Privacy Policy

What we collect

• Your account (if you create one): first name, last name, username, password (never stored in clear: it is salted and hashed), creation date, device name.
• Your progress: reading, quizzes, verses, meditations, sermon notes, drawings, settings. Without an account everything stays on your device; with an account it is backed up so you get it on your other devices.
• Your questions to the assistant: sent to the AI provider to generate the answer. The start of the question is kept for 30 days at most to fight abuse, then deleted.
• Your audio recordings stay on your device. Only short excerpts are sent to the transcription service and then discarded; we keep only the text, in your notes.
• Your subscription: status, plan, end date, store. Payment is processed by Apple, Google or Stripe: we never see your card.

Why

Only to run the app (account, sync, assistant, transcription, subscription), keep it secure (abuse limits, lockout after too many sign-in attempts) and answer you. Legal basis: performance of the service you request and our legitimate interest in securing it.

Who we share with (processors)

• Google Cloud / Firebase (server and database hosting, audio transcription), servers in the United States.
• Anthropic (Bible assistant answers).
• Cloudflare (website and Bible Quiz server hosting).
• RevenueCat, Apple, Google and Stripe (subscriptions and payments).
• YouTube (BibleProject videos, privacy-enhanced mode, only when you play a video).

Bible Quiz app in ChatGPT

Bible Academy offers a Bible Quiz app inside ChatGPT, served from https://mcp.bibleacademyapp.com/mcp. It needs no account and no sign-in. When ChatGPT uses it, our server only receives the quiz request (topic, level, number of questions) and returns questions from our public question bank. It does not receive your name, e-mail, chat history or any other personal data, and it stores nothing about you. Our host (Cloudflare) keeps standard technical request logs (time, IP address, user agent) for a short period for security and reliability. Your use of ChatGPT itself is governed by OpenAI’s own terms and privacy policy.

International transfers

Some providers are located in the United States. These transfers rely on GDPR safeguards (EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses).

Retention

For as long as your account exists. If you delete your account, all your data is erased immediately from our database; backups are overwritten within 30 days. An account inactive for 3 years may be deleted.

Security

Encrypted connections (HTTPS), a database closed to any direct access (everything goes through our server, which checks your identity on every request), hashed passwords, time-limited sessions, lockout after several wrong passwords, daily backups.

Your rights

You can access, correct, download (Profile → Security and data → Download my data) or delete your data (Profile → Security and data → Delete my account) at any time, and object to processing. Questions: [email protected]. EU residents can also contact their data protection authority (in France, the CNIL). California residents: we do not sell or share personal information for advertising.

Children

Bible Academy is not intended for children under 13 and does not knowingly collect their data.

Changes

If this policy changes significantly, we will let you know in the app and update the date above.