Effective Date: September 1, 2026 · Last Updated: September 21, 2026
Kreyman Enterprises LLC ("VerseMine," "we," "us," or "our") operates the VerseMine mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data.
We are committed to transparency, particularly around how third-party AI services process your content. Please read this policy carefully.
When you create an account, we collect:
You may choose to provide additional profile information. All of the following are optional and can be removed at any time:
When you use the App, you may create the following content:
We collect usage data through PostHog (see Section 4) to understand how the App is used and to improve the experience. This data is linked to your account identifier (an internal ID, not your name or email) so that we can see how a single user moves through the App over time. It includes:
Mitigations we apply: we have disabled PostHog's IP-based location lookup, we do not record your screen (no session replay), we do not automatically capture taps or text (no autocapture), and sensitive areas of the App — the AI Counselor and its search — send only counts and timings, never message content. We do not collect your Advertising Identifier (IDFA) and do not engage in cross-app tracking.
The App includes crash reporting through Sentry (see Section 4). It is not active in current builds. If we enable it, crash reports may include:
We will not send your email address to Sentry, and we take measures to exclude personal content (reflections, photos, recordings, or counseling text) from crash reports.
If you subscribe to VerseMine, we use RevenueCat (see Section 4) to manage your subscription. RevenueCat receives your account identifier and device identifiers, and we receive from it:
We do not receive or store your payment card details, billing address, or financial account information. All individual payment processing is handled by Apple (App Store) or Google (Google Play). Church and group plans are billed through Stripe (see Section 4).
If you enable push notifications, we store a device token issued through Expo's push service, which delivers notifications through Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM). Notification content passes through Expo's servers but is not stored there; delivery receipts are deleted after 24 hours. A notification can include the name of the person who acted (for example, who commented on your reflection) and a short excerpt of their comment. You can disable notifications at any time through your device settings.
If you enable VerseMine's Focus feature — which restricts access to apps you select until you complete your daily Bible study — we collect the following:
We use Family Controls data solely to provide the Focus feature on your own device. We do not use it for advertising, analytics, or any other purpose. The Focus feature is optional. You can revoke Screen Time authorization at any time through iOS Settings > Screen Time, or disable focus sessions in VerseMine Settings > Focus.
If you choose to add an accountability partner, we share limited focus session metadata with that partner through in-app notifications:
These notifications contain no information about which apps you use, how long you use them, or what you do within those apps. The partner sees only that a focus session was disabled or that today's reading was missed — the same information you would share by saying "I missed today" out loud.
Accountability sharing is off by default. You must explicitly choose a partner in Settings > Accountability to opt in. You can remove your partner at any time, which immediately stops all sharing.
When you use an AI Counselor feature (including voice), our servers read the IP address of your request and look it up against a geolocation database running on our own servers to determine your country and state. We use this only to decide whether the feature is available where you are (the AI Counselor is US-only at launch) and to apply state-specific protections. The lookup result is not sent to any third party and is not stored.
We use the information we collect for the following purposes:
We do not use your information for third-party advertising, cross-app ad targeting, or selling to data brokers, and we do not share your email with third parties for their own marketing. As used above, "marketing" means only our own first-party communications about VerseMine, which you can opt out of as described above. Your email is shared with service providers only where they need it to do their job for us (Section 4).
VerseMine uses third-party AI services to provide core features. This section names each provider, describes what data is sent, explains why, and states each provider's data retention policy. Per Apple Guideline 5.1.2(i), we disclose each provider that processes your data.
Our own servers. AI Counselor requests are handled on servers VerseMine operates at a US cloud host, alongside the Supabase database (Section 4). While a request is being handled, those servers hold the message you sent, the recent part of the conversation your device sent with it, your account identifier, age status, and church identifier — for as long as it takes to produce the reply. We do not keep the text of your conversations after that; Section 3.8 lists the counseling records we do keep. Nothing is shared from these servers except to the providers named in this section.
Transcription. Short dictation is transcribed on your device using a local Whisper model, and that audio never leaves your device. The model itself is downloaded from Hugging Face (huggingface.co) the first time you use dictation, so your device's IP address reaches Hugging Face; no audio or text is sent there. Longer counseling recordings from AI Pro subscribers are sent to OpenAI for transcription after you consent in the App. The audio is not stored by us or by OpenAI; the resulting text transcript is returned to your device and is not saved on our servers, so it does not sync to your other devices. In opt-in group counseling sessions, raw session audio is kept for about 30 days and then purged.
