Theovia Privacy Policy
1. Scope and Who We Are
This Privacy Policy ("Policy") applies to the Theovia mobile application, any website or online service that links to this Policy, and related services (collectively, the "Service"). ZenFiture Limited ("ZenFiture," "we," "us," or "our") is responsible for the personal information described in this Policy.
This Policy does not cover third-party services that we do not control, including app stores, websites you visit through links, or services you connect to Theovia. Their privacy policies apply to their processing.
2. Personal Information We Collect
2.1 Account and Contact Information
Name or display name, email address, login identifiers, account settings, and communications preferences. If you provide a name during onboarding, we may process the text to identify the name or display name you intended to provide.
2.2 Onboarding and Faith Preferences
Faith background or status, interests, goals, current needs, preferred topics, and other answers used to personalize the Service. Downloading or opening Theovia does not, by itself, mean that you hold a particular religious belief. Your answers and content may nevertheless reveal religious or philosophical beliefs.
2.3 Conversations, Reflections, and Generated Records
Messages, questions, prayer requests, journal or reflection content, feedback, AI responses, and records generated from an interaction, such as Bible notes, summaries, prayers, or reflection summaries.
2.4 Memory and Personalization
Information saved for longer-term personalization, such as goals, important decisions, life changes, challenges, prayer topics, and preferences. Conversation history, generated records, and saved memory may be stored as separate items.
2.5 Content You Provide
Notes, images and OCR-extracted text, audio or video recordings and transcripts, links, media, sermon-related content, and related metadata, if and when those features are available and you choose to use them.
2.6 Subscription and Transaction Information
Subscription status, product, renewal and expiration dates, trial status, transaction identifiers, and limited purchase records from an app store or payment platform. We generally do not receive full payment-card numbers.
2.7 Device, Usage, and Diagnostics
Device and app identifiers, operating system, app version, language, IP address, general location inferred from IP, feature interactions, session and event data, crash reports, performance data, and security logs.
2.8 Support and Research
Support messages, survey responses, interview notes, bug reports, and information you provide when participating in optional research or testing.
2.9 Sensitive Information
Because Theovia is designed for faith reflection, information you provide may reveal religious or philosophical beliefs and may also include emotional, family, relationship, financial, health, or other intimate circumstances. We process sensitive information to provide the feature you request, personalize your experience, maintain safety and security, and for other purposes disclosed when the information is collected. Where applicable law requires consent, we will request it and provide a way to withdraw it. Please do not provide another person's sensitive information without their authorization.
3. Where Information Comes From
We collect personal information:
- directly from you when you create an account, complete onboarding, converse with Theovia, provide information used for personalization, upload content, make a purchase, or contact us;
- automatically from your device and use of the Service;
- from app stores, authentication providers, subscription platforms, and service providers you use to access or pay for the Service; and
- from a person or organization that lawfully provides information to us, such as when you join an authorized research program.
4. How We Use Personal Information
We use personal information to:
- provide, personalize, and maintain conversations, faith-reflection tools, Bible-related features, saved content, and memory;
- generate AI responses, create requested notes or summaries, and retrieve relevant context from conversation history, generated records, or saved memory;
- extract or transcribe information from images, audio, video, or linked content that you ask the Service to process;
- authenticate users, manage accounts and subscriptions, and provide customer support;
- protect users and the Service, investigate abuse, prevent fraud, and maintain security and reliability;
- understand feature performance, diagnose problems, conduct analytics, test safety and quality, and improve the Service;
- communicate about the Service, including transactional, support, safety, and legal notices;
- measure marketing and, where permitted and disclosed, understand whether promotions lead to use of the Service;
- comply with law, enforce our Terms, and establish or defend legal claims; and
- carry out another purpose that we explain when collecting the information or that you authorize.
5. AI Processing and Human Access
To generate responses and personalize the Service, we may send your prompt, relevant conversation context, selected memories, and technical instructions to AI service providers acting on our behalf. Theovia is designed to send the context reasonably needed for the requested feature rather than all prior conversations by default. If you submit images, audio, video, or linked media, we or our service providers may extract text, create a transcript, or analyze relevant content and metadata before providing the resulting information to an AI service. AI output may be stored with the related conversation, generated record, memory, or account information. The exact context used can vary by feature and your settings.
Authorized personnel may access limited personal information when reasonably necessary to respond to support requests, investigate security or abuse, comply with law, evaluate a reported safety issue, or conduct testing and quality review under appropriate access controls. We do not use the content of your private conversations, prayer requests, reflections, or saved memories to train our own or a third party's generalized AI models without your explicit consent. AI providers that receive this content must be authorized to process it for the contracted service and not for their independent advertising or generalized model training.
6. Conversation History and Personalization
Theovia may retain conversation history and retrieve relevant portions when a later interaction calls for continuity. It may also create generated records and use relevant information from your interactions to personalize future responses. Conversation history, generated records, and personalization information may be stored as separate records.
Theovia may not provide a separate in-app interface for viewing, editing, or deleting every item used for personalization. Available controls may vary by feature and version. You may use any account or content controls available in the Service or contact contact@theovia.app to exercise an applicable privacy right or request deletion of your account and associated personal information. Deleting one record may not automatically delete related information stored in another record, backup, security log, or transaction record. Deletion and retention are further described in Sections 10, 13, and 15.
