Privacy policy

About this policy

Effective date: October 22, 2026

This privacy policy explains what happens to your information when you use Scriptorium, the Bible-study app for iPhone and iPad and for Android phones and tablets (the "App"), and the Scriptorium website at https://scriptorium-bible.vercel.app (the "Site"). It also covers the App's pre-release (beta) versions that we distribute through Apple's TestFlight service and Google Play's testing tracks. Where the Android App works differently, Scriptorium for Android explains how. Together we call these the "Service".

Scriptorium is made and run by Jacken Joseph Holland, an individual developer based in the United States. In this policy, "we", "us" and "our" mean Jacken Joseph Holland. Scriptorium is made by one person, so "we" usually means that person. "You" means anyone who uses the Service.

For the purposes of data protection laws such as the EU and UK General Data Protection Regulation ("GDPR"), Jacken Joseph Holland is the "controller" of the personal information described in this policy that we receive. You can reach us at jacken.holland@gmail.com.

This policy is written to be read. We use short sentences and plain words where we can. Where the law needs a precise term, we use it and explain it.

The short version

• An account only for the AI and Scriptorium Plus. Reading, study tools, memorizing, quiet time, the Examen, notes, journal and prayer need no account. To use the AI features, you sign in with Apple, with Google, or with a code sent to your email. Scriptorium never creates or stores a password. The account holds your email address, your name if you share it, how much of the AI you have used this month, and your Scriptorium Plus subscription if you have one. There is no Scriptorium server that holds your study data.
• Your study stays with you. Your journal, prayers, prayer list, Examen answers, memory verses, notes, reading plans, reading log and settings are stored on your device. If iCloud is on, they are also stored in your own private iCloud database. On Android, they can be included in your phone's own Google backup. We cannot see or open either.
• No ads, no analytics, no tracking. The App contains no advertising, analytics, crash-reporting or tracking tools. The iPhone and iPad App's only third-party code library is Clerk's sign-in library, which talks only to Clerk and has its usage reporting turned off. The Android App uses Google's ML Kit to scan and read printed reading plans, and ML Kit sends Google limited technical information about how it runs (see ML Kit). The Site sets no cookies and runs no analytics.
• AI features are optional. The App simply calls them "AI". They are written by Claude, made by Anthropic. When you use one, the App sends what that feature needs through our server to Anthropic. Our server passes the request on and does not keep its content; it keeps only how much each request used, for your monthly allowance. Your journal, prayers, prayer list and notes are never sent unless you choose to send a specific entry or type them in yourself.
• What you choose to send us. If you report an AI answer, the App sends us that answer, the reason you chose and any note, so we can review it. If you ask for a translation the App does not have, we record which one. Both are linked to your account and deleted with it.
• Scriptorium Plus is paid through Apple or Google. They take the payment; we never see your card. Our server checks each purchase with Apple or Google and keeps a record of your subscription, such as the plan, when it ends and whether it is active.
• Two places we hold your details. If you sign in, we hold your account, your AI usage, your subscription record, and any reports and translation requests; you can delete all of it from inside the App. Deleting your account does not cancel Scriptorium Plus; you cancel that with Apple or Google. If you join the beta list on the Site, we keep what you enter on the form so we can send beta invites and news; you can unsubscribe or ask us to delete it at any time.
• We do not sell or share your personal information, and we never will.

The rest of this policy gives the details.

At a glance: what, where, who and how long

What we do not do

• We do not require an account, a phone number or an email address to use the App. An account is needed only for the AI features, Scriptorium Plus, asking for a translation, and licensed translations where they are offered.
• We do not include any advertising, analytics, attribution, crash-reporting or social-media software development kits (SDKs) in the App. The only third-party SDKs are Clerk's sign-in library (on iPhone, iPad and Android, with its usage reporting turned off) and, on Android, Google's ML Kit (described in ML Kit) and Google Play's libraries for buying Scriptorium Plus and for updating the App.
• We do not track you across other companies' apps or websites, and the App never asks for permission to track. We do not use Apple's advertising identifier or Google's advertising ID.
• We do not collect your location, contacts, health data, calendar, or files other than the ones you choose to import.
• We do not read, scan or analyze your journal, prayers, prayer list or notes. They are not on our systems.
• We do not keep the content of your AI requests or the AI's answers on our server, except an answer you choose to report. They pass through on their way to and from Anthropic.
• We do not use your information to train AI models, and we do not give it to anyone else to train AI models.
• We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as California law defines those terms.
• We do not use cookies, web beacons, pixels or browser storage on the Site.
• We do not make decisions about you by automated means that have legal or similarly significant effects.

Information in the App

This section lists every kind of information the App handles, where it comes from, why, where it goes, and (for readers in the EU, UK and similar places) the legal basis. Most of it never leaves your device except to your own iCloud. It describes the iPhone and iPad App; the Android App handles the same information in the same way except where Scriptorium for Android says otherwise.

A note on legal bases: we do not receive the information that stays on your device or in your private iCloud, so we do not process it in the way data protection law usually means. Where a law treats the App's handling of it as our processing, our legal basis is that it is necessary to provide the features you ask for (GDPR Article 6(1)(b), performance of a contract).

Your study content

What

Journal entries and written prayers (with their date, the passages they are about, any day of readings they belong to, and your translation at the time); your prayer list (each item's text, labels, linked passages, when you added it, when you last prayed it, how many times, whether it was answered and your note about the answer, and any reminder you set); notes on verses; unsent drafts; reading sets and which passages you ticked; your reading log (the dates you read) and streak; reading plans you imported (dates, passages, titles and each day's note from the printed plan); memory verses and passages (the verse or passage, its words as you learned them, for a long passage the pieces and sections you learn it in, and when you practiced each and are next due to review it); your evening Examen answers (what you were thankful for, where you saw God, where you missed Him, and what you asked for tomorrow); links you saved to passages (title, web address, note); your recent studies (the passage and any focus you typed); your reading position; your settings (translations, text size, theme); the first name you give the App and what you said you came for in the welcome (such as understanding the Bible, memorizing Scripture or praying more), which Today uses to greet you and to put those things first; and your reminder times.

Source

You, when you write or change something in the App. Home Screen widgets, notification buttons and Siri can also change it (for example, "Mark as read" or "Prayed").

Purpose

To show your study back to you, to schedule reminders, to power widgets, and to keep your devices in step.

Where it is stored

In one file on your device, in a shared container that only Scriptorium and its widgets can open (an iOS "App Group"). If iCloud sync is on, a copy is stored in your private iCloud database. See iCloud sync.

