Legal

Privacy Policy

Your faith is personal. Your data should be too — so we keep what we collect small, and we tell you exactly what it is.

Last updated 16 September 2026. This policy covers the Get Scriptured website and app at getscriptured.app, published by Appetite Think Labs.

Privacy at a glance

  • You can read without an account

    Scripture, video, people, places, stories and the map are all browsable while signed out. Signed out, nothing personal is stored on our servers.

  • An account stores only what you create

    Your sign-in identity plus what you save, write and where you left off reading or watching.

  • Your notes and reflections are private to you

    Database access rules restrict every personal row to your own account. They are not published, shared or shown to other readers.

  • No advertising, no tracking SDKs

    There is no advertising network, no analytics SDK and no cross-app tracking in this product today.

  • Location only when you ask

    Your device location is requested only when you tap “Near me” on the map, and is used in that moment to find nearby churches.

  • No generative AI reads your questions today

    Search and Ask Scriptured currently run as retrieval over our own Bible corpus and editorial data. See the AI section below.

1. Information you provide

Account details. If you create an account you provide an email address and password, or you sign in with Google. When you use Google, Google returns your email address, name and profile picture URL to us; we do not receive your Google password. Accounts and passwords are handled by our hosting and authentication provider, not stored in our own tables.

Profile preferences. Display name, profile image URL, preferred translation, preferred text size and the reading intent you pick during onboarding.

Content you create. Saved Scripture, chapters, videos, sermons, worship items, people, places and stories; notes (title, body, tags and the passage or video they attach to); collections; and private reflections in Life + Scripture, which may include a mood value, the prompt shown to you and the passage you were reading.

Progress. Reading position (book, chapter, last verse), video playback position and completion, and a count of the situations, themes and passages you return to, used to build your personal Scripture map.

2. Spiritual and reflective content

Notes, reflections and the situations you explore in Life + Scripture can describe grief, illness, anxiety, doubt, relationships and other deeply personal circumstances. We treat this as sensitive by default: it is stored only against your own account, restricted by database access rules to your account, never sold, never used for advertising, and not reviewed by us for any purpose other than operating and repairing the service.

Scriptured is not a counselling, medical or crisis service. Where a situation looks like a crisis the app shows care resources; those are informational only.

3. AI transparency

What happens today. When you use search or Ask Scriptured, your words are matched against our own content — the King James Bible text we host, plus our editorial records for people, places, stories, questions, teachings, archaeology, sermons and video metadata. In the currently deployed build, your question is not sent to any external language model, and question text is not written to a database or log of searches.

Scripture stays Scripture. Scripture text and sourced facts are always presented and labelled separately from any explanatory or AI-assisted text. Where explanation is generated rather than quoted, it is labelled as AI-assisted in the interface.

If that changes. If we enable generated answers, prompts will be sent to a model provider in order to produce the answer. We will update this policy before that goes live and name what is sent. We do not make claims about any provider's retention or model-training practices here, because those terms are set by the provider and are not something this app can verify or promise on their behalf.

Some editorial and classification work — deciding which videos, sermons and worship items relate to which passages — happens on our servers on content we ingest, not on your personal data.

4. Location

The map asks your browser for your location only when you tap “Near me”. Your browser or device shows its own permission prompt, and you can decline or revoke it at any time in browser or device settings.

When you allow it, the coordinates are used in that session to centre the map and to search for churches, monasteries and Christian sites near you. That search is sent to our map provider, Mapbox, to return nearby places. Results are held briefly in your browser's memory so panning doesn't repeat the same request. In the current implementation your coordinates are not written to your account or to our database.

5. Video, sermons and worship

Video plays through YouTube's embedded player. When a video loads, YouTube and Google receive the request and may set their own cookies or storage and collect data under their own policies — we do not control that. What we store is your own playback position for videos you watch while signed in, and what you save.

Our editors use the YouTube Data API to find and catalogue videos. That is content ingestion by our team; it is not tied to individual readers.

6. Device, log and analytics data

We do not run an advertising network, analytics SDK or cross-site tracker in this product. Our hosting and backend providers process ordinary technical request data — such as IP address, timestamps, user agent and error information — to serve pages, secure the service and diagnose faults.

On this device the app stores: saved items made while signed out; local reading and watching position; a sign-in diagnostics log used to help you troubleshoot login problems; and, in the editor preview environment only, session data for staying signed in. Cookies and storage set by the authentication provider keep you signed in. There are no advertising cookies.

7. Sharing

When you share a verse, story, video or other page, we build a link to getscriptured.app and hand it to your device's own share sheet or clipboard. Where you send it is up to you, and that destination app operates under its own policy. Shared links point to public content; they do not expose your notes, reflections, saved library or account.

8. Service providers

These are the providers involved in the deployed product:

  • Lovable Cloud (Supabase infrastructure) — application hosting, database, authentication and account storage.
  • Google — Google Sign-In (optional), and YouTube for video playback and our editorial catalogue work.
  • Mapbox — map rendering and the place search used by “Near me” and nearby-church discovery.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

We may disclose information if we are legally required to, or where it is necessary to investigate abuse, protect the safety of people, or defend legal claims. We will not volunteer your notes or reflections for any other purpose.

10. Retention and deletion

Account content is kept while your account exists. Deleting an item deletes that row. Deleting your account removes your authentication record and everything attached to it — profile, saved items, notes, collections, reflections, reading and watching progress — through database cascade rules. Deletion is immediate and cannot be undone; provider backups may retain copies for a limited period before rotating out.

Device data is cleared when you use the clear-device control below, or clear your browser storage.

11. Security

Connections are encrypted in transit. Personal tables use row-level access rules so a signed-in reader can reach only their own rows, and privileged operations run on the server with credentials that never reach the browser. No service can promise perfect security, and we do not claim to; if we become aware of a breach affecting your data we will act and notify as required by law.

12. Your choices and rights

You can view, edit, export and delete your data using the controls on this page and in My Scriptured. Depending where you live — including under US state privacy laws such as California's, and under UK/EU data protection law — you may have rights to access, correct, delete, or receive a copy of your information, and to object to certain processing. The controls below are the fastest route; you can also contact us using the details in section 15.

13. Children

Get Scriptured is intended for a general audience aged 13 and over, and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it.

14. International readers

The service is operated from the United States and our providers process data in the United States and other countries. If you use Get Scriptured from outside the United States, your information will be transferred and processed there.

15. Changes and contact

When this policy changes materially we will update the date at the top and, where appropriate, tell you in the app. Continued use after an update means the updated policy applies.

Appetite Think Labs publishes Get Scriptured. A dedicated privacy contact address is being finalised; until it is published here, requests can be made through the data controls below, which perform export and deletion directly.

Privacy & data controls

These controls act immediately on your own data. Read the Privacy Policy for what is collected and why.

Location permission

Scriptured only asks your browser for your location when you tap “Near me” on the map, and uses it in that session to centre the map and find nearby churches. Location is never requested in the background. You can revoke the permission in your browser or device settings at any time.

Clear data stored on this device

Removes device-only saves, reading/watching position stored locally and the sign-in diagnostics log. Does not touch anything saved to your account.

Account data controls

Sign in to download or delete account data. While signed out, nothing is stored about you on our servers — only the device data above.