Privacy Policy for VerseReflections.

1. Scope and Consent

This Privacy Policy explains how VerseReflections collects, uses, stores, and shares information when you access or use our website, apps, features, and related services collectively referred to as the Service.

By accessing or using the Service, you acknowledge this Privacy Policy. If you do not agree with this Privacy Policy, you should not use the Service.

2. Information We Collect

2.1 Information you provide

• Account information, such as your email address, username, authentication identifiers, and other information needed to create, verify, or manage your account.
• Reflection submissions, including verse references, verse text, reflection text, display names or usernames if applicable, and any other text or content you choose to provide. This includes drafts you save before submitting, which are stored privately in your account until you submit or delete them.
• Consent records, such as the version of the Terms of Service and Privacy Policy you accepted during onboarding and your confirmation that you are at least 13 years old.
• Engagement actions, such as reactions or likes you add to reflections, articles, or other content. These are associated with your account.
• Communications you send to us, such as support messages, questions, feedback, reports, or privacy requests.
• Email address if you subscribe to our daily reflection email. You do not need an account to subscribe, and we collect only your email address and an unsubscribe token for this purpose. You can unsubscribe at any time using the link in any email we send.
• Topic descriptions you optionally provide when using the verse suggestion feature. If you choose to use this feature, the short description you enter is sent to an AI provider (Anthropic) to generate a fitting Bible reference. This input is not stored beyond the request. Use of this feature is limited to once per day per account.

2.2 Information collected automatically

• Usage information, such as page views, pages visited, general traffic patterns, interactions with the Service, referring pages, and approximate timestamps.
• Device and technical information, such as browser type, operating system, device type, IP address, approximate location derived from IP address, log data, diagnostics, and error information.
• Cookies, local storage, session storage, or similar technologies needed to operate the Service, keep you logged in, remember preferences, protect accounts, measure usage, and improve the Service.

2.3 Faith-related and sensitive submissions

VerseReflections allows users to submit faith-related reflections and other written content. These submissions may reveal personal beliefs, life experiences, struggles, prayer-related information, or other sensitive details depending on what you choose to write. Please do not submit anything you do not want reviewed by our team or potentially displayed publicly if approved.

Please do not submit highly sensitive personal information through the Service, including government identification numbers, financial account numbers, medical information, passwords, private addresses, or information about another person without permission. If you submit this type of information anyway, you do so at your own risk, and we may remove it.

2.4 Account activity and engagement

When you are signed in, we record certain activity in order to provide account features. This information is linked to your account and includes:

• Reactions and likes you add to reflections, articles, or other content, including which item you reacted to.
• Daily visit and participation history, such as the dates you visit or acknowledge a daily verse. We use this to display your journey, including your visit calendar, streaks, and total days.

3. How We Use Information

We use information to operate, maintain, protect, and improve the Service, including to:

• Provide the verse, reflection, and account experience.
• Power engagement features such as reactions and likes, and your visit journey, streaks, calendar, and total days.
• Create, authenticate, secure, and manage user accounts.
• Review, moderate, approve, deny, flag, publish, or remove submissions.
• Display approved public reflections and related public content.
• Respond to support requests, feedback, reports, and privacy requests.
• Power AI-assisted features, such as generating verse suggestions when you request them.
• Prevent fraud, abuse, spam, unauthorized access, and harmful activity.
• Monitor performance, troubleshoot issues, debug errors, and improve reliability.
• Understand general usage patterns and improve the Service.
• Comply with legal obligations and enforce our Terms of Service.

Where applicable law requires a legal basis for processing, we rely on: performance of our agreement with you (providing the Service and its features), our legitimate interests (such as securing, improving, and moderating the Service), your consent (where required, such as optional features you choose to use), and compliance with legal obligations.

4. Public Submissions and Moderation

If you submit a reflection or other content for review, you understand that our team may review the content and related metadata to decide whether it should be approved, denied, flagged, edited for formatting, or removed.

If your submission is approved for publication, the submitted reflection, verse reference, verse text, display name or username if applicable, and other public-facing submission details may be visible to other users or visitors. Do not submit private, confidential, or sensitive information that you would not want others to see.

As part of the moderation process, submitted content may be processed using automated tools, including external search services and AI-assisted analysis, to check for originality, potential copyright concerns, or policy violations. Only submission content (reflection text and verse reference) is used for this purpose — no personal account information is shared with those tools.

We may remove, restrict, or refuse to publish submissions at our discretion, including content that violates our Terms of Service, creates privacy risks, appears abusive, contains sensitive personal information, or may harm the Service or other users.

5. How We Share Information

We do not sell your personal information. We also do not share your personal information for cross-context behavioral advertising.

5.1 Service providers and third-party processing

We use third-party vendors and service providers to help host, operate, secure, analyze, and improve the Service. These providers may process information according to their own terms and privacy policies and, where applicable, on our behalf.

