Privacy Policy

1. INFORMATION WE COLLECT

We collect information you provide directly to us, information collected automatically through your use of the Service, and information from third-party sources as described below.

1.1 Information You Provide Directly

We may collect the following categories of personal information that you voluntarily provide:

• Account Information: When you create an account, we collect your email address, display name, and password. If you register using a third-party service (such as Google), we receive your name and email address from that service.
• Profile Information: Any additional information you choose to add to your profile, such as a profile picture or biographical information.
• Phone Number: If you choose to provide your phone number (for receiving SMS notifications or sending SMS invitations to accountability partners), we collect and store your phone number. Providing a phone number is optional.
• Emotional Check-In Data: Information you provide during emotional check-ins, including your selected emotions, emotion intensity levels, timestamps, and any notes or context you provide. This data is stored to track your emotional journey over time and provide personalized Scripture recommendations.
• Flare History: Records of "Flare" notifications you send to accountability partners, including timestamps, emotional state at the time of sending (if shared), and delivery status. This data helps you and your accountability partners track when you needed support.
• Accountability Partner Information: Email addresses, names, and phone numbers of individuals you invite to be accountability partners through the Service.
• Communications: Information you provide when you contact us for support, submit feedback, or otherwise communicate with us.
• Payment Information: If you make purchases through the Service, our third-party payment processors collect payment card information. We do not store complete payment card numbers on our servers.

1.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain information, including:

• Usage Data: Information about your interactions with the Service, including features used, content viewed, actions taken, date and time of access, and duration of use.
• Device Information: Information about the device you use to access the Service, including device type, operating system and version, unique device identifiers, browser type and version, and mobile network information.
• Log Data: Server logs that record information such as your IP address, access times, pages viewed, app crashes, and other system activity.
• Location Data: With your consent, we may collect precise or approximate location data from your device. You may disable location collection through your device settings, though this may limit certain features of the Service.
• Cookies and Similar Technologies: We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activities. See Section 9 for more information.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Google OAuth Authentication: If you choose to sign in using Google, we use Google OAuth 2.0 for authentication. Through this process, we receive your Google account email address, display name, and profile picture. We do not receive your Google password. Google's use of your information is governed by Google's Privacy Policy. You can revoke Scriptive's access to your Google account at any time through your Google Account settings.
• Analytics Providers: We receive aggregated analytics data from third-party analytics services.
• Accountability Partners: Your accountability partners may share information about their interactions with you through the Service.

2. ARTIFICIAL INTELLIGENCE AND AUTOMATED PROCESSING

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

3.1 Provide and Maintain the Service

• Create and manage your account;
• Provide personalized Scripture and content based on your emotional check-ins;
• Enable accountability partner connections and notifications;
• Track your emotional journey and progress over time;
• Process transactions and send related information.

3.2 Improve and Develop the Service

• Analyze usage patterns to improve features and user experience;
• Conduct research and development;
• Test new features and functionality;
• Monitor and analyze trends, usage, and activities.

3.3 Communicate with You

• Send you technical notices, updates, security alerts, and administrative messages;
• Respond to your comments, questions, and support requests;
• Send you promotional communications (with your consent where required);
• Provide notifications you have requested or enabled.

3.4 Protect and Secure

• Detect, investigate, and prevent fraudulent transactions and other illegal activities;
• Protect the rights, property, and safety of Scriptive, our users, and others;
• Enforce our Terms of Use and other policies;
• Comply with legal obligations.

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Your Consent

We share information with your accountability partners when you explicitly choose to connect with them through the Service. You control what information is shared with your accountability partners through your privacy settings.

4.2 Service Providers

We share information with third-party vendors, consultants, and service providers who perform services on our behalf, such as:

• Cloud hosting and infrastructure providers (e.g., Supabase, Vercel);
• AI service providers (e.g., Google AI, OpenAI) for Scripture recommendations and explanations;
• Authentication providers (e.g., Google OAuth);
• Payment processors;
• Analytics providers;
• Email and communication service providers;
• Customer support platforms.

These service providers are contractually obligated to use your information only for the purposes of providing services to us and in accordance with this Privacy Policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• A subpoena, court order, or other legal process;
• A request from a law enforcement or government agency;
• To protect the rights, property, or safety of Scriptive, our users, or others;
• To investigate potential violations of our Terms of Use;
• To detect, prevent, or address fraud, security, or technical issues.

