Privacy Policy for Daily Manna

1. Introduction

This Privacy Policy explains how Daily Manna ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you use our Bible study web application, mobile application, or desktop application (collectively, the "Service"). By accessing or using the Service, you agree to the practices described in this Policy.

Daily Manna provides verse-by-verse Bible commentary, AI-powered theological question answering, multiple Bible translations (including premium translations delivered via API.Bible), personal study tools, reading plans, and subscription-based access to premium features.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, first name, last name, and encrypted password when you register.
• Billing Information: When you subscribe to a paid plan, your payment is processed by Stripe. We receive and store your email address, subscription tier (monthly or yearly), subscription status, and renewal date. We do not store your full credit card number, CVV, or bank account details — those are handled exclusively by Stripe.
• Profile & Preferences: Display name, text size preferences, notification settings, selected Bible translation, and other app customizations.
• Study Content: Personal notes on Bible verses, bookmarked verses and passages, saved questions and AI-generated answers.
• Search & Query Data: Bible verse references you look up, theological questions you submit, and search history.
• Social & Friend Features: Friend requests, friend connections, and your chosen display name. You may search for other users by name or email. We do not display your full email address to other users.
• Communications: Messages sent to our support team and any feedback you provide.

2.2 Information Collected Automatically

• Usage Analytics: Study streaks, daily usage, features accessed, time spent in different sections, and reading plan activity.
• Monthly Usage Counters: Number of AI questions asked and reading plans created each month to enforce subscription limits.
• Device & Technical Data: Device type, operating system version, unique device identifiers, app version, IP address, browser type, access times, and error logs.
• Performance Data: App loading times, feature response times, crash reports, and error rates.

2.3 Data from Third-Party Services

• API.Bible (American Bible Society): When you access premium Bible translations (such as the CSB), your requests are routed through API.Bible. API.Bible may log request metadata (e.g., IP address, API key usage) per their own privacy policy. We do not share your personal account information with API.Bible beyond what is necessary to fulfill the scripture request.
• Stripe: Stripe collects payment data on our behalf. Stripe's handling of your data is governed by the Stripe Privacy Policy.
• Firebase (Google): We use Firebase for authentication, database storage, and real-time data sync. Google's handling of data is governed by the Google Privacy Policy.
• Anthropic (Claude AI): Your theological questions are submitted to Anthropic's Claude API to generate answers. Anthropic may process and log this data per their privacy policy. We do not send personally identifiable information to Anthropic beyond the content of your question.

3. How We Use Your Information

3.1 Providing the Service

• Authenticate your account and maintain your session.
• Deliver Bible commentary, premium translations, and book overviews.
• Generate AI-powered answers to your theological questions.
• Store and sync your notes, bookmarks, and reading plans across devices.
• Track your study streaks and usage statistics.
• Enforce monthly subscription usage limits (AI questions and reading plans).

3.2 Subscription & Billing

• Process your monthly or yearly subscription payments via Stripe.
• Manage subscription renewals, cancellations, and plan changes.
• Send billing-related communications (receipts, renewal reminders, failed payment notices).
• Provide access to the Stripe Customer Portal for self-service billing management.

3.3 Social & Friend Features

• Allow you to search for and connect with other users by name or email.
• Display limited profile information (name/display name) to enable connections.
• Manage friend requests and connections.

3.4 Service Improvement & Security

• Monitor performance, diagnose technical issues, and fix bugs.
• Analyze aggregated usage trends to improve features.
• Detect and prevent fraud, abuse, and unauthorized access.
• Comply with legal obligations.

4. Legal Bases for Processing (Applicable to EEA/UK Users)

If you are located in the European Economic Area or United Kingdom, we process your personal data on the following legal bases:

• Contract: Processing necessary to provide the Service you subscribed to (account management, billing, content delivery).
• Legitimate Interests: Security monitoring, fraud prevention, service improvement, and analytics.
• Consent: Optional personalization features and marketing communications (you may withdraw consent at any time).
• Legal Obligation: Compliance with applicable laws and regulations.

