Last updated: March 29, 2026
Eili is a biblical research companion. We take your privacy seriously. This policy explains what data we collect, why we collect it, how we use it, and your rights regarding that data. We aim to be straightforward — no legalese for the sake of it.
1. Who We Are
Eili ("we", "us", "our") operates the Eili application and website at askeili.com. For any privacy-related questions, you can reach us at privacy@askeili.com.
2. What We Collect
Here is exactly what data Eili collects:
| Data | When | Why |
|---|---|---|
| Email address | Account registration or Google sign-in | Account identity, login, invite system, communications |
| Display name | Registration or profile setup | Personalization within the app |
| Chat messages | Every time you ask a question | Sent to our AI provider to generate scripture-based responses, stored so you can revisit conversations |
| Conversation history | Ongoing use | Enables recaps, bookmarks, sharing, and conversation continuity |
| Subscription status | Plan purchase or change | To determine your access level (Free, Premium, Share) |
| Stripe customer ID | First payment | Links your account to Stripe for billing. We never see or store your card number. |
| Device identifier | Each login | Enforcing per-plan device limits (e.g., 3 devices) |
| 2FA secret | If you enable two-factor authentication | Generating time-based one-time passwords for login verification |
| Share plan member emails | Share plan owner inputs them | Matching invited users to the plan |
| Community content | When you post, comment, or react | Stored to display your posts, comments, and reactions in the community feed. Visible to your friends and other community members. |
| Friend connections | When you add or accept a friend | Managing your social graph — who can see your posts and share content with you. |
| Push subscription | When you enable push notifications | Sending you alerts about friend requests, comments, and shared content. You can disable this anytime. |
| Shared content | When you share an AI response with a friend or to the feed | Delivering shared content to the intended recipients and displaying it in the community feed. |
| Language preference | First visit (browser locale detection) or manual selection | Displaying the interface in your preferred language. Stored locally on your device only. |
| Country (via IP address) | Account registration | Aggregated demographic insights for service improvement. Only the country name is stored; the IP address itself is not retained. |
| Session token | Login | Keeping you authenticated. Stored as an HTTP cookie. |
3. What We Don't Collect
- Precise location data (GPS, coordinates, street address). Note: we do determine your country from your IP address at registration — see Section 2.
- Contacts or phone book
- Credit card or bank account numbers (Stripe handles all payment processing)
- Browsing history outside of Eili
- Advertising identifiers
- Biometric data
We do not use any third-party analytics or tracking SDKs (no Google Analytics, no Mixpanel, no Facebook Pixel).
4. How We Use Your Data
- Providing the service: Your messages are sent to our AI provider to generate biblical research responses. Without this, the app cannot function.
- Account management: Email and authentication data keep your account secure and accessible.
- Subscription management: Subscription metadata determines which features you can access.
- Sharing features: When you share a response, the content and selected theme are stored to generate a public page and preview image.
- Share plan invites: If you're on the Share plan, member emails you enter are used solely to match invited users to your plan.
- Communications: We may send you service-related emails (e.g., subscription confirmations, usage alerts). We will never sell your email or send unsolicited marketing.
5. Third-Party Services
Eili uses a small number of third-party services. Here's who has access to what:
AI Providers — Google (Gemini) and OpenAI (GPT)
Data shared: Your chat messages, the Scripture passages you ask about, and any user-written context attached to your question
Purpose: Generating Scripture-rooted responses in real time
Eili sends your questions to Google's Gemini API and OpenAI's GPT API to generate responses. Only the content of your messages is transmitted — not your email, name, account ID, IP address, device identifiers, location, or contacts. Both providers are contractually bound under their enterprise data-processing terms not to use Eili user data for model training, and to apply security protections equal to or greater than those described in this Privacy Policy. You consent to this data sharing when you accept the in-app Terms & Privacy prompt before first use of AI features.
Stripe
Data shared: Email, subscription plan, payment information
Purpose: Processing payments and managing subscriptions
Stripe handles all payment data. We never see or store your card number. Stripe's privacy policy applies to payment processing.
