Security & Trust at FlickerFaith

Every connection is encrypted with TLS

Whenever you open FlickerFaith on the web, on iOS, or on Android, your device talks to our services over HTTPS, secured with modern TLS. That means your messages, your prayer journal, your account details, and everything else you send are encrypted in transit and cannot be read as they travel across the network.

Stored data is encrypted too

Your account and app data live on Google's Firebase platform, where information is encrypted at rest. Sensitive operations — subscription status, message limits, and Premium upgrades — are validated on the server rather than trusting whatever a device claims, so the things that matter cannot be forged from the client.

Only what the app needs

We collect the basics required to give you the app: your account information (email, name, and, if you use Google or Apple sign-in, your profile picture), the content you create in the app such as messages, prayer journal entries, favorites, and devotional preferences, and standard technical data like device type and IP address used for security and rate limiting. Church affiliation is optional and entirely up to you.

What we deliberately avoid

We do not store your raw phone number, and we never store or process your card details — payment information is handled entirely by Apple, Google, or Stripe. We do not build advertising profiles from your conversations, your prayers, or your contacts. For the full, itemized breakdown, see our Privacy Policy.

Your conversations are not a product

We do not sell your personal information to third parties, and we do not hand your conversations, prayer entries, or contacts to advertisers. The point of FlickerFaith is to help you search the Word, not to turn your spiritual life into a marketing dataset. Premium subscriptions — not the resale of your data — are what keep the app free for the world.

SHA-256 hashing for contacts and verification

When you verify your account by phone or use the "Invite Friends" feature, we do not keep the raw phone numbers. Instead, we store only a cryptographic SHA-256 hash — a one-way fingerprint that cannot be reversed back into the original number. Those hashes exist solely to match a referral invitation when someone you invited signs up, and one-time codes for phone sign-in are rate limited to protect your account.

The important fields are locked down on the server

FlickerFaith enforces Firebase Security Rules that apply field-level write protection to your user record. Sensitive fields — things like Premium status, subscription tier, and message quotas — cannot be written by the app on your device. They are set and verified only by our trusted server-side logic, which keeps both your account and everyone else's honest and consistent.

A short, transparent list of infrastructure providers

We rely on a small number of established providers to run the app, each for a specific, limited purpose:

• Firebase (Google Cloud) — hosting, sign-in, data storage, and analytics.
• Stripe — secure payment processing for web subscriptions.
• RevenueCat — management of subscriptions on mobile.
• Twilio — sending one-time verification codes for phone sign-in.

Your messages themselves are handled by FlickerFaith's own services to generate Scripture-guarded responses. You can read exactly how information is shared with each provider in our Privacy Policy.

You stay in control

You can delete your account at any time from inside the app under Profile > Delete Account. This permanently deactivates your account and removes the associated data. You can also clear your conversation history whenever you like, and Premium members can export their conversations for personal archives, study-group sharing, or sermon preparation. To request access to or correction of your information, email support@flickerfaith.com.

A tool, held to Scripture, that can still err

Trust is about honesty as much as security. FlickerFaith is a study companion, not a substitute for your pastor, prayer, or your local church, and like any AI it can occasionally misquote a verse or state something imprecisely — which is why the whole Bible lives inside the app for you to verify any citation instantly. We spell out those limits plainly in our AI Disclaimer, and we show exactly how answers are kept Scripture-grounded in how we stay biblically accurate.

Everything, in full

This page is the plain-language overview. For the complete legal detail, see our Privacy Policy, our Terms of Service, and our AI Disclaimer. New here? Start with the home page for the short version of who we are.