Privacy Policy

Last updated: November 2, 2026

Who we are

Little Flock is made by Greenlight Ads. Questions or requests: cactusclosetshop@gmail.com.

What stays on your iPhone

Everything you do in the app is stored on your device: your first name and your lamb's name, your reading progress, streak, lessons, hero cards and flock, your highlights, notes and bookmarks, your reading plans, and your settings (translation, reminder time, appearance, voice). We cannot see any of it. Deleting the app deletes all of it.

Ask the Bible (from version 1.3). When you type a question or a feeling, the app looks it up in its own copy of the Bible on your iPhone. On iPhones with Apple Intelligence, a two-line summary may be written on the device by Apple’s on-device model, from those verses only. Your question, the verses and the summary never leave your iPhone. The usage counts only record that a question was asked, never what it was or what it was about. Your plans for your life and your progress in them are stored on your iPhone like everything else.

Photos

If you save a verse wallpaper, your iPhone asks once whether Little Flock may add photos. That permission only lets the app add the image you saved; it cannot see or read anything in your photo library. The Shortcuts action "Get Verse Wallpaper" makes the image on your phone and hands it to Shortcuts; nothing is sent to us.

Notifications

The daily verse is a local notification scheduled by the app on your phone. Nothing is sent from a server and we hold no record of it. You choose the time, and you can turn it off in the You tab or in iPhone Settings. If you have been away, the app may show one short note a week for three weeks, then stops. If you start a free trial, the app schedules one reminder two days before the trial ends. We never send marketing.

Purchases

Anonymous usage counts (from version 1.2). To learn which parts of setup and which screens people use, the app sends anonymous usage counts to TelemetryDeck, a privacy-focused analytics service in the EU: the name of a screen or button (for example "setup step 3" or "membership screen opened"), the app version, and a random ID made for this install, which is hashed on your iPhone and hashed again by TelemetryDeck. It never includes your name, friend code, what you read, your notes, prayers or feelings, is not tied to your Apple ID, and is never used for advertising or tracking. You can turn it off in the app under You › About › Privacy.

Membership is sold through Apple's App Store. Apple handles payment and billing; we never see your card or bank details. Your Apple account, not the app, holds the subscription, and you manage or cancel it in iPhone Settings › Apple Account › Subscriptions. The app checks your membership status with Apple on your device.

We use RevenueCat, Inc. to keep count of memberships. When the app opens, it gives RevenueCat a random ID made for this install (not your name, email or Apple ID) along with basic device details: app and iOS version, country and language. When you start a trial, buy, renew, restore or cancel, RevenueCat receives the App Store transaction: which plan, the price and currency, the dates, and whether it was a free trial. Apple also sends RevenueCat the App Store's subscription notices for our app. We use this to see how many people subscribe, renew and cancel. RevenueCat never receives your card details, your reading, notes or Friends data.

If you installed Little Flock after tapping an Apple Search Ads ad in the App Store, Apple's AdServices framework gives the app a token that tells RevenueCat which of our campaigns it came from. It contains no advertising identifier and is not used to follow you across other apps.

Friends (optional)

Friends is off until you open it. When you do, the app creates a random 8-character friend code and saves two small records in Apple's iCloud public database (CloudKit) under that code:

• Your card: your first name, your lamb's name and look (the wool colour and what it wears, chosen from the app's presets), your current and longest streak, the last day you read, which of the last 30 days you read on and the last day you read the Daily Reading (so friends who read together can see each other's days in a row), and your totals (days read, chapters read, lambs, leaderboard lambs, lessons, hero cards). If "Show what I'm reading" is on, the book or plan you are on. The props you gave friends in the last 3 days (which cheer and which day), with each friend's code scrambled so only that friend can tell a prop is theirs. If you're in a reading group with a weekly passage, which of those passages you've read, as short scrambled codes that only people in the same group can match (they never name the group).
• Your presence: whether you have the app open on your screen right now, and, if "Show what I'm reading" is on, a line such as "Reading John 3". This is never sent while the app is in the background or your phone is locked.

Anyone who has your code can read these records; nobody can search for them, list them or find them without the code. The code is random and is not tied to your name, Apple ID or email. Your notes, highlights and reading history are never included.

Invites and reading groups. When you invite someone, the app saves a small invite record in the same iCloud database: your friend code, your first name, your lamb's name and look, whether the link works once or many times, and when a one-time invite expires (14 days). The link you send (for example littleflockapp.netlify.app/f/K7Q2XY) carries a random 6-character token for that record and, so the message shows a preview, your first name. When someone taps Join, their phone saves a record with their friend code, first name and lamb's name, so your phone can add them back. A reading group is a record with the group's name, the friend code, first name and lamb's name of each person in it, and the week's passage (a book and chapter) if the person who started it chose one; joining, leaving and the group link work the same way. Anyone who has an invite or group link can read that record, and nobody can search for or list them. Cancelling an invite, resetting your flock link or a group link, or ending a group deletes those records. Our website only uses the name in the link to show the preview; it does not store it.

Your controls, all in Friends: "Share my progress with friends" off deletes both records at once, cancels your invites and links, ends the reading groups you started, takes you out of the groups you're in, and empties the join notes your phone wrote. "Show friends when I'm here" off stops presence. "Show what I'm reading" off removes the reading line and the book or plan from your card. "Get a new friend code" deletes the old records, does the same for your invites and groups, and cuts off everyone who had the old code. Removing a friend stops you seeing them, and invites or reading groups never add them back unless you choose them again. Every friend and group has a Report option that emails us; we act on reports and remove offending names.

Because these records live in our app's iCloud container, we (the developer) can see them in Apple's CloudKit console and use that access only to run the feature, answer support requests and act on reports of abuse. They are stored by Apple under Apple's privacy policy and kept until you delete them as described above, or until we remove them in response to a report or a request.

Friend quizzes

A friend quiz travels inside the link or code you choose to send. There is no server holding it, and we never see it.

What we do not do

• No advertising, and no advertising identifiers.
• No tracking across other companies' apps or websites, and no data brokers.
• No crash-reporting services, and no analytics beyond the anonymous usage counts described above. The one third-party software kit in the app is RevenueCat's, described under Purchases. If we ever add another, we will update this policy first and describe it in the App Store privacy details.
• No selling of personal information.

Reporting a wrong answer or a friend

"Report an error" under any quiz answer, and "Report a problem" on a friend's card, open an email to us from your own mail app with the lesson or friend code filled in. Nothing is sent unless you send the email.

Children

Little Flock is a Bible reading app for general audiences. It has no accounts and asks for nothing beyond a first name and a lamb's name, which stay on the phone unless Friends is turned on. We do not knowingly collect personal information from children under 13; if you believe a child has shared personal information through Friends, write to us and we will delete it.

Your rights

You can see and delete everything the app holds about you with the controls above. If you want us to delete Friends records for a code, or have any other request under the law that applies to you (for example the California Consumer Privacy Act or the GDPR), email cactusclosetshop@gmail.com with the friend code. We answer within 30 days.

Changes

If this policy changes, the new version is posted here with a new date, and the app's Privacy screen links to it.