Who can see it

You. We cannot.

Legal basis

Performance of a contract (Article 6(1)(b)), to the extent any applies.

iCloud sync

If you are signed in to iCloud, the App keeps a copy of your study content in the private database of Scriptorium's iCloud container, using Apple's CloudKit service. It is on by default, and you can turn it off on each device in Settings, under iCloud. The copy includes the study content listed above, the date and time it was last changed, and the name and iOS version of the device that last saved it (so the App can tell your devices apart).

• A CloudKit private database belongs to your Apple Account. Apple stores it, and it counts against your iCloud storage. As the developer, we cannot read, list, change or delete anything in it.
• To keep your devices up to date, iCloud sends the App silent push notifications through Apple's Push Notification service when another device makes a change. These do not show on your screen and do not need your permission. They contain no study content.
• When you delete an item, the App keeps a small marker (the item's identifier and the time) for 120 days so that the deletion reaches all your devices. The marker does not contain the item's text.
• Apple handles iCloud data under the Apple Privacy Policy and the iCloud terms. If you turn on Advanced Data Protection for iCloud, CloudKit data such as this is end-to-end encrypted as Apple describes.
• To delete the iCloud copy: on iPhone or iPad, open Settings, tap your name, then iCloud, then Manage Storage (or Storage), choose Scriptorium, and delete its data. The App then stops syncing on that device instead of uploading everything again.

Guides and answers the AI has written

What

The guides, commentaries, word studies, Factbook entries, prayer prompts, reading-plan readings and other results the AI returns, and your Ask conversations (your questions and the AI's answers, up to the last 40 messages of each conversation).

Where it is stored

In the App's private storage on the device where it was written. It is not synced to iCloud, not placed in the App Group, and not included in Export.

Why

So you can read a guide again without using your allowance again.

Who can see it

You. We cannot.

Your Scriptorium account

You need an account only for the AI features and Scriptorium Plus, to ask for a translation, and to read licensed translations where they are offered. You can sign in with Apple, continue with Google, or sign in with a 6-digit code sent to your email address. Scriptorium never creates or stores a password. Signing in and signing up are the same step: if there is no account for your email address yet, one is made. Clerk, Inc. (clerk.com) runs sign-in for us. On iPhone and iPad, Sign in with Apple uses Apple's own sign-in, and Continue with Google opens Google's sign-in page in a secure browser sheet inside the App. On Android, both open in your browser (see Signing in on Android).

What

Your email address. With Sign in with Apple, this is the address Apple gives us, which can be a private relay address that forwards to you if you choose "Hide My Email". With Continue with Google, Google gives Clerk your Google account's identifier, email address and name (and, as Google's sign-in normally does, your profile picture). Your name, if you share it with Apple or Google or type it in. If you change your name in the welcome while signed in, the App updates the name on your account to match. A stable account identifier (from Clerk, and from Apple or Google if you sign in with them). A random identifier our server makes for your account, which the App gives Apple or Google when you buy Scriptorium Plus so the purchase can be matched to your account (see Scriptorium Plus); it contains nothing about you. When your account was made and last used. Sign-in records that Clerk keeps to protect your account: when you signed in, your session, your IP address and, on iPhone and iPad, your device's type, model and an identifier Apple gives our App on your device (the "identifier for vendor", which is the same for all of our apps on that device and is not an advertising identifier). On Android, instead of these device details, Clerk's library sends a random identifier it creates for that installation of the App, and its version number. On our server, your account also holds your AI usage records (see How the AI features work), your Scriptorium Plus subscription record, and any reports and translation requests you send (see Reporting an answer and Asking for a translation).

Source

You, and Apple or Google when you choose to sign in with them.

Purpose

To let you use the AI features, to keep your monthly allowance, to match a Scriptorium Plus purchase to your account, to keep your account secure, and to prevent abuse.

Where it is stored

With Clerk, Inc., our sign-in provider, and on our server, run on Convex (see Who else handles information). The App keeps your session on your device: in the iOS Keychain on iPhone and iPad, and encrypted in the App's private storage on Android (see Where your study is kept).

Who can see it

Us, and Clerk and Convex acting for us. Your study content is not part of your account.

How to delete it

In the App: Settings, then Account, then Delete account. This deletes your account at Clerk and, on our server, your account, usage records, subscription record, reports and translation requests. It does not cancel Scriptorium Plus: Apple or Google keeps billing you until you cancel it with them, and the App reminds you of this before you delete. Signing out keeps your account; deleting the App does not delete it. Nothing on your device or in your iCloud is touched either way. You can also write to us.

Legal basis

Performance of a contract (Article 6(1)(b)), and our legitimate interest in keeping accounts secure and preventing abuse (Article 6(1)(f)).

Asking for a translation

In the translation picker, Ask for a translation lets you tell us which translations you would like to read in the App (for example, the NIV, ESV or NLT, or one you type in). You need to be signed in. Our server records one entry for each translation you ask for, linked to your account, with the date. We use the tally to decide which licenses are worth buying. Your requests are deleted when you delete your account.

Your own Anthropic API key (no longer offered)

Earlier beta versions let you paste your own Anthropic API key, so that requests went straight from your device to Anthropic on your own Anthropic account. Versions from the App Store, Google Play and TestFlight no longer offer this: every AI request goes through your account and our server, as described in How the AI features work. The option remains only in developer builds of the App, which are not given to readers.

If you saved a key in an earlier beta, released versions do not use it or send it anywhere, and delete it from the device the first time they open (the iPhone and iPad Keychain, or the App's encrypted storage on Android). You can also revoke the key at any time in the Anthropic Console.

AI usage shown in the App

Settings, under Account, shows how much of this month's AI allowance you have left, as a percentage. It comes from our server's record of what each request used (see How the AI features work). You do not choose a Claude model; our server does.

The App also keeps, on your device only, a running estimate of the tokens each feature's requests used and what they cost at list prices, by month. Released versions do not show it; only developer builds do, along with a choice of model for testing. The estimate is never sent to us or anyone else. On Android it is included in your phone's Google backup, like the App's other files.

Photos, scans and pasted text for reading plans

You can make a reading plan from a printed plan by scanning pages with the camera, picking photos, or pasting text.