Read-aloud. Read-aloud runs when you turn on a voice option in the App and is subject to the same age and region gate as the AI Counselor. Counselor replies are spoken either by your device's built-in voice (nothing leaves your device) or, for premium voices, by a speech server VerseMine operates, which receives the reply text transiently and does not store it. Two third-party voice providers are also built in and may be used for premium voices if enabled: OpenAI (Section 3.3) and ElevenLabs, Inc. ElevenLabs, if enabled, would receive the reply text only, no identifier; its retention is governed by its own terms. We will update this section before ElevenLabs is turned on.
You control the optional AI features that process your data:
The App provides a search feature over your own AI-counselor (Counsel) conversation history. This lets you find past conversations by searching the full text of your own messages and your conversation titles. It searches both the copy of your conversations stored on your device and any conversation records held on our servers, so the words you type into the search box are sent to our servers to run the second half of it. Because we do not store your conversation text (Section 3.8), that half currently returns nothing — but the search words are sent all the same, and this search does not run only on your device.
We designed VerseMine to minimize who and what can see your conversations: we don't sell your data, we don't share it with advertisers, and we don't use third-party ad trackers in the app. Counseling text in every mode except discipleship is anonymized while our anonymization safeguard is on (it is on at launch): names and places we detect are replaced with placeholders before the request that produces the reply. If we ever turn it off, we will update this policy first. Your original words still go to the safety checks that watch for crisis and abuse, and discipleship conversations are sent as written. Our AI provider processes all of it under a contract that prohibits using your content to train its models, and never receives your account identifier. But we want to be straight with you about the limits. We do not keep the text of your AI Counselor conversations on our servers — not in one-to-one sessions and not in group sessions. Your conversations are stored on your device, and deleting them in the App removes them from it. Each message you send — together with a recent part of the conversation, so the counselor can follow it — is sent to us and on to our AI provider only for as long as it takes to produce the reply. That does not make the conversation private to your device: our AI provider keeps inputs and outputs for the limited period described in Section 3.1, and if your device backs itself up to iCloud or Google, a backup may hold a copy under Apple's or Google's terms. On iPhone, newer versions of the App ask iOS to leave the conversation store out of iCloud Backup; that is a request to the system, not a guarantee, and earlier versions did not make it. Keeping the text off our servers also means we cannot recover a conversation for you if you lose your device. If we ever begin storing conversation text ourselves, we will update this policy before we do.
What we do keep about counseling. These records live on our servers, and like records held by any company they can be reached by valid legal process:
Our staff can access the records we do keep — group-session audio for about 30 days, session records, and safety records — but not the text of your conversations, because we do not have it. So if we receive a subpoena or court order: we do not keep the text of your conversations, so we have no transcripts to hand over; the records listed above can be reached by legal process, and our AI provider and your device backup may hold copies under their own terms. VerseMine is not a church, pastor, or healthcare provider, and conversations with the AI assistant are not protected by clergy-penitent, therapist, or attorney privilege. Please weigh that before sharing details you would only tell a person bound by those protections.
Not therapy. VerseMine offers spiritual guidance rooted in Scripture. It is not therapy, counseling, or medical or mental-health care, and it can't diagnose or treat any condition. If you're in crisis or thinking about harming yourself, call or text 988 (the U.S. Suicide & Crisis Lifeline) — a real person is available 24/7. Nothing here replaces a conversation with your own pastor — what you share with a pastor in person has legal protections that conversations with an app do not.
