Privacy Policy

What Holy Minutes keeps, where, and why. Last updated 16 October 2026.

Who we are

Holy Minutes is made by System Two GmbH, Wollgrasstr. 16, 33154 Salzkotten, Germany. Contact: team@holyminutes.com.

On your phone

Your settings, your nights and minutes, your recent check-ins, your saved words, your answers to questions and where you are reading. This stays on the device.

On our server

Under an anonymous account with no name or email (unless you sign in, below): each night's check-in (mood, feelings, what you wrote), your candle streak, and which For you cards you saw and what you did with them (never your answers). They are used only to choose your verses and cards and keep your streak. The server runs on Google Firebase.

Signing in (optional)

You can sign in with Apple or Google (You → Account). Your account then also keeps the email address Apple or Google shares with us (with Apple this can be a private relay address) and a copy of what is on your phone (your nights, saved words, answers, recent check-ins, settings and where you are reading), so it can follow you to another phone. We never see your Apple or Google password. Signing out takes this copy off the phone; Delete my data deletes it everywhere.

AI

To choose tonight's verses, your check-in is sent to an AI model through OpenRouter. It only chooses from the Bible in the app.

When you use Explain, your question, recent follow-ups and relevant source excerpts are sent through OpenRouter to generate an answer. Our app and server do not save these conversations to disk or include them in analytics. Recent conversations stay in memory while the app is open. For “You might ask” in For you, the cards you just saw and your recent check-ins (including what you wrote) are sent the same way to write three questions for you; nothing is saved.

Usage and crashes

Under the same anonymous account we count which features are used (never what you felt or wrote, or which verses) with PostHog and Google Firebase Analytics, and get crash reports through Firebase Crashlytics.

PostHog also records the app's screens while you use it (session replay: what the app showed and where you tapped), so we can see where Holy Minutes is hard to use. Everything you type, your Explain conversations, your answers, your first name and your email are hidden in these recordings. They are kept for 30 days.

Ads and attribution

To learn which ads bring people to Holy Minutes, the measurement service AppsFlyer receives identifiers for this device and a few steps: starting the introduction, your first check-in, seeing an offer, starting a trial or buying (with the product, and price and currency for a paid purchase). Superwall, which runs subscriptions, receives the same identifiers and which ad brought you, and, so the Membership offer can greet you, the first name you gave and the goals you chose in the introduction.

The identifiers are AppsFlyer's own install id, your anonymous account id, on iPhone the vendor identifier (IDFV), on Android the advertising ID and app set ID, plus your IP address and basic device data (model, system, language, time zone). AppsFlyer may share whether you came from an ad with the ad network that showed it. On iPhone we never ask to track you, so the advertising identifier (IDFA) is not used. On Android you can reset or delete the advertising ID in your phone's settings.

Notifications

If you allow notifications, your phone's push token, the notification setting and the app language are kept with your anonymous account (Firebase Cloud Messaging), with your time zone, the day you last opened the app, your candle streak (the nights in a row and the last one lit) and your reminder time, so we can send you a few reminders, cards chosen for you and updates at a good time of day, never at night. Turn notifications off in your phone's settings to stop them.

Sharing

When you share a card, the words that go out with it carry a link of its own (holyminutes.com/s/…), never the image. The link shows the card you shared and nothing about you: no name, no account. With your anonymous account we keep which card the link is for, the app's language, where you sent it (WhatsApp, Copy text …) and how often the link was opened and led to an install. When someone installs Holy Minutes from your link on Android, Google Play hands the link's code to their app: we note under their anonymous account that a shared card brought them and which one, count it for the link, and open Holy Minutes on that card. Delete my data also switches off the links you shared.

Who receives data

Google Firebase (server, sign-in, analytics, crash reports, notifications), Apple or Google if you sign in with them, PostHog (usage), OpenRouter (AI), AppsFlyer (ad measurement), Superwall (subscriptions), and Apple or Google for purchases. Some of them process data outside the EU under the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Purchases

Subscriptions are handled by Apple, Google or, for web purchases, Superwall and its payment provider. We receive whether your subscription is active, not your card details.

Your choices

You can delete everything at any time: You → Privacy → Delete my data. See how deletion works. You also have the right to access, correct or restrict your data and to complain to a data protection authority. Write to team@holyminutes.com for any request.

If you're struggling

Holy Minutes is not a crisis service and does not check what you write for signs of danger. If you are in danger, contact your local emergency number. Crisis lines for your country are always in the app under You → “If you're struggling”.