Skip to content

Privacy Policy

Effective Date: September 1, 2026 · Last Updated: September 21, 2026

Kreyman Enterprises LLC ("VerseMine," "we," "us," or "our") operates the VerseMine mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data.

We are committed to transparency, particularly around how third-party AI services process your content. Please read this policy carefully.

1. Information We Collect

1.1 Account Data

When you create an account, we collect:

  • Email address — used for authentication, account recovery, and service communications. We may in future send a welcome email or occasional product announcements about VerseMine (see Section 2).
  • Display name — visible to other users in community features.
  • Username — your unique identifier within the App.
  • Date of birth — used for age verification under COPPA (Children's Online Privacy Protection Act) and to apply age-based safeguards: state-specific protections for minors, suppression of certain notifications for minors, and the AI Counselor's age gate and minor-specific safety responses. Stored as a date; not displayed publicly.

1.2 Profile Data (Optional)

You may choose to provide additional profile information. All of the following are optional and can be removed at any time:

  • Bio
  • City
  • Church
  • Instagram handle
  • Profile photo (avatar)

1.3 User Content

When you use the App, you may create the following content:

  • Text reflections and comments — your written responses to daily Bible passages, and images you attach to them.
  • Photos of Bible pages — images you photograph and submit for AI-powered study feedback.
  • Voice recordings — audio reflections and counseling recordings you record. Short dictation is transcribed on your device using a local Whisper model and the audio never leaves your device. Longer counseling recordings for AI Pro subscribers are transcribed by a third-party service (OpenAI) after you consent, and the resulting transcript is returned to your device rather than kept on our servers. See Section 3.
  • AI Counselor conversations — the messages you exchange with the AI Counselor. We do not keep these on our servers. They are stored on your own device, and deleting them in the App removes them from it. They are not private to your device, though: each time you send a message, that message and a recent part of the conversation are sent to us and on to our AI provider to produce the reply — see Section 3.1 for what that provider does with it and how long it keeps it. On iPhone, newer versions of the App ask iOS to leave the conversation store out of iCloud Backup; that is a request to the system, not a guarantee, and earlier versions did not make it. A device backup — iCloud or Google — may still hold a copy under Apple's or Google's terms rather than ours. Section 3.8 lists the counseling records we do keep on our servers.
  • Group content — if you join or lead a church group, the group's name and any study materials or devotionals you post to it.

1.4 Usage Data

We collect usage data through PostHog (see Section 4) to understand how the App is used and to improve the experience. This data is linked to your account identifier (an internal ID, not your name or email) so that we can see how a single user moves through the App over time. It includes:

  • Device type, operating system, and app version
  • Screens visited, features used, and session duration
  • Subscription tier and, if you have joined one, your church group identifier
  • In some social features, the identifier of the other user you interacted with (for example, whose reflection you reacted to)

Mitigations we apply: we have disabled PostHog's IP-based location lookup, we do not record your screen (no session replay), we do not automatically capture taps or text (no autocapture), and sensitive areas of the App — the AI Counselor and its search — send only counts and timings, never message content. We do not collect your Advertising Identifier (IDFA) and do not engage in cross-app tracking.

1.5 Crash and Performance Data

The App includes crash reporting through Sentry (see Section 4). It is not active in current builds. If we enable it, crash reports may include:

  • Device type and operating system version
  • App state at the time of a crash
  • Stack traces and error messages
  • A user identifier (your account ID) so we can correlate a crash to your account

We will not send your email address to Sentry, and we take measures to exclude personal content (reflections, photos, recordings, or counseling text) from crash reports.

1.6 Purchase Data

If you subscribe to VerseMine, we use RevenueCat (see Section 4) to manage your subscription. RevenueCat receives your account identifier and device identifiers, and we receive from it:

  • Subscription status (active, expired, trial)
  • Purchase timestamps
  • Subscription plan type

We do not receive or store your payment card details, billing address, or financial account information. All individual payment processing is handled by Apple (App Store) or Google (Google Play). Church and group plans are billed through Stripe (see Section 4).

1.7 Push Notifications

If you enable push notifications, we store a device token issued through Expo's push service, which delivers notifications through Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM). Notification content passes through Expo's servers but is not stored there; delivery receipts are deleted after 24 hours. A notification can include the name of the person who acted (for example, who commented on your reflection) and a short excerpt of their comment. You can disable notifications at any time through your device settings.

