Cornerstone

✝

Read the Bible, Learn the Faith

Privacy Policy

This policy explains what information the Cornerstone mobile app (“the app”, “we”, “us”) collects, why, and the choices you have. The app works fully offline, and creating an account is optional — most of your reading life stays on your device unless you choose to sync it.

Summary

• Your Bible reading, bookmarks, highlights, notes, quiz answers, reading progress, and streaks are stored on your device. If you never create an account, none of it is ever uploaded to any server.
• Creating a free account is optional. If you create one, your name, your email address, and the specific data listed below sync to our backend provider, Supabase, so it’s available across your devices. You can sign up with an email and password, or with Google or Apple.
• We collect anonymous, content-free usage analytics to understand which features are used and to improve the app. This never includes the text you read, the verses you look up, your search terms, or notes — regardless of whether you have an account.
• You can turn analytics off at any time in Settings → Privacy.
• We do not sell your data, show third-party ads, or track you across other apps or websites.

Information stored on your device

The following lives in a local database on your device:

• Bookmarks, highlights, and personal notes
• Reading progress, completed chapters, reading plans
• Quiz results, ranks, experience points, and streaks
• App settings and preferences (theme, translation, quiet mode, etc.)

If you don’t create an account, this data is never transmitted to us. Uninstalling the app, or clearing the app’s storage, permanently deletes it — we have no copy of it and cannot recover it. If you do create an account, some of this data syncs to our server so you can access it from another device; see the next section for exactly what.

Accounts and cross-device sync

Creating an account is optional and is only used to sync your progress across devices.

• To create an account you provide an email address and password, along with a first name (a last name is optional). These are stored and managed by our backend provider, Supabase (supabase.com); we do not see or separately store your plaintext password. Your name is used only to greet you inside the app.
• Instead of a password you may sign in with Google or with Apple. When you do, that provider confirms your identity to us and passes along your name and email address so we can create or match your account. We do not receive your password from them, and we do not read, post, or change anything in your Google or Apple account. If you use Apple’s Hide My Email, we only ever see the private relay address Apple generates for us. Your use of those sign-in services is also covered by Google’s and Apple’s own privacy policies.
• Once you’re signed in, the app automatically syncs the following to your account:
  • Bible and Catechism bookmarks, including any note you attach
  • Highlights, including color and any note you attach
  • Quiz results and your quiz streak
  • Your Bible and Catechism reading position
  • Reading-plan progress, including which chapters you read for a plan
  • Books-read history
  • Which guided devotions and prayers you have completed, and when
  • Baltimore Catechism No. 2 and No. 3 mastery and lesson-run counts
  • Know Your Bible course mastery and lesson-run counts
• The following stay device-only, even when you’re signed in: per-chapter view history, downloaded audio files, app-open telemetry, and the day’s quiz question selection.
• Signing out backs up any pending changes from that device and then clears this data from the device itself — it does not delete your account or the data already stored on our server. Signing back in (on any device) restores it.
• You can permanently delete your account and all data associated with it at any time from Settings → Account → Delete Account, or by emailing us at the address below if you’ve already uninstalled the app.
• Data sent to and from our server is encrypted in transit (HTTPS/TLS).

Anonymous usage analytics

To understand how the app is used and to prioritize improvements, the app sends anonymous, structural event data to our analytics provider, PostHog (posthog.com). Examples of events:

• A feature or tab was opened
• A chapter was completed, a bookmark or highlight was created
• A quiz was started or completed; a reading plan day was completed
• A rank advanced or a streak was extended
• An account was created, signed in, or signed out, and which method was used (email, Google, or Apple) — the fact that it happened, never your name, email, or password
• A search was performed (the fact that a search happened — never the search text)

Each event may include non-identifying structural details such as a numeric book identifier, but never scripture text, search queries, note contents, your name, your email address, or any free-form text you enter.

Alongside these events, our analytics provider receives:

• An anonymous device identifier generated by the analytics SDK. This is not linked to your account email or password.
• Basic device and app information such as device model, operating system version, app version, and language/region.
• Your IP address, which the provider uses to derive an approximate (city/country-level) location and is not stored by us as a precise location. We do not request GPS or precise-location permission.

We have configured analytics to disable session recording/replay and automatic capture of taps and screens. We use a single analytics provider as a data processor acting on our behalf; we do not share this data with other third parties.

Your choice

You can disable analytics entirely in Settings → Privacy. When disabled, the app stops sending any analytics events and the choice persists across app launches. Analytics is independent of whether you have an account — you can have an account with analytics off, or use the app anonymously with analytics on.

Website analytics (readcornerstone.com)

This section is about our website, not the app. When you visit readcornerstone.com, we record two kinds of anonymous event: that a page was viewed, and that an App Store or Google Play button was clicked. We use this to understand whether the site is doing its job; the store-button click is the only way we can tell an interested visitor from a passing one.

These events are sent to the same analytics provider as the app, PostHog, and include:

• A random visitor identifier stored in your browser, so repeat visits are not double-counted. It is generated from random numbers, contains nothing about you, and is not linked to your account, your email, or your app usage.
• The page you viewed, the site that referred you (if any), and any campaign tag in the link you followed.
• Basic browser information: browser name, operating system, whether you are on mobile, tablet or desktop, and your screen and window size.
• Your IP address, which the provider uses to derive an approximate (city/country-level) location. We do not store precise location.

The website sets no advertising cookies, runs no third-party ad or marketing trackers, and does not follow you to other sites. You can clear the visitor identifier at any time by clearing your browser storage for this site, and browser “do not track” or storage-blocking settings will simply cause a new random identifier each visit. The in-app Settings → Privacy toggle controls the app only, since the website has no access to your app settings.

Permissions the app uses

• Notifications — to send optional daily reading reminders. You control these in the app and in your device settings.
• Audio — to play and optionally download audio for listening.
• Network access — to send anonymous analytics, download optional audio, and, if you create an account, to sign in and sync your progress.

The app does not request access to your camera, microphone, contacts, precise location, photos, or files.

Sharing images and invite links

If you create a shareable verse image, that image is generated on your device. It is only shared if you choose to share it through your device’s standard share sheet (for example to a messaging app). We do not receive or store these images.

If you use the “Invite a Friend” feature while signed in, the link you choose to share includes your account email address as a ?ref= parameter, so we can credit you if the friend installs the app. This email is visible in the link itself to anyone who sees it. If you’re signed out, the link has no attribution and no personal information attached.

Children’s privacy

The app is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will address it.

Data security and retention

Data sent to our analytics provider is transmitted over encrypted connections (HTTPS) and is anonymous, containing no personal identifiers, so it cannot be tied back to you; you can stop all collection at any time via the in-app toggle. If you create an account, your name, your email address, and the synced data listed above are stored by Supabase, encrypted in transit, and retained until you delete your account. You may request deletion of your account, your synced data, or any analytics data associated with your device at any time by contacting us at the email below.

Changes to this policy

If we change this policy we will update the effective date above and, where appropriate, notify you within the app.

Contact

Questions or requests: michael@readcornerstone.com