Privacy Policy
Last updated: 24 October 2026
Rhapsody Lock.ai ("the app") helps you start each day with God's Word: it keeps your browser (and apps you choose) locked until you have read the day's devotional and Bible passage and answered a short quiz. This policy explains what data the app and its website handle, why, and what your rights are.
In short: we never see your browsing, your messages, your screen or which apps you use. We store your account, your reading progress, quiz answers, journal notes and settings so the app works across devices and so people you choose (a parent, a group, an accountability partner) can see your progress. We don't sell your data, we don't show ads and we don't use analytics or tracking tools. You can delete your account and all its data in the app at any time.
1. Who is responsible
gcodecloud GmbH
Wilmersdorf Straße 122–123
10627 Berlin, Germany
Email: info@gcodecloud.de
Questions about privacy or this policy: info@gcodecloud.de.
2. What we never collect
- Your browsing history or the websites you visit.
- The content of your screen, what you type, or your messages.
- Which apps you use or for how long.
- Your location, contacts, photos or microphone.
Decisions about what to lock happen on your phone. The apps you choose to lock stay on your device and are not sent to us (on iPhone they are anonymous Screen Time tokens that even the app can't read as names).
3. Data we process
| Data | Why |
|---|---|
| Email address, password (stored only as a secure hash) and optional first name | Your account and sign-in. Your first name is shown to your groups and guardians. |
| Language, time zone and lock settings (lock time, reading time, emergency unlocks, cooling-off period) | To show the right edition and to lock and unlock at the right time. |
| Daily progress: when you read, for how long, quiz answers and attempts, streaks | To unlock your browser once the day is complete, and to show your history and streak. |
| Emergency unlocks, with an optional reason you type | To limit emergency unlocks per week, and in parent mode to inform the parent. |
| Journal notes you write | So you can read them again later, on any device. |
| Device identifier and push notification token | To bind unlocks to your device and to deliver reminders and alerts. |
| Guardian and accountability links, alerts and weekly summaries | Parent mode and accountability partners (see section 5). |
| Group membership | Groups you create or join see your first name, streak and whether you completed today. |
| Subscription or sponsorship status | To give you the features of your plan (if paid plans are offered). |
| Technical server logs (for example IP address, time of request) | To keep the service secure and working. Kept briefly by our hosting provider. |
Because using a Christian devotional app can reveal your religious beliefs, we treat this data with particular care: we use it only to provide the app to you and the people you choose, never for advertising or profiling.
4. Permissions on your phone
Android
- Accessibility service: used only to notice when a browser or an app you chose comes to the front, so the app can show its lock screen over it until today's reading is done. It does not read, store or send what is on your screen or what you type.
- VPN (optional "strict mode"): while locked, other apps' internet traffic is sent into a local tunnel on your phone that is never read, so those apps are offline. No traffic is sent to us or anyone else, and calls keep working.
- Device administrator (parent mode only): prevents a child from uninstalling the app without the parent PIN.
- Notifications: daily reminders and, in parent or accountability mode, alerts.
iPhone and iPad
- Screen Time (Family Controls): with your or your parent's permission, the app uses Apple's Screen Time to shield browsers and chosen apps. Apple keeps your app choices private; the app only receives anonymous tokens.
- Notifications: reminders and alerts.
5. Parents, children and accountability
A parent can set the app up on a child's phone ("parent mode"), protected by a parent PIN. Children read a youth edition. Children should only use the app with the involvement of a parent or guardian, who is responsible for setting it up and agreeing to this policy on the child's behalf.
Guardians and accountability partners you link see your completion, streaks and emergency unlocks, and are alerted if protection is turned off or a lock setting is loosened. They never see your quiz answers, journal notes or reading details.
6. "Ask about today's message" (AI)
If this optional feature is available and you use it, your question, the earlier questions and answers in that conversation, and the text of that day's devotional and Bible reading are sent to our AI provider, Anthropic, to write an answer. We do not store your questions or the answers; we only count how many questions you asked that day. Anthropic does not use this data to train its models. Answers are generated by AI and can be wrong.
7. Service providers
We use these providers, bound by data-processing agreements, to run the service:
- Supabase (database, sign-in and server functions), servers in Frankfurt, Germany.
- Hostinger (website hosting).
- Google Firebase Cloud Messaging and Apple Push Notification service (delivering notifications).
- Anthropic (only for "Ask about today's message", see section 6).
- Apple App Store, Google Play and RevenueCat (only if you buy a subscription; payments are handled by Apple or Google, we never see your card details).
- Google and Apple sign-in (only if you choose to sign in with them).
Some providers are based in the United States. Where data leaves the EU, it is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
8. Legal bases (GDPR)
- Providing the app you signed up for: Art. 6(1)(b) GDPR. For data that reveals religious beliefs: your explicit consent, Art. 9(2)(a) GDPR, which you can withdraw at any time by deleting your account.
- Security, abuse prevention and server logs: our legitimate interest, Art. 6(1)(f) GDPR.
- Notifications and optional features such as "Ask about today's message": your consent, Art. 6(1)(a) GDPR, which you can withdraw in the app or your phone's settings.
9. How long we keep data
We keep your data while your account exists. When you delete your account in the app (Settings → Delete account), your account and all data linked to it are deleted immediately from our database; backups are overwritten within 30 days. Server logs are kept for a short time by our hosting providers.
10. Your rights
You have the right to access, correct, delete and export your data, to restrict or object to processing, and to withdraw consent at any time. Most of this you can do directly in the app; for anything else, email info@gcodecloud.de. You may also complain to a data-protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
11. Security
Data is encrypted in transit (HTTPS) and stored in access-controlled databases. Unlocks are cryptographically signed by our server, and the parent PIN is stored only as a secure hash.
12. Changes
If we change this policy, we will update the date above and, for important changes, tell you in the app.