Privacy Policy

The short version

This Privacy Policy describes how Land Run Brands, LLC ("Land Run Brands," "we," "us") handles information in connection with the First Rep mobile application (the "App") and the First Rep website at firstrepapp.com (the "Website").

First Rep is designed so that most personal activity remains under your control on your device. The sections below explain the limited exceptions and the choices attached to them.

What the App processes, by feature

Scripture, readings, notes, and prayers

• The Bible text, devotional passages, reflections, prayers, and commentary are bundled in the App and read locally.
• Your reading history, completion records, reading and listening time, saved verses, memory-verse progress, notes, private prayers, settings, and readiness calculations are stored locally on your device.
• First Rep does not upload those private records to Land Run Brands, Community, or your Crews.

Bible audio

When you play a Bible chapter, the App streams the requested audio file from audio.firstrepapp.com through our content-delivery provider, BunnyCDN. The provider necessarily receives ordinary network request information such as your IP address, the requested audio file, request time, and basic device or connection information needed to deliver and secure the stream. We do not send your name, Health data, private prayers, notes, or reading history with that request.

The App records listened time locally so the daily receipt and Mirror can reflect time in the Word. That listening record is not uploaded by First Rep.

Apple Health (HealthKit)

With your explicit permission, First Rep reads limited data from Apple Health to power Body Readiness, training history, The Proof, workout-based reminders, and daily receipts. Depending on the permissions you grant, this can include workouts, sleep, heart-rate variability, and resting heart rate.

• Raw Health samples stay on your device. First Rep processes them locally and does not upload raw workouts, sleep, heart-rate variability, resting heart rate, workout details, or readiness data to Land Run Brands, Community, Crews, RevenueCat, or advertisers.
• If you voluntarily use a private Crew, the App may derive a simple trained today mark from workout presence and sync only that daily status mark to the Crew's private CloudKit share. Crew members do not receive Health metrics, workout details, minutes, or readiness data.
• If you publish a Community post, you may choose to attach a simple Trained mark. Nothing posts automatically, and no underlying Health details are included.
• Health access is optional. If Health data is unavailable, First Rep offers a local self-report path. You can revoke Health access in iOS Settings at any time.
• Health information is never used for advertising, marketing, data mining, or sale.

App Locks and Reading Elsewhere (Screen Time)

These optional features use Apple's Family Controls, Managed Settings, and Device Activity frameworks with individual authorization.

• Apple's picker gives First Rep opaque tokens for apps or categories you select. First Rep cannot read a list of all apps on your phone from those tokens, and the selection remains on your device in the App's shared app-group storage.
• App Locks use the selected tokens on-device to shield distracting apps until you complete the day's reading.
• Reading Elsewhere can notice when use across the Bible apps or categories you selected crosses an on-device minimum of 8, 15, 30, or 60 minutes. First Rep records the highest crossed minimum for that day, not second-by-second history and not which selected app was used.
• Those selections and activity minimums are not uploaded to Land Run Brands, Apple CloudKit, Community, Crews, RevenueCat, or advertisers.

Photos

If you choose Save to Photos for a verse or season card, First Rep requests add-only Photo Library access and writes the image you chose. The App does not read or upload your photo library.

Private Crews (optional)

A Crew is a private, invite-based accountability room. If you never create or join one, no Crew data is created.

If you create or join a Crew, its members can see:

• the display name you choose;
• your simple daily trained and read marks;
• messages and nudges you send to that Crew.

Crew names, member display names, daily status marks, messages, and nudges are stored in iCloud using Apple's CloudKit service. A Crew lives in its creator's private iCloud database and is shared through Apple's CloudKit sharing with people who accept its invite. Land Run Brands does not routinely read private Crew rooms and operates no separate Crew-message server.

To make typed Crew codes work, First Rep stores the Crew's short code, Crew name, and CloudKit share link in a small lookup directory in the CloudKit public database. A person with the code can resolve the invite; actual room access is governed by the CloudKit share. A direct invite link does not require that lookup.

If you report a private Crew message, the App first hides it locally and opens a pre-addressed email for your confirmation. If you send that email, Land Run Brands receives the reported message, sender display name, sent time, and Crew and message references shown in the email. We do not receive the report unless you choose to send it.

Community (optional; Annual plan)

Community is separate from private Crews. It is a broader text-based room designed for Annual-plan members. Community uses records in the public database of Apple's CloudKit container so participating members can see and respond to one another. Private Crew messages, private prayers, notes, Health details, reading minutes, and streaks are never copied into Community.