1.8 Screen Time / Focus Session Data

If you enable VerseMine's Focus feature — which restricts access to apps you select until you complete your daily Bible study — we collect the following:

  • Family Controls authorization status — whether you have granted VerseMine permission to use Apple's Screen Time / Family Controls APIs. Stored locally on your device.
  • Selected app tokens — opaque, encrypted identifiers representing the apps and categories you have chosen to restrict. By Apple's design, these tokens cannot be decoded into app names by VerseMine or our servers. The actual app restriction is enforced on-device by iOS, not by us.
  • Focus session events — timestamps for when you start and end focus sessions, and whether you completed your daily Bible study task. We do not collect or transmit data about which apps you use outside of VerseMine, how long you use them, or what you do within them.
  • Schedule preferences — your chosen focus session schedule (e.g., morning blocking, all-day blocking).

We use Family Controls data solely to provide the Focus feature on your own device. We do not use it for advertising, analytics, or any other purpose. The Focus feature is optional. You can revoke Screen Time authorization at any time through iOS Settings > Screen Time, or disable focus sessions in VerseMine Settings > Focus.

1.9 Accountability Partner Data

If you choose to add an accountability partner, we share limited focus session metadata with that partner through in-app notifications:

  • The partner is notified if you disable a focus session before completing your daily Bible study.
  • The partner is notified if you do not complete your daily Bible study by the end of the day.

These notifications contain no information about which apps you use, how long you use them, or what you do within those apps. The partner sees only that a focus session was disabled or that today's reading was missed — the same information you would share by saying "I missed today" out loud.

Accountability sharing is off by default. You must explicitly choose a partner in Settings > Accountability to opt in. You can remove your partner at any time, which immediately stops all sharing.

1.10 IP Address and Approximate Location

When you use an AI Counselor feature (including voice), our servers read the IP address of your request and look it up against a geolocation database running on our own servers to determine your country and state. We use this only to decide whether the feature is available where you are (the AI Counselor is US-only at launch) and to apply state-specific protections. The lookup result is not sent to any third party and is not stored.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Providing the service — delivering daily Bible passages, processing your submissions, generating AI-powered study feedback, running the AI Counselor, transcribing voice recordings, and displaying your reflections.
  • Community safety — scanning user-generated text and images for content that violates our Community Guidelines (see Section 3.3 for the full scope).
  • Account management — authenticating your identity, managing your subscription, and communicating with you about your account.
  • Age verification and eligibility — verifying that you meet the minimum age requirement (13 years) as required by COPPA, applying age-based safeguards, and confirming that AI features are available in your location (Section 1.10).
  • App improvement — analyzing usage data to improve features, fix bugs, and understand usage patterns.
  • Notifications — sending push notifications you have opted into (e.g., daily reminders, friend activity).
  • Focus and productivity — enforcing the focus sessions you have configured (restricting access to apps you have selected on your own device) and, if you have explicitly enabled accountability sharing, notifying your chosen accountability partner of focus session events as described in Section 1.9.
  • Pastoral care (opt-in) — if you enable pastoral care and connect to your church, letting your pastor know when the AI Counselor detects that you may be in serious distress (see Section 4, Resend).
  • Product announcements — we may send you a welcome email or occasional announcements about VerseMine features and updates. These are first-party messages about our own app, sent by us (through our email provider, Resend). We do not send them today; if we start, we will provide an opt-out, and you can ask us to stop at any time by emailing privacy@versemine.app. You will still receive essential account and transactional messages.

We do not use your information for third-party advertising, cross-app ad targeting, or selling to data brokers, and we do not share your email with third parties for their own marketing. As used above, "marketing" means only our own first-party communications about VerseMine, which you can opt out of as described above. Your email is shared with service providers only where they need it to do their job for us (Section 4).

3. Third-Party AI Services

VerseMine uses third-party AI services to provide core features. This section names each provider, describes what data is sent, explains why, and states each provider's data retention policy. Per Apple Guideline 5.1.2(i), we disclose each provider that processes your data.

Our own servers. AI Counselor requests are handled on servers VerseMine operates at a US cloud host, alongside the Supabase database (Section 4). While a request is being handled, those servers hold the message you sent, the recent part of the conversation your device sent with it, your account identifier, age status, and church identifier — for as long as it takes to produce the reply. We do not keep the text of your conversations after that; Section 3.8 lists the counseling records we do keep. Nothing is shared from these servers except to the providers named in this section.

