Privacy Policy

1. Reading without an account

The Bible text, fonts, reading position, bookmarks, highlights, notes, drafts, sermon notes, sermon review responses, weekly reflections, Personal Scripture Timeline, local search, widget choices, appearance choices, and any legacy guide progress retained from an earlier version are stored on your device. The timeline records meaningful saved activity, not every verse viewed or app action. It is not a spiritual score. Ordinary offline reading, timeline use, and local search do not send this reading data or search text to the developer.

You do not need an account or a subscription to read Scripture, save local content, or create and restore manual backups. The app does not request your precise location, contacts, microphone, or camera.

Your Week in Scripture uses local daily totals for active Scripture reading time and distinct visible verses. These totals stay on your device for 400 days, are included in manual backups, and are not included in cloud sync, analytics or AI requests. A reading day means at least 90 seconds of visible Scripture and five distinct verses. Earlier unrecorded history is shown as unavailable. Your weekly answers remain saved until you remove them.

Reading history records passages that stay visible for at least 1.5 seconds so you can find them again. A visit does not mean you finished reading a passage. The latest 90 days, up to 2,000 visits, are kept on this device and are shared by anyone using this app installation, regardless of sign in. You can pause history, remove individual visits, or clear it. Reading history is excluded from manual backups, cloud sync, support diagnostics, analytics and AI requests.

Guided tours use temporary examples. Practice notes, reflections, bookmarks, appearance changes and other practice actions are not saved to your real library or sent to cloud or AI services. The app stores only tour progress and your completion or dismissal choice locally. Plus tour progress is associated with the signed in account on this device. Tour progress is excluded from manual backups and cloud sync.

2. Optional Plus account and cloud sync

If you choose Plus, Sign in with Apple on supported Apple devices or Google sign in on Android and Firebase Authentication provide an account identifier and authorization information. The app does not ask Apple for your name or email address. Google sign in provides basic profile information, which can include your name, email address, and profile photo, to the app and Firebase Authentication. This information is used to establish your account and is not sent to OpenAI. Apple and Google sign in can create separate accounts. The app does not currently offer account linking, so signing in with a different provider does not automatically move your Plus access or cloud records.

Cloud sync is off until you explicitly enable it after reviewing a summary of the local records that will be uploaded. While Plus is active and sync is enabled, the service can synchronize your reading place, bookmarks, highlights, saved verse notes, reading preferences, saved Plus content and favorites, completed sermon notes and their completed review fields, saved weekly reflections, and any legacy guide completion retained from an earlier version. Unfinished sermon drafts, unfinished verse note drafts, feedback drafts, local suggestion history, raw search text, widget choices, personal devotional reflections, reading history, tour progress, backup save dates, and local diagnostic events are not included in cloud sync.

Synced content is associated with your account identifier so it can be returned to your signed in devices. The app sends changes in small records and uses technical revision, device, request, and timestamp values to prevent duplicates and resolve conflicts. Minimum timeline metadata and hidden entry choices may synchronize so supported records retain their real dates and do not reappear on another device. Timeline search text and scroll position do not synchronize.

While Plus is active, Cloud History and Recovery can retain prior versions of eligible personal writing and ordinary deleted synchronized records. It does not save every keystroke. Prior versions and Recently Deleted payloads are kept for up to 30 days, with at most ten versions for one eligible record and additional per account count and byte limits. Recovery metadata is loaded in bounded pages. Current canonical content is not removed to enforce a history limit.

3. AI generated devotionals and verse insights

Plus lets you select a devotional theme or choose a random theme. The service selects Scripture from an approved local corpus and sends the selected passage, verified context, theme, and writing instructions to OpenAI to generate the devotional. It does not send sermon notes, sermon review responses, weekly reflections, verse notes, bookmarks, reading history, search text, email address, or name to OpenAI.

OpenAI input and output sharing is enabled only for the dedicated Doom Scroll project. This means the approved Scripture, server supplied context, bounded writing instructions, and generated commentary sent through that project may be used by OpenAI to improve its services. Model feedback sharing and evaluation and fine tuning data sharing are not enabled. Personal account information and private reading content are excluded from every generation request.

A daily devotional is generated only when requested. One daily result may be shared from a cache with other readers who choose the same theme on the same local date. The shared result is not labeled with your account. Your daily claim records the date and selected theme so a new daily choice cannot be taken repeatedly.

A verse insight sends the current canonical verse reference and server supplied Scripture context for a short explanation. Completed insights are matched to that exact verse, saved locally, and count toward the visible allowance of five new Insights per server controlled UTC day. Opening or restoring an existing saved Insight does not call OpenAI or use that allowance. The service never sends timeline activity, notes, sermons, reflections, or search text to OpenAI. An on demand devotional uses a purchased credit and creates a unique result. Generated content, limited usage counts, and request identifiers may be stored to deliver the feature, prevent duplicate charges, enforce limits, and investigate failures.

AI commentary may be incomplete or wrong. It is labeled separately from Scripture, does not provide a continuing chat, and is not medical, legal, financial, or professional spiritual advice.

4. Purchases and subscriptions

Apple processes App Store purchases and Google Play processes Android purchases, including payment information and subscription management. Refunds are handled through the store where you purchased, under its policies. The developer does not receive your full payment card information.

RevenueCat receives an app account identifier, product and transaction identifiers, store, subscription status, expiration information, and related billing events. The service uses those events to grant access, restore purchases, add on demand credits, prevent duplicate credits, and remove access after expiration or refund.

Canceling stops renewal but Plus normally remains active through the paid period shown by the store, unless the purchase is refunded or revoked. Manage an Apple subscription in Apple subscription settings or a Google Play subscription in Google Play Payments and subscriptions.

