Privacy Policy for GracePad

Last Updated: October 27, 2026

This Privacy Policy explains how GospelCentrik Inc. ("GCI," "we," "us," or "our") collects, uses, shares and protects information when you use GracePad, including the GracePad apps for iOS, Android, macOS and Windows, Grace AI, and the website at thegracepad.com (together, the "Service").

GracePad is a place for Bible reading, study, notes and prayer. What you write there can be very personal, and it can reveal your faith. We treat it that way: we use it to give you the features you ask for, we do not sell it, and we do not use it for advertising.

1. Who is responsible for your information

GospelCentrik Inc., a Delaware corporation based in the United States, is the controller of the personal information described in this policy. You can reach us at support@thegracepad.com or through our contact form.

2. Information we collect

a. Information you give us

Account details: your email address, name, username, profile photo and short bio if you add them, your password (stored only in hashed form), and your language and time zone. If you sign in with Google or Apple, we receive the account identifier and basic profile details that provider shares with us.
Setup and personalization answers: your default Bible version, your answers to the short questionnaire when you set up GracePad (such as how you plan to use it and where you keep your notes), your reminder and notification choices, and where you heard about us.
Your content: notes, folders, tags, highlights, annotations, bookmarks, favorites, reading-plan progress, reflections and prayers you write, and anything you choose to share with another person.
Grace AI requests: the questions you ask, the text, note or passage you choose to send, a sermon video link you paste, and audio you record with the Listener.
Messages to us: what you send through the contact form, by email or through support, and your email address if you join the newsletter or the waitlist.

b. Information collected automatically

Device and technical data: device model, operating system and app version, language, IP address, push notification token, and diagnostic and crash reports.
Usage data: which screens and features you use, when, and how they perform. In the apps this may include recordings of how screens are used (session replay), with on-screen text and images masked, which our team uses to find and fix problems.
Install source: an attribution service tells us which campaign or link brought an install, so we can tell which of our outreach works. On iOS, we ask for your permission through Apple's tracking prompt before using the advertising identifier for this.
Subscription status: if you subscribe, the App Store or Google Play handles your payment and tells us your plan and its status. We never see your card number.

c. Sensitive information

Your notes, prayers, highlights and the Bible passages you study can reveal your religious beliefs, which many laws treat as sensitive. We use this content only to provide the features you use (for example, storing and syncing your notes, or answering a Grace AI question about your passage), to keep it secure, and to help you if you contact support. We do not use it for advertising, and we do not sell it.

Your agreement. GracePad cannot work without handling this content: it is what the app is for. By creating an account and adding notes, prayers, highlights or other content, you explicitly agree that we process that content, including anything in it that reveals your religious beliefs, for the purposes in this policy. This is how we meet the rules for sensitive information in the European Union, the United Kingdom and similar laws. You can withdraw your agreement at any time by deleting your account (see how to delete your account and data), which also ends our processing of that content. Withdrawing does not affect what we did before.

3. How we use your information, and why

To provide GracePad (account, sync across your devices, notes, reading plans, Grace AI, notifications you turn on). We do this because it is necessary to deliver the service you asked for. For content that reveals your religious beliefs, we also rely on your explicit agreement, described above.
To keep GracePad safe and working (security, fraud and abuse prevention, error monitoring, fixing bugs). This is in our legitimate interest in running a reliable and secure service.
To understand and improve GracePad (usage analytics, performance, which features help people). This is in our legitimate interest in improving the product. On the website, analytics cookies are used with your choice, as described in our Cookie Policy.
To contact you (replying to your messages, service and billing notices, and, if you agree, news and updates, which you can stop at any time).
To personalize Grace AI and to help improve it, only if you have turned those options on in your settings. You can change either choice at any time.
To meet legal duties and to protect our rights and the safety of others.

4. Grace AI

Grace AI is a study helper. When you use it, the request you make, together with the context needed to answer it (such as the passage or note text you choose to send), is processed by our systems and sent to an AI model provider to generate the response. Today that provider is Google, through its Gemini models on Google Cloud (Vertex AI). We may change or add providers as we test what works best, and we will keep this policy up to date when we do. Our AI system looks up Scripture by reference and uses retrieval to ground answers, rather than training a model on your notes. Verse text Grace AI quotes comes from the Bible translations in our library.

