Privacy Policy

1. Information We Collect

1.1 Personal Information

We may collect:

• Email address
• Account details
• User preferences
• Memorisation progress and activity within the app

1.2 Usage and Device Data

We may collect:

• App interactions and feature usage
• Device type and operating system version
• Coded account and app-installation identifiers
• Crash reports and diagnostics
• Subscription status (via Apple’s App Store)

1.3 Automatically Collected Data

We may collect:

• IP address (used only to determine approximate region)
• Performance metrics
• Error logs
• Analytics events

User-Generated Content

If the app allows you to create or save content (such as notes, highlights, or personalised verse groupings), this content is stored privately for your use unless you choose to share it. You remain responsible for any content you choose to share.

What We Do Not Collect

We do not collect:

• Biometric data
• Precise GPS location
• Contacts
• Photos or media
• Camera or microphone input
• Financial card details
• Files stored on your device
• Cross-app browsing behaviour

If you provide sensitive personal information to us voluntarily, we will process it only with your explicit consent and only for the purpose for which you provided it.

2. No Tracking Across Apps or Websites

We do not:

• Track you across apps or websites
• Use advertising networks
• Build advertising profiles
• Sell or share personal information under CCPA/CPRA

Cookies and Tracking Technologies

We do not use cookies or similar tracking technologies for advertising or cross-site tracking. The app may use coded account or app-installation identifiers strictly for analytics and performance purposes.

Push Notifications

We may send optional push notifications (e.g., reminders). You can disable notifications at any time in your device settings or in-app preferences.

3. How We Use Your Information

We use information to:

• Operate and maintain the app
• Save and sync your memorisation progress
• Improve stability and performance
• Provide customer support
• Maintain security
• Process subscriptions through Apple’s in-app purchase system
• Send you emails about your memorisation progress, milestones, streaks, reminders to return to the app, subscription updates, new features, and other service-related or promotional communications (you can unsubscribe at any time)

We do not sell or trade personal information.

Optional analytics may include Bible references and translations shown or practised, practice starts, completions and exits, timings, recall results and return visits, linked through a coded account identifier. We use these analytics solely to improve Memorise, and do not use them to infer religious beliefs or build advertising profiles. PostHog product events exclude verse text, answers, notes, searches and recordings.

Where available, Share analytics data under Profile → Legal → Data Retention stops future PostHog feature-usage and Sentry performance reporting. Some app versions may still send account-linked learning-activity reports to Supabase when sharing is off. Account storage, progress syncing, subscriptions and essential error reporting continue. Turning sharing off does not delete existing reports; email support@memorise.bible to request deletion.

Legal Basis for Processing (GDPR)

Where GDPR applies, we process personal information based on:

• Consent (e.g., when creating an account)
• Contractual necessity (to provide the app)
• Legitimate interests (to improve and secure the service)
• Legal obligations

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or significant effects.

4. Payments

All in-app purchases and subscriptions are processed securely by Apple. We do not receive or store your payment card information.

5. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information from loss, misuse, unauthorised access, or disclosure.

5A. Data Breach Notification

If a data breach occurs that creates a risk of serious harm, we will notify affected users and relevant authorities in accordance with applicable laws, including GDPR and Québec Law 25.

6. International Data Transfers

Your information may be stored or processed in:

• New Zealand
• The United States
• Other countries where our service providers operate

A current list of service providers and their locations is available upon request at support@memorise.bible.

Transfer Safeguards

Where we transfer personal information to countries without an adequacy decision, we rely on appropriate safeguards such as the EU/UK Standard Contractual Clauses and implement additional measures as needed.

7. How Long We Keep Data

We retain personal information only for as long as necessary to provide and improve Memorise or meet legal obligations, in accordance with applicable privacy and data protection laws.

• Active accounts: data is retained while your account exists
• After account deletion: data is typically retained for up to 90 days
• Certain records (e.g., legal, financial, abuse-prevention) may be retained longer where required by law
• Supabase diagnostic and usage-event reports older than 30 days, and crash reports older than 90 days, are removed by daily cleanup. Other analytics records are not covered by these automatic limits.
• Standard Supabase daily-backup restore windows are 7 days on Pro, 14 days on Team and up to 30 days on Enterprise. Restore windows do not establish when every underlying backup copy is deleted.

For analytics outside the automatic cleanup limits, retention depends on whether the information is still needed to compare learning outcomes, return visits and app performance over time. PostHog and Sentry use the standard retention rules of our active plans. PostHog analytics history is available for one year on Free or seven years on paid plans; these history limits do not guarantee automatic deletion. Sentry error reports are kept for 30 days on Developer or 90 days on Team/Business. You can request access or deletion by emailing support@memorise.bible.

When no longer needed, data is securely deleted or irreversibly anonymised.

8. Your Rights

Depending on your location, you may have rights including:

• Access to personal information
• Correction of inaccurate information
• Deletion of your data
• Restriction or objection to processing
• Withdrawal of consent
• Data portability (provided in CSV or JSON format)
• Information about data disclosures
• Opting out of optional analytics
• Declining automated decision-making
• Opting out of any sale or sharing of data (we do none)

Non-Discrimination (California CCPA/CPRA)

You will not be discriminated against for exercising your rights.

Supervisory Authority Complaints (GDPR)

If you are in the UK or EU, you may lodge a complaint with your local data protection authority. You may also contact the Office of the Privacy Commissioner (New Zealand).

Response Timeframe

We respond to all privacy-related requests within 30 days, or sooner where required by law.

To exercise your rights, email support@memorise.bible.

9. Data Deletion

You may request deletion by:

• Using the in-app deletion option (if available), or
• Emailing support@memorise.bible with the subject “Delete My Data”

When data is deleted, the deletion is permanent unless retention is legally required.

10. Third-Party Service Providers

We may use trusted service providers for:

• Analytics
• Diagnostics
• Cloud hosting
• Error reporting
• Subscription management

These providers:

• Access only the data necessary
• Process personal information only as described in this policy
• Do not track users across apps
• Must comply with data protection obligations

We currently use the following service providers:

• PostHog (posthog.com) — optional product analytics, including Bible references, practice activity and coded account identifiers, to make Memorise better for everyone.
• Sentry (sentry.io) — essential crash and error reporting, plus optional performance monitoring
• Supabase (supabase.com) — cloud storage, authentication, data sync and app reports
• Tyndale House Publishers — NLT Bible verse content via their API
• RevenueCat (revenuecat.com) — subscription management, receipt validation, and subscription analytics. Data shared: coded account identifier, subscription status, purchase history. Privacy policy: revenuecat.com/privacy

11. Children’s Privacy

Memorise is not intended for children under the digital consent age in your region (typically 13 or 16 in certain jurisdictions such as the EU). We do not use age-verification mechanisms. If we learn that a child has provided personal information, we will delete it promptly.

12. Updates to This Policy

We may update this Privacy Policy as laws or features change. No update will reduce your rights under applicable privacy laws. A policy update does not itself enable optional analytics or replace any consent required by applicable law.

13. Contact — Privacy Officer

For questions or requests, contact:

Privacy Officer — Memorise
Email: support@memorise.bible

We respond to all inquiries promptly and within legal timeframes.