7. Legal Bases for Processing
Where data-protection law requires a legal basis, we rely on one or more of the following: performance of our contract with you; our legitimate interests in operating, securing, supporting, and improving the Service; your consent, including for optional sensitive-data, notification, microphone, tracking, or marketing uses where consent is required; and compliance with legal obligations. You may withdraw consent at any time, but withdrawal does not affect processing already carried out lawfully and may limit features that depend on that information.
8. When We Disclose Personal Information
We may disclose personal information to:
- service providers that support cloud hosting, databases, AI inference, transcription, authentication, analytics, crash reporting, customer support, communications, security, subscription management, and payment processing;
- app stores and transaction platforms to validate purchases, administer subscriptions, prevent fraud, and handle refunds or disputes;
- professional advisers, auditors, insurers, regulators, courts, or authorities when reasonably necessary for legal, compliance, safety, or claims purposes;
- a buyer, investor, lender, or successor in connection with a merger, financing, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality and legal safeguards; and
- another person when you direct us to disclose information or give consent.
Service providers may process personal information only for the services they provide to us and under contractual or legal obligations appropriate to their role. We do not disclose private conversation, prayer, reflection, generated-record, or memory content to data brokers.
9. Sale, Sharing, and Advertising
We do not sell personal information for money. We do not use or send the content of private conversations, prayer requests, reflections, generated records, saved memories, or faith-related onboarding answers for cross-context behavioral advertising. We may use limited device, installation, attribution, subscription-status, and engagement information to measure our own marketing. If an advertising or attribution practice constitutes a "sale," "sharing," or targeted advertising under applicable law, we will provide the required notice and opt-out method and will honor legally recognized preference signals where required.
10. Retention
We retain personal information for as long as reasonably necessary to provide the Service, maintain your account and requested memories, complete transactions, comply with law, resolve disputes, enforce agreements, and protect security. Retention depends on the type of information, why we use it, your settings and deletion choices, and legal or technical requirements.
When you delete content or your account, we will delete or de-identify associated personal information within a reasonable period unless retention is required or permitted for legal, fraud-prevention, security, backup, transaction, or dispute purposes. A deletion request may need to propagate separately to conversation history, generated records, saved memory, vendors, and backups. Residual copies may remain temporarily in backups and logs until they are overwritten or securely deleted. De-identified information that cannot reasonably be linked to you may be retained.
11. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls and security monitoring appropriate to the nature of the data. No system is completely secure, and we cannot guarantee absolute security. You should use a strong, unique password and protect access to your device and account.
12. International Data Transfers
We and our service providers may process information in the United States and other countries where privacy laws may differ from those where you live. Where required, we use recognized transfer mechanisms and safeguards, such as contractual protections, and take supplementary measures appropriate to the transfer.
13. Your Choices and Privacy Rights
Depending on where you live and subject to applicable exceptions, you may have rights to:
- access or obtain a copy of personal information;
- correct inaccurate personal information;
- delete personal information or your account;
- restrict or object to certain processing;
- receive portable data;
- withdraw consent;
- opt out of certain sale, sharing, targeted advertising, or profiling; and
- appeal a denied request or complain to a data-protection authority.
You may use available in-app controls or email contact@theovia.app. We may need to verify your identity and authority before completing a request. You may use an authorized agent where applicable law allows. We will not discriminate against you for exercising a privacy right.
14. California Notice
This section applies to the extent Theovia is subject to the California Consumer Privacy Act or another California privacy requirement. The categories of personal information we collect are described in Section 2; their sources, purposes, and recipients are described in Sections 3 through 9. California residents may have rights to know, access, correct, delete, and obtain information, and to opt out of sale or sharing or limit certain uses of sensitive personal information, subject to applicable thresholds and exceptions.
We do not use or disclose sensitive personal information to infer characteristics beyond purposes reasonably expected to provide, personalize, secure, and support the Service unless we first provide any notice and choice required by law.
15. Account Deletion
If you create an account, you may initiate deletion through the in-app account settings or by emailing contact@theovia.app. Account deletion is permanent after any stated confirmation or recovery period and may remove conversations, generated records, memories, notes, and other account content, subject to the limited retention described above.
Deleting an account does not cancel a subscription purchased through an app store or another payment provider. Before deletion, review and cancel the subscription through the platform used to purchase. Deleting an account may also prevent you from accessing remaining paid benefits or content associated with that account.
16. Children
The Service is intended only for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided personal information, contact contact@theovia.app so we can investigate and take appropriate action.
17. Notifications and Device Permissions
You may control push notifications, microphone access, tracking permission, and other device permissions through the App or device settings. Disabling a permission may prevent the related feature from working. Marketing emails, if offered, will include an unsubscribe method; we may still send nonmarketing messages about your account, purchases, safety, or legal matters.
18. Changes to This Policy
We may update this Policy as the Service, technology, or law changes. If a change materially affects how we handle personal information, we will provide reasonable notice through the Service, email, or another appropriate method and obtain consent where required. The date at the top shows when this Policy was last updated.
19. Contact Us
For privacy questions, requests to exercise a privacy right, or help deleting your account, contact us at contact@theovia.app.
Please identify the type of request and, where relevant, the email address associated with your account. Do not include your password, full payment-card number, or unnecessary prayer, reflection, health, or other sensitive content. We may need to verify your identity or authority before completing a request.