Cana is a Bible reading, study, and small-group app. This policy explains what we collect, what we don't, and who else is involved.
It's written to be specific rather than exhaustive. If anything here is unclear, email us — the address is at the bottom.
Bookmarks, devotional sessions, devotion plans, saved Ask conversations, private session notes, and challenge commitments sync through Apple CloudKit using your own iCloud account — the same mechanism Apple's own apps use.
We have no access to this data. It isn't on our servers, and we cannot retrieve it, including if you ask us to.
We use Firebase (Google Cloud) for accounts and group features:
| What | Why |
|---|---|
| An account identifier, and your email if you signed in with Apple | To identify you across devices |
| Display name and profile photo | Shown to other members of your groups |
| Groups, member lists, invite codes | Group membership |
| Session content: passages, icebreakers, prayer requests, shared notes, challenges | Visible to everyone in that group |
| Subscription status and usage counts | To provide Cana Plus and apply free-tier limits |
If you use Sign in with Apple and choose Hide My Email, we only ever receive Apple's relay address, never your real one.
Group content is not private. Anything you post in a group session — a prayer request, a shared note — is visible to every member of that group. Notes you mark private stay on your device and in your iCloud, and are never uploaded.
When you use Ask, request a verse explanation that isn't already bundled with the app, or generate a group study guide, the relevant text is sent to Anthropic (the makers of Claude) to generate a response.
Cana is not a substitute for pastoral care, counselling, or medical or mental health treatment. If you tell it something suggesting you may be at risk of harm, it will surface crisis resources. In an emergency, contact your local emergency services.
We use PostHog to understand how the app is used. We record events like app opens, sign-ins, and which features are used — not the content of what you read, write, or ask.
Subscriptions are purchased through Apple. We never see your card details. Apple tells our server whether a subscription is active, and when it renews, expires, or is refunded, so we know what to unlock. That's the extent of it.
Cana isn't directed at children under 13, and we don't knowingly collect their data. If you believe a child has provided us information, contact us and we'll delete it.
| Provider | Purpose |
|---|---|
| Apple | Sign in with Apple, iCloud storage, payments |
| Google Firebase | Accounts, group data, subscription state |
| Anthropic | Generating AI responses |
| PostHog | Product analytics |
We'll update the date at the top when this changes. Material changes will be surfaced in the app.