• Vercel: Hosting, deployments, and optional performance or traffic analytics.
• Supabase: Database and authentication (if accounts are enabled).
• Vercel Analytics: Site analytics (traffic and usage insights).
• Resend: Transactional email delivery, including subscription confirmation and daily reflection emails.
• bible-api.com: Bible text API used to fetch alternative Scripture translations. When you change the translation setting, your browser sends the verse reference and translation code directly to this service.
• Anthropic: AI provider used for the optional verse suggestion feature and for moderation review. When you request a verse suggestion, the topic description you enter is sent to Anthropic to generate a fitting Bible reference; this input is not stored beyond the request and is not linked to your identity by Anthropic. When our team reviews a submitted reflection, the reflection text and verse reference may be sent to Anthropic for an originality and policy assessment. Under Anthropic's API terms, these inputs are not used to train its models.
• Serper: Web search service used during moderation. When our team checks a submitted reflection for originality, short phrases from the reflection text are searched through this service. No account or personal information is included in these searches.

5.2 Other situations where information may be shared

• Public content: Approved reflections or other approved submissions may be displayed publicly as described in this Policy.
• Legal and safety: We may disclose information if required by law, legal process, or government request, or if we believe disclosure is necessary to protect the rights, safety, security, or integrity of VerseReflections, users, the public, or the Service.
• Terms enforcement: We may use or disclose information to investigate, prevent, or address violations of our Terms of Service, abuse, spam, fraud, security incidents, or harmful activity.
• Business transfers: If VerseReflections is involved in a merger, acquisition, financing, reorganization, sale of assets, transfer of ownership, or similar transaction, information may be transferred as part of that transaction.
• With your direction: We may share information when you ask us to, authorize us to, or intentionally use a feature that requires sharing.

6. Cookies and Analytics

We use cookies and similar technologies as needed to operate the Service, maintain logged-in sessions, support security, remember preferences, understand general usage, and improve the Service. Some cookies or similar technologies may be provided by third-party tools we use for hosting, authentication, analytics, security, or other Service functionality.

6.1 Analytics providers we use

• Vercel Analytics
• Vercel Speed Insights

Analytics tools may collect information such as pages visited, device and browser information, approximate location, traffic source, interactions, and usage patterns. The exact information collected depends on the provider and our configuration.

6.2 Your choices

You can control cookies through your browser settings. If you disable cookies or similar technologies, some features may not work correctly, especially account login, authentication, preferences, and security features. You may also use browser privacy controls or extensions to limit certain analytics collection.

Some browsers send "Do Not Track" or Global Privacy Control signals. Because we do not sell personal information or share it for cross-context behavioral advertising, there is no such sale or sharing to opt out of, and we do not currently respond to these signals.

7. Data Retention

We retain information for as long as reasonably necessary to operate the Service, provide features, maintain accounts, moderate submissions, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, protect the Service, and maintain business records.

Retention periods may vary based on the type of information and how it is used. For example, security logs and abuse-prevention records may be retained for a different period than basic analytics data or account profile information.

Reflections that have been featured as the site's daily reflection become part of the shared public archive and cannot be individually deleted through your account. If you want a featured reflection removed, you can contact us with a privacy request as described in Section 9.

If you request deletion, we will take reasonable steps to delete or de-identify applicable information, unless we need to retain certain information for legal, security, fraud prevention, dispute resolution, backup, or legitimate operational reasons.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include authentication protections, access controls, database security rules, provider security features, and monitoring for suspicious activity.

However, no method of transmission, storage, hosting, or electronic processing is 100 percent secure. We cannot guarantee absolute security, and you use the Service at your own risk.

9. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, obtain a copy of, or object to certain processing of your personal information. You may also have the right to appeal certain privacy decisions or opt out of certain types of processing where applicable law requires it.

To make a request, email versereflectionsofficial@gmail.com with the subject line "Privacy Request" and tell us what you want to do, such as access, deletion, correction, copy, objection, or appeal. We may need to verify your identity or account ownership before acting on a request.

You can also exercise several choices directly, without contacting us:

• Delete your account: You can permanently delete your account from your account page. This action cannot be undone.
• Manage your reflections: You can edit or delete your own reflections and drafts from your account, except reflections that have been featured as the site's daily reflection, as described in Section 7.
• Unsubscribe from emails: Every reflection email we send includes an unsubscribe link.

We will not discriminate against you for exercising privacy rights provided by applicable law.

10. Children

The Service is not directed to children under 13 years old. Account creation and submission features require users to confirm that they are at least 13 years old. We do not knowingly collect personal information from children under 13.

If you believe a child under 13 has provided personal information through the Service, please contact us at versereflectionsofficial@gmail.com. If we learn that we have collected personal information from a child under 13, we will delete that information and terminate any associated account.

11. International Users

VerseReflections is operated from the United States. If you access the Service from outside the United States, you understand that your information may be processed, stored, and transferred in the United States or other locations where our service providers operate. Those locations may have data protection laws that differ from the laws in your jurisdiction.

12. Third-Party Links and Services

The Service may contain links to third-party websites, services, social platforms, Bible resources, or other external content. We are not responsible for the privacy practices, security, content, or policies of third-party websites or services. Your use of third-party services is governed by their own terms and privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be effective when posted, unless another effective date is stated. Your continued use of the Service after an updated Privacy Policy is posted means you acknowledge the updated Policy.

If we make material changes, we may provide additional notice where appropriate, such as by posting a notice on the Service or using another reasonable method.

14. Contact

Questions about this Privacy Policy, or requests to access, correct, delete, or receive a copy of your information, can be sent to versereflectionsofficial@gmail.com.