Google (if using Google sign-in)
Data shared: Email, display name, profile picture URL
Purpose: Authentication
Only used to verify your identity. We receive basic profile info from Google; we don't access your Google Drive, Gmail, or other Google services.
IP Geolocation Service
Data shared: Your IP address (at the moment of registration only)
Purpose: Determining your country for aggregated demographic statistics
Your IP address is sent to a geolocation service once during registration. Only the resulting country name is stored; the IP address itself is not retained by Eili.
Push Notification Service (Web Push / VAPID)
Data shared: Browser push subscription endpoint (a URL generated by your browser)
Purpose: Delivering real-time notifications for friend requests, comments, and shares
We use the standard Web Push protocol (VAPID). No personal data is shared with third parties for push delivery. Your browser generates a unique endpoint; we store it only to send you notifications. You can unsubscribe at any time from Community > Notification Settings.
Historical & Cultural Source Library
Eili uses a curated library of public-domain scholarly works (Josephus, Dead Sea Scrolls, Early Church Fathers, ISBE, archaeological findings, etc.) to provide historical and cultural context for biblical passages. These materials are stored in our own database — no user data is sent to any third party to retrieve them.
6. Data Storage & Security
- All data is stored in a MongoDB database hosted on secure cloud infrastructure.
- Passwords are hashed using industry-standard algorithms. We cannot read your password.
- 2FA secrets are stored server-side and used only for TOTP verification.
- Session tokens are transmitted via secure HTTP-only cookies.
- All communication between your device and our servers uses HTTPS encryption.
While we implement reasonable security measures, no system is 100% secure. If we become aware of a data breach that affects your personal information, we will notify you promptly.
7. Data Retention
- Account data: Retained as long as your account is active.
- Conversations: Retained until you delete them or delete your account.
- Shared messages: Public shared links remain accessible until the account owner deletes them or their account.
- Subscription records: Retained for billing and legal compliance purposes.
- Guest accounts: Guest session data may be automatically purged after extended inactivity.
8. Your Rights
Regardless of where you live, we believe you have the right to:
- Access: Request a copy of all personal data we hold about you.
- Correction: Ask us to correct inaccurate data.
- Deletion: Request that we delete your account and all associated data. We will comply within 30 days.
- Data portability: Request your data in a machine-readable format.
- Withdraw consent: If you consented to any optional data processing, you can withdraw that consent at any time.
- Object: Object to any processing you believe is unlawful.
To exercise any of these rights, email us at privacy@askeili.com. We will respond within 30 days.
9. For Users in the European Union (GDPR)
If you are in the EU/EEA, our legal basis for processing your data is:
- Contract performance: Processing necessary to provide the Eili service you signed up for (chat, subscriptions, sharing).
- Legitimate interest: Device management, security measures, and service improvements.
- Consent: Optional features like 2FA, share plan invites, and email communications.
You have the right to lodge a complaint with your local data protection authority if you believe your data is being mishandled.
10. For Users in California (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it's used.
- Request deletion of your personal information.
- Opt out of the "sale" of personal information — we do not sell your data, period.
- Non-discrimination for exercising your rights.
11. Children's Privacy
Eili is not directed at children under 13. You must be at least 13 years old to create an account. If you are between 13 and 18, you must have your parent's or legal guardian's permission. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will take steps to delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@askeili.com. privacy@askeili.com.
12. Cookies & Local Storage
Eili uses:
- Session cookies: HTTP-only cookies to keep you logged in. These are essential for the app to function.
- Local storage: Theme preferences, language settings, and cached Bible data for offline reading. This data never leaves your device.
We do not use advertising cookies, tracking cookies, or any third-party cookie services.
13. Changes to This Policy
We may update this policy from time to time. If we make significant changes, we will notify you through the app or via email. The "last updated" date at the top of this page will always reflect the most recent revision.
14. Contact
For any questions, concerns, or requests regarding your privacy or this policy: