Privacy

What we keep

• Your email address, so you can sign in with an email link. If you choose to set a password, Supabase stores it securely encrypted; nobody at the church can see it.
• The name you tell us, so we can greet you.
• A profile photo, only if you add one. Only you and the app admins can see it; you can remove it at any time, and it is deleted with your account.
• Which days you have marked as read, to show your progress and streaks.
• Your notes. These are private: only you can read them. Church leaders and app admins cannot see them.
• Your light or dark theme choice, stored only on your device.
• If you turn on notifications: your reminder time and a technical address for each device, so we can send them.
• If you are in a group: which groups you belong to, and messages posted by its leaders.
• When you last used the app and last signed in, so administrators can help if you get stuck.

Why this is sensitive, and how we protect it

Reading the Bible and writing notes about it can reveal your religious beliefs, which UK GDPR treats as special category data. We only use it to run the app for you. Access is locked down in the database so each person can only see their own progress and notes, with two exceptions: group leaders can see the reading progress of people in the groups they lead, and the church's app administrators can see everyone's reading progress (days read, streaks and when you last read), so they can support and encourage people. Nobody but you can ever see your notes.

Groups

If you are added to a group, other members only see the group's totals, such as how many people read today. The group's leaders can also see your name, how many days you have read and your streak, so they can encourage you. Nobody in a group can see your notes.

Who helps us run the app

• Supabase stores accounts, progress, notes and profile photos.
• Vercel hosts the app.
• Notifications are delivered by your phone or browser maker's push service (Apple, Google or Mozilla). They are encrypted, so the push service cannot read them.
• YouVersion supplies the Bible text. Our server requests the passage; your personal details are not sent to YouVersion. The NIV text is shown under licence from Biblica and is not stored by us.

Podcasts and videos

Podcast and video players come from other services (for example Subsplash, which runs LRC Grow, or YouTube). Nothing loads from them until you tap play. Once you do, that service may set cookies and see that you watched or listened, under its own privacy policy. Where possible we use privacy-enhanced players.

Your choices

• Download your data at any time.
• Delete your account from the Me tab. This permanently removes your account, progress and notes.
• We keep your data until you delete your account.
• You can complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how we handle your data.

Contact

Questions about your data: contact Living Rock Church (contact details to be added before launch).