• The camera is used only inside Apple's document scanner, and only when you tap Scan.
• Photos are chosen with Apple's photo picker. The App receives only the photos you pick. It cannot see the rest of your library.
• If you choose to read the pages on the device, Apple's Vision text recognition reads them on your iPhone or iPad. Nothing is sent anywhere.
• If you choose to read them with AI, the App sends the photos (resized to at most 1,600 pixels on the long side), any text you pasted, and the month, year, plan name and publisher you entered, through our server to Anthropic. See AI features.
• The App does not keep the photos. After the import, only the resulting plan (dates, passages, titles and notes) is saved.
• Only photograph pages you are comfortable sending if you choose AI. Printed plans rarely contain personal information, but check for names or handwriting first.

Dictation (voice to text)

You can dictate journal entries, prayers, prayer-list items and Ask questions, and turn on Listen while memorizing a verse so the App can follow along as you say it. The App uses Apple's Speech framework with your microphone. What you say while memorizing is only compared with the verse on screen; it is not saved or sent anywhere else.

• Speech recognition is performed by Apple. Depending on your device, language and settings, Apple may process your speech on the device or send the audio to Apple's servers. Apple handles it under its own privacy policy. You can read Apple's description in Settings, under Privacy & Security, then Speech Recognition.
• The App receives only the text. It does not record, store or send the audio itself, and we never receive it.
• The microphone is used only while you are dictating or Listen is on, and iOS shows an indicator while it is on.

Reminders and notifications

Reminders are scheduled on your device as local notifications. No server is involved. A reminder can show today's passages, a plan day's note, or the text of an item on your prayer list (the daily prayer reminder starts with the item you have gone longest without praying). Anyone who can see your screen can see a notification. To hide the text on the Lock Screen, open iOS Settings, then Notifications, then Show Previews, and choose "When Unlocked" or "Never".

Widgets and Siri

Widgets read your study content from the shared App Group file on your device, and the App writes a small file with the text of today's first verse for them. Widgets show things like today's reading, your streak and the prayer-list items you have gone longest without praying. They can appear on your Home Screen, on the Lock Screen, and in StandBy, where other people may see them. Choose widgets that suit where you put them.

If you use Siri or the Shortcuts app with Scriptorium (for example, "Add to my prayer list in Scriptorium"), Apple processes your voice request under its own privacy policy and passes the result to the App on your device.

Export and import

Settings, under Your data, can export your study content as a JSON file. You decide where it goes (for example, Files, Mail or another app), and whoever you share it with can read it. The export file is written to the App's temporary folder, which iOS clears from time to time. Import replaces your study content with the file's contents and, with iCloud sync on, your other devices will match it.

Technical information

The App does not collect device identifiers, IP addresses, crash logs or usage analytics for us. Like any internet request, the App's requests to our server, Clerk, Sefaria, Apple and Google reveal your IP address and basic technical details to those services. The App does not contact Anthropic or API.Bible itself; our server does. Our server does not record your IP address; Clerk records it with your sign-ins, as described in Your Scriptorium account. See Apple services for crash reports you may choose to share with developers through Apple.

AI features (Claude by Anthropic)

Scriptorium's study guides, commentary, word studies, Factbook, prayer prompts, Ask and reading-plan photo reading are written by Claude, AI models made by Anthropic, PBC ("Anthropic"). In the App these features are simply called "AI". They are optional, they need an account, and their monthly allowance comes with Scriptorium Plus (see Scriptorium Plus). Everything else in the App works without them.

How the AI features work

Nothing is sent until you turn on AI. Before the first request, the App shows you a page that names Anthropic and explains what the AI receives, what it never receives and where your requests go, and it asks you to tap Turn on AI. You can turn it off at any time in Settings, under AI; while it is off, the App sends no AI request to our server or to Anthropic. Your choice is kept on your device.

Every request goes through our server. You need to be signed in. The App sends each request to our server, run on Convex. The server checks your sign-in and your monthly allowance, chooses which Claude model answers, passes the request to Anthropic using our own Anthropic API key, and streams the answer back to your device. In doing so:

• Our server chooses the model. The App asks for a level, not a model. Every study starts at the standard level. If you choose Go deeper on a study or in Ask, the App asks for a deeper, longer answer, which a more capable model writes and which uses more of your monthly allowance. We may change which Claude model answers each level.
• The content passes through and is not kept. Our server handles your request and the AI's answer only in memory while it passes them on. It does not store them, log them, or show them to anyone, and no person working on Scriptorium reads them, unless you choose to report an answer (see Reporting an answer). The AI's answers are stored on your device, as described in Guides and answers the AI has written.
• Usage records. For each request, our server records the time, the feature it was for (such as "Passage guide" or "Ask"), the model, the numbers of tokens used, the cost, and whether it finished, was stopped or failed. It also keeps a total for each month. We use these to run your allowance, to show how much you have left, to prevent abuse, and to plan what Scriptorium can offer and what it should cost.
• Anthropic is our service provider. We are Anthropic's customer for these requests, and Anthropic processes them for us under its Commercial Terms of Service and data processing terms.

Earlier beta versions also let you use your own Anthropic API key; released versions no longer do (see Your own Anthropic API key).

What is sent to Anthropic

The App sends only what each feature needs, with the level it asks for. Your sign-in token goes to our server, which checks it and does not pass it to Anthropic. Requests reach Anthropic from our server, not from your device, so Anthropic does not receive your IP address.

What is not sent: your journal, prayers, prayer list, Examen answers, memory verses, notes, reading log and settings are never sent to Anthropic by any feature, except (1) the single entry you choose with "Take it to Ask", and (2) anything you type, paste or dictate into Ask, a focus box, or another AI feature yourself.

When requests happen: requests are made only when you use an AI feature while you are signed in and AI is turned on. Some features begin writing as soon as you open them, for example Explain, Prayer prompts, Factbook entries, and studies you start from Today or reopen from Recent. You can tap Stop while the AI is writing. If you are signed out, nothing is sent.

How Anthropic handles your requests

Anthropic's handling of requests is governed by Anthropic's terms and policies, and by the terms between Anthropic and us. At the time of writing, Anthropic's commercial terms state that by default Anthropic does not use API inputs and outputs to train its models. Anthropic keeps API inputs and outputs for a limited period set out in its policies, and may keep them longer where they are flagged under its Usage Policy (for example, for trust and safety review) or where the law requires. Anthropic may use automated systems and, for flagged content, human reviewers to enforce its Usage Policy. Please read Anthropic's Privacy Policy and Anthropic's Privacy Center for the current details, because Anthropic may change them.

