Privacy policy

For the Scripture Trainer mobile app (org.scripturetrainer.app) and this website. Last updated 30 September 2026.

Scripture Trainer is a scripture memory app for Bible and Quran verses. It needs an account so your verses can follow you between devices. That is the whole reason any data is collected.

There is no advertising in Scripture Trainer, no analytics or tracking SDK, and no third-party profiling. Your data is not sold, rented, or used to build an advertising profile.

What is collected

Data	Why
Email address and password	To create and sign in to your account, and to reset it if you forget the password. Authentication is handled by Google Firebase Authentication; your password is stored only by Firebase, in hashed form, and is never visible to us.
If you sign in with Apple or Google: the email address and name that service shares	To create and sign in to your account without a password. Apple or Google confirms who you are and passes Firebase Authentication your email address (with Apple, optionally a private relay address) and name. We never see your Apple or Google password.
Your verses — reference, verse text, and your own notes	This is the content of the app. It is stored in your own private area of the database and on your device.
Your themes — name, colour, and whether each is shown or hidden	To group your verses and control what you practise.
App settings and practice preferences	To keep the app looking and behaving the way you left it, such as your colour scheme, text size, and practice order.
Display name, if you enter one	Shown on your own Settings screen so you can see which account you are signed in to. It is optional.

Scripture Trainer does not ask for your contacts, location, camera, microphone, photos, or calendar. It does not read anything else on your device.

Notifications are off unless you turn on Notify me about new themes in Settings. The app then subscribes your device to a single announcement topic through Firebase Cloud Messaging, so it is told when a new ready-made theme is published. No notification token is stored against your account, and every subscriber gets the same message. Turning the switch off unsubscribes the device.

Who your data is shared with

Only the service providers the app needs in order to work. Each receives the minimum required, and none of them is given your data for their own marketing.

Google Firebase (Firebase Authentication, Cloud Firestore, and Cloud Messaging) — hosts your account, stores your verses, themes, and settings, and delivers new-theme notifications if you turn them on.
Apple and Google sign-in — only if you choose "Sign in with Apple" or "Continue with Google"; they confirm your identity to Firebase Authentication.
Expo (expo.dev) — delivers updates to the app's own code. Update checks send the app version and platform and a random per-installation id, never your account or verses.
YouVersion Platform (api.youversion.com) and bible-api.com supply Bible verse text, and AlQuran.cloud (api.alquran.cloud) supplies Quran verse text, when you use "Fetch text" or read a card in context in the app. They receive the reference and translation you asked for. Your account, your verses, and your notes are never sent to them.
Cloudflare — serves this website and the catalogue of ready-made themes that the app can download.

Data may also be disclosed where the law requires it, or to protect the rights and safety of users.

Nobody else sees your verses

Your verses, notes, and themes are private to your account. There is no way for another user to see them, and the app has no feature that sends them to anyone.

How long it is kept

Your account data is kept for as long as your account exists. Deleting your account erases it, as described below.

Deleting your account and your data

You can delete your account from inside the app, under Settings → Delete account. Deletion is immediate and permanent: it erases your profile, every verse and theme, your settings, and finally your sign-in record itself. Nothing is retained afterwards, and it cannot be undone.

Full instructions, including what to do if you can no longer sign in, are on the delete your account page.

Your rights

Depending on where you live, you may have the right to access, correct, export, or erase your personal data, and to object to its processing. The app already gives you direct control over all of it: you can read and edit every verse, theme, and setting, change your email address and password, and delete everything. For anything the app does not cover, write to and we will respond within 30 days.

Children

Scripture Trainer is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, write to and it will be deleted.

Where your data is processed

Firebase and Cloudflare operate globally, so your data may be processed on servers outside your own country, including in the United States. Those transfers rely on the safeguards those providers put in place, including the European Commission's standard contractual clauses.

Security

All traffic between the app and its servers is encrypted in transit. Each account's data is fenced off by server-side security rules that permit access only to the signed-in owner — not by the app merely choosing not to ask for it. No system is perfectly secure, but no more data is collected than the app needs, which limits what any breach could expose.

Changes to this policy

If this policy changes in a way that materially affects you, the date at the top will change and the app will point you here. Continuing to use Scripture Trainer after that means you accept the updated policy.

Contact

Scripture Trainer —