Privacy Policy

Last updated: October 9, 2026

Morning Manna is a Bible alarm clock app made by K-Bridge LLC (“we”, “us”). This policy explains what the app stores, where, and why. The short version: almost everything stays on your phone. The app does not ask for your name or location, shows no advertising, and does not sell or share your data with anyone for marketing. The one thing it may ask for is an email address — only if you choose to back up your progress, and only so you can sign back in.

In one paragraph. Your alarms, listening history, streak, journal and favourites live only on your device. The app signs in anonymously to download Scripture audio and to check your subscription. If you join or lead a group, the group's name, the display name you chose, your membership, the leader's notes and any reflections you post are stored in the cloud so the group can share them. If you turn on backup, your listening history is copied to the cloud under an email address you give us, so it survives a lost or replaced phone; your journal is copied only if you also switch on the separate journal backup, which is off by default. If someone buys Premium seats for a group you belong to, the group's page shows their chosen name and the seat count; you give us nothing new. Nothing identifies you by name unless you type one, and the only email you will ever get from us is the confirmation link for a backup address (and a password reset if you ask for one) — or, if you are the one who paid for seats, the receipt and a renewal reminder.

1. What stays on your phone

The following is stored only on your device and is never uploaded to us:

Alarms and settings — times, days, sound and snooze preferences.
Listening history — which chapters you woke to and on which days. This powers your week strip, streak and Journey. (If you turn on backup, a copy of this — and only this — is also kept in the cloud. See section 2.)
Journal entries, including any you star. (Journal backup is a second switch beneath backup, off by default — see section 2.)
Favourites (Premium).
Downloaded chapters — audio and text cached so your alarm plays even without a connection.

We cannot read any of this. It is deleted when you uninstall the app or clear its data, and the app itself offers a “Reset Progress” control. Unless you have turned on backup, we have no copy and cannot restore it for you.

2. What the app sends to our services

Morning Manna is built on Google Firebase. To deliver content and run groups, the app communicates with the following, all operated by Google on our behalf:

Anonymous sign-in

On first launch the app creates an anonymous account through Firebase Authentication. This is a random identifier with no name, email or phone number attached. It lets the app fetch Scripture audio and lets your subscription and group membership belong to your device. If you uninstall the app or clear its data, that identifier is lost and a new one is created — including any group membership tied to it.

Optional backup, and the email address it needs

Backup is off unless you turn it on, under Account on the Profile screen. It exists for one reason: your streak and your Journey can take years to build, and without a backup a lost or replaced phone erases them.

Turning it on asks you to create an account with an email address and a password. The address is a key, not a mailing list: it is how you sign back in on a new phone, and it is the only way we could ever tell that a new phone is yours. We do not send you email, other than the one-time confirmation link and, if you ask for one, a password reset. We do not add you to any list and do not share the address.

Or continue with Google (and, on iPhone, with Apple, once that is offered). Instead of choosing a password you can create the same account with a sign-in you already have. When you do, Google or Apple confirms to us who you are and passes on your email address and an identifier for that sign-in. Google also passes the name and profile picture address on your Google account; these are stored with your sign-in record by Firebase Authentication, and the app does not show them, use them or share them. Apple lets you hide your real address and give us a relay address instead. We never see your Google or Apple password, and we get no access to your contacts, mail, files or anything else in that account. Because the provider has already confirmed the address, no confirmation email is sent. Everything else on this page applies in the same way, including how to delete the account.

Once your address is confirmed, the app keeps a copy of your listening history — the days you gathered, the chapters you have heard, and your best streak — in Cloud Firestore, linked to your account. That is all it copies on its own. Your favourites, alarms and settings stay on your phone only.

Your journal is copied only if you also turn on Also back up my journal, a second switch shown beneath the first once backup is on. It is off by default. When it is on, each entry — the text you wrote, its date, and whether you starred it — is kept in the same place, under the same account, so it too survives a lost phone. Entries are stored as plain text, protected by the same safeguards Google applies to all Firestore data; we do not encrypt them further, and we do not read them. Deleting an entry in the app removes it from the backup as well.

Creating an account keeps the same anonymous identifier your device already had, so your group membership and subscription carry over unchanged.

You are in control of the copy:

Turn backup off at any time. Syncing stops; the copy made so far is kept until you remove it. The journal switch can be turned off on its own, and turns off with backup; either way your entries stay on your phone and the copy made so far is kept until you delete the entries or the account.
Reset Progress (Profile → Your data) erases your listening history on the phone and in the backup, in one step, whether or not backup is switched on. It does not touch your journal, on the phone or in the backup.
Delete account (Profile → Your data) removes your email address, your sign-in and every copy we hold in the cloud, and leaves the progress on your phone untouched. This is done inside the app; no email to us is needed.
Sign out stops syncing and never erases anything on your phone.

Backup is free on every plan. It is not a Premium feature and never will be a reason to subscribe.

Scripture content

The app downloads chapter metadata and audio from our content service (Firebase Cloud Firestore and Cloud Storage). These requests carry your anonymous identifier and a device-integrity token (Firebase App Check), which helps us make sure requests come from the genuine app. No listening data is sent back by these requests; the only listening data that ever leaves your phone is the backup described above, and only if you turn it on.

