Privacy Policy

This Privacy Policy explains how [BIBLIXP, INC.], a Delaware corporation with operations in the State of Florida ("BibliXP," "we," "us," or "our"), collects, uses, shares, and protects information when you use the BibliXP mobile app on iOS and Android, the BibliXP website, and any related features or services that link to this Policy (collectively, the "Service").

By using the Service you agree to this Policy. Capitalized terms not defined here have the meaning given in our Terms and Conditions.

The Service is intended for users 16 years of age or older. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided personal information through the Service, contact us at [contact@biblixp.com] and we will take reasonable steps to delete it and to terminate any associated account.

We collect the following categories of information when you use the Service:

Account and authentication information: an internal user ID, email address (when you sign up with email or with Apple/Google sign-in that returns an email), Apple or Google identity tokens used to verify your sign-in, anonymous guest session identifiers when you start without an account, password reset tokens, and session tokens that keep you signed in. Passwords, when you set them with email sign-up, are sent to our authentication provider in transit and we do not have access to your plaintext password. We do not receive your Apple ID password or Google account password.

Profile and onboarding information: username, selected avatar icon, image frame, preferred Bible version, locale, daily learning goal, study goals, interests, referral code, how you heard about BibliXP (referral source), and the user who referred you (if any).

Learning, gameplay, and progress information: lesson, chapter, age, and task progress; XP, gold, level, stamina, daily quests, achievements, season-pass XP and rewards, season history, weekly and spotlight challenges, speed-trial results, streaks (current count, longest streak, last active date, and streak grace count), titles, cosmetics, and similar gameplay state.

Community and social information: public profile fields you choose to share (such as username, avatar, achievements, titles, level, and streak), follow relationships and follow requests, activity-feed entries, reactions, default activity-visibility setting (public or private), shareable activity links, "Shepherd" and "Sheep" mentorship relationships and reward state, and multiplayer session, invite, and leaderboard data.

Subscription and purchase information: subscription status, RevenueCat app-user ID, entitlement and product or offering identifiers, trial state, renewal state, original purchase data, and webhook event records about your subscription. Payments are processed by Apple and Google through their respective stores. We do not receive your payment-card number, full bank details, or store password.

Notifications information: notification permission status, your push-notification preferences (such as lesson-reminder frequency, weekday, time, and timezone), Expo push notification tokens registered for your device, records of notifications we deliver to you (delivery status and history), and locally stored read or dismissed notification state.

Device, app, analytics, and diagnostic information: device platform (iOS or Android), device model, operating system version, app version, language and timezone, app installation identifiers used by Apple and Google for sign in and store services, screens viewed, feature events, lesson and challenge activity, subscription event status, sign in and sign up event status, app lifecycle events, error events, and basic technical logs from our backend and analytics providers such as IP address, request timestamps, and error or rate limit information that those providers create automatically.

Locally stored information: when you create Bible notes, highlights, or bookmarks in the app, those entries are stored on your device and are not uploaded to our servers. The Bible text itself is shipped with the app as a local SQLite database.

Communications you send us: when you contact support or submit feedback, we receive the contents of that message and any details you choose to include.

We use the information described above to:

Provide and operate the Service, including authenticating you, creating and maintaining your account, saving your learning progress, running multiplayer sessions, computing leaderboards, awarding XP and rewards, managing seasons and quests, delivering subscription benefits, and powering community and sharing features.

Personalize your experience, including showing you onboarding suited to your goals and interests, surfacing your selected Bible version, applying your locale, and reflecting your selected privacy and notification preferences.

Send notifications and reminders that you have permitted, such as lesson reminders, multiplayer invites, follow-related activity, and important service updates.

Process subscriptions, free trials, renewals, restorations, and entitlement state through Apple, Google, and RevenueCat.

Maintain the security and integrity of the Service, including preventing fraud, abuse, cheating, and unauthorized access; enforcing limits on stamina, multiplayer hosting, and reward eligibility; and detecting violations of our Terms.

Improve the Service, including diagnosing and fixing bugs, monitoring performance, understanding which features are used, measuring onboarding, lesson, challenge, review, and subscription flows, and developing new features. We do not use third party advertising, marketing, or attribution SDKs in the BibliXP app.

Comply with legal obligations and enforce our Terms.

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar rules, we process personal information based on the following legal bases: performance of our contract with you (to provide the Service and your subscription), our legitimate interests (to keep the Service safe, prevent abuse, run community features, and improve the product), your consent (for example, where required for push notifications), and compliance with legal obligations. You may withdraw consent at any time where processing relies on consent.

We rely on a small number of trusted providers to operate the Service. They process information on our behalf, under contracts that limit how they may use that information.

Supabase: authentication, database, edge functions, and related backend infrastructure, including storage of account data, profile data, learning progress, community data, multiplayer state, notification preferences, and webhook records.

Apple (Sign in with Apple, Apple App Store): user sign-in via Apple, distribution of the iOS app, and processing of in-app purchases and subscriptions on iOS.

Google (Sign-In with Google, Google Play): user sign-in via Google, distribution of the Android app, and processing of in-app purchases and subscriptions on Android.

