Privacy Policy

1. Who we are

BeStill (“BeStill”, “we”, “us”, “our”) is the Bible, prayer and reading-plan app Bestill : Walk in Faith & pray, available on Google Play and the App Store (the “App”). The App is published and operated by [X]CUBE LABS PTE. LTD., 20A Tanjong Pagar Road, Singapore 088443 (listed on Google Play as “Ello: AI Companions”), which is responsible for your personal information as described in this policy (the “data fiduciary” or “controller”).

This policy applies to the App, this website and any support you receive from us. It does not apply to third-party websites or services we link to, such as church or partner-ministry pages listed in Discover.

2. What we collect

2.1 Information you give us

• Account details. If you sign in with Google or Apple, or with an email address and password, we receive your name, email address, profile photo (if your account has one) and a sign-in identifier from Firebase Authentication. If you continue as a guest, we create an anonymous identifier with no name or email.
• What you create in the App. Highlights, bookmarks, notes on verses, prayer requests and whether they were answered, saved and started reading plans, days completed, your reading and prayer activity (used for your streak and badges), and your App preferences such as translation, reader font, text size and reminder time.
• Messages to us. If you email us, we receive your email address and whatever you choose to include.

As a guest, or before you sign in, what you create is stored only on your device. It is uploaded to our servers only after you sign in, so it can sync across your devices.

2.2 Purchases

If you subscribe to BeStill Plus, Google Play or the App Store processes your payment. We never see or store your card or bank details. We receive and keep a record of the purchase: product (monthly or yearly), store transaction identifiers, price and currency, trial status, start, renewal and expiry dates, and whether it is still active. We use this to unlock Plus and to verify the purchase with the store.

2.3 Collected automatically

• App usage (analytics). Events such as opening the Bible, starting audio, starting or completing a plan day, earning a badge, sharing a verse image, or starting a checkout. These may include the book, chapter or plan involved, but never the text of your notes or prayers, or anything else you type. See Analytics and your choices.
• Device and technical data. Device model, operating system and version, App version, language, approximate region derived from your IP address, an app-instance identifier, and on Android the device advertising identifier for install and purchase attribution (see Meta below). Our servers also keep standard logs (IP address, time, request) for security and troubleshooting.

2.4 What we do not collect

We do not access your contacts, photos, precise location or microphone for Bible reading, plans or prayer. When you create a verse image, it is made on your device and shared only where you choose. We do not show third-party advertising in the App.

3. How we use your information

We do not use your personal information for decisions that have a legal or similarly significant effect on you, based solely on automated processing.

4. Who we share it with

We do not sell your personal information. We share it only with service providers who help us run BeStill, under contracts that limit their use to providing that service, and when the law requires it.

• Google (Firebase Authentication and Google Analytics for Firebase): sign-in, and the App usage analytics described above.
• Apple and Google sign-in: if you choose to sign in with them.
• Amazon Web Services: hosts our servers and database in the United States.
• Google Play and the Apple App Store: process payments and confirm subscriptions.
• Meta Platforms (Facebook SDK): in release versions of the App, we send a small set of events so we can tell which marketing brings people to BeStill. These are app install and open, completing sign-up with Google or Apple, and starting a Plus subscription or free trial (product, price and currency). On Android this includes the device advertising identifier. We never send your name, email, prayers, notes, verse text or anything you type. On iPhone we do not access the advertising identifier (IDFA) and do not track you across other companies’ apps.
• Text-to-speech provider: when you use read-aloud, the verse text (only the Bible text, never your own content) goes to our server, which asks a speech service to create the audio. If that service is unavailable, your phone’s own voice reads instead.
• AI service providers: only when you use the AI Companion, as described below.
• Legal and safety: we may disclose information if required by law, court order or a valid government request, or to protect the rights, safety and property of our users, the public or BeStill.
• Business changes: if BeStill is involved in a merger, acquisition or sale of assets, your information may transfer as part of that transaction, under this policy’s protections.

