Privacy Policy

Last updated: April 14, 2026

VerseQuest ("we", "our", "the app") is a bilingual Bible discovery app that uses play as the entry point for exploring Scripture. This policy explains what data we collect, why, and how we protect it.

1. Data We Collect

Account Information

• Authentication data: When you sign in with Google or Apple, we receive your name and email from the identity provider. Email is stored securely in our authentication system and is never shared with other users or third parties.
• Display name & tag: Your chosen display name and 4-digit tag are visible on leaderboards and in multiplayer games.
• Avatar selection: Your chosen avatar icon.

Game & Progress Data

• Scores & game history: Game mode, score, correct answers, and timestamps for each game session.
• Achievements: Which achievements you've unlocked and when.
• Streaks: Login streak and reading streak (consecutive days of activity).
• Bible discovery: Which Bible verses and books you've explored through gameplay.
• Quest progress: Completion status per Discovery Quest theme.
• Bookmarked verses: Verses you've saved during gameplay.
• Reading log: Which Bible passages you've opened via "Read more" links.

Usage Analytics

• App events: We log non-personal events (e.g., "game started", "onboarding completed") to improve the app experience. These events are stored in our own database (not sent to third-party analytics services).
• No device fingerprinting by us: Our own services do not collect device IDs or hardware information. Google AdMob (used for optional rewarded video ads, see Section 5) does access the platform advertising identifier (IDFA on iOS, AAID on Android) to serve and frequency-cap ads. You can reset or disable this identifier any time in your device's privacy settings.

Local-Only Data (never sent to servers)

• Language preference (English/Spanish)
• Theme setting (light/dark)
• Bible translation selections
• Haptic feedback, font size, and accessibility settings
• Notification reminder preferences

2. Data We Do NOT Collect

• Location data or GPS coordinates
• Contact lists or phone numbers
• Photos, files, or camera access
• Browsing history or web activity
• Device hardware identifiers (we do not collect these; see Section 5 for AdMob's limited use of the platform advertising ID)
• Microphone or audio data

3. How We Use Your Data

4. Data Sharing

We do not sell, rent, or share your personal data with third parties.

• Other users can see: Your display name, tag, avatar, game scores, and leaderboard position.
• Other users cannot see: Your email, reading history, bookmarked verses, or personal preferences.
• No data brokers: We never share data with advertising networks, data brokers, or marketing services.

5. Third-Party Services

Google AdMob details

AdMob is the only advertising SDK we use. We show opt-in rewarded videos and occasional interstitial ads between game sessions. No banner ads or ads during gameplay.

• What AdMob receives: The platform advertising identifier (IDFA on iOS, AAID on Android), IP address, coarse country, device model, and ad interaction events. This is governed by Google's advertising privacy policy.
• EU / UK / Swiss users: A Google-provided consent dialog (UMP) appears before any personalized advertising. Declining still allows non-personalized ads.
• Users under 18: Served non-personalized ads only, via AdMob's child-directed traffic setting.
• Controlling your ad ID: You can reset it or opt out of personalized ads at any time in your device settings (iOS: Settings → Privacy & Security → Apple Advertising; Android: Settings → Privacy → Ads).
• Future: If we add subscription processing, payment data will be handled entirely by Google Play / Apple App Store — we never see your card information.

6. Data Storage and Security

• Encryption: All data is stored using Supabase with encryption at rest and in transit (TLS/SSL).
• Row-Level Security: Database policies ensure users can only access their own data.
• Authentication: Email addresses are stored in a protected authentication layer, separate from public game data.
• No plain-text passwords: We use Google and Apple SSO exclusively — we never store passwords.

7. Data Retention

• Account data: Retained as long as your account is active.
• Game history: Retained as long as your account is active.
• Analytics events: Retained for up to 12 months, then automatically deleted.
• Deleted accounts: When you delete your account, all personal data (profile, scores, achievements, bookmarks, reading log) is permanently removed within 30 days.

8. Children's Privacy

VerseQuest is rated 13+ on app stores. We do not knowingly collect personal information from children under 13.

• Google Sign-In and Apple Sign-In both require users to be 13+ per their respective terms of service.
• No email/password registration is available — SSO-only authentication provides age verification through the identity provider.
• If you believe a child under 13 has created an account, please contact us and we will promptly delete the account.

9. Your Rights

For All Users

• Access: View your data in the app's Profile and My Journey screens.
• Update: Change your avatar and bio in Settings > Edit Profile.
• Delete: Delete your account and all data in Settings > Delete Account. This is permanent and irreversible.

For EU/EEA Users (GDPR)

• Right to access: Request a copy of all data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of all your data.
• Right to data portability: Request your data in a machine-readable format.
• Right to object: Object to processing of your data for analytics purposes.
• To exercise these rights, contact us at the email below.

For California Users (CCPA)

• You have the right to know what personal information we collect and how it is used.
• You have the right to request deletion of your personal information.
• We do not sell personal information.
• We do not discriminate against users who exercise their privacy rights.

10. Advertising

VerseQuest uses Google AdMob for a single, opt-in ad format.

• Rewarded videos. Ads play when you explicitly tap a "watch a short video" button to earn in-app currency (Grace Points). There are no banners and no ads inside gameplay.
• Interstitial ads. Short full-screen ads shown between game sessions (not during gameplay). These are limited in frequency.
• Daily cap. Rewarded earning is server-capped (50 Grace Points per day) so there is no incentive to watch more ads than that.
• Consent. EU / UK / Swiss users see a Google-provided consent dialog before any personalized ads are served.
• Under-18 users. Receive non-personalized ads only via AdMob's child-directed traffic setting.
• Opting out of personalization. Reset your advertising ID or disable personalized ads in your device settings at any time.

11. Scripture Attribution

Bible quotations used in the app come from licensed and public domain translations:

• KJV and RVR1960 — Public domain
• NIV — Copyright © Biblica, Inc.™ Used under fair use provisions.
• NLT — Copyright © Tyndale House Foundation. Used under fair use provisions.
• NVI — Copyright © Biblica, Inc.™ Used under fair use provisions.
• NTV — Copyright © Tyndale House Foundation. Used under fair use provisions.

12. Changes to This Policy

We may update this privacy policy when we add new features (such as advertising or premium subscriptions). Changes will be posted on this page with an updated date. If changes are significant, we will notify users in-app.

13. Contact

If you have questions about this privacy policy, your data, or wish to exercise your rights, contact us at:

[email protected]