3.1 Anthropic, PBC — AI Assistant

  • What data is sent: Your AI Counselor conversation text. Counseling text in every mode except discipleship is anonymized while our anonymization safeguard is on (it is on at launch): names and places we detect are replaced with placeholders before the request that produces the reply, and if that replacement fails, no reply request is made. If we ever turn the safeguard off, we will update this policy first. Your original words are always screened for crisis and abuse on every turn — some checks run on our own servers without any AI model, and others are sent to Anthropic — so that detection keeps working even with placeholders in place. Discipleship conversations are sent as written. We also send: your Bible-study questions and answers; your conversation text to generate a conversation title (only while the anonymization safeguard is off, so at launch no title request reaches Anthropic); your conversations to extract the counseling profile notes described in Section 8; your conversations plus an anonymized sample of your graded reflection text for the period to produce faith-growth recaps; and, when a subscriber asks the community fact-checker (by mentioning @AI in a comment), the comment that triggered it, the reflection it is on, and other comments in that thread — including other users' words. No user identifier is ever sent to Anthropic — it cannot tell which account a request belongs to.
  • Why: To generate counselor responses, faith-growth recaps, conversation titles, and Bible-study and fact-check answers, and to run crisis and safety classifiers that detect when you may need urgent help.
  • When: On each counseling or Bible-study Q&A turn; on the first exchange of a new conversation (titles, when applicable); after a conversation ends (notes, recaps); and when a subscriber in a comment thread mentions @AI. The AI Counselor is available only to US users at launch; the core Bible-study app is global.
  • Retention: Anthropic deletes inputs and outputs within 30 days, except that content flagged for a safety review may be kept for up to 2 years. A data processing agreement applies.
  • Model training: Anthropic does not use your content to train its models.

3.2 Google Gemini (Google LLC)

  • What data is sent: Photos of your Bible pages; the public portion of your reflections and comments for theology and guardrail analysis; your reflection text for historical-quote matching; the text of a post for translation; and the anonymized text of your counseling profile notes, which Google's embedding service turns into a numeric representation that we store for retrieval. If anonymization of those notes fails, nothing is sent.
  • Photos are sent whole. The photo you submit is sent uncropped and unredacted, at a quality chosen to keep handwriting and pencil marks legible, and it is sent to Google more than once per submission — to check that it is a Bible page, to grade it, and to an image-generation model that produces the annotated copy you see. Anything on the page — margin notes, bookmarks, a name written inside the cover — goes with it. Please avoid photographing pages that carry private notes.
  • Why: To analyze your highlighting work and generate study feedback and annotated images; to keep community posts within our theological guardrails; to surface related historical quotes; to translate posts; and to let the AI Counselor recall relevant notes.
  • When: Each time you submit a photo. Theology and guardrail analysis runs automatically whenever a public reflection or comment is created or edited and cannot be turned off. Quote matching runs on every reflection. Translation runs when you or another user taps Translate on your post. Only the public portion of a reflection is ever sent; private segments stay with us.
  • Retention: Google retains submitted data for up to 55 days for abuse monitoring and safety purposes, after which it is deleted. VerseMine uses the paid API tier, which provides enhanced data protections.
  • Model training: Google does not use data submitted through the paid API tier to train or improve its models.

3.3 OpenAI (OpenAI, LLC)

  • What data is sent: For content moderation: your reflections, comments, display name, username, bio, church name, group names, and group study materials, plus images — your profile photo and any image attached to a reflection or comment. For cloud transcription (AI Pro subscribers): the audio of longer counseling recordings. For read-aloud: the text of an AI Counselor reply, if OpenAI is the voice provider in use (see Section 3.5).
  • Why: To scan user-generated content for violations of our Community Guidelines and to maintain community safety (this moderation is part of our Terms of Service), to transcribe longer counseling recordings into text, and to read counselor replies aloud.
  • When: Moderation runs automatically when you post or edit any of the content listed above; it is always active for everyone who participates in community features and cannot be turned off, because it is necessary to enforce our Community Guidelines. Cloud transcription runs when an AI Pro subscriber records a longer counseling message after consenting in the App. Read-aloud runs only when you turn it on.
  • Retention: OpenAI's moderation and transcription endpoints retain nothing. Text sent for text-to-speech is retained for up to 30 days, then deleted.
  • Model training: OpenAI does not use data submitted through its API to train or improve its models.