5. Analytics and your choices

• App usage analytics are on by default. Turn them off at any time in You → Settings → Share app-usage data. The change takes effect immediately and is remembered on that device.
• Marketing attribution (Meta) is separate from that switch. On Android you can reset or delete your advertising ID, or opt out of ads personalisation, in Settings → Google → Ads (or Settings → Privacy → Ads). On iPhone, BeStill does not access the advertising identifier.
• Notifications: turn the daily reminder on or off in the App, or in your phone’s notification settings.

6. AI Companion

Some versions of BeStill include an optional AI Companion for prayer and reflection. When it is available and you choose to use it, what you say or type to the Companion, including voice converted to text, is processed by our AI service providers to generate replies. Do not share sensitive information you would not want processed this way. The Companion offers faith-based encouragement. It is not medical, psychological or professional counselling, and it may make mistakes. You can use every other part of BeStill without the Companion.

7. How long we keep your information

• Account and synced content: kept while your account is active. When you delete something in the App, such as a note or prayer, it is removed from sync, and the deletion record is kept only as long as needed to sync it to your other devices.
• When you delete your account: your synced content is erased straight away, and your account and sign-in are deleted. Residual copies in encrypted backups are overwritten within 35 days.
• Purchase records: kept as long as tax, accounting and consumer-protection laws require, usually up to 8 years.
• Analytics: Google Analytics event data is kept for up to 14 months.
• Server logs: kept for up to 90 days, unless needed longer to investigate a security issue.
• Support emails: kept for up to 2 years after your request is resolved.

8. Deleting your account

Open You → Settings → Delete account, type DELETE and confirm with your sign-in. This erases your synced highlights, bookmarks, notes, prayers, plan progress and activity, deletes your BeStill account and sign-in, and clears the account’s data from that device. If you cannot access the App, follow the steps on our account deletion page.

Deleting your account does not cancel a BeStill Plus subscription. Cancel it in Google Play or the App Store so you are not charged again.

9. Your rights

Depending on where you live, including under Singapore’s Personal Data Protection Act 2012, India’s Digital Personal Data Protection Act, 2023, the EU and UK GDPR, and US state privacy laws, you may have the right to:

• access the personal information we hold about you and receive a copy
• correct inaccurate or incomplete information
• delete your information (erasure)
• withdraw consent at any time, without affecting processing before you withdrew it
• object to or restrict certain processing, including for analytics
• data portability
• nominate someone to exercise your rights if you die or become incapacitated (India)
• complain to a data protection authority, such as Singapore’s Personal Data Protection Commission or the Data Protection Board of India

To exercise a right, email stores@xcubelabs.com from the email on your account, or tell us your sign-in method. We will respond within 30 days (or sooner where the law requires) and may need to confirm your identity first. We will not treat you differently for exercising your rights.

10. Security

Data travels between the App and our servers over encrypted connections (HTTPS/TLS). Access to our systems is limited to people who need it, and sign-in is handled by Firebase Authentication rather than by storing passwords ourselves. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the authorities as the law requires.

11. International transfers

Our servers are in the United States, and our service providers may process information in other countries. When information leaves your country, we rely on safeguards the law recognises, such as standard contractual clauses, and transfer it only to countries that the laws of Singapore and India allow.

12. Children

BeStill is meant for people aged 13 and over. In India and some other countries, people under 18 need a parent or guardian’s consent. We do not knowingly collect personal information from children below these ages without that consent. If you believe a child has given us personal information, contact us and we will delete it.

13. This website

This website does not use cookies, advertising or third-party trackers, and it loads no external fonts or scripts. It saves your light or dark theme choice in your browser’s local storage, and that choice never leaves your device. Our hosting provider may keep standard server logs, such as IP address and pages requested, for security.

14. Changes to this policy

We may update this policy as BeStill changes. We will update the date at the top. For significant changes, we will tell you in the App or by email before they take effect.

15. Contact us

We aim to acknowledge grievances within 72 hours and resolve them within 30 days.