Privacy Policy

Information we collect

Account information

Well Said uses Sign in with Apple. When you sign in, Apple gives us a unique account identifier, the email address you choose to share (which may be an Apple private relay address), and, the first time you sign in, the name you choose to share. You can change your name in Settings. We also keep a token from Apple that lets us disconnect Well Said from your Apple Account when you delete your account. We don’t receive your Apple password.

Your Library and writing

When you save a quote or Bible verse, or write your own, we store its text, attribution, source link (if any), whether you wrote it or found it, and when it was created, changed, or deleted.

For You preferences and history

To personalize For You, we store the purposes you pick (for example “Faith & spirituality” or “Comfort & healing”), whether you want Bible verses, and up to three life events, which can be presets such as “Starting a new job” or your own words. Life events and purposes can reveal sensitive things about you, such as your beliefs, health, or family situation. They are optional, and you can change or clear them at any time in Settings → For You. We also keep a record of which recommended quotes you have been shown or dismissed, so we don’t repeat them.

Find, Ask, and AI results

When you use Find, we receive your search and the earlier messages in that search. When you use Ask, we receive your question, the earlier messages in that conversation, and the quote you are asking about, including its text, attribution, and source, even if it is a quote you wrote. We keep the results of your free Find and Ask uses with your account, and the results of subscriber requests for about an hour, so a retried request doesn’t run or count twice. We also keep a record of each AI request’s feature, model, size, cost, and timing to enforce usage limits. That record doesn’t include your text.

Notifications and widgets

If you schedule quote notifications, we store the times, days, and quote source you choose, your time zone, and, for each device, the push notification token Apple provides and a random installation ID. If you add a For You widget, we create a widget access token for that device and store only a hashed copy of it on our servers.

Subscriptions and purchases

Purchases are processed by Apple. We never receive your payment card or billing address. When you subscribe or restore purchases, and when Apple notifies us of changes, we receive and store transaction details from the App Store: transaction IDs, product, price and currency, purchase, renewal, and expiration dates, renewal status, trial or offer details, refunds or revocations, and whether the purchase was made in the App Store or a test environment. We also create a random token that links your purchases to your Well Said account. We use this to give you access to subscriber features and to keep subscription records accurate.

Usage, diagnostics, and device information

The app sends usage events and diagnostics to PostHog, our analytics provider. These include when the app is installed, opened, updated, or moved to the background; which main screens you view; onboarding steps; paywall views and purchase or restore outcomes; when you save, write, delete, or share a quote (including that quote’s text and attribution); when you open the app from a notification or widget; the thumbs-up or thumbs-down ratings you give AI results; crash reports, errors, and app hang or termination reports; and device and app details such as device model, operating system version, app version, and language. Our servers also send PostHog records of account creation, onboarding completion, your saved For You preferences (including life events), subscription changes, notification delivery, server errors, and each AI request, including its full input and output. PostHog may derive an approximate location (such as country and city) from the IP address of your device. Before you sign in, these events are not linked to you; after you sign in, they are linked to your Well Said account ID, email, and name. We don’t record your screen and don’t use session replay or heatmaps.

Advertising measurement

App Store installs of the app include Google Analytics for Firebase and Google’s on-device conversion measurement, which we use only to measure whether our Google Ads campaigns lead to app installs and subscriptions. TestFlight and development builds don’t send anything to Google. Google Analytics collects the events its SDK records automatically (such as first open, app sessions, and engagement time), an approximate location derived from your IP address, and device details such as model, operating system, and language. When you start an App Store subscription or free trial, the app also sends Google the product, the amount you were charged, and the currency. Google’s SDK may also record when a free trial converts to a paid subscription or a subscription renews, with the product, price, and currency, when you next use the app.

We do not attach your Well Said account ID to Google events. Google associates events with an app-instance identifier, a random ID for this installation of the app that isn’t tied to your Well Said account. We don’t send Google your name, email, quotes, searches, or preferences. We have turned off collection of Apple’s identifier for vendor. The app doesn’t include Google’s advertising identifier support and never asks for permission to track you, so neither the app nor Google’s SDKs receive your device’s advertising identifier.

On-device conversion measurement matches app installs to Google Ads interactions using temporary, de-identified signals, such as information derived from your IP address. According to Google, no identifiable information leaves your device or is disclosed to anyone, including Google, in this process. Google’s SDK also registers installs with Apple’s SKAdNetwork, Apple’s privacy-preserving system for attributing app installs to ads. We have turned off ad personalization signals, and we don’t use any of this to show you ads or to build an advertising profile of you. Learn more about Google’s on-device conversion measurement and how Google uses information from apps that use its services.

Information stored on your device

The app keeps a copy of your Library and pending changes on your device so it works offline. Your sign-in session is stored in the iOS Keychain. Quotes shown in widgets, a widget access token, and your most recent subscription status are stored in a container shared with the Well Said widgets. Answers you give during onboarding are kept on your device until you sign in, then saved to your account. Signing out removes your account’s data from this device and attempts to revoke widget access and detach notifications. Deleting the app removes its local files, but iOS may keep sign-in credentials in the Keychain. Neither deletes your account; use Delete account in Settings.

Support emails

If you email us, we receive your email address and whatever you include in your message, and we use it to respond to you.

How we use information

• To create and secure your account and keep you signed in.
• To store and sync your Library, writing, preferences, and notification schedules.
• To run Find, Ask, and For You, and to personalize the quotes we recommend.
• To send the notifications you schedule and keep your widgets up to date.
• To provide subscriptions, free allowances, and usage limits, and to prevent abuse.
• To understand how the app is used, measure the quality and cost of AI results, find and fix bugs, and improve Well Said.
• To measure whether our own advertising leads to installs and subscriptions.
• To respond to support requests and to comply with legal obligations.

If you are in the European Economic Area, the United Kingdom, or a similar jurisdiction, we rely on these legal bases: performing our contract with you (providing the app and your subscription); our legitimate interests (security, analytics, improving the app, and measuring our advertising), balanced against your rights; your consent where the law requires it, such as for optional information you choose to give us in your preferences; and compliance with legal obligations.

How AI features work

Find, Ask, and For You are powered by OpenAI, which processes requests for us as a service provider. Depending on the feature, we send OpenAI:

• Find: your search, earlier messages in that search, quotes to exclude, and whether you want Bible verses.
• Ask: your question, earlier messages in the conversation, the quote you are asking about (including its text, attribution, and source), quotes to exclude, and whether you want Bible verses.
• For You: your purposes and life events, whether you want Bible verses, and up to the 20 most recent quotes in your Library (text and attribution), which are used to find and rank recommendations. Some of that text is also turned into embeddings, numeric representations used for matching.

Generation requests also include your Well Said account ID, so we can monitor usage and abuse. Embedding requests don’t. We don’t send your name or email. Find and Ask may use OpenAI’s web search tool, which searches the web based on your request to find and verify quotes.

We send generation requests with OpenAI’s response storage turned off, so OpenAI doesn’t keep them for later retrieval through its API. OpenAI does not use data sent through its API to train its models unless a customer opts in, and we have not opted in. OpenAI generally retains abuse-monitoring logs for up to 30 days, unless longer retention is required by law or reasonably necessary to protect its services or others from harm. See how OpenAI handles API data for details.

AI-generated results, including quotes, attributions, and explanations, can be wrong. Please check anything important before relying on it.

Who we share information with

We share information only with the service providers that run Well Said for us, and only as described here. Service providers process data on our behalf under their terms.

We may also disclose information if the law requires it, to protect the rights, safety, or property of our users or others, or as part of a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information. When you share a quote or open a source link, the information goes where you choose.

We do not sell or share personal information for cross-context behavioral advertising, as defined by California law. We don’t show ads in the app.

