Privacy policy

DRAFT FOR RYAN'S APPROVAL Not yet checked by a lawyer. Items marked [Ryan] need a fact from Ryan.

Last updated: 2 November 2026

Rytopium Bible ("the app") is made by Rytopium Industries [Ryan: legal name and ABN], Australia ("we", "us"). This policy explains what the app keeps, why, who else sees it, and how you can see, change or delete it. It applies to the iPhone app and the web app.

We wrote it in plain words because children and families use the app. If anything is unclear, write to support@rytopium.com.

The short version

No ads. No selling or sharing data for advertising. No third-party tracking or analytics.
For children (12 and under) we keep a first name and age group, plus their progress (stories, stickers, stars, streaks). No email, no photo, no location, no contacts.
Children never chat with strangers. Leaderboards show only family and the church group a grown-up joined.
Grown-ups sign in with an email code (or Sign in with Apple, when it is switched on).
Questions asked to the Explainer go to an AI service (Claude, by Anthropic) through our own server, with a safety check first. The AI provider does not get a name, email or account id.
A grown-up can delete the account, and everything that belongs to it, from inside the app.

Who the app is for

The app has five age areas: 5 and under, 6 to 8, 9 to 12, 13 to 17, and grown-ups (18 and over). Children's areas are set up by a grown-up, who passes a grown-up check and makes a PIN. Settings, purchases and anything that leaves the app sit behind that grown-up gate.

What we keep, and why

On the phone only

Most of the app works on the phone without an account. The phone keeps: the chosen age area, the first name, settings (text size, background, reminders, narrator), the grown-up PIN (only on the phone), reading place, highlights and notes before they sync, offline stories and Bible text, the trial start, the purchased plan, and a random device id used to count daily questions. What you write in "A word for me" stays on the phone.

In your account (Supabase)

When you use the app, it signs in to our database (Supabase, a hosted service [Ryan: confirm the region, e.g. Sydney ap-southeast-2]) so progress follows you to a new phone. Children and teens get an anonymous sign-in: no email. Grown-ups sign in with an email address. The database holds:

What	Who	Why
First name, age group	everyone	to greet you and show the right area
Nickname	13 and over only (children never have one)	shown on leaderboards instead of a name
Email address	grown-ups	to sign in with a one-time code
Family links and short-lived family codes	a grown-up and their children	so a parent can see a child's progress
Notes, highlights, saved verses, study progress	the person who made them	to keep them between phones
Streaks, badges, stickers, story progress, stars, points, XP	everyone	rewards and progress
Weekly points, friend links, church group membership	everyone in a family or church group	family and church leaderboards
Prayer requests, testimonies (title, topic, story), reactions, saves and reports	13 and over	the prayer wall and testimonies. Testimonies are read by a moderator before anyone else sees them; prayers can be hidden by a moderator
Video links suggested to us	13 and over	a moderator reviews them
Story schedules	a grown-up for their child	stories shown at a chosen time
Trial start	grown-ups	so a reinstall does not restart the 7-day trial

Testimonies and prayers are shown without your name. Children (12 and under) cannot post.

Questions to the Explainer (AI)

When someone asks the Explainer a question, or asks for "A word for your day", the app sends the question, the age area, the Bible passage and the name the user gave the Explainer to our own server (a Cloudflare Worker). The server:

checks the message first. If it sounds like someone may be unsafe or hurting (for example self-harm, abuse, or a stranger asking to meet), the message is not sent to the AI; the app shows a "talk to a grown-up / where to get help" reply instead;
sends the rest to Claude, an AI model made by Anthropic, with instructions to answer kindly, for that age, from the Bible, and never to ask for personal details;
keeps a daily count per random device id (in Cloudflare D1) to apply the daily limit. It does not keep the questions or answers.

Anthropic receives the question text, not a name, email, account id or device id. Under Anthropic's commercial terms, it does not use this data to train its models and keeps it only for a limited time for safety checks [Ryan: link Anthropic's current commercial privacy terms].

Replies in the grown-ups' anonymous chat pass a kindness check before they are shown.

Crash reports

If crash reporting is switched on in a build, crash details (what went wrong in the code, the app version, the phone model and system version) go to Sentry. We switch off names, accounts and IP addresses in those reports. Today it is switched off: no build has a Sentry key yet. [Ryan: keep this sentence only while it is true.]

Purchases (iPhone)

Bible+ packs are bought through Apple. We never see card details. Apple tells RevenueCat (the service that checks purchases for us) which pack is active, linked to the grown-up's account id. RevenueCat gets no name or email from us.

Videos

In the 13 to 17 and grown-up areas, some videos are YouTube lessons and sermons, played in YouTube's privacy-enhanced mode (youtube-nocookie.com). When one plays, YouTube (Google) receives the request like any website would. Children's areas do not show YouTube videos.

Reminders

Verse-of-the-day and prayer reminders are made on the phone. No push server is used.

What we never do

No advertising, no ad networks, no ad identifiers (IDFA). We do not ask to track you across apps.
No third-party analytics or tracking.
We do not sell or rent personal information.
We do not collect location, contacts, photos, camera or microphone.
Children cannot share personal information with other people in the app.

Children's privacy (COPPA and the Australian Privacy Act)

A child's area is set up by a parent or carer, who passes the grown-up check and sets a PIN.
For children we collect only a first name, age group and progress, which is what the app needs to work. We do not ask a child for an email, a photo or where they live, and the AI is told never to ask.
A parent can see the child's progress, change limits, and delete the child's data (see below).
We do not show ads to children or use their data for advertising, and we do not let them talk to strangers.
If you think a child has given us personal information they should not have, write to support@rytopium.com and we will delete it.

We follow the Australian Privacy Principles (Privacy Act 1988) and, for families in the United States, the Children's Online Privacy Protection Act (COPPA). Families in the UK and EU have the rights below too.

Where the data is

Supabase (database) [Ryan: region], Cloudflare (the web app and our server, worldwide), Anthropic (AI, United States), Apple and RevenueCat (purchases, United States), Sentry (crash reports, only if switched on, United States). These companies process data for us under their own security and privacy terms.

How long we keep it

Account data: until the account is deleted.
Family and friend codes: 15 minutes.
Daily question counts: a few days.
Moderation decisions stay with the post until it is deleted.

Your choices and rights

See or change: most of your data is on screen (notes, highlights, progress, name).
Delete everything: grown-ups: Profile > Delete account. This deletes the account and everything linked to it (profile, notes, highlights, progress, prayers, testimonies, schedules, codes, links). A linked child's own progress is a separate (anonymous) account: write to us and we delete it, or remove the app from the child's phone. "Start again as a new user" clears the phone.
A copy, a correction, or a question: write to support@rytopium.com. We answer within 30 days.
Complaints: you can also contact the Office of the Australian Information Commissioner (oaic.gov.au).

Security

Data travels over HTTPS. The database lets each person read only their own rows (and a parent their children's). The grown-up PIN never leaves the phone.

Changes

If we change this policy we will update the date above and, for important changes, tell grown-ups in the app first.

Contact

Rytopium Industries [Ryan: postal address], support@rytopium.com