Privacy Policy

Aven is a Bible app for daily verses, widgets, and verse customization. It is developed and operated by Cansu Eroğlu, an independent developer based in Türkiye ("we", "us"). This policy explains what information Aven handles, where it goes, and what you can do about it.

1Information that stays on your device

The following is saved only on your iPhone or iPad. It is never sent to us, and we cannot see it:

• the name you enter in the app,
• your Bible version and app language,
• your reading progress and liked verses,
• your verse, theme, font, and widget customizations.

This information is removed when you delete the app. If you back up your device, it may be included in your own backup, which is managed by Apple.

2Information our server stores for reminders

Daily verse reminders are sent from our server. If you set up reminders, the app sends us the following, and nothing is sent if you never set them up:

• a random installation ID created for your copy of the app (it is not linked to your name, email, or Apple ID),
• the push notification token Apple gives your device, which is needed to deliver notifications,
• your time zone,
• your reminder settings: the time window, how many reminders per day, and whether they are on,
• the Bible translation and reminder mood you picked (for example, "Hopeful"),
• the anonymous ID that RevenueCat assigns to your copy of the app, and whether a paid subscription is active and until when, so paid reminder features work.

We use this only to send the reminders you asked for, at the right time and in the right translation.

Aven is a Bible app, so using it, or the reminder mood you choose, could suggest something about your beliefs. This is one reason we keep the server record small and tied only to a random ID. We store it only because you chose to set up reminders, and you can stop them or delete the record at any time (see section 8).

3Technical data

When the app contacts our server, or downloads the theme catalog and theme images, your IP address is processed by our hosting provider so the request can be delivered and abuse can be limited. We do not save IP addresses in our database and we do not use them to identify or locate you. The hosting provider may keep short-lived technical logs.

If you have chosen to share analytics with app developers in your device settings, Apple may show us combined, anonymous statistics and crash reports. These do not identify you.

Analytics. We use Amplitude to understand how Aven is used, for example how many people open the app each day, reach the home screen, or see the subscription screen. Amplitude receives: the anonymous app user ID that RevenueCat assigns to your copy of the app (so we can see which usage leads to a subscription), an identifier for your device (the vendor identifier Apple gives our apps, not the advertising identifier), app events such as app opens and closes, session start and end, and home screen and subscription screen views, and basic technical information: device model, iOS version, app version, language, and the country set on your device. We have turned off Amplitude's IP address and location lookup: your IP address is used only to deliver the request, is not stored, and no city, region, or location is derived from it. What you read, the verses you like, your name, and your reminder settings are never sent to analytics. Amplitude processes this data in the United States and may use it only to provide the service to us.

This website does not use cookies or analytics.

4Purchases

Subscriptions are bought through Apple's App Store. Apple handles the payment, and we never receive your card or billing details.

We use RevenueCat to check whether a subscription is active. RevenueCat receives an anonymous app user ID, your Aven purchase history (such as the product, purchase and renewal dates, and status), and basic technical information about your device and app version. When a subscription starts, renews, or ends, RevenueCat notifies our server so that your reminder limits stay correct.

Apple Ads. We may advertise Aven on the App Store through Apple Ads. If you install Aven after tapping one of those ads, Apple's AdServices framework gives the app an attribution token. RevenueCat sends the token to Apple and receives back the campaign, ad group, keyword, and country of the ad, and whether this was a new download or a redownload, and stores that with your anonymous app user ID. This tells us which ads lead to subscriptions. It uses only Apple's own ad data, does not use the advertising identifier (IDFA), is not shared with any other advertising company, and does not require the tracking permission prompt.

5Permissions

• Notifications are optional. Aven works without them.
• Photos access is "add only". It is used when you save a verse image, and Aven cannot see your photo library.

When you share a verse through the iOS share sheet, it goes to the app you pick, under that app's own privacy policy.