When you join Community, First Rep creates a Community profile containing:

• a display name you choose;
• a pseudonymous member identifier created by hashing your iCloud user-record identifier;
• the date you joined and an active status.

When you use Community, CloudKit stores the content and metadata needed for the room:

• posts and text replies, their timestamps, edit times, and record identifiers;
• your display name and pseudonymous member identifier on content you author;
• positive emoji reactions and the post or reply they concern;
• optional Word kept or Trained marks you deliberately attach to a post.

Community text may reveal religious beliefs or other sensitive information based on what you choose to write. Only share what you are comfortable making visible to people using the Community room. First Rep does not support photo attachments, personal contact information, or links in Community, and nothing is posted automatically.

Community safety and moderation

The App applies a limited on-device filter before posts and replies are written. Members can hide content, block another member, and report a post or reply.

• Hide and block lists are stored locally on your device.
• A Community report is sent to CloudKit only after you choose to report. It can include the reported record reference and type, the reported author's pseudonymous identifier, your pseudonymous reporter identifier, up to 500 characters of the reported text, a timestamp, and review status.
• Authorized Land Run Brands moderators may review Community content and reports, remove violating content, investigate abuse, and respond to safety concerns.
• Reports and moderation records may be retained after content or a Community profile is deleted when reasonably necessary for safety, abuse prevention, dispute resolution, or legal compliance.

Notifications (optional)

• Reading, trial, debrief, Evening Word, and workout-based reminders are scheduled locally on your device.
• CloudKit uses Apple's silent push infrastructure to keep private Crews up to date. Any Crew alert you see is generated on your device from synced Crew data. Land Run Brands does not operate a separate push-message server.

Subscriptions

• Purchases are completed through Apple's StoreKit. Apple processes payment details; First Rep does not receive your full payment-card number or billing address.
• StoreKit provides the App with product, transaction, entitlement, renewal, and offer-eligibility information needed to sell, restore, and manage access.
• RevenueCat observes First Rep's StoreKit transactions for subscription analytics and support. RevenueCat may receive an automatically generated anonymous App User ID, device type and operating system, last-seen time, Apple receipt or transaction information, product and entitlement status, and related technical information. We do not intentionally send RevenueCat your display name, private Crew or Community text, Health data, reading history, notes, or prayers.

Advertising attribution (optional)

First Rep uses TikTok App Events and Meta App Events to understand whether advertising on TikTok, Facebook, or Instagram leads to installs, continued use, trials, and subscriptions, and to improve First Rep advertising. On iOS, First Rep presents Apple's App Tracking Transparency choice before starting these integrations for a new user. Allowing tracking permits access to the device advertising identifier; denying tracking keeps that identifier unavailable.

• The SDKs may process an advertising, anonymous-install, or device identifier, IP address, device and operating-system information, app version, locale, event time, and limited session or technical information for attribution, analytics, fraud prevention, security, and SDK reliability.
• First Rep limits advertising events to first app open or install, app launch, return or retention, verified trial start, and verified paid subscription. It does not use these SDKs as general product analytics.
• First Rep disables TikTok automatic purchase monitoring, Enhanced Data Postback, and TikTok user identification. It does not send names, email addresses, phone numbers, Health data, readiness, workout history, spiritual selections, Scripture activity, private content, Crew data, or Community activity.
• The narrow Meta configuration does not use Facebook Login, Meta Audience Network, Custom Audiences, automatic advanced matching, hashed contact information, codeless or suggested events, or automatic StoreKit purchase logging. First Rep does not provide Meta names, email addresses, phone numbers, account identifiers, Health data, readiness, workout history, spiritual selections, Scripture activity, private content, Crew data, or Community activity.
• For App Store privacy disclosures, the limited attribution signals fall within Device ID, Product Interaction, and Purchase History. Meta's SDK may additionally declare unlinked Crash Data and Other Data Types for SDK functionality and analytics. Attribution data is used for First Rep's advertising or marketing and analytics; subscription information is also used to provide and restore paid App functionality.
• If tracking is denied, First Rep does not receive the advertising identifier and does not substitute a hashed email, phone number, or other identifier. Apple may still provide aggregate campaign measurement through SKAdNetwork, and the SDK may process limited non-IDFA event and technical information without performing cross-app tracking.
• Development, automated-test, demo, Simulator, sandbox-purchase, and TestFlight activity is excluded from production attribution reporting.