Groups

Groups are optional. If you create or join one, the following is stored in Cloud Firestore:

The group's name and its invite code.
The display name you choose when you join. This can be anything; it does not have to be your real name.
Your membership, linked to your anonymous identifier.
Notes written by the group's leader, and Amens on those notes. Leader notes are automatically deleted after a short period — daily notes within days, weekly notes within weeks.
Reflections — short notes that members may post under a day's or a week's chapter — and Amens on them. A reflection is shown to everyone in the group under the display name you chose, and is deleted automatically on the same schedule as the leader's notes. You can edit or delete your own reflection at any time; the group's leader can remove any reflection.
A daily “gathered” signal — a record that you woke to the chapter on a given day — so the group can show how many members gathered. Other members only ever see a count, and counts below five are not shown.
If you report a leader's note or a reflection, a copy of it and the reason you gave, so a person can review it.

Group leaders can see how many members a group has. Nobody — including the leader — is shown a list of who gathered on a given morning.

If you choose to hide reflections from a person, that choice is stored only on your phone. It is never sent to us or to them, and you can undo it from Profile.

Group seats

A church, family or other sponsor can buy Premium seats for a group on our website. That purchase is made on a page hosted by Stripe, our payment processor: Stripe collects the payer's email address and card details under its own privacy policy, and we receive a payment record, the payer's email address (so we can send the receipt, activate the seats and, about a month before they end, a renewal reminder) and the group's invite code. We never see the card. The payer is usually a church office, not a member.

Once activated, the group's document holds the sponsor's chosen name (for example “Grace Chapel”, or nothing if they asked to stay anonymous), the number of seats and the date they end. Members of that group can see these, because they are shown on the group page. Which members hold a seat is worked out from the order in which they joined; it is not stored per member and no member gives us anything new to be covered. Seats are tied to the group, not to your account or device: leaving the group ends your seat.

Subscriptions

Purchases are made through Google Play (or the App Store on iOS) and managed by RevenueCat, a subscription service. We receive your subscription status and an anonymous identifier so the app can unlock Premium. We never receive your payment card, billing address or store account details; those stay with Google or Apple under their own privacy policies.

The giving newsletter is optional and separate from the app. If you choose to join, you sign up on a page run by beehiiv, our newsletter provider, and give your email address there — the app itself never collects it. beehiiv first sends you an email asking you to confirm; nothing else is sent until you do.

beehiiv keeps the subscriber list on our behalf, under its own privacy policy. We use the list only to send the giving newsletter — news of our giving, and the chance to suggest causes and vote — and we never sell or share it. Like most email services, beehiiv records basic delivery information, such as whether an email was opened or a link in it was clicked. Every email has a one-tap unsubscribe link, or email us and we will remove you.

3. What we don't do

No advertising, and no advertising identifiers.
No analytics or tracking SDKs. The app does not report how you use it.
No location, contacts, camera, microphone or photo access.
No selling, renting or sharing of personal data with third parties for their own purposes.

4. Permissions the app asks for

On Android the app asks for the ability to schedule exact alarms, show notifications, and appear over the lock screen when an alarm rings. It may also ask you to exclude it from battery optimisation so alarms fire reliably. These permissions are used only to wake you; they collect nothing.

5. Children

Morning Manna is not directed at children under 13, and we do not knowingly collect personal information from them. Groups are private and joined only by an invite code shared person to person.

6. Where data is stored, and for how long

Cloud data is stored on Google's servers, which may be located in the United States or elsewhere. Anonymous accounts and group memberships are kept until the app is uninstalled or its data cleared, or until you leave the group. Leader notes and reflections expire automatically as described above. Reports are kept for as long as needed to review them. Payment records for group seats are kept by Stripe and by us for as long as tax and accounting law requires.

If you have turned on backup, your email address and the backup of your listening history are kept until you delete your account from inside the app, or until you use Reset Progress (which removes the history but keeps the account). An account whose address you never confirmed is not backing anything up and can be deleted the same way.

7. Your choices and rights

You can use the app without ever joining a group, subscribing or turning on backup; in that case the only cloud data about you is an anonymous identifier.
You can turn backup off, reset your progress everywhere, or delete your account and everything it holds, all from inside the app — see “Optional backup” above.
You can leave a group at any time from inside the app, which removes your membership.
You can delete everything on your device by uninstalling the app or clearing its data.
If you would like us to delete group data linked to your device, or have any question about your data, email contact@morningmanna.app. If you never created an account we hold no name or email for you, so we may ask for details that help us find the right anonymous account — for example the group's name and the display name you used.

If you are in the European Economic Area, the United Kingdom or California, you have additional rights under local law, including the right to access and delete personal data we hold; the same email address is the way to exercise them.

8. Changes to this policy

If we change how the app handles data, we will update this page and the date at the top, and the app will point to the new version. The September 4, 2026 revision added the optional backup described in section 2; the September 17, 2026 revision added group seats and Stripe, and described the giving newsletter in more detail; the September 21, 2026 revision added the optional journal backup — a second switch, off by default — to section 2; the September 26, 2026 revision added members' reflections in groups, and the on-device list of people whose reflections you have hidden. Those are the only changes since the policy was first published.

9. Contact

K-Bridge LLC, maker of Morning Manna
contact@morningmanna.app