In addition to the AI providers listed above, we use the following third-party services to operate the App:
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Supabase, Inc. | Database, user authentication, and file storage | Account data, profile data, user content, uploaded photos, and the counseling records in Section 3.8 — group-session records, raw group-session audio, and content-free safety records. Not the text of your counseling conversations; we do not store that. | United States |
| VerseMine's own servers | AI Counselor processing and premium read-aloud voices | The message being answered and the recent part of the conversation sent with it, account identifier, age status, church identifier — held only while the request is being handled, not kept as a conversation history. Operated by us at a US cloud host. Shared onward only to the providers in Section 3. | United States |
| PostHog, Inc. | Product analytics | Usage data linked to your account identifier (Section 1.4). No IDFA. No cross-app tracking. Location lookup disabled. | United States |
| Sentry (Functional Software, Inc.) | Error and crash reporting (not active in current builds) | If enabled: crash logs, device info, app performance data, account identifier. We take measures to exclude personal content. | United States |
| Resend, Inc. | Transactional and marketing email delivery | Your email address and the content of emails we send you (welcome, announcements, account messages). If you have enabled pastoral care, also an email to your pastor naming you when the AI Counselor detects that you may be in serious distress. If you use pastoral outreach, when available, an email and push notification to your pastor or care team naming you and your church. | United States |
| RevenueCat, Inc. | Subscription management (individual subscriptions) | Account identifier, device identifiers, subscription status, purchase timestamps, plan type. No payment card data. | United States |
| Stripe, Inc. | Group/church plan checkout and billing | Your email address, your church's name, and subscription and transaction identifiers. No payment card data reaches us. Stripe also acts as an independent controller of the data it collects for its own fraud prevention, under its own privacy policy. | United States |
| Expo (650 Industries, Inc.) | Push notification delivery | Device push token; notification content in transit (not stored); delivery receipts deleted after 24 hours. | United States |
| Apple Inc. | In-app purchases (App Store), push notifications (APNs) | Purchase transactions, push notification tokens | United States |
| Google LLC | In-app purchases (Google Play), push notifications (FCM) | Purchase transactions, push notification tokens | United States |
| Klipy and Tenor (Google LLC) | GIF search and display in comments | Search: your search text is sent from our servers without your identity. Display: when a GIF is shown, the viewer's IP address reaches Klipy's or Tenor's image servers. Klipy may use search terms for advertising under its own policy; we do not have a data processing agreement with it. | United States |
| Voyage AI (a MongoDB company) | AI Counselor theology retrieval (text embeddings) | De-identified topical query (internal framework vocabulary). No message content or personal information. | United States |
Scripture text is fetched from ESV, API.Bible, and bible-api.com servers by passage reference only; no user data is sent to them.
Each of these providers processes data on our behalf and is bound by their respective terms of service and privacy policies, except where noted above.
We do not use your data to train, fine-tune, or improve any artificial intelligence or machine learning models, and we contractually require our AI processors not to train their models on your content (see provider-specific terms below).
We require each AI provider listed in Section 3 not to use your data for model training. Specifically:
This disclosure is made in compliance with Connecticut Senate Bill 1295 and to provide you with clear information about how your data is handled.
VerseMine uses AI to provide educational study feedback on your Bible highlighting. This feedback is informational and educational in nature. It does not constitute a consequential decision as defined under applicable law (e.g., it is not used for employment, housing, insurance, credit, or similar decisions).
Specifically:
We do not sell your personal information. We do not share your personal information with third parties for their own marketing purposes.
We share your data only with the service providers named in Sections 3 and 4 of this policy, and only to the extent necessary to provide the App's functionality. Each provider acts as a data processor on our behalf, except Stripe (an independent controller for its own fraud prevention) and Klipy and Tenor (which see the search terms and viewer IP addresses described in Section 4 under their own policies).
One case is outside our control: when a post contains a link, the App loads that page's preview image directly from the linked site, so the site's owner can see the IP address of every viewer of that post. Which sites those are depends entirely on what people link to.
If you have explicitly opted into the Accountability Partner feature (Section 1.9), we share limited focus session metadata with the partner you have chosen. If you have enabled pastoral care, we may notify your pastor as described in Sections 2 and 4; if you use pastoral outreach, when available, we send your message to the pastor or care team you chose, naming you and your church. All of these are consent-based, opt-in, and can be revoked at any time in Settings.