Support and feedback

First Rep does not require an email address for an in-app account. If you email support, send feedback, or submit a private Crew report by email, we receive your email address and the information you choose to include. Your email provider also processes that message under its own terms.

The Website

The Website does not use advertising pixels or cross-site tracking. It is hosted by Netlify. Like ordinary website hosts, Netlify necessarily processes technical request information such as IP address, browser or device type, requested page, timestamps, and security or diagnostic logs to deliver and protect the Website. Clicking an App Store, email, or other external link takes you to a service governed by that service's privacy policy.

What we do not collect or use

• No in-app ads and no use of Health, faith, Scripture, Crew, Community, notes, prayers, messages, or workout information for advertising profiles
• No sale or rental of personal information
• No precise or approximate location data
• No contacts, calendar, microphone, or camera access
• No reading of your photo library; Save to Photos is add-only
• No raw Health samples, workout details, sleep records, HRV values, resting-heart-rate values, or readiness scores uploaded by First Rep
• No private notes, private prayers, or complete local reading history uploaded by First Rep
• No names or exact usage histories of apps selected for App Locks or Reading Elsewhere uploaded by First Rep
• No use of Health, faith, Community, Crew, or reading information for advertising or marketing profiles

Where information lives

Service providers and sharing

We do not sell, rent, or trade personal information. We share only the limited attribution and SDK technical information described above with TikTok or Meta to measure and optimize First Rep advertising and operate those integrations. The device advertising identifier is available only when you authorize tracking; aggregate or non-IDFA measurement may remain available when you deny tracking. We do not share First Rep's sensitive faith, Health, reading, workout, Crew, Community, notes, prayers, or message data for advertising.

We use the following providers only to operate First Rep:

• Apple: HealthKit and Screen Time frameworks on-device; iCloud and CloudKit for Crews and Community; StoreKit and the App Store for subscriptions and distribution; Photo Library add-only access when requested; and local notifications.
• RevenueCat: subscription transaction observation, entitlement analytics, and purchase support under an anonymous App User ID.
• TikTok: limited app-install, app-open, next-day-return, trial-start, and subscription attribution for First Rep advertising; IDFA-based measurement only after authorization, with aggregate or non-IDFA measurement otherwise.
• Meta: limited app-install, app-open, return, trial-start, and subscription attribution for First Rep advertising on Facebook and Instagram, plus the SDK technical information described above; IDFA-based measurement only after authorization, with aggregate or non-IDFA measurement otherwise.
• BunnyCDN: delivery of the Bible audio file you request.
• Netlify: hosting and delivery of the Website.

Each provider processes information under its own privacy terms and our applicable service arrangements. Information may also be disclosed when required by valid legal process, to protect users or the public from harm, to investigate abuse, or in connection with a business transaction where permitted by law.

Provider policies: Apple Privacy Policy · RevenueCat Privacy Policy · TikTok Privacy Policy · Meta Privacy Policy · Netlify Privacy Statement · Bunny Privacy Policy.

Your privacy choices

• Health: grant only the Health categories you choose and revoke access at any time in iOS Settings.
• App Locks and Reading Elsewhere: choose the apps or categories through Apple's picker, turn either feature off in First Rep, or revoke Family Controls authorization in iOS Settings.
• Notifications: control First Rep reminders in the App and in iOS notification settings.
• Private Crews: leave a Crew at any time. A Crew creator can disband the Crew, which invalidates its CloudKit share and removes the room for members.
• Community: choose whether to join; choose what to post; omit daily status marks; edit or delete your own words; remove reactions; hide or report content; block members; or delete your Community profile from More → Data & privacy. The deletion control remains available after Annual access ends. Eligible members can also reach it from Community safety.
• Photos: decline add-only Photo Library access or change it in iOS Settings.
• Subscriptions: manage or cancel an auto-renewable subscription through your Apple Account subscription settings.
• Advertising attribution: choose whether to allow tracking in Apple's prompt and change that choice later in Settings → Privacy & Security → Tracking. Denying or revoking permission prevents IDFA access and cross-app tracking by First Rep's integrations. Apple, TikTok, and Meta may still provide aggregate or non-IDFA campaign measurement.

