Last Updated: July 15, 2026 · Effective: July 15, 2026
Pen & Psalm ("Pen & Psalm," "the App," "we," "our," or "us") is a product of Manna Driven Investments LLC ("MDI"), a Vermont limited liability company. MDI is the controller responsible for the personal information described in this Privacy Policy. This policy explains what we collect, how and why we use it, who we share it with, and the choices and rights you have. It applies to the Pen & Psalm mobile application and web app and to any page that links to it.
Faith is personal, and so is your data. Pen & Psalm is a Bible devotional and private journaling app. Your journal entries, prayers, and reflections are yours. We do not use your content for advertising, we do not sell it, and we do not share it for anyone else's marketing. See Sensitive Information below.
If you create an account, we collect:
You can use core features of the App without an account. If you never sign in, we do not collect account information and your content stays on your device.
When you use the App while signed in, we store the content you create so we can sync it to your devices:
If you subscribe to premium features, the way your payment is handled depends on where you subscribe:
Because Pen & Psalm is a faith-based app, your use of it — and the prayers, reflections, and journal entries you choose to write — may reveal information about your religious or philosophical beliefs. Under laws such as the EU/UK GDPR this is "special category" data, and under California law it is "sensitive personal information."
We treat this information with particular care:
You can withdraw consent at any time by deleting the relevant content or your account (see Your Rights & Choices).
We use your information to:
If you are in the European Economic Area or the United Kingdom, we process your personal information on these legal bases:
| Purpose | Legal basis |
|---|---|
| Providing account features and syncing your content | Performance of a contract (GDPR Art. 6(1)(b)) |
| Storing prayers, reflections, and other faith-related content | Your explicit consent (GDPR Art. 9(2)(a)) |
| Sending notifications you enable | Your consent (Art. 6(1)(a)) |
| Securing the App and preventing abuse; improving the App | Our legitimate interests (Art. 6(1)(f)) |
| Processing payments and keeping transaction records | Contract and legal obligation (Art. 6(1)(b), (c)) |
We do not sell, rent, or trade your personal information, and we do not "share" it for cross-context behavioral advertising. We disclose information only to the service providers who help us operate the App, and only as needed to provide it:
| Provider | Purpose | More info |
|---|---|---|
| Google Firebase | Authentication, database, cloud sync, and push notifications | Privacy |
| RevenueCat | Subscription management (native and web) | Privacy |
| Stripe | Payment processing for web subscriptions | Privacy |
| Apple | Payment processing and delivery for App Store purchases | Privacy |
We may also disclose information (a) to comply with law, legal process, or a lawful government request; (b) to protect the rights, safety, and property of MDI, our users, or the public; or (c) in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this policy and will notify you of any change in control that affects your information.
Your data is stored using Google Firebase, which employs encryption in transit (HTTPS/TLS) and at rest and other industry-standard safeguards. Your journal entries, prayers, and reflections are accessible only by you when signed into your account, as enforced by our access rules.
No method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law.
MDI is based in the United States, and our providers may process and store your information in the United States and other countries. If you are located outside the United States, your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses and equivalent UK mechanisms. You may contact us for more information about these safeguards.
| Data | Retention |
|---|---|
| Account and content (journal, prayers, bookmarks, plans) | Until you delete it or your account; deleted data is removed from active systems promptly and from backups within 30 days |
| Push notification token | Until you disable notifications, sign out, or delete your account |
| Transaction and subscription records | As required by tax, accounting, and audit law (typically up to 7 years) |
| Data on your device only (no account) | Stays on your device until you clear it; not retained by us |
Regardless of where you live, you can:
To make a request you cannot complete in the App, email us using the contact details below. We will respond within the time required by applicable law (generally 30–45 days). To protect your account, we may need to verify your identity before acting on a request, and we will not discriminate against you for exercising your rights.
If you are in the EEA, UK, or Switzerland, you have the rights to access, rectify, erase, restrict, and port your personal data, to object to certain processing, and to withdraw consent at any time (without affecting processing already carried out). You also have the right to lodge a complaint with your local data-protection supervisory authority. Our legal bases are described in Section 4.
In the past 12 months we have collected the following categories of personal information: identifiers (email, account ID, device/push identifiers), internet or other electronic network activity (usage within the App), commercial information (subscription status), and — because of the nature of the App — sensitive personal information that may reveal religious or philosophical beliefs (the content you create). We collect it for the business purposes described in Section 3.
We do not sell your personal information and we do not share it for cross-context behavioral advertising. We use and disclose sensitive personal information only for the purposes permitted under the CPRA (to provide the App you requested); we do not use it to infer characteristics about you.
California residents have the rights to know, access, correct, and delete their personal information, to opt out of sale/sharing, to limit the use of sensitive personal information, and to be free from discrimination for exercising these rights. Because we do not sell or share personal information, there is nothing to opt out of, but we honor Global Privacy Control (GPC) signals as a valid opt-out request. To exercise any right, contact us using the details below; you may use an authorized agent, and we will verify your request as the law allows.
We do not run third-party advertising in the App, we do not build advertising or behavioral profiles, and we do not make decisions about you that produce legal or similarly significant effects using solely automated processing.
Pen & Psalm is a general-audience app and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are in the EEA or UK, you must be at least the age of digital consent in your country (13–16, depending on the country) to use account features, or have the consent of a parent or guardian. If you believe a child under 13 has provided us personal information, please contact us and we will delete it.
We do not track users across third-party websites, so we do not respond to "Do Not Track" browser signals differently. We do honor Global Privacy Control signals as described in Section 11.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and notify you through the App or by email. Your continued use of the App after an update takes effect constitutes acceptance of the revised policy, except where additional consent is required by law.
Questions, requests, or complaints about this policy or your data:
Email: privacy@penandpsalm.app
Controller: Manna Driven Investments LLC (d/b/a Pen & Psalm)
Mailing address: 5 Kocher Drive #1006, Bennington, VT 05201, USA