Privacy Policy
1. Data Controller
Trinity Bible is developed and operated by 8T20 Capital (Pty) Ltd, a company registered in South Africa. We are committed to protecting your privacy in accordance with the Protection of Personal Information Act (POPIA) and applicable international privacy laws (including GDPR for EU users and CCPA for California users).
2. Data Safety Summary — what we collect, why, and where it goes
This is the same information we declare in the Google Play Data Safety form and the Apple App Store App Privacy section. If you ever find a discrepancy between this page and either store listing, this page is canonical and we will correct the store listing.
| Data we collect | Why | Linked to your account? | Shared with |
|---|---|---|---|
| Email address | Account creation, sign-in, password reset | Yes | Supabase (cloud sync & auth) |
| Reading progress, bookmarks, notes, highlights, prayer journal, plan progress, streaks | Cross-device sync; restore your reading on a new device | Yes | Supabase (cloud sync) |
| Subscription status & entitlement | Unlock Trinity Plus features for paying subscribers | Yes | RevenueCat, Apple, Google |
| Anonymous usage events (page views, taps, feature use) | Understand which features readers actually use; improve the app | No (aggregated) | Google Analytics 4 |
| Crash reports & error stack traces | Find and fix bugs before they reach more readers | No (we redact PII) | Sentry |
| Verse text sent for explanation, summary, chat, or sermon export (Trinity Plus) | Generate Scripture-anchored study output | Yes (cached against your account so the same passage doesn’t re-cost you) | FastRouter (which routes to Google Gemini, xAI Grok, Vercel AI Gateway). Not used to train external models. |
| Verse text sent for HD audio narration (when a chapter is first heard) | Generate the narrator audio for that passage | No | Google Cloud Text-to-Speech |
| Device language & system theme | Set the right localisation and dark-mode default | No | Stays on device |
| Push notification token (if you opt in) | Daily devotional reminders, streak nudges | Yes | Apple Push Notification Service / Firebase Cloud Messaging |
What we do not collect: contacts, photos, microphone audio (except your own personal verse recordings, which stay on device), precise location, browsing history outside Trinity, financial information beyond what Apple or Google requires for the subscription transaction, or any data we would sell.
What we never do: we do not sell, rent, or trade your personal data; we do not share it with advertisers or data brokers; we do not use your reading or chat history to train external AI models.
3. How We Use Your Information
Your data is used solely to provide and improve the Trinity Bible experience: syncing reading progress across your devices, maintaining streaks, generating Scripture-anchored study output you have asked for, narrating verses you have asked to hear, fixing bugs, and understanding which features readers find useful. We do not use your data for anything else.
4. Data Storage, Retention & Security
Most data is stored locally on your device. Cloud-synced data (notes, bookmarks, progress, journal) is stored in Supabase (EU-North-1 region) with industry-standard encryption in transit (TLS) and at rest. Crash reports retain for 90 days in Sentry. Anonymous analytics events retain for 14 months in Google Analytics. AI request/response cache retains for 12 months. You can delete your account and all associated data at any time via the in-app Settings or the account deletion page.
5. Third-Party Services
The services above process specific data on our behalf, under data-processing agreements that prohibit them from using your data for their own purposes. Their privacy policies cover their handling of that data:
- Supabase — auth, cloud sync, AI cache
- RevenueCat — subscription management
- Google — Analytics 4, Cloud Text-to-Speech, Gemini (via FastRouter)
- Sentry — crash reporting
- xAI — Grok responses (via FastRouter)
- Vercel — site hosting and AI Gateway
- FastRouter — AI gateway router (does not retain prompts beyond the request)
6. Your Rights
Under POPIA and GDPR, you have the right to: access your data, correct inaccuracies, request deletion, object to processing, and request data portability. Exercise these rights via the in-app Settings, by visiting our account deletion page, or by contacting us at the address below.
7. Children's Privacy
Our app is suitable for all ages. We do not knowingly collect personal information from children under 13 without parental consent.
8. Changes to This Policy
We may update this policy periodically. Continued use after changes constitutes acceptance of the updated policy.
9. Contact Us
For privacy inquiries or to exercise your rights: