Privacy Policy

This policy explains how Selah handles information when you read, watch, use widgets, subscribe, or use chat.

Who is responsible

Selah is provided by Mahmut Yüce, Türkiye. For privacy questions or requests, contact my.yuce.mahmut@gmail.com. Last updated: November 4, 2026.

Information on your device

Saved passage identifiers and preferences are stored on your device. Widget settings, selected artwork and cached daily passages are shared locally between the app and its widget. A device access credential is stored in iOS Keychain. Chat messages are held in the running app session; Selah does not offer a permanent chat archive. Temporary media and network caches may be managed by iOS. Keychain entries can persist after uninstalling.

Requests to our service

Cloudflare hosts our API, Scripture catalog and media. Requests can include the selected language, passage or media identifier, search text, and image topic/page. Like other internet services, network processing includes your IP address and technical request information. Our app does not send saved passage lists to our server.

For authenticated features, our database stores a hashed device credential, an internal session identifier, expiry/revocation status, request timestamps and usage counts. We use these records to authorize access, apply limits and prevent abuse. We do not write chat message text to our Cloudflare D1 database, and application request-body logging is disabled.

Chat

When you send a chat message, the recent conversation, chosen language and any associated passage context are sent through our Cloudflare service to OpenAI to generate a response. Messages may reveal religious beliefs or other sensitive information if you include it. Do not include information you do not want processed, or another person’s private information. You can use reading and widgets without using chat.

We request that responses are not stored as application state by the provider. This does not mean zero retention: OpenAI may retain API content for abuse monitoring, normally up to 30 days unless legally required otherwise. API content is not used for model training by default. See OpenAI data controls.

Subscriptions

Apple processes App Store payments. We do not receive your full payment-card details. RevenueCat receives purchase/transaction information, product and subscription status, and technical information needed to validate purchases, restore access and provide subscription reporting. We give RevenueCat a pseudonymous app user identifier derived from the device credential, or an SDK-generated anonymous identifier when no credential is available. We do not send chat messages, saved passages, your name or email to RevenueCat as customer attributes. See RevenueCat’s privacy policy and Apple’s privacy policy.

Artwork, sharing and support

Artwork discovery uses Openverse through our service. Loading an image or opening its source contacts the image host, which receives normal network information. Sharing uses the iOS share sheet; information is sent to the destination you choose. If you contact support, we receive the email and information you provide. Please do not email payment-card numbers, passwords, or private chat content unless necessary.

Purposes, storage and your choices

We process information to provide requested features and purchases, respond to support, secure the service, and meet applicable legal obligations. Where consent is required, you may withdraw it by stopping the optional feature and contacting us. Reading or searching religious material and chat can involve sensitive information; optional chat is initiated only when you send a message.

Local preferences remain until you remove them or the app’s local data. Server session and usage records remain until removed for maintenance or a verified deletion request; no automatic fixed deletion period is currently configured. Purchase and support records may be retained as necessary for service, fraud prevention and applicable legal requirements. Providers apply their own retention policies. Cloudflare, OpenAI, Apple and RevenueCat may process information outside your country. See Cloudflare’s privacy policy.

We do not sell personal information, show advertising, use an advertising identifier, or track you across other companies’ apps for advertising. This website uses no analytics scripts or advertising cookies.

Privacy requests

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing, withdraw consent, and complain to your local data protection authority. Contact my.yuce.mahmut@gmail.com. Include the app version and enough information to identify the request; do not send your device credential. We may need to verify ownership before changing data. Cancel subscriptions through Apple separately: a deletion request does not cancel billing. Parents or guardians can contact us about a child’s information. We will update this policy if our practices change.