how we handle your data.

GloryCam is built local-first. The vast majority of what you create in the app — your prayer journal, your streak, your vow signature, your study progress, your blocked-app list — stays on your device and never reaches a server we operate. We do not run a backend that holds your spiritual content.

This policy explains what data GloryCam collects, why, where it goes, and your rights over it. We have written it in plain language. If anything is unclear, write to us at privacy@glorycam.com and we will explain.

Who we are

GloryCam ("GloryCam," "we," "us," "our") is made by MBAKOP, LLC, the operator of the GloryCam iOS application and the website at glorycam.com. We are reachable at hello@glorycam.com for general inquiries and privacy@glorycam.com for privacy matters.

The short version

If you read nothing else, read this:

• On-device by default. Your prayer transcripts, study answers, scanned scripture photos, vow signature, streak data and profile picture are stored on your iPhone. We do not have a copy.
• Apple's CloudKit, not a server of ours, carries partner data. If you pair with a partner ("Two-by-Two"), a small partner record — your first name, streak, last session date, what you did today — and, while you are linked, your vow signature and your latest glory video are kept in GloryCam's CloudKit database on Apple's servers so your partner's app can show them. Unlinking deletes the shared signature and video. Details below.
• Generating a glory sends one photograph to an AI service. When you choose to capture one, GloryCam sends that photograph through our relay server to an AI service, KIE (kie.ai), to make your image and video. It is encrypted in transit. Our server passes it on and keeps no copy, and KIE deletes it automatically within days.
• No advertising. No tracking pixels. No selling of data. GloryCam does not use IDFA, third-party advertising SDKs, or behavioral tracking. We do not sell, rent, or trade your information.

Data we collect, and why

Information you provide directly

• Display name and signature (drawn during the Covenant ceremony) — to personalize your home screen and milestone certificates. On-device.
• Profile picture (optional, chosen in Settings) — shown in the app header. Stored on-device only. We never upload it.
• Gender selection — determines which figure appears in the growth visual and which capture guide you are shown. On-device.
• Denomination preference — filters scripture and study content to match your tradition. On-device.
• Reminder times — schedules local notifications. On-device.
• Blocked-app selections — tells iOS which apps to shield. On-device, via Apple's FamilyControls framework. The tokens are opaque: we never see which apps you chose.
• Partner pairing code (only if you choose to pair) — a short code you share with one person. It names your partner record in GloryCam's CloudKit database. Apple CloudKit.

Information generated by your practice

• Prayer transcripts — on-device. Speech-to-text runs on your iPhone using Apple's speech recognizer. If on-device recognition stops working during a session, GloryCam switches to Apple's speech service, which sends that audio to Apple under Apple's privacy policy. We never receive it.
• Names and topics auto-detected in your prayers — surfaced as chips so you can revisit who you prayed for. Detection runs through Apple's NaturalLanguage framework. Never uploaded.
• Growth day count and pillar completion — powers your growth figure and your milestone unlocks. On-device, with optional iCloud mirror so a new device can resume.
• Study answers and accuracy — on-device.
• Bible Scan photos — Apple's Vision framework reads the page on your iPhone to check that it is the verse you were asked to scan. If it matches, a smaller copy of the photo is kept on your device so it can appear on that day's Activity entry. It is never uploaded, it is left out of iCloud backups, and it is deleted automatically after 90 days. A photo of a page that does not match is discarded.
• Journal entries you write — on-device. Auto-tagging uses on-device NLP.

Glories — the one moment we use the cloud

GloryCam generates a glory at two kinds of moment:

• Five milestones — the crown at the end of setup, then the breastplate, boots, cape and Full Glory at growth days 10, 31, 52 and 80 (Full Glory also needs one full week of practice). Growth days advance only on days you practise, so these are earned positions rather than calendar dates.
• A monthly picture — offered in the closing days of each month.

When you choose to capture one:

1. Your iPhone takes a single still photograph. The framing differs by milestone — head-and-shoulders for the crown, upper body for the breastplate, your feet for the boots, and a full-length shot for the cape. You see the guide before the shutter.
2. Before anything is sent, the photograph is checked on your device to confirm it matches the requested framing (for example, that one face is in a head-and-shoulders shot). This check runs locally using Apple's Vision framework. Photographs that fail are discarded on the device and never transmitted.
3. The photograph is encrypted in transit and sent to our relay server, which passes it straight to KIE (kie.ai) and does not store it. KIE runs OpenAI's image model to make the still and Kling's video model to make the video.
4. The app also asks Apple to confirm that it is a genuine copy of GloryCam on a real Apple device (Apple's App Attest). That check carries no personal information. It only stops other software from pretending to be the app.
5. With each request the app sends its anonymous purchase identifier (the same one RevenueCat uses). Our server uses it to check your subscription and to count generations, so the service cannot be abused. We store only a scrambled form of that identifier and the count. It is not your name, your Apple ID or your device.
6. These services return a stylized portrait still and a short video (five seconds for a milestone, seven for Full Glory).
7. When the portrait comes back, the app checks on your device that it still looks like you, by comparing it with the photograph you took. If it does not, the app asks for another portrait. This comparison also runs locally with Apple's Vision framework.
8. We do not keep your photograph on any server. KIE deletes uploaded photographs automatically within 24 hours, and the generated still and video within 14 days. KIE and the model providers process it under their own terms. We do not use your photographs to train any model.

