PRIVACY POLICY

Account information. If you create an account we store your email address and, when you sign in with Google, the basic profile details Google shares (name, email, profile image). Passwords are stored only as salted hashes by our authentication provider; we never see them.

Reading activity. We record which stories you open and the date, so we can apply the free daily reading limit and keep your experience consistent across devices. Anonymous visitors have this count stored locally on their own device only.

Subscription information. If you subscribe, our payment processor (Stripe) handles your card details. We never receive or store card numbers. We store your subscription status, plan, renewal date and processor identifiers so we can unlock unlimited reading.

Technical data. Standard server and analytics data such as approximate region, browser type, pages viewed, and error reports, used to keep the app working.

To provide and secure your account; to unlock and bill subscriptions; to enforce the free daily limit; to respond to support requests; to detect abuse; and to improve the app. We do not use your data to build advertising profiles.

We do not sell or rent your personal information. We do not share it with data brokers. We do not use your reading history for third-party advertising or tracking across other apps and websites.

We share the minimum data needed with providers who operate parts of the service on our behalf: Supabase (database, authentication), Stripe (payments and subscription billing), Lovable (hosting and app infrastructure), and Google (only if you choose Google sign-in). Each processes data under its own privacy terms and only to deliver the service to you.

We keep your account data while your account is active. Reading history older than 12 months may be removed. Billing records are retained as long as required for tax and accounting purposes. When you delete your account, we delete your profile, reading history and subscription records, and cancel any active subscription.

You can access, correct, export or delete your personal information. You can delete your account and all associated data yourself, at any time, from My Account. Deletion is immediate and permanent. Depending on where you live (for example the EEA, UK, or California) you may also have rights to object to or restrict processing and to lodge a complaint with your local regulator.

HOLY SCROLL is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

Data is transmitted over encrypted connections and stored with access controls that restrict each account's data to that account. No system is perfectly secure, but we work to protect your information and to notify you if a breach affects you.

Our providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

Subscriptions renew automatically until canceled. You may cancel at any time; access continues until the end of the period you already paid for. Manage or cancel your plan from My Account.

If we make material changes we will update the date above and, where appropriate, notify you in the app or by email.

Questions about privacy or your data? Email support@getholyscroll.com.