3.4 Voyage AI (a MongoDB company) — Theology Retrieval

  • What data is sent: A de-identified topical query built from the App's internal theological framework vocabulary — a fixed set of phrases we wrote, not your words. This query contains no message content and no personal information — Voyage never receives your counseling conversations.
  • Why: To retrieve relevant theological reference material that helps ground the AI Counselor's responses in our theological framework.
  • When: Only when the AI Counselor's theology retrieval is enabled. Like the rest of the AI Counselor, this feature is available only to US users at launch and is consent-gated.
  • Retention: Voyage processes the query to return reference material; it does not receive, store, or process your conversations or personal information.
  • Model training: VerseMine has opted out of Voyage's use of its data for model training.

3.5 Voice: Transcription and Read-Aloud

Transcription. Short dictation is transcribed on your device using a local Whisper model, and that audio never leaves your device. The model itself is downloaded from Hugging Face (huggingface.co) the first time you use dictation, so your device's IP address reaches Hugging Face; no audio or text is sent there. Longer counseling recordings from AI Pro subscribers are sent to OpenAI for transcription after you consent in the App. The audio is not stored by us or by OpenAI; the resulting text transcript is returned to your device and is not saved on our servers, so it does not sync to your other devices. In opt-in group counseling sessions, raw session audio is kept for about 30 days and then purged.

Read-aloud. Read-aloud runs when you turn on a voice option in the App and is subject to the same age and region gate as the AI Counselor. Counselor replies are spoken either by your device's built-in voice (nothing leaves your device) or, for premium voices, by a speech server VerseMine operates, which receives the reply text transiently and does not store it. Two third-party voice providers are also built in and may be used for premium voices if enabled: OpenAI (Section 3.3) and ElevenLabs, Inc. ElevenLabs, if enabled, would receive the reply text only, no identifier; its retention is governed by its own terms. We will update this section before ElevenLabs is turned on.

3.6 Your Control Over AI Features

You control the optional AI features that process your data:

  • AI consent — before the App first sends your data to a cloud AI provider for an optional AI feature (content moderation is not optional and runs from sign-up — see Section 3.3), it presents a consent screen explaining which providers will process your data. You can withdraw that consent at any time in Settings; withdrawing disables the AI features that depend on it — study feedback, the AI Counselor, cloud transcription, and read-aloud — and stops those features from sending your data. You can keep using the App for Bible reading, text reflections, journaling, and on-device dictation.
  • AI Counselor — a separate, counseling-specific consent and provider disclosure is presented before your first counseling turn. The AI Counselor is available only to US users at launch.
  • Read-aloud — off by default; turn it on or off in the counselor's voice settings.
  • Content moderation and theology analysis — these run on every public post and cannot be disabled, because they are necessary to enforce our Community Guidelines and keep the community within its theological framework. This is disclosed during the consent process and in our Terms of Service.

3.7 Search Over Your Own Counsel Conversations

The App provides a search feature over your own AI-counselor (Counsel) conversation history. This lets you find past conversations by searching the full text of your own messages and your conversation titles. It searches both the copy of your conversations stored on your device and any conversation records held on our servers, so the words you type into the search box are sent to our servers to run the second half of it. Because we do not store your conversation text (Section 3.8), that half currently returns nothing — but the search words are sent all the same, and this search does not run only on your device.

  • Scoped strictly to you. Search results include only your own conversations. There is no cross-user access — you cannot search, and others cannot search, anyone else's conversations.
  • Crisis-affected content is excluded. Messages and conversations associated with a safety/crisis response are deliberately excluded from search and never appear in your search results.
  • Search queries are not logged with content. Your search words are sent to our servers to run the search, but we do not store the text of your search queries or the content of the results alongside them. We retain only a minimal record of search activity (a timestamp tied to your account) used solely to rate-limit and prevent abuse of the search feature — it contains no query text, message content, or conversation titles. Usage counts may flow to our analytics provider (see Section 4) without any query or conversation content.