6Who processes data for us

We use a small number of service providers. They process data only to provide their service to us:

• Cloudflare hosts our server, database, and theme images. Reminder records are stored in the United States. Privacy policy
• Apple delivers push notifications, processes App Store purchases, and provides Apple Ads attribution. Privacy policy
• RevenueCat manages subscription status and Apple Ads attribution. Privacy policy
• Amplitude provides product analytics under an anonymous ID. Data is stored in the United States. Privacy policy

These providers may process data in countries other than the one you live in. We do not sell personal data, and we do not share it with advertisers or data brokers.

7How long we keep it

• On your device: until you delete the data or the app.
• Reminder record on our server: for as long as your reminders are on, or until you delete it in the app (see section 8). When you turn off notifications, the app tells our server the next time you open Aven. When you remove the app, Apple lets us know that notifications can no longer be delivered. Either way the record becomes inactive, and a record that stays inactive for 180 days is deleted automatically.
• Purchase records: kept by Apple and RevenueCat for as long as needed to manage subscriptions and meet legal and tax requirements.
• Analytics and ad attribution data: kept under the anonymous ID for as long as we need it to understand how Aven is used, and no longer than two years from when it was recorded.

8Your choices

• Delete your server record: in Aven, open Settings and choose "Delete Notification Data". The record is deleted from our server right away and reminders stop. You can set reminders up again whenever you like.
• Stop reminders: turn off notifications for Aven in iOS Settings, then open Aven once so it can tell our server. We stop sending reminders, and the record is deleted automatically after 180 days.
• Delete your analytics data: contact us from Aven (Me → Contact Us). The draft e-mail ends with a Support ID, the anonymous ID of your copy of the app; we use it to find and delete your data in Amplitude and RevenueCat. Nothing else in the message is needed.
• Delete everything on your device: delete the app. If you want the server record removed immediately, use "Delete Notification Data" first. Otherwise it is deleted automatically, as described in section 7.

Because Aven has no accounts, we cannot look up a server record from your name or email address. That is why deletion is built into the app: it works without us needing to know who you are. What our server holds about you is the reminder setup you see in the app, plus the technical items listed in section 2.

9Your rights in your region

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict its use, and to withdraw consent. To use any of these rights, use the options in section 8 or contact us. We will not treat you differently for doing so. We hold nothing that links a server record to you as a person, so the in-app option in section 8 is the quickest and most reliable way to delete your data.

European Economic Area, United Kingdom, and Switzerland

We process the reminder record to provide the service you asked for and on the basis of your consent, which you give by setting up reminders and can withdraw at any time. We process technical data on the basis of our legitimate interest in keeping the service secure, and analytics and Apple Ads attribution data on the basis of our legitimate interest in understanding, improving, and promoting Aven; you can object by asking us to delete that data (see section 8). You have the right to complain to your local data protection authority.

Brazil

You have the rights set out in the Lei Geral de Proteção de Dados (LGPD), including confirmation of processing, access, correction, deletion, portability, and information about sharing. You may also contact the Autoridade Nacional de Proteção de Dados (ANPD).

United States

We do not sell personal information and we do not share it for cross-context behavioral advertising. If you live in California or another state with a privacy law, you may ask to know, correct, or delete your personal information.

Mexico

You have the rights of access, rectification, cancellation, and opposition (ARCO rights) under Mexican data protection law.

Nigeria

You have the rights set out in the Nigeria Data Protection Act 2023, and you may complain to the Nigeria Data Protection Commission.

Türkiye

You have the rights listed in Article 11 of Law No. 6698 on the Protection of Personal Data (KVKK), and you may complain to the Personal Data Protection Board.

10Children

Aven is not directed to children under 13, and we do not knowingly collect personal data from children. If you believe a child has set up reminders without permission, the record can be deleted as described in section 8, or you can contact us.

11Security

Data travels between the app and our server over encrypted connections. The secret that protects your installation is stored in your device's Keychain, and our server keeps only a hashed version of it. No system is completely secure, but we keep what we store to a minimum so there is little to expose.

12Changes to this policy

If Aven starts handling data differently, we will update this page and the date at the top before the change takes effect.

13Contact