1. Who is responsible for your data
The Berean Bible study app is operated by Stetson Troy Pollard, an individual sole operator (“Berean”, “we”). For the personal data described in this notice, we act as the data controller. You can reach us at support@bereanapp.org.
2. What we collect and why
| Category | Purpose | Legal basis |
|---|---|---|
| Anonymous usage statistics (random visitor ID, pages viewed, sign-up and feature steps, first-visit source, device type) | Understand which parts of Berean help people and improve the app | Legitimate interests |
| Account data (email, password hash, sign-in provider) | Create and secure your account; sign you in | Performance of contract |
| Profile data (display name, preferences, reading settings) | Provide the Service the way you have configured it | Performance of contract |
| Study content you create (chat threads, notes, highlights, bookmarks, reading-plan progress) | Save your work and make it available across devices | Performance of contract |
| AI prompts and responses | Generate study answers; enforce usage limits; investigate abuse | Performance of contract; legitimate interests |
| Subscription & billing metadata (plan, status, renewal dates) | Give you access to the plan you paid for | Performance of contract |
| Device, browser, and IP address; basic usage telemetry | Security, fraud prevention, debugging, product improvement | Legitimate interests |
| Support correspondence | Reply to your questions | Legitimate interests |
We do not knowingly collect sensitive personal data and we do not sell your personal data.
3. Payment data
We do not collect or store your full card number, CVV, or bank account details. Payments are processed by Paddle.com Market Limited, which acts as our Merchant of Record. Paddle collects the information needed to take payment, calculate tax, and issue invoices, under its own privacy policy.
4. Who we share data with (subprocessors)
- Lovable Cloud — application hosting, database, authentication, and file storage that runs the Service.
- Lovable AI Gateway — secure routing of AI requests to underlying large-language-model providers used to power the AI study companion.
- Paddle.com Market Limited — Merchant of Record for payments, subscription management, tax compliance, and invoicing.
- Professional advisers (legal, accounting) and authorities where required by law.
Each provider only processes the data necessary for its function and is bound by confidentiality and data-protection obligations.
5. International transfers
Our providers may process personal data in countries outside your country of residence, including the United States and the European Economic Area. Where required by law, transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
6. How long we keep data
We keep account, study, and subscription data for as long as your account is active and for a reasonable period afterwards to handle billing, support, and legal obligations (typically up to 24 months). Operational logs and security telemetry are kept for a short period (typically up to 90 days). You can ask us to delete your account and associated data at any time.
7. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data (“right to be forgotten”);
- restrict or object to certain processing;
- port your data to another service;
- withdraw consent where processing is based on consent;
- complain to your local data-protection authority.
To exercise any of these rights, email support@bereanapp.org. We respond within one month.
8. Security
We use industry-standard technical and organisational measures to protect your data, including encryption in transit (HTTPS/TLS), encryption at rest by our hosting provider, role-based access controls, row-level security on our database, and verified payment-provider webhooks. No system is perfectly secure; if a breach occurs that affects you, we will notify you as required by law.
9. Cookies and similar technologies
We use only the cookies and local-storage entries necessary to keep you signed in, remember your reading preferences, and run the app as a Progressive Web App. We do not use third-party advertising or cross-site tracking cookies. Paddle’s checkout may set its own cookies to process your payment, as described in Paddle’s privacy policy.
Anonymous usage statistics. To learn which parts of Berean are helpful, we store a random visitor ID in your browser and record the pages you view and a few steps such as starting sign-up, asking the AI or playing audio, plus where your first visit came from (for example “Google”) and your device type (phone, tablet or computer). We don’t record your IP address and don’t share this data with anyone; if you sign in, your visits are linked to your account so we can count sign-ups. Only Berean’s administrators see this, and only as totals. We skip this entirely if your browser sends Do Not Track or Global Privacy Control.
10. Children
The Service is not directed at children under 13 (or the equivalent minimum age in your country). If you believe a child has provided us with personal data, contact us and we will delete it.
11. Changes to this notice
We may update this notice from time to time. The “Last updated” date at the top reflects the most recent version. Material changes will be communicated in-app or by email.