Reporting an answer

Under the AI's answers is a note that AI can make mistakes, and a way to report an answer: Report this answer (in Ask, touch and hold an answer). If you send a report, the App sends our server:

• the answer as it was shown to you (up to 40,000 characters);
• the reason you chose: inaccurate or misleading, offensive or harmful, off-topic or unhelpful, or something else;
• your note, if you write one;
• which feature wrote the answer, the App's language, and whether you use the iPhone and iPad App or the Android App.

The report is linked to your account. Nothing else from your study is sent, and reports are not sent to Anthropic. We read reports and use them only to review and improve the AI features, for example by correcting how a feature asks the AI for its answer. We keep each report until we have reviewed it, and reports are deleted when you delete your account. Our server stores at most 20 reports from one account in a day. An answer can reflect what you asked, so if it mentions something private, think about whether to report it.

What we do and do not do with AI

• We do not train AI models, and we do not use your content to train, fine-tune or improve any model.
• We do not review your requests or the AI's answers, and our server does not store them. No person working on Scriptorium reads them, except answers you choose to report.
• We do not use AI to profile you, to make decisions about you, or to target you with anything.

A note on accuracy

AI can be wrong, and it can sound sure when it is wrong. The App says so under its answers. The AI's guides are written for study, not as authority. Check what matters against Scripture, the sources shown, and people you trust. The Terms of Service say more about this.

Scriptorium Plus

Scriptorium Plus is an optional, auto-renewing subscription. It pays for the AI features and gives your account a monthly AI allowance. You buy it in the App Store on iPhone and iPad, or in Google Play on Android, monthly or yearly, and new subscribers may get a free trial. The Bible, original languages, notes, journal, prayer and reading plans stay free without it.

Payment

Handled entirely by Apple or Google, under their own terms and privacy policies. We never see or receive your card or other payment details.

What the App sends

When you buy, the App gives the store your account's random identifier (see Your Scriptorium account), and the store keeps it with the purchase, so our server can tell which account the purchase belongs to. When you buy or restore, the App sends our server the store's identifier for the purchase: Apple's transaction identifier, or Google Play's purchase token.

What our server does with it

It asks the store about the purchase, through Apple's App Store Server API or Google's Play Developer API, so nothing is taken on the App's word alone. For a new Google Play purchase, it also confirms the purchase to Google, as Google requires. After a subscription period ends, the next time the App reaches our server, the server asks the store whether the subscription renewed, ended or was refunded.

What our server keeps

For each subscription: which store it is from, the store's identifier for it, the plan (monthly or yearly), when the current period ends (and any billing grace period the store gives), its state (such as active, in a grace period, expired or refunded), whether it will renew, whether it is in a free trial, whether it is a real purchase or a test one (production, sandbox or test), and when we last checked it with the store. It is linked to your account.

Purpose

To give you what you paid for, to show your subscription in Settings, and to answer your questions about it.

How long

Until you delete your account. Apple and Google keep their own records of your purchase under their policies.

Legal basis

Performance of a contract (Article 6(1)(b)).

Cancelling and refunds happen through Apple or Google: manage your subscription in your App Store or Google Play account settings, and ask them for any refund. Deleting your Scriptorium account does not cancel a subscription, and the App reminds you of this before you delete it. Our server then forgets the subscription, but the store keeps billing you until you cancel.

Offer codes. We may give out founding-member offer codes (Apple offer codes or Google Play promo codes). You redeem them in the App Store or Google Play, which handle them under their own terms.

Sefaria and other outside sources

Sefaria

When you open the Midrash view, the App asks Sefaria (sefaria.org, run by Sefaria, Inc.) for the rabbinic texts linked to the passage. It needs no account and works whether or not you use the AI.

• The App sends only passage references and the names of the texts it wants (for example, "Genesis 12:1" or "Bereshit Rabbah 39:1"), with a label that says the request comes from Scriptorium.
• It sends nothing about you, your notes or your study. Like any web request, it reveals your IP address and basic technical details to Sefaria.
• Results are cached on your device for 30 days so the App does not ask again.
• Sefaria handles its web requests under its own privacy policy.

Licensed translations (API.Bible)

Some licensed translations, such as the NIV, NKJV and NLT, may be offered through API.Bible. They may not be offered at all; the translation picker shows which are available. Reading one needs a Scriptorium sign-in.

• The App asks our server for a chapter, and our server fetches it from API.Bible with our own key. API.Bible receives which translation and chapter, from our server, and nothing about you. Our server does not keep the text.
• Chapters are kept on your device for up to 30 days, and deleted sooner if a translation is no longer offered.
• As their licenses require, the App never sends this text to the AI, never reads it aloud, never shows it in widgets, and does not let it be copied or shared.

Links that open outside the App

Some things in the App are links: a source "on Sefaria", podcast episodes listed under "Go deeper", and links you save yourself. They open in your web browser. What happens there is governed by that website's own privacy policy, not this one.

Built-in Bible data

The public-domain Bible texts, Hebrew and Greek word data, lexicons, cross references and maps are built into the App. Reading, searching and looking up words happen entirely on your device and send nothing.

Permissions the App asks for

This section is about iPhone and iPad; Android's permissions are in Scriptorium for Android. iOS asks for your permission before the App can use these features. The App asks only when you first use the feature. You can change your answer at any time in iOS Settings, under Scriptorium.

The App does not ask for, and cannot get, your location, contacts, calendars, health data, Bluetooth, local network or advertising identifier.

What happens on your device

A lot of Scriptorium runs entirely on your iPhone or iPad:

• Reading, searching, cross references, the interlinear, lexicons, the map and the Torah reading cycle, using data built into the App.
• Reading printed plans with Apple's Vision text recognition, when you choose "on the device".
• Parsing pasted plan text into days and passages.
• Scheduling reminders and handling their buttons.
• Widgets, Siri actions and deep links.
• The on-device AI usage estimate, which only developer builds show.

Your device protects the App's files with iOS Data Protection, which encrypts them when the device is locked and a passcode is set. The Keychain gives your sign-in session extra protection.

Your device's own backups (iCloud Backup or a computer backup) may include the App's files, under Apple's terms and your backup settings.

Scriptorium for Android

The Android App has the same features as the iPhone and iPad App and handles your information the same way, with the differences below. Where this section does not mention something, the rest of this policy applies as written.

