Privacy Policy

Last updated · October 2026

1. The short version

Loafy has no analytics, no advertising, no tracking SDKs and no third-party trackers of any kind. We do not sell, rent or share your personal information. The only data that ever leaves your device is described plainly below.

2. Your account

Loafy requires an account, because your streak, progress and earned armor are the point of the app and they need somewhere durable to live. You can sign up with an email address and password, or with Sign in with Apple.

Authentication stores your email address, an account identifier and your display name. We never see or store your password: it is hashed and never transmitted to us in readable form. If you use Sign in with Apple and choose to hide your email, we only ever receive Apple's relay address.

3. What stays on your device

Your habits, reading progress, streak, health, XP, reflections, verse highlights and notes, Sunday check-in takeaways and app preferences are stored locally on your device. Downloaded Bible chapters and commentary are cached on device so they stay readable offline.

4. Where your data is stored

Your account information (email address, account identifier, and display name) is stored with Supabase, our database and authentication provider, on servers in the United States (US East, Northern Virginia). Because Loafy is based in the United States, your information is stored and processed in the United States, regardless of where you live.

5. Photos, and where they go

Some daily challenges are verified with a photo, such as a nature walk. When you take or choose a photo for a challenge, that image is sent over an encrypted connection to an AI vision service, which checks whether it matches the challenge and returns a yes or no.

The photo is used for that single check and is not stored by Loafy, not attached to your account, and never published, shared or used to train anything by us. If you would rather not send a photo anywhere, you can simply skip photo challenges: nothing else in the app depends on them.

6. Microphone and speech

The Declare screen and memory-verse challenges listen through the microphone so the words can light up as you speak them. Speech is converted to text using Apple's on-device speech recognition. The transcript is held in memory only, is used purely to match against the verse in front of you, and the audio engine is torn down when you leave the screen. Loafy does not record, save or upload audio.

7. Motion and steps

Step-based challenges read your step count from the device's motion sensor. This is read directly on the device and is not transmitted anywhere. Loafy does not use HealthKit and does not read any health records.

8. Notifications

If you allow them, Loafy sends your daily reminder at the time you choose and a Sunday check-in. These are scheduled locally on your device. You can turn them off at any time in iOS Settings or in the app.

9. Scripture and study text

The KJV, WEB, BSB and ASV translations are offline, public-domain translations as well as the commentary sources. These requests contain the passage being fetched and are not linked to your identity. Loafy is still growing, and we're planning to add more translations along the way.  

10. Payments

Subscriptions are processed entirely by Apple (and Google Play, once available). We never see or store your card number or payment details. We receive only confirmation that a subscription is active, and the proceeds the app stores pay us.

11. Deleting your data

You can delete your account and everything attached to it from inside the app: open Settings, then Delete Account. This permanently removes your account and clears app data on the device, and it cannot be undone. If you would prefer we handle it, email hello@getloafy.com from the address on your account and we will complete deletion within 30 days.

12. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal information. To make a request, email hello@getloafy.com from the address on your account. We will respond within 30 days.

13. Children's privacy

Loafy is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

14. Changes to this policy

If this policy changes, the updated version will appear on this page with a new effective date.

15. Contact

Questions about this policy or your data? Email hello@getloafy.com.