3.8 How Private Are My Conversations?

We designed VerseMine to minimize who and what can see your conversations: we don't sell your data, we don't share it with advertisers, and we don't use third-party ad trackers in the app. Counseling text in every mode except discipleship is anonymized while our anonymization safeguard is on (it is on at launch): names and places we detect are replaced with placeholders before the request that produces the reply. If we ever turn it off, we will update this policy first. Your original words still go to the safety checks that watch for crisis and abuse, and discipleship conversations are sent as written. Our AI provider processes all of it under a contract that prohibits using your content to train its models, and never receives your account identifier. But we want to be straight with you about the limits. We do not keep the text of your AI Counselor conversations on our servers — not in one-to-one sessions and not in group sessions. Your conversations are stored on your device, and deleting them in the App removes them from it. Each message you send — together with a recent part of the conversation, so the counselor can follow it — is sent to us and on to our AI provider only for as long as it takes to produce the reply. That does not make the conversation private to your device: our AI provider keeps inputs and outputs for the limited period described in Section 3.1, and if your device backs itself up to iCloud or Google, a backup may hold a copy under Apple's or Google's terms. On iPhone, newer versions of the App ask iOS to leave the conversation store out of iCloud Backup; that is a request to the system, not a guarantee, and earlier versions did not make it. Keeping the text off our servers also means we cannot recover a conversation for you if you lose your device. If we ever begin storing conversation text ourselves, we will update this policy before we do.

What we do keep about counseling. These records live on our servers, and like records held by any company they can be reached by valid legal process:

  • Group session records — that a group counseling session happened, when it happened, and the display names participants chose for it. Not what was said.
  • Raw group-session audio — kept for about 30 days and then purged (Sections 3.5 and 8).
  • Content-free safety records — that a crisis resource was shown to you, the date, and the type of concern. These contain no message text.
  • Derived notes, recaps and shared snapshots, if those features are enabled — counseling memory (profile notes and faith-growth recaps) and conversation sharing are turned off for accounts in the current release. If they are enabled for your account, the derived note or recap is stored on our servers, and a conversation you choose to share is frozen into a shared snapshot on our servers that does contain the text of the shared turns. Deleting a conversation on your device does not by itself remove any of these.
  • A search timestamp — one per counsel search, used to rate-limit the feature. It holds no query text (Section 3.7).

Our staff can access the records we do keep — group-session audio for about 30 days, session records, and safety records — but not the text of your conversations, because we do not have it. So if we receive a subpoena or court order: we do not keep the text of your conversations, so we have no transcripts to hand over; the records listed above can be reached by legal process, and our AI provider and your device backup may hold copies under their own terms. VerseMine is not a church, pastor, or healthcare provider, and conversations with the AI assistant are not protected by clergy-penitent, therapist, or attorney privilege. Please weigh that before sharing details you would only tell a person bound by those protections.

Not therapy. VerseMine offers spiritual guidance rooted in Scripture. It is not therapy, counseling, or medical or mental-health care, and it can't diagnose or treat any condition. If you're in crisis or thinking about harming yourself, call or text 988 (the U.S. Suicide & Crisis Lifeline) — a real person is available 24/7. Nothing here replaces a conversation with your own pastor — what you share with a pastor in person has legal protections that conversations with an app do not.

4. Other Third-Party Services

In addition to the AI providers listed above, we use the following third-party services to operate the App:

Provider Purpose Data Processed Location
Supabase, Inc. Database, user authentication, and file storage Account data, profile data, user content, uploaded photos, and the counseling records in Section 3.8 — group-session records, raw group-session audio, and content-free safety records. Not the text of your counseling conversations; we do not store that. United States
VerseMine's own servers AI Counselor processing and premium read-aloud voices The message being answered and the recent part of the conversation sent with it, account identifier, age status, church identifier — held only while the request is being handled, not kept as a conversation history. Operated by us at a US cloud host. Shared onward only to the providers in Section 3. United States
PostHog, Inc. Product analytics Usage data linked to your account identifier (Section 1.4). No IDFA. No cross-app tracking. Location lookup disabled. United States
Sentry (Functional Software, Inc.) Error and crash reporting (not active in current builds) If enabled: crash logs, device info, app performance data, account identifier. We take measures to exclude personal content. United States
Resend, Inc. Transactional and marketing email delivery Your email address and the content of emails we send you (welcome, announcements, account messages). If you have enabled pastoral care, also an email to your pastor naming you when the AI Counselor detects that you may be in serious distress. If you use pastoral outreach, when available, an email and push notification to your pastor or care team naming you and your church. United States
RevenueCat, Inc. Subscription management (individual subscriptions) Account identifier, device identifiers, subscription status, purchase timestamps, plan type. No payment card data. United States
Stripe, Inc. Group/church plan checkout and billing Your email address, your church's name, and subscription and transaction identifiers. No payment card data reaches us. Stripe also acts as an independent controller of the data it collects for its own fraud prevention, under its own privacy policy. United States
Expo (650 Industries, Inc.) Push notification delivery Device push token; notification content in transit (not stored); delivery receipts deleted after 24 hours. United States
Apple Inc. In-app purchases (App Store), push notifications (APNs) Purchase transactions, push notification tokens United States
Google LLC In-app purchases (Google Play), push notifications (FCM) Purchase transactions, push notification tokens United States
Klipy and Tenor (Google LLC) GIF search and display in comments Search: your search text is sent from our servers without your identity. Display: when a GIF is shown, the viewer's IP address reaches Klipy's or Tenor's image servers. Klipy may use search terms for advertising under its own policy; we do not have a data processing agreement with it. United States
Voyage AI (a MongoDB company) AI Counselor theology retrieval (text embeddings) De-identified topical query (internal framework vocabulary). No message content or personal information. United States

