Privacy Policy
This policy explains what information SoulForge Tech LLC (“we”, “us”) handles when you use the Glossa Bible app and its services, and the choices you have. It is written from an audit of the app and server code as of the effective date; if the app changes in a way that matters here, we will update this page and its date.
1. What we collect
Account information (only if you create an account)
- Email and password: your email address, a display name you choose, and your password stored only as a salted hash (Argon2id). A 6-digit code is emailed to verify the address or reset the password.
- Sign in with Apple: the stable user identifier Apple issues to us, your name if you share it, and your email (or Apple’s private relay address). We also keep an authorization token from Apple — encrypted — for one purpose: to end the Apple authorization when you delete your account.
- Sign in with Google: your Google account id, email, name and profile-picture URL.
Guest identifier
You can use the app without an account. A random identifier is created on your device so your notes and progress can be kept and, if you later sign in, attached to your account. It is not linked to your name or any advertising identifier.
Content you create and your activity in the app
- Reading and listening progress: the verse you last read in each book and your position and completed sections in each commentary track, so you can continue on any device.
- Highlights and notes: the highlight color, your note text and the verse text you selected.
- Conversations with the study companion: the questions you type or speak, the AI’s replies, and the passage or commentary section you were asking about.
- Memory cards and companion memory: the memory cards you choose to keep, and short facts the companion may distill from a conversation to remember you better (this long-term memory feature only runs when enabled on our servers).
- Voice input: when you tap the microphone, the recording is sent to a speech-to-text provider to produce text; the recording is not kept in your account.
- Support email: what you write to us.
Technical information
- When you sign in, the device’s user-agent string (device/OS type) is stored with that session’s refresh token. Sessions expire after 90 days and are revoked when you sign out.
- Sign-in attempts are rate-limited using a keyed hash; the counters store neither your email nor your IP address.
- Our hosting and network providers keep standard server logs (including IP addresses) for a short time for security and abuse prevention.
- On launch the app asks Expo’s update service whether a newer version of the app’s code is available. That request identifies the app and platform, not you or your account.
What the current version does not do
- No advertising, no advertising identifiers, and no tracking across apps or websites.
- No analytics SDK. The app contains a crash-reporting library that is switched off unless we enable it in a release; the current release does not send crash or diagnostic reports. If we enable it, this policy will say so.
- No location, contacts, photos or push notifications.
- The Bible text and commentary you download for offline use, your recently viewed passages, and your display settings stay on your device only.
- Your hymn search history, the hymns you recently played, and the hymn versions you download stay on your device only; none of them is uploaded or synced. They are erased when you delete your account (downloaded hymn files, which contain nothing personal, stay).
2. How we use information
- To provide the app: sign you in, keep and sync your progress, notes, conversations and memory cards across your devices.
- To answer your questions about Scripture with AI (Section 3).
- To send verification and password-reset emails.
- To keep the service secure, prevent abuse and fix problems.
- To respond when you contact us.
We do not sell personal information and do not use it for third-party advertising.
3. AI features
When you ask the study companion something, your message, the relevant passage or commentary text, and recent turns of that conversation are sent to a third-party AI provider to generate the answer. Commentary audio and read-aloud use a text-to-speech provider; voice input uses a speech-to-text provider. The providers we use are listed in Section 4.
AI answers can be wrong. The companion is an aid for reading and studying the Bible. It can misread a passage, over-generalize, or state something confidently that is not so. Check what it says against the Scripture it cites.
It is not a pastor, a church, a counselor, a doctor or a lawyer, and does not replace them. Please do not put sensitive personal information — health, finances, identification numbers, other people’s private matters — into a conversation.
AI usage during the launch period
Normal use of the AI companion — signed in or as a guest — has no ordinary daily allowance, and the app never shows a remaining count. The only limits are stability and abuse protections (one answer at a time per person, a short burst limit, and thresholds that stop clearly automated traffic). To size the service and its costs we keep anonymous, aggregated usage statistics: per request, a one-way hashed (HMAC) identifier, the timestamp, whether the request came from a signed-in user or a guest, token counts, the model, the response time, whether it succeeded, was cancelled or timed out, and an estimated cost. These statistics never contain the text of your question or the answer, your notes, your email, tokens or your IP address, and they are not sold or used for advertising. Support purchases and website support (below) are never linked to these statistics and do not change how the AI treats anyone.
