Sync is off until you turn it on. If you do, you choose where Selah keeps a copy of your prayers and journal: your own Google Drive or your own iCloud Drive.
- Encrypted on your device. Selah encrypts the data on your device with AES-256-GCM before anything is uploaded. The key is created on your device and protected by a recovery key that only you hold. We never receive your data, the key or the recovery key, and we cannot recover the recovery key for you.
- Google and Apple store only encrypted files. They can see that files exist, their names, sizes and times, and a small unencrypted preview that Selah uses to offer a restore: a date and four counts (entries, prayers, groups and diaries). They cannot read your prayers or your journal.
- Google Drive. If you choose it, Selah uses Google Sign-In only to reach your Drive, and only the hidden app folder that belongs to Selah. It cannot see your other files. Google also tells the app the email address of the account, which Selah shows on the phone as “Signed in as” and does not store. Google’s handling of your account is described in Google’s privacy policy. Google Drive is the only place where Selah makes network connections.
- iCloud Drive. If you choose it, the copy is kept through iCloud Drive in your Apple account, with no extra sign-in. Apple’s handling of it is described in Apple’s privacy policy. iOS itself moves the files to and from iCloud Drive, so Selah opens no network connection for it.
- Your key on iPhone. Selah keeps the key in the iOS Keychain, which Apple can sync between your devices through iCloud Keychain if you use it. On a new iPhone, Selah finds the key there, or asks for your recovery key.
- Removing a device. In Sync and backup you can remove another of your devices. Selah deletes that device’s encrypted record in your cloud folder, so it stops syncing. Its data stays on that phone.
- Turning sync off. The phone stops syncing. Nothing is deleted in your cloud or on the phone. Your cloud copy stays until you remove it in your Google or Apple account.
Backup files
In Settings, Sync and backup, you can export everything on the phone into one backup file and import one again. You choose where the file goes, for example Files, a cloud drive or an email to yourself. Nothing is sent to us. If you set a passphrase, the file is encrypted (AES-256-GCM). If you do not, the file is not protected and anyone who gets it can read it. We cannot open or recover a file whose passphrase you lost. Importing a file merges it with what is on the phone. Where both have the same prayer or entry, the more recent change wins, and anything deleted in the file is deleted on the phone too.
Links and email
If you write to us, we receive your email address and your message, and we use them only to answer you. The legal basis is Art. 6(1)(b) GDPR when your message is about a purchase or another contract, and otherwise our legitimate interest in answering you (Art. 6(1)(f) GDPR). We delete support emails 12 months after the conversation ends, unless the law requires us to keep them longer. Our email is hosted by Apple (iCloud+). Apple may store and process the messages on servers outside the European Union, including in the USA; Apple states that it covers these transfers with the EU standard contractual clauses (Art. 46 GDPR).
These web pages
These pages set no cookies and load nothing from other companies. Our web server keeps access logs (such as the IP address, the time, the page requested, the referring page and the browser’s user agent), which we use to keep the site secure and running and to count visits, without cookies. The logs are kept for 14 days and then deleted. The website is hosted on a server in Spain, in the European Union. More is in the website privacy policy.
Children’s privacy
Because Selah collects no personal information from anyone, it collects none from children, including children under 13 (COPPA) and under 16 (GDPR-K). The app has no accounts, no chat, no advertising and no social features. If you are a parent and believe your child has sent us personal information, such as by email, write to us and we will delete it.
Your rights
Because we hold no data about you in the app, there is nothing for us to access, correct or delete. Your data is on your device, in your own cloud copy and in the backup files you made, and you control all of it. For anything we hold from an email you sent, write to us and we will respond and delete it on request, whatever your country of residence. You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest (Art. 15 to 18, 20 and 21 GDPR). To use them, write to info@alzefa.com.
You can complain to a data protection authority (Art. 77 GDPR), for example the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, or the authority where you live.
Changes to this policy
If the app ever changes in a way that affects your privacy, we will update this page and its date before the change ships, and the App Store privacy details will change with it.