Scripture text is fetched from ESV, API.Bible, and bible-api.com servers by passage reference only; no user data is sent to them.

Each of these providers processes data on our behalf and is bound by their respective terms of service and privacy policies, except where noted above.

5. AI Model Training Disclosure

We do not use your data to train, fine-tune, or improve any artificial intelligence or machine learning models, and we contractually require our AI processors not to train their models on your content (see provider-specific terms below).

We require each AI provider listed in Section 3 not to use your data for model training. Specifically:

  • Google Gemini (paid API tier): Your data is not used for model training.
  • OpenAI (API): Your data is not used for model training.
  • Anthropic (AI Counselor): Your data is not used for model training; a data processing agreement applies.
  • Voyage AI (theology-retrieval embeddings): We have opted out of Voyage's use of our data for model training.
  • ElevenLabs (premium read-aloud, if enabled): We will confirm its training terms in this section before enabling it.
  • On-device Whisper (voice transcription): Runs locally on your device; no audio or text is transmitted to any external service (the model file is downloaded from Hugging Face on first use — Section 3.5).

This disclosure is made in compliance with Connecticut Senate Bill 1295 and to provide you with clear information about how your data is handled.

6. Automated Decision-Making

VerseMine uses AI to provide educational study feedback on your Bible highlighting. This feedback is informational and educational in nature. It does not constitute a consequential decision as defined under applicable law (e.g., it is not used for employment, housing, insurance, credit, or similar decisions).

Specifically:

  • AI study feedback is a learning tool. It scores and comments on your highlighting to help you engage more deeply with the text. It has no impact on your access to the App, your account standing, or any real-world outcome.
  • Content moderation and theology analysis use automated scanning to flag potential Community Guidelines violations. Flagged content may be reviewed and actioned according to our Community Guidelines. You can appeal moderation decisions by contacting us at support@versemine.app.
  • Crisis and distress detection in the AI Counselor is automated. It changes what the counselor says (for example, surfacing the 988 Lifeline) and, only if you have enabled pastoral care, can notify your pastor. It never suspends your account.

7. Data Sharing

We do not sell your personal information. We do not share your personal information with third parties for their own marketing purposes.

We share your data only with the service providers named in Sections 3 and 4 of this policy, and only to the extent necessary to provide the App's functionality. Each provider acts as a data processor on our behalf, except Stripe (an independent controller for its own fraud prevention) and Klipy and Tenor (which see the search terms and viewer IP addresses described in Section 4 under their own policies).

One case is outside our control: when a post contains a link, the App loads that page's preview image directly from the linked site, so the site's owner can see the IP address of every viewer of that post. Which sites those are depends entirely on what people link to.

If you have explicitly opted into the Accountability Partner feature (Section 1.9), we share limited focus session metadata with the partner you have chosen. If you have enabled pastoral care, we may notify your pastor as described in Sections 2 and 4; if you use pastoral outreach, when available, we send your message to the pastor or care team you chose, naming you and your church. All of these are consent-based, opt-in, and can be revoked at any time in Settings.

We may also disclose your information if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of VerseMine, our users, or others.

