Privacy Policy
Last updated: July 20, 2026
This Privacy Policy describes how Dwellun LLC (“Dwellun,” “we,” “us,” or “our”) collects, uses, and protects information in connection with the Hesed mobile application (the “App”) and the website hesedapp.net (the “Site,” and together with the App, the “Service”).
Hesed is built to be a quiet place. Our approach to privacy follows from that: we collect the minimum needed to operate the Service, we show no advertising, we do not track you across other apps or websites, and we never sell your personal information.
1. Information we collect
Account information.Creating an account is optional and is required only to download study content. When you sign in with Google or Apple, we receive, through Firebase Authentication: your name, your email address (or, if you use Apple’s “Hide My Email,” a private relay address), and a unique account identifier. We do not receive your Google or Apple password.
Purchase and subscription status. If paid features are offered and you purchase them, the transaction is processed entirely by Apple through your App Store account. We receive only entitlement information — whether a subscription is active and when it expires — never your payment card number, billing address, or other payment details.
Content delivery records. When you download study content (for example, the commentary library), our infrastructure provider logs standard technical information such as your account identifier, IP address, and the time of the request, for security and abuse prevention.
Diagnostics. Basic crash reports and performance data may be processed to keep the Service reliable. These are technical in nature and are not used to profile you.
On the Site. The Site does not use advertising or tracking cookies and does not require an account. Our hosting provider processes standard server logs (IP address, browser type, pages requested) to serve and secure the Site.
2. What stays on your device
The heart of Hesed is private by architecture. The following are stored locally on your device and are not transmitted to our servers:
- journal entries, reflections, and prayers;
- mood selections;
- highlights and bookmarks;
- reading-plan selections and reading progress;
- app preferences (theme, text size, translation, canon);
- your downloaded study library.
We cannot read this data. It is not backed up by us; deleting the App deletes it. If we ever introduce an optional cloud-sync feature, it will be opt-in and this Policy will be updated before it launches.
3. How we use information
We use the information described above only to:
- authenticate you and maintain your account;
- deliver downloadable study content you request;
- honor purchases and subscription entitlements;
- maintain the security, integrity, and reliability of the Service;
- respond to your support requests;
- comply with legal obligations.
Where laws such as the EU/UK General Data Protection Regulation (GDPR) apply, our legal bases are: performance of a contract (providing the Service you request), our legitimate interests (security, reliability, abuse prevention), and compliance with legal obligations. We do not use your personal information for advertising, profiling, or automated decision-making that produces legal effects.
4. How we share information
We do not sell or rent personal information. We share it only with:
- Service providers that process data on our behalf to run the Service: Google Firebase (authentication and content storage; Google Privacy Policy), Apple (Sign in with Apple and App Store purchases; Apple Privacy Policy), and our website hosting provider;
- Legal authorities, if required by law, subpoena, or to protect the rights, safety, or property of Dwellun, our users, or the public;
- A successor entity, in connection with a merger, acquisition, or sale of assets, in which case this Policy will continue to apply and you will be notified of any material change.
5. Data retention
Account information is retained while your account is active. Server logs are retained for a limited period consistent with security practice and then deleted or anonymized. When you delete your account, we delete your account information within 30 days, except where a longer period is required by law (for example, records of transactions).
6. Your rights and choices
You may, at any time, request access to, correction of, or deletion of the personal information we hold about you by contacting base@dwellun.com. We will respond within 30 days.
If you are in the EEA or UK, you additionally have the rights to restrict or object to processing, to data portability, and to lodge a complaint with your local supervisory authority.
If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) gives you the rights to know, delete, and correct personal information, and the right not to be discriminated against for exercising them. We do not sell or “share” (for cross-context behavioral advertising) personal information as those terms are defined by the CCPA, and we have not done so in the preceding 12 months.
Account deletion. You can request deletion of your account and associated data by emailing base@dwellun.com from the address associated with your account. Data stored only on your device is removed by uninstalling the App.
7. International data transfers
We are based in the United States, and the Service is provided from U.S. infrastructure. If you use the Service from outside the United States, your information is transferred to and processed in the United States and other countries where our service providers operate, which may have data-protection laws different from those of your country. Our providers maintain recognized safeguards for such transfers (for example, standard contractual clauses).
8. Security
We rely on industry-standard safeguards: data is encrypted in transit (TLS), authentication is delegated to Google and Apple rather than handled with passwords of our own, access to content storage requires authentication, and we minimize what we collect in the first place. No method of transmission or storage is completely secure, but a Service that holds little data about you has little to lose.
9. Children
The Service is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
10. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date above reflects the current version. For material changes, we will provide notice through the Service before the change takes effect. Your continued use of the Service after a change constitutes acceptance of the updated Policy.
11. Contact us
Dwellun LLC
Email: base@dwellun.com