4.4 Business Transfers

In connection with any merger, acquisition, financing, sale of company assets, or transition of service to another provider, your information may be transferred as part of such transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

4.5 Aggregated or De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, marketing, analytics, and other purposes.

5. DATA SECURITY

We implement appropriate technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL;
• Encryption of sensitive data at rest;
• Regular security assessments and penetration testing;
• Access controls limiting employee access to personal information;
• Employee training on data protection and security practices.

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6. DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period may vary depending on the context of processing and our legal obligations.

Specifically:

• Account Information: Retained while your account is active and for a reasonable period thereafter to comply with legal obligations and resolve disputes.
• Emotional Check-In Data: Retained while your account is active. You may request deletion at any time.
• Usage Data: Generally retained for up to twenty-four (24) months for analytics purposes.
• Communications: Retained for as long as necessary to resolve inquiries and for our records.

Upon account deletion, we will delete or anonymize your personal information within thirty (30) days, except where retention is required by law or for legitimate business purposes.

7. YOUR RIGHTS AND CHOICES

Depending on your location, you may have certain rights regarding your personal information. These rights may include:

7.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of such information in a structured, commonly used, and machine-readable format.

7.2 Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.

7.3 Deletion

You have the right to request that we delete your personal information, subject to certain exceptions provided by law.

7.4 Opt-Out of Marketing

You may opt out of receiving promotional communications from us by following the unsubscribe instructions in those messages or by contacting us directly. Even if you opt out of promotional communications, we may still send you non-promotional messages, such as those about your account or our ongoing business relations.

7.5 Location Data

You may disable location collection through your device settings at any time. Note that disabling location services may limit certain features of the Service.

7.6 Push Notifications

You may disable push notifications through your device settings or within the Application settings at any time.

To exercise any of these rights, please contact us at privacy@scriptive.org. We will respond to your request within the timeframe required by applicable law.

8. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

9. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to collect and store information when you access the Service.

9.1 Types of Cookies We Use

• Essential Cookies: Required for the operation of the Service. These include cookies that enable you to log in and access secure areas.
• Analytics Cookies: Allow us to recognize and count visitors and see how visitors navigate the Service. This helps us improve how the Service works.
• Functionality Cookies: Used to recognize you when you return to the Service and enable personalized features.

9.2 Your Cookie Choices

Most web browsers are set to accept cookies by default. You can usually modify your browser settings to decline cookies if you prefer. However, if you choose to decline cookies, you may not be able to use certain features of the Service.

9.3 Do Not Track

Some browsers have a "Do Not Track" feature that signals to websites that you do not want your online activities tracked. The Service does not currently respond to "Do Not Track" signals.

10. CHILDREN'S PRIVACY

The Service is not intended for use by children under the age of thirteen (13). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at privacy@scriptive.org. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete that information.

For users between the ages of 13 and 18, we recommend that a parent or guardian review this Privacy Policy with you before using the Service.

11. INTERNATIONAL DATA TRANSFERS

Scriptive is based in the United States, and the information we collect is governed by U.S. law. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

By using the Service, you consent to the transfer of your information to the United States and other jurisdictions as described in this Privacy Policy. We will take appropriate measures to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable law.

12. THIRD-PARTY LINKS AND SERVICES

The Service may contain links to third-party websites, applications, or services that are not owned or controlled by Scriptive. This Privacy Policy applies only to the Service. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.

We encourage you to review the privacy policies of any third-party websites or services that you visit or use.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by:

• Posting the updated Privacy Policy on the Service with a new "Last Updated" date;
• Sending you an email notification (if you have provided us with your email address);
• Displaying a prominent notice within the Application.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically for any changes.

14. GOVERNING LAW

This Privacy Policy and any disputes arising out of or related to this Privacy Policy or the collection and use of your personal information shall be governed by and construed in accordance with the laws of the State of Idaho, United States of America, without regard to its conflict of law provisions.

Any disputes shall be subject to the dispute resolution and arbitration provisions set forth in our Terms of Use.

15. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will respond to your inquiry within a reasonable timeframe and in accordance with applicable law.