Privacy Policy

Psalmwell has no account, no advertising, no analytics and no server of ours anywhere in it. It does not make a single network request. What you write stays on this phone unless you turn on iCloud backup or export it yourself.

Last updated 23 September 2026. Applies to Psalmwell for iPhone, version 1.0 and later.

Who is responsible

Psalmwell is written and published by WANG WENJIE, an individual developer. There is no company, no team and no data department behind it. Questions about anything on this page go to Fuuqiu@gmail.com and are answered by the person who wrote the app.

What Psalmwell collects: nothing

There is no account to create, no email to hand over and no sign-in of any kind. Psalmwell does not collect usage events, performance events, session identifiers, advertising identifiers or a device fingerprint. It contains no advertising SDK, no analytics SDK, no crash reporter, no social login and no third-party tracker, and there is no in-app statistics switch because there is nothing for it to switch off.

This is structural, not a policy we promise to keep. The app makes no network request at all — there is no networking code anywhere in it, and a check that runs every time a debug build launches fails the build if any appears. The widget extension is the same: its binary does not link the networking frameworks.

Where your prayers live

In this app's own database, on this device, inside the app's private container. Your prayer entries, the devotionals you have read, your progress through a thirty-day pack and your milestones are written there and read back from there. Nothing is uploaded, and there is no copy on any server of ours — which also means that if you lose this phone without a backup, there is nothing for anyone, including us, to restore from.

The Home Screen and Lock Screen widgets read a small snapshot from a container shared between the app and the widget. That snapshot holds today's verse, its reference and your chosen translation. It never contains a prayer, a note or any other word you have written — a check asserts that, precisely because a Lock Screen is visible to whoever is holding the phone.

Encrypted iCloud backup — optional, and off until you turn it on

Backup is part of Psalmwell Pro and is off by default. Nothing is ever written to iCloud before you switch it on yourself.

What is written. A snapshot of your prayers, pack progress, reading history, milestones and preferences.
How it is protected. It is encrypted on this phone, before anything leaves, using AES-GCM-256. The key is generated on your device and kept in your iCloud Keychain, where only your own Apple devices can reach it. We never see the key and cannot decrypt the file.
Where it goes. Into your own iCloud Drive — the storage attached to your Apple Account, in the container iCloud.com.topxup.Psalmwell. It does not pass through, and is not copied to, any machine of ours. We have no servers.
What is not encrypted. A small manifest beside the file holds the backup date, a schema version and a count of items, deliberately left readable so the app can show you "last backup" without unlocking anything. It contains no prayer text and no free text of any kind.
Restoring. Nothing restores on its own. When you ask, the merge only adds entries that are missing and never overwrites something already on this phone. You need to be signed in to the same Apple Account.
Deleting the app does not delete the backup. The snapshot is in your iCloud Drive, so it survives. To remove it: turn the backup switch off inside Psalmwell and choose "Delete it", or delete the file yourself in iPhone Settings → your Apple Account → iCloud → Manage Storage → Psalmwell, or in the Files app.

Restore points

Before every export and before every delete, Psalmwell automatically writes a restore point of your journal into its own folder on this phone, and keeps the last five. It is a safety net for a mis-swipe, not a backup feature: restore points never leave this device, are never uploaded and are removed along with everything else when you delete the app. Restoring one adds back only the entries that are missing.

Exporting and sharing

Exporting your prayer journal as a plain text file is free and always will be. Pro adds a printable PDF of the Answered book and a year-in-review card. All of them are rendered on this phone and handed to the iOS share sheet: where the file goes is your decision — Files, Mail, Messages, a printer, anywhere you choose. Nothing is uploaded to produce them, and nothing is sent to us. An export naturally contains the words you wrote; that is the point of it. Once you hand a file to another app, that app's own privacy terms apply to it.

Notifications — the only permission this app asks for

If you choose a daily reminder time, Psalmwell asks iOS for permission to send local notifications, and it asks only at that moment, never on first launch. The reminder is scheduled and delivered entirely by iOS on this device; nothing about it is sent anywhere. Psalmwell never sets a badge on its icon.

If you say no, or choose "No reminder", every other part of the app works exactly as before. iOS only shows that permission box once, so Psalmwell does not ask again — Settings shows an explanation with an "Open Settings" button that takes you to Psalmwell's notification page if you change your mind. Psalmwell asks for no other permission: no camera, no microphone, no photos, no location, no contacts, no health or motion data.

Purchases

Psalmwell Pro is bought through Apple's In-App Purchase system. Apple handles the payment: we never see your card number, billing address or Apple Account details. What the app receives back from Apple is whether this Apple Account owns the purchase. "Restore purchases" asks Apple the same question again. Subscriptions are billed by Apple and refunds are requested from Apple.

What Apple tells us, and what it does not

Like every developer, we can read App Store Connect's own reports — downloads, sales, subscription totals and the like. Those are aggregate figures produced by Apple, they do not identify anyone, and they come from Apple rather than from the app. There is no counterpart inside Psalmwell: the app sends Apple's servers nothing beyond the standard purchase check, and sends us nothing at all.

Children

Psalmwell is rated 4+. It has no user-generated content shared between people, no chat, no social features, no unrestricted web browsing and no advertising. Because it collects nothing, it collects nothing from children either.

Sharing and selling data

We do not sell, rent, trade or share your data, because we do not have it. No data processor, no advertising network and no analytics provider receives anything from this app — none of them are in it.

Deleting everything

Delete the app. That removes the database, the restore points and every preference Psalmwell stored on this phone. There is nothing on a server of ours to request the deletion of, because a copy was never made. If you had switched iCloud backup on, delete that snapshot as described above — it is in your storage, not ours.

Changes to this policy

If the app gains a feature that changes any of the above, this document and the copy inside the app are updated in the same release, and the date at the top changes with it. We do not quietly widen what the app does and leave the policy behind.

Contact

Fuuqiu · Fuuqiu@gmail.com
Published by WANG WENJIE.