8. Data Retention

Data Type Retention Period
Account data (email, display name, username, date of birth) Retained while your account is active. Deleted when you delete your account.
Profile data (bio, city, church, Instagram handle, profile photo) Retained while your account is active. Deleted when you delete your account.
User content (reflections, comments, photos, recordings) Retained while your account is active. Deleted when you delete your account.
AI-generated results (feedback text, annotated images, transcriptions) Retained while your account is active, even if you later withdraw AI consent. Deleted when you delete your account.
Counseling conversations & messages Not retained on our servers. Conversations are kept on your device until you delete them in the App or remove the App and its data; our AI provider keeps inputs and outputs for the limited period described in Section 3.1. If we ever begin storing conversations ourselves, we will update this policy first.
Counseling profile notes & faith-growth recaps Not generated unless counseling memory is enabled for your account, which it is not in the current release. If it is enabled, these are derived from your conversations and stored on our servers, and are deleted when you opt out of counseling memory or delete your account.
Counseling session records and safety records (Section 3.8) Group-session records — that a session happened, when, and participants' chosen display names — and content-free safety records are retained while your account is active. A conversation with no activity for 365 days is deleted automatically, and its session record goes with it. All are deleted when you delete your account. They contain no message text.
Raw counseling session audio (group counseling, opt-in) Auto-purged after approximately 30 days.
Read-aloud audio Device and VerseMine-server voices: not stored. OpenAI/ElevenLabs premium voices, if enabled: clips cached privately to your account for up to 30 days, purged on consent withdrawal.
Usage data (PostHog analytics) Retained for up to 24 months, then automatically deleted.
Crash data (Sentry, if enabled) Retained for up to 90 days, then automatically deleted.
Purchase data (RevenueCat, Stripe) Retained in accordance with each provider's data retention policy and applicable tax/legal requirements.
Push notification tokens Retained while you are signed in. Deleted when you sign out or delete your account. Disabling notifications in your device settings stops delivery.
Screen Time / Focus session data Focus settings and session timestamps are retained while your account is active and deleted with your account. Disabling Focus stops collection.
Accountability partner relationships Sharing stops immediately when either user removes the relationship; the disabled record is retained until account deletion.
IP address / location lookup Not stored. Used only for the duration of the request (Section 1.10).

When you delete your account, we delete all personal data associated with your account from our systems, including the counseling session records and safety records in Section 3.8. Deleting your account does not reach the copy of your conversations stored on your device, or any copy in an iCloud or Google device backup — to clear those, delete your conversations in the App, or remove the App and its data. Data that has already been transmitted to third-party AI providers is subject to those providers' retention policies as described in Section 3.

9. Data Security

We implement reasonable technical and organizational measures to protect your personal data, including:

  • All data transmitted between the App and our servers is encrypted in transit using TLS.
  • User data is stored in Supabase with row-level security (RLS) policies that ensure users can only access their own data.
  • AI provider API keys are stored server-side and are never exposed in the App's client code.
  • Photos of Bible pages and reflection images are stored in user-scoped storage paths with access controls. Profile photos are stored so that any user of the App can view them, as required to display them next to your posts.
  • Authentication uses industry-standard protocols (email/password with email verification, Apple Sign-In, Google Sign-In).

No method of electronic storage or transmission is 100% secure. While we strive to use commercially reasonable means to protect your data, we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

10.1 All Users

  • Access — You can request a copy of the personal data we hold about you. Automated export is not yet available; we fulfill access requests manually on a best-effort basis. We cannot include the text of your AI Counselor conversations, because we do not hold it — that copy is on your device, and you can read it there in the App.
  • Deletion — You can delete your account and all associated data at any time from within the App (Profile > Settings > Delete Account, at the bottom of Settings). That deletes everything we hold about you on our servers, including the counseling records in Section 3.8. It does not reach the copy of your conversations on your device or in a device backup — delete your conversations in the App, or remove the App and its data, to clear those. You may also request deletion by emailing privacy@versemine.app.
  • Withdrawal of AI consent — You can withdraw AI consent at any time in Settings; this disables the AI features that depend on it (Section 3.6). Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.
  • Withdrawal of Screen Time access — You can revoke VerseMine's Screen Time / Family Controls authorization at any time through iOS Settings > Screen Time, or disable focus sessions in VerseMine Settings > Focus.
  • Removal of accountability partner — You can remove your accountability partner at any time in Settings > Accountability. Removal immediately ends all sharing of focus session metadata with that partner.
  • Pastoral care — If you have enabled pastoral care, you can turn it off at any time in Settings, which stops any further notifications to your pastor.
  • Opt out of announcement email — If we send announcement emails, you can ask us to stop at any time by emailing privacy@versemine.app. You will still receive essential account and transactional emails.

