Privacy Policy Phil (iOS)

For the iPhone app Phil · Updated: 20 September 2026 · Features from version 2.5

1. Controller and contact

Matthias Prieber · Steckestr. 16 · 44339 Dortmund · Germany
Email: office@encounterhouse.de

This policy covers the iPhone app Phil. Visits to our website and messages sent through its contact options are also covered by our website privacy policy.

2. Your content on your device and in iCloud

Phil does not require its own user account. The app stores your content on your device. We do not operate a server for this app content and cannot view it through Phil.

Phil stores the information you enter or import: testimonies, names and contact details, prayer requests, notes, photos, videos and documents, prophecy recordings and their transcripts, “God speaks” entries, church service notes, personal testimonies, and treasure maps and clues. This data supports the functions you choose: keeping, searching and playing back entries and preparing reminders.

When iCloud is available for Phil on your device, the app syncs saved entries, recordings and attachments with the private CloudKit database of your Apple Account. This transfers content to Apple. It is not placed in a public database or a content store we can access. Apple processes it under the terms of its iCloud services; see Apple’s privacy policy. You manage iCloud through your device settings. You can work locally when iCloud sync is unavailable. Sync is not a substitute for an independent backup: changes and deletions may also sync.

3. Recordings, transcription and drafts

An audio recording you start can continue when you leave Phil or lock your iPhone. This does not disable the system microphone indicator. A Live Activity shows the recording status and duration on the Lock Screen and, on suitable devices, in the Dynamic Island. It contains no titles, names or transcripts. You can stop an ongoing recording there without unlocking.

On supported devices and in supported languages, Phil 2.5 transcribes recordings you make, import or receive through sharing directly on the device using Apple’s SpeechAnalyzer. Speech models may first need to be downloaded from Apple. Phil does not send audio to a server for transcription and does not fall back to cloud transcription when on-device support is unavailable. Saved recordings and transcripts may then sync through your private iCloud like other entries.

Unsaved prophecies are kept as local drafts, including their title, other form entries, notes, text and any recording. This lets them survive closing the app or a crash. The associated draft is removed after successful saving or deliberate discarding. If a recording is damaged, the file is retained for another attempt or export until you discard it. These drafts are not synced as CloudKit entries; a device backup may include local app files.

The weekly recap counts entries on the device and uses predefined sentences. Neither content nor counts are sent to an AI service for this feature.

4. Permissions and connections to other apps

Phil uses access for the function you choose. You can change permissions in iPhone Settings under “Apps → Phil” or “Privacy & Security”. Revoking access does not delete copies already created in other apps.

• Microphone: audio recordings and sound in testimony videos.
• Camera and photos: taking photos and videos, attaching selected media or saving media to your photo library at your request. Your library may sync with iCloud Photos according to your system settings.
• Calendar: creating, updating and removing follow-up events. Phil needs full calendar access for this. An event contains the entered person’s name, date, time, alerts and a general reference to Phil. The app does not search your whole calendar. The calendar used may belong to iCloud or another provider or may be shared; its sync and access settings apply. If the calendar update fails, the Phil entry stays saved and you can retry the update.
• Contacts: when you choose this option, Phil opens the iPhone’s save-contact screen. The app does not read your address book. Confirmed contacts may sync according to your contact settings.
• Notifications: local follow-up reminders and an optional water reminder. Reminders are scheduled on the device. Follow-up notifications may show names and dates, including on the Lock Screen, depending on your preview settings.
• Face ID and device passcode: iOS checks access to protected areas. Phil receives the result, not face data or your passcode. This access protection does not add encryption to exported files or protect copies in other apps.
• Local connection: to import data from old Phil versions, the app uses a service at 127.0.0.1 on the same device. This is not an external server. The previous data is not automatically deleted during migration.

Calls, email, external links and sharing open the app or website you choose. The respective provider’s privacy terms then apply. For example, visiting a website can transmit your IP address to its operator.

5. Backup, import and sharing

Phil’s backup file contains saved testimonies and prayer notes, “God speaks” entries, prophecies with available recordings and transcripts, church service notes, personal testimonies and treasure maps. Photo, video and document attachments and unsaved drafts are not included. Back up attachments separately and use suitable device backups. The scope of an iPhone or iCloud backup also depends on your Apple settings.

An exported backup includes entries from protected areas and is not encrypted by Phil with a separate password. The same applies to files you export for sharing or diagnostics. Choose a secure location and share such files selectively. Your chosen storage or delivery service may process data outside the device.

Importing or sharing to Phil copies the selected content into the app. The original in the other app remains. When sharing from Phil, you choose the recipient and destination; Phil does not automatically publish your entries or send them to Encounter House.

6. Retention and deletion

Saved entries remain until you delete them. When iCloud sync is active, changes and deletions are also synced with your private CloudKit database. Drafts are handled as described in section 3. You can also manage iCloud content through your Apple Account’s iCloud storage settings.

Deleting an entry does not automatically remove previously exported backups, shared files, originals in other apps or saved contacts. If an associated calendar event cannot be removed, Phil tells you; remove it in the Calendar app if necessary. Removing Phil itself does not automatically delete every external copy or iCloud item. App extensions and device backups may contain copies. Do not keep personal content longer than needed.

7. Advertising, analytics and technical services

Phil contains no advertising or embedded analytics, advertising or tracking services. The Pacaembu font and app graphics are bundled and are not downloaded from a font provider. Phil does not operate its own service to analyse your usage behaviour.

Apple’s operating system, iCloud, App Store and TestFlight services are separate. Depending on your Apple settings and distribution method, Apple may process technical diagnostics and crash data and make reports available to developers. Apple’s information and settings apply to these services. If you choose to send us a diagnostic report or support message, we receive the information it contains.

8. Other people’s data

Entries may contain particularly sensitive information, such as religion or health. Only record what you need for your purpose and are entitled to process. Inform the people concerned and obtain consent where required, particularly for recordings and sensitive information. Microphone permission on your iPhone does not replace the consent of a person being recorded. Before sharing, check for names, recordings or documents that should not be passed on.

9. Your rights and support

Where we process personal data, you have rights to access, rectification, erasure, restriction, portability and objection subject to the applicable legal conditions. You may withdraw consent for the future. You can complain to a data protection authority, particularly where you live or work or where a suspected infringement occurred.

For questions or requests, contact office@encounterhouse.de. We cannot access your private app and iCloud content through Phil. If you send us content for support, however, we receive it; please send only what is needed. Our website privacy policy explains the handling of website and support enquiries.

10. The support form on our website

This section covers the form at encounterhouse.de/phil-en-support only. If you send a message there, we receive your message, email address and optional name. The message is emailed to us and is also stored in the website database by the Flamingo plugin so we can handle your request. The legal basis is our legitimate interest in responding to support enquiries, Article 6(1)(f) GDPR.

Support entries are deleted at the latest 24 months after the case is closed, or earlier on request unless legal retention obligations apply. Contact office@encounterhouse.de. The website is hosted in Germany. Hosting and email providers process data as needed to deliver these services; details are in the website privacy policy. Support messages are not published.