Privacy Policy

You can use most of the App without creating an account. Core reading progress, app-blocking settings, highlights, notes, and streaks are stored on your device. If you choose to create an optional account, join the waitlist on the Site, purchase a subscription, use AI study features, or grant tracking permission, we (or our service providers) process the additional information described below.

• Subscription and purchase activity: Purchases are processed by Apple. We do not receive your full payment card number. The App may record which subscription product identifiers are active on your device for feature access, and may coordinate subscription status through Superwall.
• Device and app interaction (analytics and measurement): The App includes the Meta (Facebook) Software Development Kit, which can collect device and usage-related data and send events to Meta for app analytics and advertising measurement. When Apple’s App Tracking Transparency framework grants tracking authorization, the App aligns Meta settings so that advertiser identifier collection may be enabled; if you do not grant tracking, advertiser identifier collection is disabled while other SDK features may still operate per Meta’s defaults.
• Purchase-related app events (Meta): When you complete certain App Store purchases or start trials inside the App, the App may send standard Meta app events (for example, trial start or purchase events with product and currency information) for advertising measurement and analytics.
• Paywall presentation: The App uses Superwall to show subscription paywalls. Superwall may collect identifiers and usage data according to its own privacy policy when you interact with paywalls.
• Waitlist and Site use: If you join the waitlist on the Site, we collect the email address you submit. We use Cloudflare Turnstile to help prevent bots; that check may process a verification token and related technical signals. We may temporarily process your IP address for rate limiting (currently limited submissions per hour per IP). Waitlist contacts are stored with Resend and tagged so we can send launch and product emails related to Scripture First.

When you use certain features, the App or Site sends data over encrypted HTTPS connections to service providers so those features can work:

• OpenAI: The App uses OpenAI’s APIs for AI-assisted verse study features (for example, explain easier, original language, deep study, and related verses). Prompts can include the verse text and reference you are studying, along with instructional text required to produce a safe, on-topic response.
• API.Bible (American Bible Society): To download Bible chapter text for supported online translations (currently NKJV and NLT), the App calls API.Bible with identifiers such as translation, book, and chapter. Responses may be cached on-device to reduce repeat network requests. The King James Version is bundled offline on your device and does not require this call.
• Apple: In-App Purchases, StoreKit subscription state, offer/promo code redemption, App Tracking Transparency, Family Controls / Screen Time frameworks, and App Store services.
• Meta Platforms, Inc.: As described above, through the Facebook SDK and related app events.
• Superwall: Paywall presentation, subscription status coordination, and related analytics as described in Superwall’s documentation and privacy policy.
• Supabase: If you create an optional account, your email address, sign-in events (magic link or password), and account metadata are processed in our Supabase project. Supabase may also deliver authentication emails on our behalf.
• Resend: If you join the waitlist on the Site, your email and related contact properties are stored with Resend so we can send product emails. Confirmation emails are sent from our Scripture First sending domain.
• Cloudflare: Turnstile bot protection on the waitlist form.

Each provider processes data under its own terms. Please review their policies:

• OpenAI Privacy Policy
• Apple Privacy Policy
• Meta Privacy Policy
• Superwall Privacy Policy
• API.Bible Privacy Policy
• Supabase Privacy Policy
• Resend Privacy Policy
• Cloudflare Privacy Policy

• Provide Bible reading, app blocking via Family Controls, reading plans, streaks, and related tools
• Provide AI-assisted verse study when you use those features
• Process and validate subscriptions, trials, offer codes, and paywall access
• Authenticate you and manage optional accounts
• Operate the waitlist and send related product emails
• Measure advertising and subscription performance through Meta’s SDK where enabled
• Improve reliability and understand aggregate usage patterns through vendors’ analytics where applicable
• Comply with law and protect rights and safety

We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act. We instruct service providers as part of operating the App and Site (listed above). We may disclose information if required by law, legal process, or to protect users and the public.

We retain information for as long as it is needed to provide the App and Site and the features you use. Specifically:

• Account data. If you create an optional account, we retain your email address and related auth records for as long as your account is active. When you use Delete account in Settings, your auth identity is promptly removed from our cloud.
• Waitlist contacts. Emails submitted on the Site are retained until you unsubscribe or ask us to delete them, or until we no longer need them for the waitlist and related product communications.
• On-device data. Data stored locally on your device is retained on your device until you delete it inside the App or remove the App.
• Third-party services. Data processed by service providers (such as Apple, Meta, Superwall, OpenAI, API.Bible, Supabase, Resend, and Cloudflare) is retained per each provider’s own retention policies.

• Network requests to third parties use HTTPS.
• We rely on Apple’s platform security for device-level protection, including for Family Controls and app group data.
• Authentication credentials for optional accounts are handled by Supabase using industry-standard auth flows.

No method of storage or transmission is perfectly secure.

Depending on where you live, privacy laws may give you rights to access, correct, delete, or restrict certain processing of personal information, or to opt out of certain sharing for advertising. Because most reading and blocking content stays on your device, you can often delete it directly inside the App or by removing the App. For subscription billing history or refunds, use Apple’s account tools.

If you created an optional account, you can permanently delete your account from inside the App (Settings > account / sync card > Delete account). This removes your auth identity from our cloud. On-device data is not automatically wiped by account deletion.

To unsubscribe from waitlist emails, use the unsubscribe link in those emails or contact us. To exercise rights that apply to information we hold as a business, contact us using the information below. We may need to verify your request as permitted by law.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information based on the following legal grounds: your consent (for example, when you join the waitlist, create an account, or grant App Tracking Transparency authorization); the performance of our agreement with you (to provide the App and the features you use); our legitimate interests in operating, securing, and improving the App and Site and measuring advertising performance, where those interests are not overridden by your rights; and compliance with legal obligations.

Subject to applicable law, you may have the right to access, correct, delete, restrict, or object to our processing of your personal information, the right to data portability, and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You also have the right to lodge a complaint with your local data protection authority. To exercise these rights, contact us using the information below.

Personal information processed for the App or Site may be transferred to and stored in the United States or other countries where our service providers operate. Where required, we rely on appropriate safeguards for such transfers, including the standard contractual clauses published by relevant authorities.

The App and Site are intended for users 13 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us using the information below and we will take appropriate steps to delete it.

If you use the App or Site from outside the United States, your information may be processed in the United States or other countries where service providers operate. Those countries may have different data protection laws than your country.

We may update this Privacy Policy from time to time. We will post the updated policy and revise the “Last updated” date. If changes are material, we may provide additional notice as required by law or through the App or Site.