We may also disclose your information if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of VerseMine, our users, or others.
| Data Type | Retention Period |
|---|---|
| Account data (email, display name, username, date of birth) | Retained while your account is active. Deleted when you delete your account. |
| Profile data (bio, city, church, Instagram handle, profile photo) | Retained while your account is active. Deleted when you delete your account. |
| User content (reflections, comments, photos, recordings) | Retained while your account is active. Deleted when you delete your account. |
| AI-generated results (feedback text, annotated images, transcriptions) | Retained while your account is active, even if you later withdraw AI consent. Deleted when you delete your account. |
| Counseling conversations & messages | Not retained on our servers. Conversations are kept on your device until you delete them in the App or remove the App and its data; our AI provider keeps inputs and outputs for the limited period described in Section 3.1. If we ever begin storing conversations ourselves, we will update this policy first. |
| Counseling profile notes & faith-growth recaps | Not generated unless counseling memory is enabled for your account, which it is not in the current release. If it is enabled, these are derived from your conversations and stored on our servers, and are deleted when you opt out of counseling memory or delete your account. |
| Counseling session records and safety records (Section 3.8) | Group-session records — that a session happened, when, and participants' chosen display names — and content-free safety records are retained while your account is active. A conversation with no activity for 365 days is deleted automatically, and its session record goes with it. All are deleted when you delete your account. They contain no message text. |
| Raw counseling session audio (group counseling, opt-in) | Auto-purged after approximately 30 days. |
| Read-aloud audio | Device and VerseMine-server voices: not stored. OpenAI/ElevenLabs premium voices, if enabled: clips cached privately to your account for up to 30 days, purged on consent withdrawal. |
| Usage data (PostHog analytics) | Retained for up to 24 months, then automatically deleted. |
| Crash data (Sentry, if enabled) | Retained for up to 90 days, then automatically deleted. |
| Purchase data (RevenueCat, Stripe) | Retained in accordance with each provider's data retention policy and applicable tax/legal requirements. |
| Push notification tokens | Retained while you are signed in. Deleted when you sign out or delete your account. Disabling notifications in your device settings stops delivery. |
| Screen Time / Focus session data | Focus settings and session timestamps are retained while your account is active and deleted with your account. Disabling Focus stops collection. |
| Accountability partner relationships | Sharing stops immediately when either user removes the relationship; the disabled record is retained until account deletion. |
| IP address / location lookup | Not stored. Used only for the duration of the request (Section 1.10). |
When you delete your account, we delete all personal data associated with your account from our systems, including the counseling session records and safety records in Section 3.8. Deleting your account does not reach the copy of your conversations stored on your device, or any copy in an iCloud or Google device backup — to clear those, delete your conversations in the App, or remove the App and its data. Data that has already been transmitted to third-party AI providers is subject to those providers' retention policies as described in Section 3.
We implement reasonable technical and organizational measures to protect your personal data, including:
No method of electronic storage or transmission is 100% secure. While we strive to use commercially reasonable means to protect your data, we cannot guarantee absolute security.
Depending on your location, you may have the following rights regarding your personal data:
Under the General Data Protection Regulation (GDPR) and equivalent laws, you also have the right to:
Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, you have the right to:
Under the Connecticut Data Privacy Act and SB 1295, you have the right to:
To exercise any of these rights, contact us at:
We will respond to verified requests within 30 days (or the timeframe required by applicable law). We may ask you to verify your identity before processing your request.
VerseMine is intended for users aged 13 and older. We comply with the Children's Online Privacy Protection Act (COPPA).
The AI Counselor (a special category of counseling features) is available only to US users at launch and is subject to additional age safeguards: a fail-closed age gate denies access to the counselor when age cannot be verified, and minors receive additional crisis safeguards.
VerseMine is based in the United States. All data processing occurs in the United States through US-based service providers (Supabase, our own cloud servers, PostHog, Sentry, Resend, RevenueCat, Stripe, Expo, Klipy, Tenor) and cloud AI providers (Google, OpenAI, Anthropic, Voyage AI, and ElevenLabs if enabled). Short dictation is transcribed on your device, but longer counseling recordings may be transcribed by OpenAI in the United States. The AI Counselor is available only to US users at launch.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your data is transferred to the United States. We rely on the following safeguards for these transfers:
By using the App, you acknowledge that your data will be processed in the United States, which may have different data protection laws than your country of residence.
We may update this Privacy Policy from time to time. When we make material changes, we will:
Your continued use of the App after an updated policy takes effect constitutes your acceptance of the changes, except where renewed consent is required by law.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:
Kreyman Enterprises LLC ("VerseMine," "we," "us," or "our")
Website: https://versemine.app
Privacy Policy: https://versemine.app/privacy