Where your study is kept, and Google backup

• Your study content (everything listed in Your study content), the AI's guides and your Ask conversations, the on-device AI usage estimate and your settings are kept in the App's private storage on your phone, which other apps cannot open.
• There is no iCloud and no live sync on Android. Instead, if backup is on for your phone, Android includes these files in your phone's backup to your Google account, and copies them to a new phone when you transfer to it. This is Android's own backup, run by Google under your Google account's terms and settings. We cannot see or open it. On Android 9 and later, Google encrypts these backups with your phone's screen lock when you have one set, as Google describes.
• Unlike on iPhone and iPad, the AI's guides and your Ask conversations are included in this backup, so they come with you to a new phone.
• Your sign-in isn't included. It is kept encrypted in the App's private storage, and on a new phone you sign in again.
• On Android, your first name and what you came for are kept on your phone and in your Google backup, like the rest of your study.
• Your agreement to use the AI is kept only on that phone and isn't in the backup, so a new phone asks again.
• You control backup in your phone's settings (usually Settings, then Google, then Backup). Turning it off stops new backups; Google's help pages explain how to delete an existing one.
• Export and Import work as they do on iPhone. You choose where the export file is saved, and Import replaces your study content on that phone.

Signing in on Android

On Android you can sign in with Apple, continue with Google, or sign in with a 6-digit code sent to your email address. Sign in with Apple and Continue with Google both open in your browser, and Apple or Google gives Clerk the details described in Your Scriptorium account. Everything else about your account is as described there, including deleting it from inside the App.

Your own API key on Android

Versions from Google Play no longer offer your own Anthropic API key (see Your own Anthropic API key). If you saved one in an earlier test version, released versions delete it from the phone the first time they open; it was kept encrypted, with a key held in the Android Keystore that cannot be copied off the phone, and was never included in backups. You can also revoke it in the Anthropic Console.

Scanning and reading printed plans (ML Kit)

To make a reading plan from a printed page, the Android App uses Google's ML Kit, which runs inside Google Play services on your phone.

• Scan opens Google's document scanner. The scanner uses the camera itself, so the App never asks for camera permission, and the App receives only the pages you keep.
• Photos are chosen with Android's photo picker. The App receives only the photos you pick.
• If you choose to read the pages on the device, ML Kit's text recognition reads them on your phone. The pages and their text are not sent to Google or to us.
• If you choose to read them with AI, the App sends the pages through our server to Anthropic as described in Photos, scans and pasted text (at most 1,600 pixels on the long side).
• When the scanner or text recognition runs, ML Kit sends Google technical information about how it is working: device details (such as the manufacturer, model, Android version and available machine-learning hardware), app details (the App's package name and version), identifiers such as your country and a per-installation identifier that is not tied to you, the ML Kit settings used, the type of event, error codes and performance measurements. Google uses this for diagnostics and usage analytics, over an encrypted connection, as it describes in its ML Kit data disclosure. Google Play services may also download or update ML Kit's recognition model. We do not receive any of this.

Dictation and reading aloud

• Dictation, and Listen while you memorize a verse, use your phone's speech recognition service (on most phones, Google's). Depending on your phone and settings, that service may process your speech on the phone or send the audio to its provider's servers, under that provider's privacy policy. The App receives only the text. It does not record, store or send the audio, and we never receive it.
• Listen, which reads a chapter aloud, uses the text-to-speech engine installed on your phone. The App gives it only the Bible text being read.

Prayer on Android

The Android App does not ask Claude to write prayer prompts. When you pray a passage, the App shows the passage's own words. Your prayers, prayer list and journal are sent to Anthropic only if you choose "Take it to Ask" on an entry or type them into an AI feature yourself, as on iPhone.

Reminders, widgets, the Quick Settings tile and shortcuts

Reminders are scheduled on your phone with Android's alarm service and shown as local notifications, with no server involved. They can show the same text as on iPhone, including items from your prayer list, so check your lock-screen notification settings. After your phone restarts, the App puts your reminders back. Home-screen widgets (today's reading, your prayer list, the verse for today), the Quick Settings tile and the App's shortcuts read your study content on your phone. Widgets on your home screen can be seen by anyone who sees your screen.

Android permissions

The Android App does not ask for camera, photo library, location, contacts, calendar, health, Bluetooth or nearby-device permissions, and it does not use Google's advertising ID.

Google Play and beta testing

• You get the Android App from Google Play. Google handles the download and your Google account under Google's own terms and privacy policy, and does not give us your identity when you install it.
• If you buy Scriptorium Plus on Android, Google Play takes the payment and handles renewals, cancellations and refunds, as described in Scriptorium Plus.
• Before release, we test the App through Google Play's testing tracks. If we invite you, we give Google the email address of your Google account so it can let you install the test version. Google may show us testers' feedback that you choose to send through Google Play.
• Google gives developers aggregated statistics about installs, and crash and "app not responding" reports from people whose phones share usage and diagnostics with Google. If you share them, we may see these reports in Google Play Console. They do not include your study content. We use them only to find and fix problems.
• Google Play may add its own code to the App to check that your copy was installed from Google Play. It works under Google's terms.
• If you write a Google Play review, Google shows it publicly with your Google account's name, and we may reply publicly.

The website

Visiting the Site

The Site is a static website hosted by Vercel, Inc. When you visit, Vercel's servers receive the information every web browser sends: your IP address, the page requested, the date and time, your browser and operating system, and the page that linked you (if any). Vercel uses this to deliver the Site and protect it from abuse, and keeps it for a short period under its own policies. We do not use it to identify you, and we look at it only to investigate a technical or security problem.

• No cookies. The Site does not set cookies.
• No browser storage. The Site does not use localStorage, sessionStorage or similar storage.
• No analytics or tracking. The Site has no analytics, advertising, pixels, social-media widgets or session recording.
• No third-party requests. Fonts, images and scripts are served from the Site itself. Your browser does not contact other companies until you click a link or submit the form.

Joining the beta waitlist

If you join the waitlist, we collect what you enter on the form:

We also record when you signed up and when you last updated your entry. If you sign up again with the same email, your answers are updated. The form includes a hidden field that people never see; if it is filled in, we treat the submission as spam.

Where it goes: your entry is stored in our database at Convex, Inc. We also copy it to our contact and email system at HighLevel, Inc. (which may appear as "LeadConnector") so we can send emails and keep track of who asked to be contacted. Both act as our service providers.

Legal basis: your consent, which you give by submitting the form (GDPR Article 6(1)(a)), and, where you asked for a TestFlight invite, taking steps at your request before you use the beta (Article 6(1)(b)). You can withdraw your consent at any time by unsubscribing or writing to us. Withdrawing does not affect anything we did before.

Notice at collection (California and other US states): we collect identifiers (email, name), your survey answers and your free-text note, for the purposes above. We do not sell or share this information, and we keep it for the period in Retention.

