1. Who is responsible?
OakDev & AI AB is the controller for the processing we determine in ILARON and on this website. Contact hello@oakdev.app about privacy, your rights or account deletion. Never send passwords, recovery codes or more sensitive information than your enquiry requires.
Postal contact: OakDev & AI AB, Kristevik 633, 451 96 Uddevalla, Sweden. Email: hello@oakdev.app.
ILARON is in development. The mobile app is in internal testing; the web version is a separate way to access the app. This notice describes current functionality and does not promise a store-release date.
2. Visiting this website
This information website has no analytics tools, marketing scripts, advertising networks, embedded social feeds or online forms. Fonts and images are served as local site files. Our scripts use local storage only for your language choice and to remember that you have handled the storage notice. These choices are not sent to an analytics database.
GitHub Pages serves static files. Cloudflare provides domain DNS and, depending on enabled delivery and security configuration, may also handle web traffic. Technical requests can contain an IP address, time, requested resource and browser information. Hosting and security providers may process these data for delivery, troubleshooting and abuse prevention. This is separate from the app account and is not used to profile religious beliefs.
3. App data on your device
Notes, Bible bookmarks, prayer favourites and your daily prayer routine are local. Church affiliation and calendar choices are local by default, too. We do not provide cloud synchronisation of private notes or favourites. Offline preview has a separate local test wallet, not a server balance.
Data can be lost when you clear storage, uninstall the app or change devices. Device backups and browser features also depend on your settings with those providers. ILARON does not request GPS or precise device location.
4. Choosing an account and cloud features
Online features may use an anonymous guest account, email sign-in or Google sign-in. Firebase Authentication handles authentication. An anonymous guest still has an account ID and is not anonymous to the service infrastructure. Depending on the method, the authentication provider may process email addresses, profile information and sign-in and security data.
The cloud service processes account IDs, accepted terms and privacy versions, settings sent to the account, Reflections balances, server-verified transactions, and owned or equipped themes and skins. This supports requested account features and correct balances. Firebase App Check and applicable Google and Apple security services may process technical device, app and attestation signals to protect the service.
5. Church affiliation needs your express choice
A church choice can reveal religious beliefs and is treated as sensitive personal data. Saving church affiliation and calendar in the cloud is a separate, optional choice requiring explicit consent. It is not required to read prayers or Bible passages.
Withdraw this choice in the app’s Settings. Once saved, the service removes church affiliation and calendar fields from the cloud profile; local choices may remain on your device. Check error notices after a lost connection and retry or contact us. Withdrawal does not change the lawfulness of earlier processing.
6. Optional advertising and Wisdom
Optional advertising in the mobile app supports banner, native, interstitial and rewarded formats. Contextual formats are limited to the optional Atelier advertising setting; an interstitial may appear at an eligible transition from the Atelier to Today, subject to frequency limits. Rewarded ads require a separate deliberate choice. Current mobile builds use test ads. Test ads never grant account Reflections; the explicitly labelled offline preview can grant local test currency only. AdMob and possible Unity mediation may still process IP addresses and approximate location derived from them, device and advertising identifiers, interactions and diagnostics for delivery, measurement and fraud prevention. Test mode and non-personalised ads do not stop all technical processing. Church choices, prayers, notes and Bible reading are not used as religious advertising signals. Advertising choices are separate and can be reopened in the app’s Settings.
The AI Wisdom feature is switched off until further notice. This website and the disabled feature send no questions to OpenAI. Before any activation, you must receive clear information about data sent through Firebase to OpenAI, purposes, retention and choices, and actively approve the particular request. An old website or advertising preference must not activate AI.
7. Purposes and lawful bases
Necessary account data are processed to perform the service you request. Security, proportionate abuse prevention and support rely on our legitimate interest in operating and protecting the service, taking your rights into account. Legal requirements rely on legal obligation. Optional cloud storage of religious information relies on explicit consent; applicable advertising choices are separate.
We do not sell personal data or use religious information for ad targeting. ILARON does not make decisions with legal or similarly significant effects on you solely through automated profiling.
8. Retention, deletion and providers
Account content remains until deletion is requested or it is no longer needed. Deletion removes Firebase authentication, profile, wallet, owned digital items and the account’s transaction history. Minimal account-ID blocking records and detached AdMob transaction IDs with security timestamps remain to protect deletion and prevent reward replay. They are marked for automatic deletion after 90 days. They contain no email, church affiliation, notes or AI responses. TTL deletion is asynchronous and may finish after the scheduled eligibility time.
Prepared caching for a possible future Wisdom response has a seven-day TTL; there is no active AI service today. Providers’ technical security logs follow applicable terms and legal requirements. We do not promise zero retention or EU/EEA-only processing. Google/Firebase, Apple, advertising providers, GitHub and Cloudflare may process data internationally. Lawful transfer safeguards are required where GDPR calls for them. Ask us about processing and safeguards relevant to your enquiry.
9. Your rights
You may request information, access, correction, erasure and, where applicable, restriction or portability. You may object to processing based on legitimate interests and withdraw consent. Statutory exceptions can apply. Identity may need proportionate verification; we will not ask for your password.
Write to hello@oakdev.app. The ordinary GDPR response period is one month; any permitted extension must be explained. You may complain to Sweden’s authority, Integritetsskyddsmyndigheten at imy.se, or another competent authority. Website storage settings do not change app consents. Material changes will be explained before new processing starts.
10. Children and young people: our audience is 13+
ILARON is intended for people aged 13 and over, including adults. This is our product policy. Rules for valid consent and contracts also depend on the country and circumstances. Minors must have a parent or guardian’s permission and involvement where required.
The current internal mobile test includes only one adult owner account. The app has no built-in age verification or dedicated parental-consent flow. If you believe a child under 13 has provided personal data to us, contact hello@oakdev.app so that we can investigate and address deletion. Never send passwords or unnecessary details about the child.