Privacy

Whole Yield is the independent studio of Daniel Horne, in Phoenix, Arizona. This policy covers this website, wholeyield.com, and the Manna Bible study app, including its beta builds distributed through TestFlight.

It does not cover Lucentcast, the podcast post-production service, which runs on its own site and publishes its own policy at lucentcast.com/privacy.html. It does not cover Perfume(D)ecay, a podcast Daniel co-hosts with two equal partners and which Whole Yield does not own or operate.

Questions, or a request about your information: danielh@wholeyield.com.

Nothing is collected automatically. This site is a couple of static pages. It runs no analytics, sets no cookies, stores nothing in your browser, and makes no requests to third-party servers. It uses one typeface, which is served from this same site rather than from a font provider, so loading the page tells no one else that you visited. There is no ability to track you here, across this site or any other.

The only thing on the page that leaves it is the contact link, and that just opens your own email program. Nothing is sent until you send it.

Like any web host, GitHub Pages serves these files and processes connection data such as IP addresses in the ordinary course of delivering the page. That is GitHub's processing under its own privacy statement, not something Whole Yield receives, stores, or looks at.

What Manna does not do

Manna contains no analytics or telemetry of any kind, no crash-reporting service, no advertising, no ad identifier, no third-party tracking SDKs, and no social login. It asks for no system permissions: no notifications, no microphone, no camera, no location, no contacts, no photos. It never asks for your date of birth, your phone number, or your address. It makes no calls to any AI or language-model service, and your notes and prayers are never used to train a model.

What stays on your device

By default, everything. Manna stores your study data in the app's own local storage on your device, and it stays there. That includes your reading history and position, reading-plan progress, highlights, verse notes, memory deck, prayer list, reflections, and your app settings and display name if you set one.

None of that is sent anywhere unless you turn on cloud sync yourself. Deleting the app deletes this data. Because it lives on the device rather than in an account, you should use the app's export option to keep a backup, since clearing the app's data would otherwise erase your only copy.

What Manna requests over the network

Be aware of one automatic request: when you open Manna, it asks our server for the current news list. That request carries no account, no name, and no study data, but as with any web request our server necessarily receives your device's IP address in order to answer it. If our server cannot be reached, the app quietly falls back to the news snapshot bundled inside it and carries on working.

The rest of the network activity happens only when you do something:

• Chapter narration streams from the Internet Archive when you press play, so archive.org receives the request and your IP address, under its own privacy policy.
• Video thumbnails and players come from YouTube on chapters that have an attached video, so Google receives your IP address under its own privacy policy. The thumbnail loads with the chapter; the player only loads if you tap it.
• Pictures in the Kids section load from our server when you open a story, so opening Kids means our server sees your device's IP address, the same as the news request above.
• Outside links open in your browser and are then that site's business, not ours.

The Bible text and the reading plans are bundled inside the app, so ordinary reading needs no network at all. The kids' story wording is bundled too, though its illustrations are not, as noted above. Read-aloud through your device's own built-in speech makes no network request, and no audio of you is recorded, and none is ever sent anywhere.

Optional cloud sync, and only if you ask for it

Manna has an optional sync feature so your own devices can share one study record. It is off unless you switch it on in Settings, and during the beta we set it up with you directly, so it is not something you can turn on by accident.

If you do turn it on, be clear about what that means: your whole study record is uploaded to our server, and that includes the free-text parts. Your notes, your reflections, and your prayer list, including any names or details you have written into them, are stored on the server along with your display name. Please keep that in mind when deciding what to write and whether to switch sync on.

The details:

• Who you are to the server is a display name you choose and an access token the app holds. There is no email address, no password, and no verified identity.
• Where it runs. Your study data is stored on infrastructure we control in the United States, not on a third party's cloud. Access is limited to Daniel, and it is not shared with, sold to, or disclosed to anyone else.
• What is kept. Your current record plus the last 20 revisions of it, so a mistake can be undone. The server also keeps an operational log which records the IP address used when an account is registered.
• Feedback. If you use the in-app feedback form, which needs a sync account, your message is stored with your display name and the IP address it came from, so we can reply and understand the report.
• Turning it off. Ask and we will delete your synced record and your feedback. Because sync is optional, you can also just leave it off and keep everything on your device.

TestFlight and the app stores

Beta builds are distributed through Apple's TestFlight. To install one you give your email address to Apple, not to us, and Apple tells us how many testers there are and whether builds are being installed. Apple also collects crash logs and basic usage data from TestFlight builds and may share crash reports with us, subject to the choice you make on your own device. That collection is Apple's, under Apple's privacy policy, and it happens whether or not we want it. We have added no crash reporter of our own.

We do not sell your information. We do not share it for advertising, and there is no advertising in any of this. We do not track you across other apps or websites, and there is nothing in Manna capable of it. We do not use your study data, your notes, or your prayers to train machine-learning models. We do not build a profile of you.

You can ask what we hold about you, ask us to correct it, or ask us to delete it, and we will do it. In practice there is usually nothing to ask about, because unless you turned on sync we hold nothing that identifies you.

Depending on where you live, you may have further rights under your own state's or country's privacy law. Rather than parse which one applies to you, tell us what you need at danielh@wholeyield.com and we will honour it.

Access to the sync server is limited to Daniel. Data in transit is encrypted. Access tokens are stored on the server only as hashes, so the server does not hold your token in a readable form. No system is perfectly secure. This is a small independent operation rather than a large provider, and that is a trade worth knowing about: far fewer people can ever see your data, and the resources behind it are proportionally smaller.

If personal information is exposed in a breach, we will notify the people affected as required by Arizona law (A.R.S. 18-552) and by any other law that applies to you.

Manna includes a Kids section of illustrated Bible stories, written to be read with a parent. The app asks no one for personal information, there is nothing in the Kids section for a child to type into, and a sync account is created deliberately by an adult in Settings. We do not knowingly collect personal information from children under 13.

One thing to be plain about, because it is easy to assume otherwise: the pictures in the Kids stories load from our server, so opening a Kids story means our server receives the device's IP address, exactly as the rest of the app does. We use it to send the picture back and nothing else. We do not profile readers, we show no advertising anywhere in Manna, and there is no tracking of any kind in it.

If you believe a child has given us information through sync or feedback, write to danielh@wholeyield.com and we will delete it.

This policy will change as the app does, and the honest reason to expect that is that Manna is early. The current version always lives at wholeyield.com/privacy.html, with the date at the top. If a change means we start collecting something we do not collect today, we will say so plainly rather than quietly widening the language.

danielh@wholeyield.com

Whole Yield, Phoenix, Arizona.