Privacy Policy
Bible Saga (the "App") is operated by Agape Group GmbH, Clarahofweg 25, 4058 Basel, Switzerland, Switzerland ("we", "us"). This policy explains what we collect, why, who we share it with, and the choices you have. We wrote it in plain language on purpose. If something is unclear, write to privacy@biblesaga.app.
1. What we collect
Information you give us
- Onboarding answers: first name (or nickname), tradition (Catholic, Protestant, Orthodox, "just curious"), goal, minutes per day, reminder time, how you heard about us. Tradition is a religious belief and therefore sensitive under some laws; we ask for it only to tailor devotionals and prayers, it stays optional ("just curious"), and we never sell it or use it for advertising.
- Email address, only if you choose to sign in to sync across devices. Sign-in uses a one-time code; we never store a password. No social sign-in is offered.
- Content you create: daily reflection notes, prayer-wall requests (published only after review, anonymous by default), questions you ask the Scripture chat, reports you file about a chat answer.
- Support emails you send us.
Information collected automatically
- Usage: which episodes you start and finish, watch position, streak days, plan progress, saved episodes, language, app version, device type and OS version, coarse country derived from IP at the time of the request.
- Purchase status: whether you have an active trial or subscription, its product and expiry (from Apple or Google via RevenueCat). We never see your card number.
- Video delivery data: our video provider receives your IP address and player events to stream episodes.
- Crash and performance data from the app runtime.
We do not collect precise location, contacts, photos, health data or biometric data. We do not use third-party advertising SDKs and we do not track you across other companies' apps or websites.
2. How we use it
- Provide the service: play episodes, remember where you left off, keep your streak, deliver the daily verse and reminders you asked for.
- Personalise: choose devotionals, prayers and chat answers for your tradition and language.
- Run the Scripture chat: your question and the passage are sent to our AI provider to generate an answer; questions are not used to train the provider's models under our agreement.
- Moderate community content and enforce our Terms.
- Measure and improve the App: aggregate analytics on funnels, retention and feature use.
- Communicate: transactional emails (sign-in codes, receipts via the stores), support replies, and product news only if you opt in.
- Comply with law, prevent fraud and abuse.
Legal bases (EEA/UK/Swiss users): performance of a contract (the service you asked for), our legitimate interests (security, analytics, product improvement), your consent (tradition, optional notifications and marketing; withdraw anytime), and legal obligations.
3. Who we share it with (processors)
We share data only with providers that process it for us under contracts, and only what each needs:
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Database, authentication, edge functions | A random account id created on first launch (no name or email unless you add them), profile, progress, notes, prayer requests, chat history, subscription status | United States |
| Cloudflare (R2) | Delivery of videos, subtitles and images | IP address, the requested files | Worldwide network (United States) |
| Mux | Video streaming (earlier episodes) | IP address, player events, signed playback tokens | United States |
| RevenueCat | Subscription management | Your app account id (a random id created on first launch; no email unless you add one), purchase receipts and status from Apple/Google | United States |
| PostHog | Product analytics | Pseudonymous usage events, device and app version | European Union (Germany) |
| Anthropic | Scripture chat answers | Your question, the passage it is about, your app language and church tradition (no name or email; sent only after you allow it in the app) | United States |
| Expo (EAS) | App builds, updates and push notification delivery | Push token, app version | United States |
| Apple App Store / Google Play | Payments, receipts, refunds | Per their own privacy policies | Per platform |
| Hostinger | Hosting this website | Server logs (IP, user agent) | European Union |
We also disclose data when the law requires it, to protect our rights or users' safety, and as described in section 5.
We do not sell personal information and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law.
4. International transfers
We are established in Switzerland and our providers are primarily in the United States. Your data is stored and processed in the United States regardless of where you live.
- EEA and UK users: transfers rely on the EU–US Data Privacy Framework (and its UK Extension) where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) with supplementary measures.
- Swiss users: transfers comply with the Swiss Federal Act on Data Protection (FADP), relying on the Swiss–US Data Privacy Framework where available and otherwise on the Standard Contractual Clauses as recognised by the Swiss FDPIC.
Copies of the relevant safeguards are available on request.
5. Business transfers
If we are involved in a merger, acquisition, financing, reorganisation, restructuring, transfer of the App or of substantially all of our assets, bankruptcy or similar transaction, or if we transfer the App to an affiliate or successor, your personal information may be transferred to the successor, affiliate or acquirer as part of that transaction and may be transferred to another country, including the United States. The receiving party will be bound by this policy for information collected before the transfer, and we will notify you (for example in the App or by email) of any material change in who controls your data or how it is used.
6. Retention
- Account and progress data: while your account exists, then deleted within 30 days of account deletion.
- Anonymous (not signed-in) usage lives on your device; you can erase it by deleting the App.
- Chat questions: 90 days for quality and abuse review, then deleted or anonymised.
- Prayer-wall requests: until you delete them or your account; anonymous requests stay anonymous.
- Analytics: pseudonymous, aggregated after 12 months.
- Purchase records: as long as required for tax and accounting law.
7. Your rights and choices
- Delete your account and data in the App: Profile → Help → Delete account. This is immediate and cannot be undone. Your store subscription is separate: cancel it in App Store or Google Play settings.
- Access, correct, export your data, or object to or restrict processing: email privacy@biblesaga.app. We answer within 30 days (45 days for California requests, with notice if we need more).
- Notifications: turn reminders off in Profile or in your device settings.
- Marketing email: every message has an unsubscribe link.
- EEA/UK/Swiss users may withdraw consent at any time and may complain to their data protection authority.
- California residents have the rights to know, delete, correct, and to non-discrimination under the CCPA/CPRA. We do not sell or share personal information, so there is nothing to opt out of; we honour Global Privacy Control signals on this website. You may use an authorised agent.
- Residents of other US states with privacy laws (for example Virginia, Colorado, Connecticut, Utah, Texas, Oregon) have similar rights; use the same email. Appeals: reply to our decision and we will escalate it.
We will not treat you differently for exercising any right.
8. Children
The App is not directed to children under 13 (or under 16 in the EEA/UK where that age applies) and we do not knowingly collect personal information from them. Family mode is a parent-operated filter on a parent's account that limits the catalogue to age-appropriate series; it does not create child accounts or collect data about children. If you believe a child has provided us data, email us and we will delete it.
9. Security
Data is encrypted in transit (TLS) and at rest with our providers. Access is limited to people who need it, under confidentiality obligations. Video is delivered through short-lived signed URLs. No system is perfectly secure; if we learn of a breach affecting you we will notify you and the authorities as the law requires.
10. AI-generated content
Episode visuals are generated with AI tools from scripts written and reviewed by people. Scripture chat answers are generated by an AI model, always cite the Bible, and are not a substitute for a pastor, priest or professional. You can report any answer from inside the chat.
11. Changes
We may update this policy. For material changes we will notify you in the App or by email before they take effect. The "Last updated" date at the top tells you when it changed.
12. Contact
Agape Group GmbH
Clarahofweg 25, 4058 Basel, Switzerland
privacy@biblesaga.app
We have not yet appointed a representative in the European Economic Area or the United Kingdom. Until we do, please contact us directly at the address above; we answer every request.