5. Local copies, backups, and sharing

Generated devotions and Insights you open, sermon notes, completed reviews, saved weekly reflections, and timeline entries are saved locally. If Plus ends, local copies stay readable, editable where applicable, searchable, exportable, and available for manual backup on your device. If you subscribe again, eligible local data can synchronize to the service again.

A manual backup is readable JSON and can include private verse notes, drafts, sermon notes, sermon review responses, weekly and personal devotional reflections, timeline metadata, saved devotions, saved AI Verse Insights, local activity records, widget settings, saved references, reading places, legacy guide completion from an earlier version, feedback drafts, and preferences. It is not protected by an app specific password or encryption. Choose a destination you trust. Manual backup is separate from Cloud History and remains the file you control. Reading history, tour progress, and backup save dates are excluded. A recorded folder save date means the app wrote and verified a backup at that time; it cannot confirm the file still exists. Sharing a backup does not confirm a saved copy. A recovery copy made before a restore stays inside the app and does not protect against uninstalling it.

Sermon plain text and PDF exports are created on the device. Before export, the app shows a preview and lets you exclude personal thoughts, questions, application, prayer, and review responses. When you copy, export, or share content, the app sends it to the operating system clipboard or share sheet. Other apps, people, backup services, and destinations you choose handle the information under their own practices.

6. Retention and deletion

Local data remains on your device until you remove it, reset the app, or delete the app and its data. Offloading an app on an Apple device may retain its documents and data. Exported files and copies held by other services must be removed separately.

When Plus reaches its effective expiration or a verified refund or revocation is received, subscriber cloud content is scheduled for immediate removal. This includes active synchronized records, version history, and Recently Deleted payloads. Automated retry jobs handle temporary deletion failures. Minimal billing events, credit receipts, security records, and deletion receipts may remain as needed to prevent fraud, provide purchase support, satisfy accounting duties, and demonstrate deletion.

You can export your current Plus cloud records from the Plus screen. Delete Cloud Copies removes active cloud records, version history, and Recently Deleted payloads without removing local copies or exported backup files. It also blocks older devices from silently uploading those local copies again. You can deliberately enable sync later to recreate cloud copies from a device you choose. You can also delete your Plus account after confirming your identity with the sign in provider for that account. Export, subscription management, and account deletion remain available while you are signed in even if Plus is no longer active. Account deletion does not cancel an Apple or Google Play subscription and does not remove local copies. Cancel separately in the store where you subscribed if you no longer want it to renew. Apple, Google Play, RevenueCat, Firebase, OpenAI, Expo, and support email providers apply their own retention rules to information they process.

To request account deletion without the app, email doomscrollthebible@gmail.com with the subject Delete my Doom Scroll the Bible account. Tell us whether you used Apple or Google sign in. We will confirm account ownership before deleting the account and associated developer operated cloud content, including synchronized writing, recovery copies, saved cloud content, and authenticated concern reports. We may ask you to complete a secure identity verification step. Do not send passwords, sign in codes, identity tokens, private notes, or backup files. Minimal billing, security, and deletion records may remain for the purposes described above. You can request deletion even if your subscription has ended. A linked Apple identity may require Apple identity confirmation on a supported Apple device; contact support if you cannot complete it.

7. App updates, notifications, and support

Expo delivers compatible app updates and receives technical information needed for that service, including connection information, platform, runtime and update identifiers, a randomized installation identifier, and technical update failure information. Expo also provides aggregate app usage based on update requests.

Daily devotional and sermon review reminders are optional local notifications scheduled on your device. A daily reminder does not generate a devotion in advance. Sermon review notifications use generic wording and do not include the sermon title, preacher, church, prayer, application, or note text. Turning reminders off cancels the app’s scheduled reminder.

The optional home screen widget on supported Apple devices reads a selected Scripture passage and theme colors from the app’s local shared container. It does not make network or AI requests and does not show account information, preacher or church names, sermon notes, prayer, or application text.

Feedback is optional. A draft stays on your device until you open your email app and send it. We receive your email address and anything you choose to send. Do not send private notes or backup files unless you intend to share them. The feedback preview includes the installed app version and build, operating system version, and available runtime, update identifier, update channel and bundle source. These are technical release facts, not account or device identifiers. Optional troubleshooting events contain only allowlisted event names and times from the current session. You can review all included information before sending; nothing is sent automatically.

Reporting a devotion concern is a separate optional action in the app. When you submit, we receive the complete displayed devotion, any section you selected, your explanation, app version and platform, and your verified account identifier if you are already signed in. You can report without signing in. An optional contact email is blank unless you enter it, and a response is not guaranteed. Personal notes, reflection answers, sermon writing and reading history are not attached. Reports are restricted to support, are not sent to AI services, and are kept for up to 180 days. Account export includes your authenticated reports and account deletion removes them. For a report made without an account, contact us with its receipt for export or deletion. Minimal content free receipt and deletion digests remain to prevent duplicate or resurrected submissions. Short lived rate limit digests reduce abuse. Unsent report drafts remain on this device until received or discarded and are not included in sync or manual backups.

8. Service providers and security

The service uses Apple for App Store purchases and Sign in with Apple, Google for Android sign in and Google Play purchases, RevenueCat for entitlement processing, Google Firebase for authentication and cloud infrastructure, OpenAI for bounded content generation, Expo for app updates and builds, and GitHub Pages for the public policy and support site.

Cloud requests use encrypted network connections. Server access checks, quotas, request identifiers, billing verification, and restricted database rules reduce misuse. No internet service is completely secure, and you should keep access to your device and Apple or Google account protected.

9. Changes and contact

We may update this policy when the app or its providers change. The effective date shows when this version took effect.

For privacy, support, export, or deletion questions, email doomscrollthebible@gmail.com.

Publisher: Doom Scroll the Bible