We do not currently train AI models on your notes or prayers. Your private content is available to Grace AI only for your own requests.
AI personalization and AI training are optional choices that record whether you would allow us to personalize Grace AI for you, and to use your content to improve our AI features in the future. We have not started using content for training, and before we do we will tell you exactly what it covers. You can see and change both choices at any time in Settings.
Grace AI can be wrong. Please weigh what it says against Scripture, and do not rely on it for medical, legal or mental health decisions.
Grace AI makes no automated decisions that have legal or similarly significant effects on you. A free plan has a daily AI allowance, which we apply automatically.

We do not sell your personal information. We share it only with the people and companies that help us run GracePad, and only for that purpose:

Hosting and infrastructure: our servers, including our Appwrite backend and AI search database, are run on infrastructure we rent from Contabo.
AI providers: Google (Gemini on Google Cloud Vertex AI) for Grace AI today, and any other provider we add, as described in the Grace AI section above.
Google services: Firebase Cloud Messaging for push notifications and reCAPTCHA on our website forms.
Email: Brevo, which delivers our emails and manages our contact, newsletter and waitlist lists.
Analytics and diagnostics: PostHog (product analytics) and Sentry (error and performance monitoring).
Subscriptions and attribution: RevenueCat (subscription management) and AppsFlyer (install attribution).
App stores and sign-in: Apple and Google, when you download the app, pay for a subscription, or sign in with them.
People you choose: content you decide to share with another person.
Legal and safety: authorities or others, if the law requires it or if needed to protect rights, property or safety. We may also share information in a merger, sale or reorganization of our business, with the same protections.

These companies act on our instructions under their own terms and data protection commitments, and may use the information only to provide their service to us, except where they act as independent controllers (for example, Apple and Google for their own services).

6. Where your information is processed

We are based in the United States, and our service providers operate in several countries. Your information may therefore be processed outside your country, including in the United States. Where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses or an adequacy decision. You can ask us how a transfer is protected by contacting us.

7. How long we keep it

Account and content: for as long as your account is active.
After you delete your account: your account is deactivated at once and scheduled for permanent deletion after a 30-day period in which you can change your mind by reactivating it. After that, your account data and content are deleted, except for records we must keep by law (such as billing records), your comments on other people's content (kept without your name), and copies in backups, which are overwritten on their regular cycle. See how to delete your account and data for the steps and the full details.
Support messages: for as long as needed to help you and to keep records of the help we gave.
Analytics and diagnostics: for a limited period, after which they are deleted or reduced to statistics that no longer identify you.
Email lists: until you unsubscribe or ask us to delete your address.

8. Your choices and rights

Everyone who uses GracePad can access their information, correct it, delete it, and receive a copy in a portable format. Everyone can also withdraw any consent they have given, at any time, and ask us not to use their information for marketing. Depending on where you live, you may also have the right to restrict or object to some processing.

In the app: edit your profile and content, change your notification, AI and consent choices, and delete your account from Settings.
By contacting us: email support@thegracepad.com or use the contact form. We may ask you to confirm it is you before we act on a request. We respond within one month, or tell you if we need longer.
Deletion: see how to delete your account and data.
Marketing email: use the unsubscribe link in any email.
Cookies and website analytics: use Cookie Preferences in the website footer. See our Cookie Policy.
iOS tracking: you can turn off tracking for GracePad in your iPhone or iPad settings at any time.

9. The GracePad website

Contact form: we use your name, email and message to reply to you.
Newsletter and waitlist: we use your email address to send what you signed up for. We ask you to confirm by email first. The confirmation link includes an anonymous visitor ID, so we can understand how sign-ups happen without learning who you are.
Analytics: we use PostHog to count visits and see which pages help. If you accept cookies, PostHog sets a cookie to recognize your browser. If you decline, we still count your visit but do not store an ID on your device. See the Cookie Policy.
Spam protection: forms use Google reCAPTCHA to tell people from bots. Google's privacy policy and terms apply to that check.
Error monitoring: we use Sentry to find website errors. We configure it to avoid collecting personal data.
Small settings in your browser: the website remembers your light or dark choice, your cookie choice, and whether you closed a pop-up, in your browser's own storage. This stays on your device.

10. Security

We use reasonable technical and organizational measures to protect your information, such as encrypted connections, hashed passwords and limited access to our systems. No system is completely secure, so please use a strong, unique password. If a breach affects your information, we will tell you and the authorities as the law requires.

11. Children

GracePad is not for children under 16, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new date, and tell you in the app or by email if the changes are significant.

13. Contact us

Email: support@thegracepad.com
Contact form: https://thegracepad.com/contact
Mail: GospelCentrik Inc., 262 Chapman Rd, Suite 240, Newark, Delaware 19702, United States