Privacy Policy

Last updated: September 25, 2026

Summary

Taksa is a free liturgical companion for the Chaldean Catholic Church. You never need an account to use it. If you choose to create one, we store your email address and the personal items you ask us to sync (bookmarks, notes and the like) so they follow you between devices — nothing else, and you can delete it all at any time. We do not sell or share data. We do not run advertising. We also collect a small amount of anonymous, device-level usage data so we can fix crashes and understand which parts of the app are actually being used.

Information we do not collect

• Your name or email address — unless you create an optional account (see below). We never collect your phone number, mailing address, or other personal identifiers.
• Your contacts, photos, camera, or microphone
• Your physical location
• Anything from other apps on your device
• Payment, financial, or health information (the app is free and has no in-app purchases)
• Your Apple or Google password, or anything from your Apple or Google account beyond what is described below

Information we do collect

Anonymous usage analytics

The app uses PostHog, a privacy-respecting analytics service, to record anonymous device-level events. These events tell us things like which liturgical section was opened, which audio track was played, when a screen took too long to load, and when the app crashed. Each install is assigned a randomly generated identifier; that identifier is not tied to any name, email, account, or device serial number.

Session replays are recorded for debugging UI problems. All text input fields are masked before any frame leaves your device, so the developers never see what you typed. Replays capture only screen layout and gestures.

Crash reports include the JavaScript stack trace, the app version, and the operating system version. They do not include personal data.

Optional account and sync

You can create an account from Settings → Account with Sign in with Apple, Sign in with Google, or an email address and password. Its only purpose is to keep your personal items in sync across your devices. If you create one, we store:

• Your email address and, if Apple or Google share it, your name. With Sign in with Apple you can choose Hide My Email, in which case we only receive a private relay address. With email sign-up we send one-time codes to your address to confirm it and to reset your password.
• The personal items you sync: bookmarks, highlights, notes you write, favorites, the last chapter you read in each book of Scripture, which daily prayers you marked as prayed, and reading preferences (language, fonts, text size, reading voice).
• Technical records needed to run the account: sign-in timestamps, the sign-in method used, and — for Sign in with Apple — a token that lets us revoke Taksa's access to your Apple ID when you delete your account.

This data is stored with Supabase (servers in the United States), encrypted in transit, and protected so that each account can only ever read its own records. It is used only to provide sync — never for advertising, profiling, or analytics, and it is not linked to the anonymous analytics described above. Notification times and reading scroll positions are never synced; they stay on your device.

We keep account data until you delete your account. You can delete it at any time in the app (Settings → Account → Delete account) or by following the steps on our account deletion page. Signing out removes your synced items from that device; they remain in your account until you delete it.

On-device preferences

The app stores your preferences locally on your device using a fast key-value store. These are things like: your language (English, Sureth or Arabic), your light/dark theme choice, the font you picked for Syriac script, your reader text size, and which sections you've expanded. Without an account, these preferences never leave your device and are deleted when you uninstall the app. If you sign in, the reading preferences listed above also sync to your account.

Audio cache

Hymns and chants stream on demand from assets.taksa.app, our content delivery network. The first time you tap a track, it downloads to the app's cache folder on your device so future plays are instant and work offline. The CDN logs ordinary request information — IP address, user-agent, requested file — for approximately 24 hours for abuse prevention. Those logs are not tied to any user identity and are deleted automatically. You can remove saved tracks at any time from the Downloads screen (the download icon on the Hymns tab); uninstalling the app deletes the audio cache entirely.

Update check

Each time the app launches it makes a single request to our servers to check whether the installed version is still supported. The request includes only the platform (iOS or Android) and the build number — no personal information.

Permissions the app may request

The app asks the operating system for the minimum permissions it needs to function:

• Calendar (optional) — only if you choose to add liturgical feasts, fasts, or memorials to your device's calendar. The app writes events you explicitly request and never reads existing events from your calendar.
• Notifications (optional) — only if you turn on reminders in Settings → Appearance & Notifications. The app then asks for permission and schedules reminders on your device: the prayer-time reminders you choose, a daily Bible verse, and a Saturday-evening notice that a new liturgical week begins. They are scheduled entirely on your device — no push token or notification data is sent to any server.

The app does not request access to your camera, microphone, photo library, contacts, location, motion data, health data, or files outside its own sandbox.

Service providers

The app relies on a small number of vendors for distribution and infrastructure:

• Apple App Store and Google Play Store — distribution of the app
• Amazon Web Services (AWS) and CloudFront — hosting and delivery of audio files
• Cloudflare — hosting of this website (taksa.app)
• PostHog — anonymous usage analytics, as described above
• Supabase — accounts and sync storage, only if you create an account
• Resend — delivery of sign-up and password-reset codes to your email, only if you create an email account
• Apple and Google — sign-in, only if you choose Sign in with Apple or Sign in with Google

Each of these providers handles data under its own privacy policy.

Children's privacy

Taksa does not knowingly collect any personal information from anyone under the age of 13. The app is fully usable without an account, and accounts are not intended for children under 13. If you believe a child has created an account or otherwise provided personal information to us, please contact us at the email below and we will delete it.

Your choices

• You can remove downloaded audio at any time from the Downloads screen (the download icon on the Hymns tab).
• You can turn reminders off in Settings → Appearance & Notifications.
• You can deny or revoke calendar and notification permissions in your device's system settings.
• You can uninstall the app to delete all locally stored preferences and cached audio.
• You can use Taksa without an account, sign out at any time, or delete your account and everything synced to it.

Changes to this policy

Material changes to this policy will be reflected here with a new "Last updated" date.

Contact

Questions or concerns? Email jryono123@gmail.com.