RevenueCat: cross-platform subscription management, entitlement state, and webhook events about subscription lifecycle.

Expo: push notification delivery via Expo's push service.

PostHog: product analytics, event measurement, screen analytics, app lifecycle analytics, and error event capture so we can understand and improve the Service.

Each provider operates under its own privacy practices. Their handling of information is described in their respective privacy notices.

We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising.

We share information in the following circumstances:

With service providers, as described above, who help us operate, secure, support, and improve the Service.

With other users, through community and sharing features. For example, your username, avatar, profile cosmetics, and learning achievements may appear in your public profile, the activity feed, leaderboards, multiplayer sessions, follow lists, and shareable activity links. You can change your default activity visibility between public and private in the app's Privacy Settings, and you can choose what to share through follow requests and multiplayer invites.

With Apple and Google, in connection with App Store and Google Play purchases, sign-in, and platform compliance.

For legal reasons, including to comply with applicable laws, lawful requests from authorities, court orders, or legal process; to enforce our Terms; to protect the rights, property, or safety of BibliXP, our users, or others; and to detect, prevent, or address fraud, security, or technical issues.

In a business transfer, if BibliXP is involved in a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, in which case information may be transferred as part of that transaction. We will continue to protect your information as described in this Policy or notify you if a different policy will apply.

With your direction or consent, in any other case where you ask us to share information.

BibliXP is operated from the United States, and our service providers may process information in the United States and other countries. If you access the Service from outside the United States, you understand that your information may be transferred to, stored in, and processed in countries that may have data-protection laws different from those in your country. Where required, we rely on appropriate transfer mechanisms, such as the European Commission's Standard Contractual Clauses or comparable safeguards.

We keep personal information for as long as needed to provide the Service, maintain your account, support your subscription, satisfy legal and tax obligations, resolve disputes, enforce our Terms, prevent abuse, and maintain backups.

When you delete your account through the app, we delete or de-identify your account and associated personal information within a reasonable period, except where we need to retain limited records to comply with legal obligations (for example, tax or financial records related to past purchases), to resolve disputes, to enforce our agreements, or to maintain security. Backups are overwritten on our standard backup cycle. Anonymized or aggregated data that no longer identifies you may be retained.

Information stored locally on your device, such as Bible notes, highlights, bookmarks, and cached lessons, is removed when you uninstall the app or clear app data, subject to your device's behavior.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, segregated environments, and protected secrets management. No security program is perfect, and we cannot guarantee that the Service or its providers will be free of unauthorized access, hardware or software failures, or other factors that could compromise security. You are responsible for choosing a strong password where applicable, keeping your sign-in credentials secure, and protecting the device you use to access the Service.

If we learn of a security incident that legally requires notice, we will notify affected users and authorities as required by applicable law.

Depending on where you live, you may have the right to: (a) confirm whether we process personal information about you and request access to it; (b) request correction of inaccurate or incomplete personal information; (c) request deletion of your personal information; (d) request a copy of your personal information in a portable format; (e) request that we restrict or object to certain processing; (f) withdraw consent where processing is based on consent; (g) opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising (we do not engage in either); and (h) appeal a decision we make about your privacy request.

You can manage many of these directly in the app: edit your profile, change your default activity visibility, follow or unfollow other users, manage your notification preferences, restore or cancel your subscription through the App Store or Google Play, and delete your account from within the app's account settings.

To submit a privacy request that you cannot complete in the app, contact us at [contact@biblixp.com]. We may need to verify your identity before fulfilling the request, and we will respond within the time required by applicable law. We will not discriminate against you for exercising a privacy right.

You can manage push-notification permissions in your device's system settings at any time.

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, or another U.S. state with a comprehensive privacy law, you may have the rights described in Section 11. The categories of personal information we collect are described in Section 3, the purposes for which we use them are described in Section 4, the categories of recipients are described in Sections 6 and 7, and our retention practices are described in Section 9.

We do not knowingly process "sensitive personal information" beyond what is needed to authenticate you (for example, account credentials), and we do not use it to infer characteristics about you. We do not "sell" personal information for money, and we do not "share" personal information for cross-context behavioral advertising as those terms are defined under California law.

California residents may designate an authorized agent to make a request on their behalf, subject to verification.

As stated in Section 2, BibliXP is intended for users 16 and older. We do not knowingly collect personal information from anyone under 16 and we do not direct the Service to children. If we learn that we have collected personal information from a user under 16 without appropriate consent, we will delete that information and terminate the account. Parents, guardians, schools, and ministries may contact us at [contact@biblixp.com] with questions or concerns.

The Service may link to or be made available through third-party websites and platforms, including the Apple App Store and Google Play. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. Please review their privacy notices.

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as updating this page, sending an in-app notice, or emailing the address on your account. The "Last updated" date above shows when the Policy was most recently changed. Your continued use of the Service after the changes take effect means you accept the updated Policy.

For privacy questions or to exercise a privacy right, contact us at [contact@biblixp.com], or by mail at [BIBLIXP, INC.], [BIBLIXP MAILING ADDRESS]. For general support, you can also reach us at [contact@biblixp.com].