Operator worksheet

Google Play Data safety (operator worksheet)

Aligned with app version 2.0.19 / versionCode 75 as described in the Privacy Policy. Fill Play Console from this page so the store listing does not under- or over-disclose.

Play Data safety is about the Android App, not Tawk.to on this website. Do not mark website chat as App-collected data. Use one set of answers for the Play AAB and the companion/standard Together APK (same package id, Together included). F-Droid is not a shipping flavor.

King James 1611 Assistant

versionCode 75 · org.kingjames1611assistant · Play and standard Together

No live F-Droid flavor No LMCloud Play declarations

Product truth for 2.0.19

Paste store answers from this desk. These limits match the shipping app. Scholar does not back up Together AI chats.

Free2 asks · 3 groups

Introductory Together AI questions. Unlimited local listening. Creating a Together group stays free.

Premium$11.99/mo

$89.99/year. 250 Together AI asks, 20 groups, 4 Cloud Listening hours. Cards never enter the App.

Scholar$19.99/mo

$149.99/year. 500 asks, 100 groups, 8 Cloud Listening hours, Deep study. Together AI chats stay on the phone.

ShippingPlay + standard

No live F-Droid flavor. No LMCloud. Together Cloud backup is settings, progress, badges, and tools only.

Overview questions

Console checkboxes for the Play / standard Together APK.

Yes

Does the app collect or share user data?

Yes — if the user turns Online Mode on and uses Together, Cloud Ask, Cloud Listening, Hugging Face download, the gated Cloudflare Gemma E4B download, or device speech. Baseline reading: study data stays on device and is not sent off device by us

Yes

All users can request deletion?

Yes — account-deletion.html

Yes

Data encrypted in transit?

Yes for Together (HTTPS), Cloud Ask and Cloud Listening (HTTPS to the gated Ask Worker), Hugging Face (HTTPS), the gated Cloudflare model Worker (HTTPS), and the Premium billing worker (HTTPS). Cards never enter the App

Yes

Users can request that data be deleted?

Yes

Committed to Play Families policy?

No (Together is 13+ UGC)

Independent security review?

No (do not claim SOC2 for this App)

Data types — collected? shared? required? purposes

“Collected” in Play means the App sends it off the device. On-device-only storage is generally not “collected” unless it leaves the device. Together is collected. Saved Together AI chats stay on-device encrypted and are not collected into Together Cloud backup. Device speech may send audio to the OEM/Google recognizer — disclose as collected by a third party if you use voice, or explain in privacy (we disclose it; Play’s “ephemeral” processing may apply if not stored by you). Optional Gemma 4 E4B download stores a short-lived hash of date plus IP on Cloudflare KV for a 2/day cap.

Play data type	Collected by App/Operator?	Shared with other companies?	Required / optional	Purpose
Name (display name)	Yes if Together sign-up	No sale; processor Supabase; visible to group members	Optional (Together)	App functionality
Email address	Yes if Together	Supabase Auth as processor	Optional (Together)	Account
User IDs	Yes if Together (UUID)	Processor only	Optional (Together)	App functionality
User-generated content	Yes: prayers (group + anonymous public text copy), group names, custom plan references, checkmarks, invite codes, badge ids, Group Chat messages, and in-app abuse reports (reporter, target, short reason)	Group members see names if chosen; public Site wall shows prayer text only; processor Supabase. Reports are visible to operators, not to the reported member	Optional	App functionality
Password	Transmitted to Supabase Auth at sign-in; not stored by the App; Play often lists “other user content” / credentials under account	Auth processor	Optional (Together)	Account
Phone number	No	—	—	—
Approximate location	No in App. Site chat vendor may infer from IP — not App	—	—	—
Precise location	No	—	—	—
Photos / videos	No	—	—	—
Audio files	Not stored by us. Mic audio may go to Android SpeechRecognizer provider during Ask voice	Possibly Google/OEM, not us	Optional mic	App functionality
Messages (Together AI chats)	Prompt text is sent to Cloudflare Workers AI for one-time composition when Cloud Ask runs (Play and standard flavors, Online Mode on). Saved transcripts stay on-device encrypted. Scholar does not back them up to Together Cloud. We do not keep a lasting Operator training archive. If the user taps Report, a short reason and clipped excerpt are sent to the same Ask Worker. Cloud Listening sends verse text to that Worker for speech when hours remain	No sale; Cloudflare processes inference. Not “shared” for ads	Optional	App functionality
Installed apps	No	—	—	—
Crash logs	No Operator SDK	—	—	—
Diagnostics (our store)	On-device only, content-free; not sent to us	No	—	Not “collected”
Device or other IDs (AAID)	No advertising ID. Optional Gemma 4 E4B download stores a short-lived hash of date+IP on Cloudflare KV for a 2/day cap — not an advertising ID	Cloudflare as processor for that download	Optional E4B	App functionality / abuse prevention
Health / finance	No cards in the App. Premium ($11.99/month or $89.99/year) and Scholar ($19.99/month or $149.99/year) are billed on the website via Stripe	Stripe on the Site, not Play Billing	Optional paid plan	App functionality

Security practices

Yes

Encrypted in transit

Data in transit encrypted: Yes for Operator cloud (Together HTTPS), Cloud Ask and Cloud Listening HTTPS, HF HTTPS, gated Cloudflare model Worker HTTPS, and billing worker HTTPS.

Yes

Users can request deletion

Users can request deletion: Yes.

Independent review

Do not claim “independent review.”

Export

US export inventory

US export / encryption inventory: play-declarations.html.

Ads, IAP, permissions check

Item	Declare
Contains ads	No
In-app purchases	No
Sensitive permissions	Microphone (optional voice); notifications (optional daily verse); Internet; boot; wake lock
Privacy policy URL	Hosted `privacy.html`
Account deletion URL	Hosted `account-deletion.html`
Play declarations / export	Hosted `play-declarations.html`

Common rejection traps this page is meant to close

Declaring “no data collected” while Together email sign-up or Cloud Ask exists in the APK.
Declaring “no account” while email/password Auth is in the APK.
Omitting microphone while RECORD_AUDIO is in the manifest.
Claiming chats never leave the phone while Cloud Ask, Cloud Listening, or SpeechRecognizer can send text/audio off the phone (user-directed / processor / OS vendor).
Using this Site’s Tawk widget as if it were in the APK.
Treating an older com.example.kingjames1611assistant install as the same app as org.kingjames1611assistant.
Uploading an APK that still requests REQUEST_INSTALL_PACKAGES (use bundlePlayRelease).
Store text that says “no accounts” or “without ads, accounts, or analytics” as if Together did not exist.