Emailing us

If you write to us, we receive your email address, your message and anything you attach. We use it to reply and to help you. Legal basis: our legitimate interest in answering you (Article 6(1)(f)), or taking steps at your request.

Emails from us

If you join the waitlist, we may email you about:

• your TestFlight invite and beta updates (if you asked for an invite);
• the App's release on the App Store;
• occasional news about Scriptorium, such as major new features or ways to support it.

We send these through HighLevel. We will not send you anything unrelated to Scriptorium, and we will not give your email address to anyone else to email you.

Unsubscribing: every marketing email has an unsubscribe link. You can also reply "unsubscribe" or write to jacken.holland@gmail.com. We act on unsubscribe requests promptly, and always within 10 business days. After you unsubscribe, we keep your email address on a "do not email" list only so we do not email you again, unless you ask us to delete it entirely.

Email measurement: emails sent through HighLevel may include standard open and click measurement (a tiny image, and links that pass through HighLevel) so we can see whether messages arrive and which links are useful. We do not use it to build profiles of you. You can block it by turning off remote images in your email app, or ask us to turn it off for you.

Our marketing emails identify us as the sender, include a postal address where we can receive mail, and are not misleading, as the US CAN-SPAM Act requires. In the EU and UK, we email you only with your consent.

Text messages

We do not send text (SMS or MMS) messages, and the waitlist form does not ask for your phone number.

If we ever offer text messages, we will send them only to people who give separate, express written consent to receive them, as the US Telephone Consumer Protection Act (TCPA) and similar laws require. Consent will never be a condition of buying anything or using the App. Every message will say how to stop (reply STOP) and get help (reply HELP), message frequency will be stated when you sign up, and message and data rates may apply. We will not share mobile numbers or text-messaging consent with anyone for their own marketing. We will update this policy before any such program starts.

Support payments ("chip in")

The Site has a link to support Scriptorium with a small payment. The payment page is run by Stripe, Inc. (a Stripe Payment Link), not by us. When you pay, the payment provider collects your payment details and other information it needs (for example, your email, name, card or wallet details, billing country and postal code) under its own privacy policy and terms. It acts as an independent controller for payment processing and fraud prevention.

We receive a record of the payment: typically your name, email address, the amount, the date, the payment status, and limited card details such as the card brand, the last four digits and the country. We never receive your full card number or security code.

We use this record to thank you, to keep accurate accounts, to meet tax and accounting obligations, to handle disputes, and to honor any thank-you we offered at the time. Legal basis: taking steps at your request (Article 6(1)(b)), our legal obligations (Article 6(1)(c)), and our legitimate interest in keeping accurate records (Article 6(1)(f)).

Beta testing through TestFlight

We distribute beta versions of the App through Apple's TestFlight. Apple runs TestFlight under its own terms and privacy policy.

• If we invite you by email, we give Apple your email address (and name, if we have it) so Apple can send the invite. We take these from the waitlist entry where you asked for an invite.
• Apple shares with us certain information about testers. This may include your name and email address (if we invited you by email), your device model and iOS version, when you installed and opened builds, crash reports, and any feedback, screenshots or comments you choose to send through TestFlight.
• We use this only to run the beta: to fix bugs, answer your feedback and send you new builds. Legal basis: our legitimate interest in testing and improving the App (Article 6(1)(f)), and your consent to join the beta.
• If you sign in to use the AI during the beta, see Your Scriptorium account.

When the beta ends, or when you ask, we remove you as a tester.

Apple services

You get the App from Apple's App Store (or TestFlight). Apple handles the download, payments for Scriptorium Plus (see Scriptorium Plus), and your Apple Account under Apple's own terms and privacy policy. Apple does not give us your identity when you download the App.

Apple offers developers aggregated statistics about downloads and usage, and crash reports, only from people who have agreed to share them with app developers (on iPhone: Settings, Privacy & Security, Analytics & Improvements, "Share With App Developers"). If you have agreed, we may see crash reports and aggregated statistics through App Store Connect. We use them only to find and fix problems. You can change this setting at any time.

If you write an App Store review, Apple shows it publicly with your chosen nickname, and we may reply publicly.

Features we may introduce

We are planning some features that would change how certain information flows. None of these exist today. (Accounts, the AI through our server and the Scriptorium Plus subscription, once described here, now exist and are described above.) If we introduce any of them, this section describes how they will work, and we will update this policy (see Changes) before they start.

A shared library of guides

Guides that depend only on a passage or a word (such as a Passage Guide, History, Commentary, Midrash, Explain, Word Study or Factbook entry) may one day be saved on our server and shown to everyone who opens the same passage or word, so they load at once. These would contain no personal information and would not be linked to who first asked for them. Studies with a focus you typed, Ask, prayer prompts and plan photos are personal, and would never be added to the shared library.

Shared prayer groups

If we introduce shared prayer groups, what you post in a group will be visible to its members. We plan to build groups on Apple's iCloud sharing, so group content would be stored in the iCloud account of the person who created the group and shared with members through iCloud, not on our server. We will explain exactly what is shared, and with whom, before you join or create a group.

Religious beliefs, health and other sensitive information

Using a Bible-study app, or joining its waitlist, may say something about your religious beliefs. Your journal and prayers may also mention health, family matters or other private things about you and other people. Many privacy laws, including the GDPR and several US state laws, treat religious beliefs and health information as sensitive.

• We never ask you for sensitive information, and we never use any information to infer or profile your beliefs, health or other sensitive characteristics.
• Your journal, prayers, prayer list and notes stay on your device and in your private iCloud. We do not collect them.
• If you choose to send sensitive information to an AI feature (for example, by taking a prayer to Ask), it is sent to Anthropic because you chose to send it; it passes through our server without being stored. Our legal basis for this is your explicit consent (GDPR Article 9(2)(a)), which you give by choosing to send it and can withdraw by not sending it. Think about whether it is necessary, especially when it concerns someone else.
• If you report an AI answer that mentions something sensitive, we keep it with the report until we have reviewed it. Our legal basis is your explicit consent (Article 9(2)(a)), which you give by sending the report.
• For the waitlist, to the extent your sign-up reveals your religious beliefs, we rely on your explicit consent (GDPR Article 9(2)(a) and, in US states that require it, your opt-in consent), which you give by submitting the form, and we use it only to run the waitlist.
• We do not use or disclose sensitive personal information for any purpose other than providing the Service you asked for, so California's "limit the use of my sensitive personal information" right does not need a separate link.

