Privacy Policy

1What we collect and why

Before you sign in, nothing leaves your device. Your progress, streaks, custom groups, journal notes and preferences are stored locally.

When you use these features, we collect:

Verse-journal notes, voice recordings from recall, and images stay on your device — they are never uploaded.

Our legal bases (GDPR Art. 6) are: performance of our contract with you for your account, sign-in, cloud sync and purchases; your consent for the optional friends, challenges and push-notification features, which you may withdraw at any time by turning the feature off; our legitimate interest in a stable, secure app for crash reporting and abuse prevention, which you can object to via the crash-report toggle; and verifiable parental consent (Art. 8) for everything in Classroom Mode.

Your data is yours alone. Every synced record is owner-only, enforced in the database. Progress sharing, friend requests and notifications are switches you control, and there is no public profile or feed. Your email is never searchable — only the friend code you hand out.

Crash reports are stripped of your user id, device id, device name, cookies and headers before they leave the device, and never contain your email, name, or anything you typed or dictated. You can turn them off entirely in Account → Send crash reports.

Purchases are processed by the App Store or Google Play; we never see your card. Subscription status is checked through RevenueCat under an anonymous id — your account id, email and username are never sent to it.

2What we don't collect

• No analytics SDK of any kind.
• No advertising identifiers (IDFA / GAID).
• No location data.
• No microphone or camera recordings sent off-device.
• No contact-list access.
• No sale or sharing of personal data, and nothing is used to train AI models.

3Children's data (COPPA + GDPR-K)

Classroom Mode is the only feature designed for minors, and a child cannot join a class without verifiable parental consent.

What it collects about a child: a first name and age band (under 8 / 8–10 / 11–13 / 14+), both entered by the parent during consent, plus weekly aggregates of practice — sessions this week, highest stage cleared, mastered yes/no, and a last-practiced timestamp. The teacher's dashboard shows this and nothing more.

What it never collects: last name or full name, the child's email address, date of birth, photos or biometrics, phone number, address, location, per-verse answers or transcripts, or any third-party analytics.

The parent's email is hashed on the device before any network call — we store only the hash, used solely to match a consent and honor a revocation. We never send marketing email to parents or children.

Revoking consent. A parent can revoke at any time in the app (Profile → Account → Delete account) or by emailing privacy@verseninja.app; we honor revocations within 30 days by either route. Revoking immediately deletes the child's practice records and removes them from the class.

Schools and churches may consent on parents' behalf under COPPA's school-authorization provision; the teacher's account holder is our point of contact for that authorization.

4How long we keep data

• While you use the app: for as long as your account exists.
• After you sign out: both the local and cloud copies remain, so you can sign back in.
• After you delete your account: local data is wiped immediately and cloud data within seconds. Backups containing it are purged within 30 days.

5Your rights and how to exercise them

• Access and portability — Profile → Account → Export my data downloads every record we hold, as JSON.
• Deletion — Profile → Account → Delete account.
• Objection and restriction — signing out keeps your data in the cloud; choose Delete account to remove it.
• Withdrawing consent — turn off any optional feature (friends, push notifications, crash reports) at any time. Withdrawal does not affect processing carried out before it.
• Complaint — your country's data protection authority (EU/UK) or California's Attorney General.

You can also exercise any of these by emailing privacy@verseninja.app; we respond within 30 days.

6Where the data sits, and who else touches it

Your data is hosted in EU-Central (Frankfurt), backups included. These are every third party that processes it:

There are no others — no advertising network, data broker, or analytics vendor.

Transfers outside the EEA and UK. Sentry, RevenueCat and the Expo Push Service process data in the United States. Those transfers are covered by the European Commission's Standard Contractual Clauses, or by the processor's certification under the EU–US Data Privacy Framework where it holds one. Email privacy@verseninja.app for a copy of the safeguards that apply to your data.

7Changes to this policy

We'll update the Last updated date above and call out material changes in the app's release notes.