Face data

This section explains, in one place, how GloryCam handles face data.

• What face data we collect. Only the photographs you choose to take for a glory (the "before" selfie and each milestone capture). The crown, breastplate, cape and Full Glory captures show your face; the boots capture shows only your feet. On your device, Apple's Vision framework reads the position and shape of the face in a photograph (face rectangles and facial landmarks) and makes an image fingerprint of the face area. GloryCam uses these readings for two checks only: that the framing is right before a photograph is sent, and that a generated portrait still looks like you. We do not use face data to identify you, to recognize you across photographs, to unlock anything, for advertising, or for any other purpose.
• Where it is processed and stored. The face readings (rectangles, landmarks and fingerprints) are computed in memory on your iPhone, used for the check, and discarded right away. They are never stored and never leave your device. The only thing kept is a similarity score number in a local diagnostic log on your device. Your photographs and the generated portraits and videos are stored on your device until you delete them or delete the app.
• Sharing with third parties. When you start a glory capture, the single photograph is sent over an encrypted connection through our relay server (hosted on Vercel), which passes it straight to KIE (kie.ai) and does not store it. KIE runs OpenAI's image model and Kling's video model to make your portrait and video. No face readings are sent, only the photograph. If you link a partner in Two-by-Two, your latest generated glory video is shared with your partner through Apple's CloudKit while you are linked. We do not sell or share face data with anyone else.
• Retention. On-device face readings: not retained (discarded right after each check). Photographs sent for a glory: deleted by KIE within 24 hours of upload. Generated portraits and videos: deleted by KIE within 14 days. Our relay server keeps no photographs. Copies on your device stay until you delete them. A glory video shared with a partner is deleted from CloudKit when either of you unlinks.
• Deletion. Delete a glory or the app to remove the copies on your device. Unlink your partner to delete the shared glory video from CloudKit. The copies held by KIE are deleted automatically on the schedule above. If you never start a capture, no photograph of you leaves your device.

The rendered still and video are saved on your device and, optionally, to your camera roll if you tap save.

If you choose to share a glory, GloryCam adds a small GloryCam mark and the date it was earned before opening Apple's share sheet. You control where it goes from there.

If you never want a glory generated, simply do not start a capture. No photograph leaves your device unless you take that action.

Subscription information

GloryCam uses Apple In-App Purchase, managed through RevenueCat. When you subscribe, we receive an opaque purchase receipt and a RevenueCat user identifier. We do not see your credit card number, your billing address, or your Apple ID. Apple sees those, governed by Apple's own privacy policy. RevenueCat sees the purchase event, governed by their privacy policy.

Diagnostic and crash data

If you have enabled "Share With App Developers" in iOS Settings, Apple may send us anonymized crash reports through TestFlight or App Analytics. These reports do not contain your prayers, your messages, or any content you create. They contain stack traces and device model information that help us fix bugs.

Data we do not collect

GloryCam does not collect:

• Your real name (unless you choose to type it as your display name).
• Your email address (we do not require an account).
• Your phone number.
• Your contacts list.
• Your photo library. We read a single image only when you pick one as your profile picture, and it stays on your device; we write to the library only when you save a glory.
• Your location.
• Your IDFA or any cross-app tracking identifier.
• Your browsing history, your other installed apps, or your device fingerprint.
• Audio recordings of your prayers (audio is processed in memory and discarded; only the text transcript persists, on your device).

How partner sync works

If you choose to pair with another GloryCam user as your "Two-by-Two" partner, each of your apps keeps a small record in GloryCam's CloudKit public database on Apple's servers, named by your pairing code. Your partner's app reads yours and yours reads theirs. Here is what is shared and how it behaves:

• What your partner sees. Your first name, your streak, your last session date, whether you prayed or studied today, your growth stage, and the short nudges you send. GloryCam never shares the substance of your prayers, your journal or your study answers — only that you showed up. The product is designed around presence, not surveillance.
• Your vow signature. While you are linked, the signature you drew on the vow screen (the picture, and its pen strokes when they were kept) is uploaded to the same database so it can appear beside your partner's on the covenant card when you link. It is deleted when either of you unlinks.
• Your glory videos. While you are linked, your latest glory video is uploaded to the same database so your partner can watch it in the app. It is replaced when you earn a new glory and deleted when either of you unlinks. You can see this listed under "what your partner can see" on the Partner screen.
• Who can read it. GloryCam's public database can be read by anyone who knows your pairing code, so share your code only with the person you pair with. Only your own app can change or delete your records. We do not copy this data to any server of ours.
• Unlinking. You can unpair at any time from the Partner screen or Settings. Unpairing deletes your shared signature and glory video and stops updates to your partner. If you delete the app without unlinking first, your partner record, signature and video can remain in the database — write to privacy@glorycam.com and we will delete them.
• Apple's CloudKit terms apply to this data in transit and at rest.