Why we use information, and our legal bases

This table is for people in the European Economic Area (EEA), the United Kingdom, Switzerland and other places whose laws require a legal basis. It covers information we receive.

Where we rely on legitimate interests, we have weighed them against your rights and expectations. You can object at any time (see Your rights). Giving us your information is voluntary. You do not have to join the waitlist, and you can use the App without giving us anything; only the AI features, Scriptorium Plus and the features that go with them need an account.

Who else handles information

We use a small number of companies to run the Service. Service providers (called "processors" in the GDPR) may use your information only to provide their service to us, under contracts that require them to protect it. Some companies act independently, under their own policies, because you deal with them directly.

We may also disclose information:

• When the law requires it, for example to respond to a valid court order, subpoena or government request, after checking that it is valid. Where the law allows, we will tell you first.
• To protect people, when we believe in good faith that it is necessary to prevent serious harm or to protect the rights, property or safety of you, others or us.
• In a transfer of Scriptorium, if the App or Site is transferred to another person or company (for example, if we form a company to run it, or sell it). The new owner will have to honor this policy for information collected under it, and we will tell you before the transfer.
• With your permission, in any other case.

We do not sell or share personal information

We have not sold or "shared" personal information in the past 12 months, and we do not sell or share it. "Sell" and "share" have the meanings in the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA"): selling means disclosing personal information for money or other valuable consideration, and sharing means disclosing it for cross-context behavioral advertising. We also do not process personal information for targeted advertising or for profiling that produces legal or similarly significant effects, as other US state laws define those terms. We do not knowingly sell or share the personal information of anyone under 16.

International transfers

We are based in the United States, and our service providers mainly process information in the United States. If you are outside the United States, your information will be transferred to, stored in and processed in the United States and possibly other countries, whose laws may give less protection than the laws where you live.

When we transfer personal information from the EEA, the UK or Switzerland, we rely on:

• the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework, for providers that are certified under them; or
• the European Commission's Standard Contractual Clauses (Decision (EU) 2021/914), with the UK International Data Transfer Addendum or equivalent Swiss safeguards, which our providers include in their data processing terms; and
• additional safeguards such as encryption in transit and at rest.

AI requests through our server are transfers we make, covered by Anthropic's data processing terms. You can ask us for more information about our transfer safeguards, or a copy of them, by writing to jacken.holland@gmail.com.

Retention: how long information is kept

We may keep information longer if the law requires it, or if we need it to establish, exercise or defend a legal claim, and then only for as long as needed.

Security

We protect information with measures suited to a small, independent service:

• Minimal collection. The strongest protection is not holding your data. Your study content is not on our systems.
• On your device: iOS Data Protection for the App's files; the Keychain for your sign-in session; widgets can read only Scriptorium's own shared container.
• On Android: the App's private storage, which other apps cannot open; your sign-in is kept encrypted there and never backed up.
• In transit: all connections to Apple, Google, Anthropic, Sefaria, API.Bible, Clerk, Convex, HighLevel and Vercel use HTTPS (TLS encryption).
• Accounts: there are no passwords to steal. You sign in with Apple, Google or a 6-digit code sent to your email, and the App proves who you are to our server with short-lived tokens from Clerk.
• Purchases: our server checks every Scriptorium Plus purchase with Apple or Google itself, and a purchase linked to one account cannot be claimed by another.
• In iCloud: your private CloudKit database, protected by Apple, and end-to-end encrypted if you turn on Advanced Data Protection.
• Our accounts: we protect the accounts we use to run Scriptorium with strong, unique passwords and two-factor authentication, and only the developer has access.
• The waitlist: it is set up to accept sign-ups from browsers only on our Site, it checks and limits the length of every field, and it filters spam.
• Keys: our Anthropic key, and the keys our server uses to check purchases with Apple and Google and to read API.Bible, live only on our server, never in the App.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security. You can help: use a passcode on your device, and keep your Apple Account, Google account and email secure with two-factor authentication.

If there is a data breach

If we learn of a security breach that affects personal information we hold, we will investigate, contain it and take steps to prevent it from happening again. We will notify the relevant supervisory authorities where the law requires, including, under the GDPR, within 72 hours of becoming aware of it where feasible. We will notify affected people without undue delay where the law requires it or the breach is likely to put them at high risk. We will tell you what happened, what information was involved, what we are doing, and what you can do. We will contact you by email if we have your address, and otherwise by a notice in the App or on the Site.

If one of our providers (such as Apple, Anthropic or Convex) has a breach that affects you, we will pass on what we learn and help where we can.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. In line with the US Children's Online Privacy Protection Act (COPPA), if we learn that we have collected personal information from a child under 13 without verified parental consent, we will delete it promptly. If you believe a child under 13 has given us information, please write to jacken.holland@gmail.com.

In the EEA and the UK, a person under 16 (or a lower age set by their country, not below 13) may join the waitlist only with the consent of a parent or guardian. Teenagers who use the App should do so with a parent or guardian's knowledge.

You must be at least 13 to create an account (at least 16 in the EEA and the UK, or the lower age set by your country, unless a parent or guardian agrees). If we learn that an account belongs to someone younger, we will delete it.

Your controls

You are in control of the information the App holds:

• Edit or delete any journal entry, prayer, prayer-list item, note, reading set, plan or link in the App.
• Turn off iCloud sync on any device in Settings, under iCloud.
• Delete the iCloud copy in iOS Settings (your name, iCloud, Manage Storage, Scriptorium).
• Export a copy of your study content in Settings, under Your data.
• Sign out, or delete your account, in Settings, under Account. Deleting your account does not cancel Scriptorium Plus.
• Manage or cancel Scriptorium Plus in your App Store or Google Play account settings. On iPhone and iPad, if you bought it in the App Store, Settings, under Account, has a Manage subscription button.
• Turn the AI off in Settings, under AI. While it is off, the App sends no AI requests.
• Clear an Ask conversation in Ask.
• Change permissions (camera, microphone, speech recognition, notifications) in iOS Settings, under Scriptorium.
• Delete everything on a device by signing out and then deleting the App. Delete your account first if you want it gone too, and cancel any subscription with Apple or Google.
• On Android: change permissions in Android Settings, under Apps, then Scriptorium; turn Google backup on or off in your phone's backup settings; delete everything on the phone by uninstalling the App.
• Unsubscribe from our emails with the link in any email, or by writing to us.
• Stop sharing crash data with developers in iOS Settings, under Privacy & Security, then Analytics & Improvements.

