Privacy policy

Who is responsible?

Explore Yeshua is published by Mickael CARRE-PISTOLLET EI, the controller for processing carried out to operate the app. Business registration (SIREN): 798261202. Postal address: 116 rue Maria Casarès, 34070 Montpellier, France.

For privacy questions or requests concerning your information, email support@exploreyeshua.com.

Reading data stays on your device

Your language, settings, favorites, personal notes, reading progress, discovery-day counter, daily saying history, reminder settings, audio playback positions and downloaded recordings are stored on your device. There is no Explore Yeshua account and no cloud synchronization of your notes or reading progress.

The app does not upload your personal notes, favorites or reading-progress records to us. Downloading a recording does send its file address to the audio host, as explained below. We do not use your writing or reading activity to build an advertising profile or infer your religious beliefs.

Audio, website visits and network information

Streaming or downloading English narration connects to audio.exploreyeshua.com. Serving a file involves the IP address, requested file address, request time and ordinary connection information. The file address identifies the recording requested. Cloudflare provides the audio-delivery infrastructure.

When you visit this policy on our Cloudflare-hosted website, the host also processes the network information needed to deliver and secure the page. The policy page contains no advertising, analytics scripts, tracking pixels or forms.

Technical information may be processed in hosting and security logs to operate the service, investigate failures and prevent abuse. It is not used by us for personalized advertising.

Google Play purchases

Google Play handles subscriptions, optional one-time support purchases, payment and purchase history. We do not receive your full payment-card details or Google password.

When you purchase or restore access, purchase verification uses a purchase token and product identifier to check the transaction with Google. The verification service returns a signed record of access, including purchase status and applicable expiry information. The service processes the token for the request, does not maintain a purchase database and does not log request bodies. Hosting services may separately process ordinary connection and security information.

The app stores purchase and access information locally to restore access and support offline use. A signed access record authorizes offline access for at most 24 hours and no later than the known subscription expiry. Expiration of that authorization does not itself delete the cached record. Google retains its own transaction records under its policies.

Google privacy policy

Access codes

If you enter an access code, the app sends it over HTTPS to our Cloudflare-hosted verification service. The service compares its cryptographic hash with the authorized credential and returns a signed access record. It does not log request bodies or maintain a database of people using the code. Ordinary connection information is processed to deliver and protect the service, including rate limiting.

The code and signed access record are stored in private app storage on your device to renew access automatically. Offline authorization lasts at most 24 hours. The code does not create an app account or a paid subscription. This processing is necessary to provide the access you request; security checks protect the service against abuse.

Optional reminders and app reviews

Daily Saying reminders are scheduled locally on your device, using your chosen time and the notification permission granted through Android. You can turn them off in the app or in Android notification settings. There is no remote push-notification mailing list or server-side notification profile.

A reminder may show a saying on your lock screen, depending on your Android settings. Background audio uses the Android media service and playback controls; the app does not record your microphone.

The app can invite you to rate it through Google Play. If you submit a rating or review, Google handles it under its own terms and privacy policy. The app stores the invitation state locally.

Support messages

If you email support@exploreyeshua.com, we receive your sender address, message and any attachments you choose to send. We use these to answer your request and resolve the issue. Include only information needed for support; passwords, payment-card details and private journal entries are not needed.

Cloudflare routes support email, and the publisher receives and handles these messages in Gmail (Google).

Purposes and legal bases

We process information necessary to provide the features you request, deliver audio, verify purchases and answer service requests. Where the GDPR applies, this relies on performance of our contract or steps taken at your request before a contract (Article 6(1)(b)).

Necessary security and abuse prevention rely on our legitimate interest in protecting the service (Article 6(1)(f)). Handling applicable legal obligations and data-protection requests relies on Article 6(1)(c). Optional device permissions can be withdrawn in Android settings.

Explore Yeshua contains no advertising SDK or audience-measurement SDK. We do not sell personal information or share it for targeted advertising. The app does not request access to your contacts, precise location, camera or microphone.

Providers and international processing

The publisher and service providers receive only the information needed for their roles: Cloudflare for hosted delivery, network security and email routing; Google Play for purchases and app reviews; and Gmail for support messages. Information may also be disclosed when required by an applicable legal obligation.

Cloudflare and Google operate internationally, including outside the European Economic Area. Their privacy policies describe their processing locations and international-transfer safeguards. You can contact us for information about safeguards applicable to processing carried out on our behalf.

External source links and store links open services operated by other organizations. Information you provide to those services is handled under their own privacy policies.

Cloudflare privacy policy

Retention and support messages

Local reading data and settings remain until you remove them or erase application data. Downloaded recordings can be removed from storage, and device storage management may also remove cached files. Android automatic backup is disabled for this app; do not rely on reinstalling the app to recover your notes.

The support-retention policy is to delete exchanges 12 months after the request is resolved, unless a legal obligation or an identified dispute requires retaining the necessary information. This is handled by the publisher in Gmail; no automatic deletion is currently configured. Google deletion and backup processes also apply.

The purchase verifier processes purchase tokens in memory for the request, rather than retaining a purchase database. Technical hosting logs are subject to the provider and service settings and are retained as needed for delivery, troubleshooting, security and applicable obligations. Contact us about a specific request or record; there is no single retention period shared by all Google and Cloudflare services.

Security

App connections used for audio delivery and purchase verification use HTTPS. Access to local app storage is governed by Android, and subscription access records are verified using digital signatures. We limit processing to information needed for the service. No method of storage or transmission can guarantee absolute security.

Delete data and exercise your rights

In the app, open Preferences and choose Erase data on this device to remove local notes, progress, favorites, downloads and preferences after confirmation. You can also clear app storage through Android settings. There is no app account to delete.

Erasing app data does not cancel a Google Play subscription or delete Google transaction records. Manage subscription renewal through Google Play. To request deletion of support correspondence, contact us by email.

Depending on the law applicable to you, you may request access, correction, erasure, restriction or portability of personal information, and object to processing based on legitimate interests. We cannot retrieve notes or reading history stored only on your device.

Send requests to support@exploreyeshua.com. GDPR rights requests normally receive a response within one month. If an extension of up to two further months is necessary, we explain it within the first month. We request identity verification only where reasonably necessary. You may complain to the CNIL in France or your competent data-protection authority.

Contact the CNIL

Changes to this policy

We may update this policy when the app, our services or applicable requirements change. The latest version shows its update date. Where a change requires additional notice or permission, we provide it as required.