10.2 European Economic Area (EEA), United Kingdom, and Switzerland Residents

Under the General Data Protection Regulation (GDPR) and equivalent laws, you also have the right to:

  • Rectification — Request correction of inaccurate personal data.
  • Restriction — Request that we restrict processing of your personal data in certain circumstances.
  • Data portability — Request a copy of your personal data in a structured, commonly used, machine-readable format. Automated portability is not yet available; we fulfill portability requests manually on a best-effort basis. As with access, we cannot include the text of your AI Counselor conversations, because we do not hold it.
  • Object — Object to processing based on legitimate interest (including content moderation). We will cease processing unless we demonstrate compelling legitimate grounds.
  • Lodge a complaint — File a complaint with your local data protection authority (e.g., the ICO in the UK, the CNIL in France, or any EU supervisory authority).

10.3 California Residents

Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, you have the right to:

  • Know — Request the categories and specific pieces of personal information we have collected about you.
  • Delete — Request deletion of your personal information.
  • Opt out of sale — We do not sell your personal information. No opt-out is necessary.
  • Non-discrimination — We will not discriminate against you for exercising your CCPA rights.

10.4 Connecticut Residents

Under the Connecticut Data Privacy Act and SB 1295, you have the right to:

  • Know — Access and obtain a copy of your personal data.
  • Delete — Request deletion of your personal data.
  • AI disclosure — Be informed about how AI processes your data, including whether your data is used for model training (it is not — see Section 5).

10.5 Exercising Your Rights

To exercise any of these rights, contact us at:

  • Email: privacy@versemine.app
  • In-app: Profile > Settings > Delete Account, at the bottom of Settings (for account deletion)

We will respond to verified requests within 30 days (or the timeframe required by applicable law). We may ask you to verify your identity before processing your request.

11. Children's Privacy

VerseMine is intended for users aged 13 and older. We comply with the Children's Online Privacy Protection Act (COPPA).

  • Age gate: All new users must provide their date of birth during account creation. Users under 13 are not permitted to create an account.
  • No data collection from children: If a user indicates they are under 13, no personal information is collected, stored, or transmitted. The user is shown a friendly message and returned to the login screen.
  • Parental contact: If you believe your child under 13 has provided personal information to us, please contact us immediately at privacy@versemine.app. We will promptly delete any such information.

The AI Counselor (a special category of counseling features) is available only to US users at launch and is subject to additional age safeguards: a fail-closed age gate denies access to the counselor when age cannot be verified, and minors receive additional crisis safeguards.

12. International Data Transfers

VerseMine is based in the United States. All data processing occurs in the United States through US-based service providers (Supabase, our own cloud servers, PostHog, Sentry, Resend, RevenueCat, Stripe, Expo, Klipy, Tenor) and cloud AI providers (Google, OpenAI, Anthropic, Voyage AI, and ElevenLabs if enabled). Short dictation is transcribed on your device, but longer counseling recordings may be transcribed by OpenAI in the United States. The AI Counselor is available only to US users at launch.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your data is transferred to the United States. We rely on the following safeguards for these transfers:

  • Standard Contractual Clauses (SCCs) — we require Standard Contractual Clauses, as adopted by the European Commission, with our processors that transfer EEA/UK/Switzerland personal data, including Anthropic.
  • Data Processing Agreements (DPAs) — we require Data Processing Agreements with our processors that transfer EEA/UK/Switzerland personal data on our behalf, establishing data handling, retention, and deletion obligations.

By using the App, you acknowledge that your data will be processed in the United States, which may have different data protection laws than your country of residence.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this policy.
  • Notify you through the App (e.g., an in-app notice or push notification) if the changes are material.
  • Where required by law (e.g., changes to AI processing or new third-party providers), request your renewed consent before processing your data under the new terms.

Your continued use of the App after an updated policy takes effect constitutes your acceptance of the changes, except where renewed consent is required by law.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

Kreyman Enterprises LLC ("VerseMine," "we," "us," or "our")
Website: https://versemine.app
Privacy Policy: https://versemine.app/privacy