5. How We Share Your Information

We do not sell your personal information. We share data only in the following circumstances:

• Service Providers: We share data with Stripe (payment processing), Firebase/Google (database and authentication), Anthropic (AI responses), and API.Bible (Bible translation content) solely to operate the Service.
• Other Users (Limited): Your display name or name may be visible to other users through the friend search and connection features. Your email address is never publicly displayed.
• Legal Requirements: We may disclose data if required by law, court order, or governmental authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.
• With Your Consent: In any other circumstance where you have given explicit consent.

6. Bible Translations & Third-Party Content Licensing

Daily Manna displays Bible text from multiple translations under the following licenses and permissions:

• KJV & WEB: Public domain. No restriction on use.
• CSB (Christian Standard Bible®): Copyright © 2017 by Holman Bible Publishers. Used by permission. CSB® is a Federally Registered Trademark of Holman Bible Publishers. Delivered via API.Bible under an authorized API license.
• NIV: Holy Bible, New International Version®, NIV®. Copyright © 1973, 1978, 1984, 2011 by Biblica, Inc.™ Used by permission of Zondervan.
• NASB: New American Standard Bible®, Copyright © 1960, 1971, 1977, 1995, 2020 by The Lockman Foundation. Used by permission.
• NKJV: New King James Version®. Copyright © 1982 by Thomas Nelson. Used by permission.
• ESV: ESV® Bible (The Holy Bible, English Standard Version®). Copyright © 2001 by Crossway. Used by permission.
• CEV: Contemporary English Version. Copyright © 1991, 1992, 1995 by American Bible Society. Used by permission.
• NRSV: New Revised Standard Version Bible. Copyright © 1989 National Council of the Churches of Christ in the United States of America. Used by permission.

Scripture text is used solely for personal Bible study and educational/religious purposes within the Service and is not redistributed independently.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account Data: Retained until you delete your account.
• Billing Records: Retained for up to 7 years after your last transaction to comply with financial and tax regulations, even after account deletion.
• Usage Logs & Analytics: Retained for up to 12 months in identifiable form, then aggregated or anonymized.
• Support Communications: Retained for up to 3 years.

8. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS/HTTPS), Firebase security rules, and restricted access to personal data. Passwords are stored in encrypted form and never in plain text. Payment data is handled entirely by Stripe, which is PCI-DSS compliant. However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9. Your Privacy Rights

9.1 All Users

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may update your account information at any time through the app settings.
• Deletion: You may request deletion of your account and associated data (see Section 10).
• Opt-Out of Communications: You may unsubscribe from non-essential marketing emails at any time.

9.2 EEA / UK Users (GDPR)

In addition to the above, you have the right to:

• Data portability (receive your data in a machine-readable format).
• Restriction of processing in certain circumstances.
• Object to processing based on legitimate interests.
• Lodge a complaint with your local data protection supervisory authority.

9.3 California Residents (CCPA/CPRA)

California residents have the right to:

• Know what personal information we collect, use, disclose, and sell (we do not sell your data).
• Delete personal information we have collected (subject to certain exceptions).
• Correct inaccurate personal information.
• Non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at yourdailymanna.brett@gmail.com.

11. Cookies and Tracking Technologies

We use session cookies and local storage to maintain your authentication state and preferences. We do not use third-party advertising cookies or sell data to advertisers. Firebase and Stripe may set their own cookies as described in their respective privacy policies.

12. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. Users between 13 and 17 must have parental consent to use the Service. If we become aware that we have inadvertently collected data from a child under 13, we will promptly delete it. Contact us atyourdailymanna.brett@gmail.com if you believe we have collected such data.

13. International Data Transfers

Your data is stored and processed in the United States. If you are accessing the Service from outside the United States, your data will be transferred to, stored, and processed in the U.S. where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer. Where required by law (e.g., GDPR), we rely on appropriate transfer mechanisms such as Standard Contractual Clauses.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app or via email. The "Last Updated" date at the top reflects when the policy was last revised. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or your personal data, contact us at: