This Privacy Policy explains how H.E.L.P.S. Ministries (“we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use Discovery Bible (the “Service”).
We designed this notice with international users in mind, including rights under the EU/UK GDPR and the California CCPA/CPRA. This draft is intended for public launch readiness and may be updated after legal review.
1. Who we are
H.E.L.P.S. Ministries operates Discovery Bible, a multi-tenant Bible study platform. Depending on how you access the Service (for example app.discoverybible.com or a church subdomain), your experience may be branded for a ministry partner (“tenant”), but account and study data remain scoped to the applicable tenant.
Privacy contact: hello@discoverybible.com.
2. Information we collect
We may collect:
- Account data: email address, authentication credentials (handled by our auth provider), and optional profile fields you provide
- Study content you create: notes, highlights, preferences, and reading history associated with your account
- Usage and device data: product analytics events (for example searches, word-study opens, highlight actions), approximate device/browser signals, and a device identifier used for feedback and analytics
- Technical logs: server and security logs needed to operate and protect the Service
- Communications: messages you send to us (for example support or error reports)
3. Cookies and similar technologies
We use essential cookies and similar storage to keep you signed in and to apply preferences. Authentication uses HttpOnly cookies via Supabase Auth (`@supabase/ssr`). These are necessary for the Service to function.
We do not use third-party advertising cookies. Preference cookies (for example appearance) may be stored so the UI can load correctly on return visits.
4. How we use information
We use personal information to:
- Provide, secure, and improve the Service (including multi-tenant isolation and abuse prevention)
- Authenticate users and manage sessions
- Sync notes, highlights, and preferences across your devices when you are signed in
- Understand product usage via first-party analytics so we can improve tutorials and features
- Respond to support requests and legal obligations
5. Legal bases (GDPR)
Where the GDPR applies, we process personal data on one or more of these bases: performance of a contract (providing the Service you request), legitimate interests (securing and improving the Service in ways that do not override your rights), consent (where we ask for it), and legal obligation when applicable.
6. Third-party services
We share data with processors who help us run the Service, under contracts that require appropriate safeguards:
- Supabase — authentication, PostgreSQL database, and related backend infrastructure
- Hosting infrastructure (for example DigitalOcean) — application hosting and delivery
- First-party product analytics — in-app usage events stored in our own systems to improve the experience (not sold for advertising)
7. Retention
We retain account and study data while your account is active and for a reasonable period afterward as needed for backups, dispute resolution, security, and legal compliance. You may request deletion of your account; we will delete or anonymize personal data except where we must retain it by law or for legitimate security purposes.
8. Your rights (GDPR and CCPA)
Depending on where you live, you may have rights to access, correct, delete, or export your personal information; to restrict or object to certain processing; and to withdraw consent where processing is based on consent.
California residents may have rights under the CCPA/CPRA to know, delete, and correct personal information, and to opt out of “sale” or “sharing” for cross-context behavioral advertising. We do not sell personal information for money, and we do not use it for cross-context behavioral advertising.
To exercise rights, email hello@discoverybible.com. We may need to verify your request. You may also have the right to lodge a complaint with a supervisory authority.
9. International transfers
We may process and store information in the United States and other countries where we or our processors operate. Where required, we use appropriate transfer safeguards (for example standard contractual clauses).
10. Children’s privacy
The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children under that age. If you believe a child has provided us personal information, contact us and we will take appropriate steps.
11. Security
We use administrative, technical, and organizational measures appropriate to the risk, including encrypted transport, authenticated sessions, and tenant-scoped data access. No method of transmission or storage is completely secure.
12. Changes
We may update this Privacy Policy from time to time. We will revise the effective date on this page and provide additional notice of material changes when required.
13. Contact
Privacy questions or requests: hello@discoverybible.com.
Controller / operator: H.E.L.P.S. Ministries.