Your rights in the EEA, UK and Switzerland

If the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection applies to you, you have these rights over the personal information we hold about you:

• Access: to ask whether we hold information about you and get a copy.
• Rectification: to have inaccurate information corrected and incomplete information completed.
• Erasure: to have your information deleted, in the cases the law sets out.
• Restriction: to ask us to limit how we use your information, for example while a complaint is looked into.
• Portability: to receive information you gave us, based on consent or contract, in a structured, commonly used, machine-readable format, and to have it sent to someone else where technically feasible.
• Objection: to object to processing based on our legitimate interests, and to object at any time to direct marketing.
• Withdraw consent: at any time, where we rely on consent. This does not affect processing before you withdrew.
• Automated decisions: not to be subject to decisions based solely on automated processing that have legal or similarly significant effects. We make no such decisions.
• Complain: to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work or where an alleged breach happened. In the EEA, see the list of authorities kept by the European Data Protection Board. In the UK, contact the Information Commissioner's Office. In Switzerland, contact the Federal Data Protection and Information Commissioner (FDPIC). We would appreciate the chance to help first, so please consider writing to us.

Most of the App's information is on your device and in your iCloud, not with us, so you can see, export and delete it yourself at any time. What we do hold is your account, your AI usage records, your Scriptorium Plus subscription record, and any reports and translation requests (if you sign in), and your waitlist entry (if you joined). You can delete your account, and everything linked to it, in the App, and ask us for a copy of any of it.

Your rights in California

The CCPA gives California residents specific rights. The CCPA may not apply to us, because it applies only to businesses above certain size thresholds, but we honor these rights for everyone.

Personal information we collect

In the past 12 months we have collected the following categories of personal information. We collect it for the business purposes described in this policy, and we have not sold or shared any of it.

We do not collect geolocation, biometric, audio (for ourselves), professional, education or health information, or government identifiers.

Your California rights

• Right to know and access: the categories and specific pieces of personal information we collected about you, the categories of sources, our purposes, and the categories of recipients.
• Right to delete personal information we collected from you, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing. We do not sell or share, so there is nothing to opt out of, but you may still send a request or a Global Privacy Control signal.
• Right to limit the use of sensitive personal information. We use it only for purposes the law permits without offering this right.
• Right not to be discriminated against for exercising any of these rights. We will not deny you the Service, charge you a different price, or give you a different quality of service because you exercised them.

California's "Shine the Light" law (Civil Code 1798.83) lets residents ask about disclosures to third parties for their direct marketing. We make no such disclosures.

Notice of financial incentive

We may thank early testers, supporters and founding members with benefits such as offer codes for free time on Scriptorium Plus. Taking part is optional. If a benefit depends on personal information (for example, your email address on the waitlist or a record of your support payment), we consider the value of that information to be equal to the value of the benefit, based on our good-faith estimate of what offering the benefit costs us. You can decline any benefit, and you can withdraw at any time by writing to jacken.holland@gmail.com. We will describe the specific terms when we make an offer.

Your rights in other US states

Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island, have rights that may include:

• to confirm whether we process your personal data, and to access it;
• to correct inaccuracies;
• to delete personal data;
• to obtain a portable copy;
• to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions with legal or similarly significant effects (we do none of these);
• to give or withhold consent before we process sensitive data, such as data revealing religious beliefs;
• in some states, to get a list of the third parties to which we have disclosed personal data; and
• to appeal our decision on your request.

Some of these laws apply only to businesses above certain size thresholds and may not apply to us. We extend these rights to all US residents anyway.

Nevada: we do not sell covered information as Nevada law defines it. You may still send a request to jacken.holland@gmail.com.

Consumer health data: we do not collect consumer health data as defined by Washington's My Health My Data Act or similar laws. Prayer requests and journal entries that mention health stay on your device and in your private iCloud.

Appeals: if we decline your request, you can appeal by replying to our decision or writing to jacken.holland@gmail.com with "Appeal" in the subject. We will respond within 45 days (60 days where the law allows), explain our decision in writing, and, if we deny your appeal, tell you how to contact your state Attorney General.

Your rights elsewhere

Wherever you live, you can ask us to access, correct or delete personal information we hold about you, and to stop emailing you. If you live in a place with its own privacy law, such as Canada, Australia, Brazil, Japan or South Korea, you have the rights that law gives, and you can complain to your local privacy regulator. We will honor your request as far as the law and our ability allow.

How to make a privacy request

• Email: jacken.holland@gmail.com, with "Privacy request" in the subject.

Tell us what you would like us to do, and which email address you used (for example, for your account, the waitlist or a support payment). There is no charge. We may charge a reasonable fee, or decline, only if a request is clearly unfounded or excessive, as the law allows.

Verification: to protect you, we check that a request comes from you before acting on it. Usually we will ask you to confirm the request from the email address we have on file. If that is not possible, we may ask for a small amount of other information that matches what we hold. We will use it only to verify you. We cannot verify requests for information we do not hold, such as the study content on your device, but you can see, export and delete that yourself.

Authorized agents: you may use an authorized agent. We may ask for proof that you gave the agent signed permission, and ask you to confirm your identity with us directly, unless the agent holds a valid power of attorney.

Timing: we will confirm receipt within 10 business days and respond within one month under the GDPR (which we may extend by two more months for complex requests, with notice), and within 45 days under US state laws (which we may extend by 45 more days where the law allows, with notice).

What we cannot do: we cannot access or delete data in your iCloud or Google backup, on your device, at Sefaria, at Apple, or at Google. We will tell you how to reach those services if you need to.

Do Not Track and Global Privacy Control

The Site does not track you across websites, so it responds the same way whether or not your browser sends a "Do Not Track" signal. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of the sale and sharing of your personal information and of targeted advertising, for the browser or device that sent it. Because we do none of these things, you will see no difference, but your choice is recorded as the law requires where we can link it to you.

Changes to this policy

We will update this policy when the Service changes, for example before introducing any of the features we may introduce, or when the law changes. The effective date at the top shows when it last changed.

If a change is material, such as collecting a new kind of information or using it in a new way, we will tell you before it takes effect: in the App, on the Site, and by email if you are on the waitlist. Where the law requires your consent to a change, we will ask for it. We will not use information collected under an earlier version of this policy in a materially different way without your consent. You can ask us for earlier versions of this policy.

Contact

Questions, requests or concerns about privacy are welcome. Scriptorium is made by one person, and that person reads every message.

We aim to reply within 5 business days, and always within the time the law requires.