3b. Support purchases and website support
In the app (iOS): “Support Glossa Bible” in Settings offers three voluntary, one-time in-app purchases processed by Apple. Apple handles the payment and receives your payment information under its own privacy policy; Glossa Bible’s servers do not receive the transaction, so the app keeps no purchase history and creates no entitlement — nothing is unlocked and access to AI conversations does not change.
On the website: a separate page may offer voluntary support through external services (Zelle, WeChat Pay, Alipay). Glossa Bible does not collect payment credentials on its website. External payment services process payments according to their own privacy policies. The recipient may receive transaction information provided by those services. We do not ask for payment screenshots, do not link a payment to any Glossa Bible account, and do not use payment information for advertising or personalisation. Such support is not a charitable donation and is not tax-deductible.
4. Who we share information with
Only with service providers that help run Glossa Bible, and only what each needs:
| Provider | Purpose | What reaches them |
|---|---|---|
| Amazon Web Services (United States) | Application server | All app traffic and stored data pass through our server there. |
| MongoDB Atlas | Database | Account and content records described in Section 1. |
| Cloudflare | Network security in front of our server | Request metadata such as IP address. |
| Vercel | Hosts our website (this page and the sign-in bridge) | Standard web-server logs. |
| OpenAI | AI answers; speech-to-text fallback | Your question, the passage context, recent conversation turns; voice recordings when used for transcription. |
| Google (Gemini) | Distilling companion memory and memory-card drafts; AI answers as a fallback | Recent conversation turns. |
| Fish Audio | Text-to-speech for commentary and read-aloud | The text to be spoken (commentary scripts, passages, AI answers you play). |
| Xiaomi MiMo; Alibaba Cloud DashScope | Speech-to-text for voice input | Your voice recording. |
| Resend | Verification and password-reset email | Your email address and the code. |
| Apple / Google | Sign in with Apple / Google | The sign-in exchange described in Section 1. |
| Expo (EAS Update) | Delivering app code updates | App and platform version at launch. |
We may also disclose information when required by law, or to protect the rights, safety and security of users and the service.
5. Retention and deletion
- Your account and content are kept while your account exists. Guest data is kept until you delete it in the app.
- You can delete your account from inside the app: Settings → Account → Delete account. See Delete your account for exactly what is removed. Deletion is immediate and covers both Glossa Bible and Glossa.
- After deletion we keep a record containing only your former account id, the time of deletion, the sign-in method and whether the Apple authorization was ended — no name, no email — for 30 days, so that old sign-in tokens cannot be used. Copies may persist in routine backups for a limited period before they expire.
- Sessions (refresh tokens) expire after 90 days; access tokens after 24 hours.
6. Security
Traffic is encrypted in transit (HTTPS). Passwords are stored only as Argon2id hashes; Apple authorization tokens are encrypted at rest; sessions are revocable. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
7. Your rights and choices
- Edit or delete your notes, highlights, conversations and memory cards inside the app.
- Delete your account inside the app, or ask us by email if you can no longer sign in (we will verify that the request comes from the account’s address).
- Depending on where you live (for example California/CCPA, the EEA or the UK under GDPR), you may have rights to access, correct, port, restrict or object to the processing of your personal data. Write to us and we will honor them.
8. Children
Glossa Bible is meant for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13; if you believe a child has provided us information, contact us and we will delete it.
9. International users
We are based in the United States and store and process data there. If you use Glossa Bible from elsewhere, your information is transferred to and processed in the United States.
10. Changes
We may update this policy. The effective date above changes when we do, and for material changes we will also tell you in the app.
11. Contact
SoulForge Tech LLC · contact@soulforgetech.com