How long we keep information

Deleting your account

You can delete your account in the app: open Settings → Account → Delete account. Deletion starts right away and permanently removes your account, Library (including deleted-item records), writing, preferences, recommendation history, notification schedules, device registrations, widget tokens, subscription records associated with your Well Said account, and AI usage records from our database. App Store notifications that Apple sent us but that never matched an account are not linked to you and are kept for subscription bookkeeping, as described above. We also ask Apple to disconnect Well Said from your Apple Account. If that can’t be done automatically, the app tells you how to do it yourself in iOS Settings. One hour after deletion, we ask PostHog to delete your analytics profile and the events linked to it.

Deleting your account does not cancel an App Store subscription. Cancel it in your Apple Account settings (see Support). Data we never attached to your account, such as Google Analytics for Firebase data, isn’t deleted with your account. Information already processed by OpenAI is handled under its retention policy described above. TestFlight feedback in Linear is deleted on request.

If you can’t use the app, email help@well-said.app from the email address on your account (or tell us the Apple relay address) and we will delete your account for you.

Your choices and rights

• You can view, edit, and delete items in your Library, change your name, and change or clear your For You preferences in the app.
• You can turn notifications off in iOS Settings, delete notification schedules in the app, and remove widgets from your Home Screen.
• You can stop Well Said from using your Apple ID in iOS Settings → [your name] → Sign in with Apple.

Depending on where you live, you may have the right to know what personal information we hold about you and get a copy of it, correct it, delete it, receive it in a portable format, object to or restrict certain processing, and withdraw consent you have given. California residents have the right to know, delete, and correct their personal information and the right not to be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioral advertising, as defined by California law.

To make a request, email help@well-said.app. We will verify the request by matching it to the email address on your account, and we will respond within the time the law requires (generally within 30 days, or 45 days in California). You can authorize an agent to make a request for you. If you are in the EEA or UK, you can also complain to your local data protection authority.

Children

Well Said is not directed to children under 13, and we don’t knowingly collect personal information from children under 13 (or the minimum age in your country). If you believe a child has given us personal information, contact us and we will delete it.

Security

We use encryption in transit (HTTPS) between the app, our servers, and our service providers. Your sign-in session is stored in the iOS Keychain, widget tokens are stored on our servers only in hashed form, and access to production data is limited to the people who operate Well Said. No system is perfectly secure, so we can’t guarantee absolute security.

Where information is processed

Well Said is operated from the United States, and our service providers process information in the United States and other countries where they operate. If you use Well Said from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

This website

well-said.app is hosted by Vercel. We use Vercel Web Analytics and Speed Insights to count page views and measure site performance. They record the pages you visit, the referring site, your browser, operating system, and device type, your approximate location (such as country, region, and city), and page performance measurements. They don’t use cookies, and Vercel doesn’t use this data to identify you across other websites. Like most web hosts, Vercel also keeps short-lived server logs, which include IP addresses, for security and operations.

We also use PostHog on this website to understand how visitors find and use it. PostHog records the pages you visit, what you click (such as the App Store link), errors the page runs into, the referring site, your browser, operating system, device type, and screen size, and an approximate location (such as country and city) derived from your IP address. To recognize a returning visitor, PostHog stores a cookie and a local-storage entry in your browser that hold a random visitor ID. Website visits are not linked to your Well Said account, we don’t record your screen, and we don’t use this data for advertising. You can delete or block this site’s cookies in your browser settings, and the site will keep working.

If you choose a light or dark theme with the button at the top of the page, your browser remembers that choice on your device. It is not sent to us.

Beta testing

This applies only if you test Well Said through TestFlight and send feedback. Apple shares that feedback with us, and we copy it into our issue tracker, Linear, so we can fix problems. It includes your comments, screenshots or crash logs; your tester name, email address, and Apple tester ID; your testing status (such as invite type and tester state); the app version and build; and device and environment diagnostics such as device model, operating system version, locale, time zone, connection type, screen size, battery level, disk space, and app uptime. To have your TestFlight feedback deleted, email help@well-said.app.

Changes to this policy

We will update this policy when our practices change and change the effective date at the top. If a change is significant, we will tell you in the app or by another appropriate method before it takes effect.

Contact

Questions or requests about privacy:

help@well-said.app

Grady Gaugler

See also Support and Apple’s Standard License Agreement, which is the license for the app.