Third-party services

• Apple — App Store, iCloud, CloudKit, FamilyControls, SFSpeechRecognizer (with Apple's speech service only as a fallback), Vision, NaturalLanguage, App Attest. Whatever the framework requires. Partner records, shared signatures and shared glory videos live in GloryCam's CloudKit database on Apple's servers.
• RevenueCat — subscription management. An opaque purchase receipt and a RevenueCat user identifier.
• Vercel — hosts glorycam.com and our relay server. Glory photographs pass through it and are not stored. It holds the generation counts described above.
• KIE (kie.ai) — runs glory generation. The photograph you capture for a glory. Uploaded photographs are deleted within 24 hours; generated images and videos within 14 days.
• OpenAI — its image model, run through KIE, makes the glory still.
• Kling — its video model, run through KIE, makes the glory video from the generated still.

We do not use Google Analytics, Firebase Analytics, Meta SDK, TikTok SDK, AppsFlyer, Branch, Adjust, or any analogous behavioral analytics or attribution provider.

How we keep your data safe

• Local storage on your device is protected by iOS's standard data-protection class (encrypted at rest when your device is locked).
• iCloud and CloudKit use end-to-end encryption where Apple supports it for the relevant data class, and TLS for everything in transit.
• Glory transmissions use HTTPS / TLS 1.2 or higher between your device, our relay server and KIE.
• The key to the AI service is held on our server, not inside the app.
• We have no servers that hold your spiritual content. An attacker cannot breach a database of GloryCam user prayers, because no such database exists.

Your rights

• Access — you can view all of your data inside the app.
• Deletion — deleting the GloryCam app removes all on-device data. To remove iCloud-synced data, also turn off iCloud for GloryCam in iOS Settings → Apple ID → iCloud, then delete the app. Unlink your partner first to delete your shared glory video; for anything left in GloryCam's CloudKit database, write to privacy@glorycam.com.
• Portability — you can save or share your glory images and videos from the app at any time. Everything else stays on your device.
• Correction — you can edit your display name, profile picture, denomination, and other preferences at any time in Settings.
• Withdraw partner pairing — unpair at any time from the Partner screen or Settings → Partner Pairing. This also deletes your shared glory video.
• Opt out of glories — simply do not start a capture. No photograph is generated unless you tap to capture.

Children

GloryCam is intended for users 13 years of age and older. We do not knowingly collect data from children under 13. If you are a parent or guardian and you believe your child under 13 has created data inside the GloryCam app, please contact us at privacy@glorycam.com and we will help you delete it.

International users and data transfers

GloryCam is offered globally through the Apple App Store. Because most of your data never leaves your device, there is no international transfer to speak of. The exceptions are:

• Glory captures, which are processed by KIE using OpenAI and Kling models. These services may operate from data centers outside your country of residence.
• Subscription receipts, processed by RevenueCat and Apple.
• iCloud data, governed by Apple and possibly stored in regional data centers.

If you are located in the European Economic Area, the United Kingdom, Switzerland, California, or any other jurisdiction with extraterritorial privacy law, you retain all rights afforded to you under that law (including access, deletion, portability, and the right to lodge a complaint with your supervisory authority). Email privacy@glorycam.com to exercise any of those rights.

Retention

On-device data persists until you delete it or uninstall the app. iCloud-synced data persists in your iCloud until you remove it. Bible Scan photos kept on your device are deleted after 90 days; the Activity entry itself stays. A shared signature and glory video stay in GloryCam's CloudKit database while you are linked and are deleted when you unlink. Glory photographs are deleted by KIE within 24 hours, and generated glory images and videos within 14 days. On-device face readings are not retained (see "Face data"). The copies on your device stay until you delete them. RevenueCat retains subscription records for as long as your subscription is active and for the period required by accounting and tax law thereafter.

Cookies and similar technologies

The GloryCam iOS app does not use cookies. The glorycam.com website uses no third-party tracking cookies. If we ever introduce essential cookies for site function, we will say so here and provide controls.

Changes to this policy

If we change this policy in a material way, we will update the "Last updated" date at the top and surface a notice inside the app the next time you open it. Continued use of GloryCam after a change indicates your acceptance of the updated policy. We will not retroactively reduce your rights under this policy without your consent.

Contact us

• Privacy: privacy@glorycam.com
• Everything else: hello@glorycam.com
• Help: glorycam.com/support

We aim to respond within seven days.