Children's privacy

First Rep is intended for people age 13 and older. We do not knowingly collect personal information from children under 13. A parent or guardian who believes a child under 13 has provided information through Community, a Crew report, or support should contact us so we can investigate and take appropriate deletion steps. App Locks use Apple's individual authorization for self-management; First Rep is not a parental-control service.

Retention and deletion

• Local data: retained until you delete it or delete the App. More → Reset local practice data removes local reading and completion history, Bible highlights and notes, private prayers, Verse Reps, your local profile, reminders, App Locks, Reading Elsewhere controls, and the widget's last day snapshot. It does not cancel a membership or delete private Crew or Community records. Deleting the App removes First Rep's local database and settings, subject to iOS backups or system behavior you control through Apple; shared CloudKit records must be managed separately in the App.
• Health: raw Health data is not copied off your device by First Rep. Revoking Health permission stops future reads.
• Private Crews: leaving removes the Crew from your account. If the owner disbands the Crew, its private CloudKit zone and share are deleted. The public code lookup can remain until it is cleaned up, but its share link no longer grants access after the underlying share is deleted.
• Community profile deletion: deleting your Community profile permanently removes your profile, your replies, and your reactions. Your posts are deleted when no one else has replied. If another member's reply needs the original post as a thread anchor, the post is converted to an anonymous Post removed by user tombstone with its original text, display name, identifiers, status marks, and reactions removed. Other members' replies remain because they belong to those members. Your private Crews and local First Rep history are unaffected.
• Reports and moderation: reports and related moderation records may remain after profile or content deletion for as long as reasonably necessary to investigate abuse, protect members, resolve disputes, enforce standards, or meet legal obligations.
• Subscriptions: Apple and RevenueCat retain transaction and entitlement records under their own policies and legal obligations.
• Advertising attribution: TikTok and Meta retain limited attribution events and associated technical information according to their policies and applicable campaign settings.
• Audio and Website logs: BunnyCDN and Netlify retain technical delivery and security logs according to their policies and service settings.
• Support: we retain support correspondence only as long as reasonably necessary to respond, maintain safety records, resolve disputes, and meet legal obligations. You may request deletion, subject to lawful exceptions.

Your rights

Depending on where you live, you may have rights to know, access, correct, delete, or receive a copy of personal information; restrict or object to certain processing; withdraw consent; appeal a decision; and complain to a privacy regulator.

Because most First Rep data stays on your device, you can exercise many choices directly by editing or deleting records, changing permissions, leaving a Crew, deleting your Community profile, or deleting the App. For information controlled by Land Run Brands, contact us at the address below. We may need to verify your request and may retain information where permitted or required for safety, fraud prevention, legal compliance, or the rights of others.

We do not sell personal information or use sensitive faith, Health, reading, workout, Crew, or Community information for cross-context behavioral advertising. Some laws may treat IDFA-based advertising attribution as “sharing.” First Rep performs that measurement only after you authorize tracking, and you can opt out for future activity by denying or revoking tracking permission. We do not discriminate against anyone for exercising a privacy right.

Legal bases and international processing

Where the GDPR, UK GDPR, or similar law applies, we process information as needed to provide requested App functions and subscriptions, based on your consent for optional permissions and sharing, for our legitimate interests in support, safety, security, and service improvement, and to comply with legal obligations. You may withdraw consent for future processing by disabling the feature or permission; withdrawal does not make earlier lawful processing unlawful.

Apple, RevenueCat, TikTok, Meta, BunnyCDN, Netlify, and Land Run Brands may process information in the United States or other countries where they operate. Those countries may have privacy laws different from those where you live.

Security

First Rep uses iOS sandboxing and system data protection for local data. Network connections use encrypted transport. Apple protects CloudKit data in transit and at rest and governs access through iCloud accounts, database roles, and CloudKit shares. We limit Community report access to moderation functions and avoid operating a separate server for private Crew rooms.

No system is perfectly secure. Do not post private information in Community or share a Crew invite with someone you do not want in the room. If we learn of a breach requiring notice, we will notify affected people as required by law.

Changes to this policy

We may update this policy as First Rep changes. We will revise the date above and provide additional notice when required by law or when a change materially affects how we handle personal information.

Contact

Questions, concerns, privacy requests, safety reports, or complaints:

apps@landrunbrands.com
Land Run Brands, LLC · Broken Arrow, Oklahoma, USA

If you are not satisfied with our response, you may have the right to contact your state attorney general or local data-protection authority.