HAGAH · Effective September 24, 2026

Your words are personal.

Hagah is a Bible reading, meditation, and prayer app. No account is required. Hagah has no advertising, tracking, or third-party analytics SDKs. We do not sell personal information.

Prayers, notes, and saved passages

Hagah saves your prayers, unfinished drafts, notes, bookmarks, and reading-plan progress on your device. Starting with build 44, these also sync through your own private Apple iCloud database when iCloud is available. Personal content is stored in encrypted CloudKit fields. It is not sent to Hagah’s translation service, API.Bible, Bible Brain, or a public database. Local files use Apple’s app sandbox and iOS Data Protection.

Your meditation passage, translation choice, reading place, listening place, and selected preferences also sync between devices using the same iCloud account. Reminder choices and text size stay separate on each device. Offline changes remain saved locally until iCloud is available. Previous saved versions and deleted items are retained for recovery. Your private database uses your iCloud storage; manage Hagah’s iCloud access and stored copies through Apple’s iCloud settings. Apple’s device backups may also include local app data, according to your Apple settings.

Offline and online Bible reading

The complete King James Version is included and works offline. Other translations use API.Bible or Bible Brain when the requested passage is not available in an authorized local cache or download. You can download eligible text and audio only where the provider permits it; downloaded media is excluded from backups and can be removed in Downloads.

For online reading, Hagah sends the chosen translation and chapter reference to our Cloudflare-hosted service. An explicit keyword search also sends its search phrase. Our service retrieves content from API.Bible or Bible Brain without passing your app verification identifier or device IP address to those APIs. Streaming and approved downloads connect directly to the provider’s content-delivery network, which receives your IP address as part of that connection.

API.Bible passages use a small encrypted on-device cache and a shared service cache that expire within 14 days. Bible Brain streaming text stays in bounded session memory; eligible meditation snapshots use the approved download endpoint and an encrypted cache that expires within 14 days. Explicitly downloaded text and audio are stored separately for offline use. Search cache keys are hashed, raw search phrases are not stored by our application, and cached results are not linked to an installation identifier. This is not a personal reading-history database.

Device verification and service protection

Apple’s App Attest verifies that online requests come from a legitimate installation of Hagah. Our service stores the app’s verification key identifier, public verification key, an anti-replay counter, and a last-used time. These records support security and free-service limits. They contain no Apple ID, name, email address, prayer text, or notes, and are removed by daily maintenance after 180 days of inactivity.

Internet connections necessarily disclose connection information, including an IP address, to Cloudflare. Our application uses a keyed hash of that address for short-lived, in-memory rate limiting; it does not write addresses or request bodies to application logs. Rate-limit buckets reset each minute. Cloudflare, Apple, API.Bible, Bible Brain, and their content-delivery providers may process service and security information under their own policies. Connections to the translation service and provider use HTTPS.

Your choices and copies

Apple services and support

Apple may collect TestFlight feedback and diagnostics when you use a beta, and processes iCloud, App Attest, and App Store data under its own policies. If you email support, we receive the information you choose to send and use it to respond. Avoid including private prayer or note content unless you want to share it for support.

For questions about this policy or your privacy choices, contact vlad@light3capital.com.

This policy replaces the earlier offline-only policy. It will be updated if Hagah’s data practices change.