Privacy
You do not need an account to open Scripture Lens. The app is designed so that ordinary reading and device-local study can work without building an advertising profile.
Bookmarks, highlights, notes, reading progress, display settings, memory practice, and other personal study state are stored in browser storage unless you intentionally use account synchronization. Clearing site data or changing devices can remove unsynchronized information.
Signing in can synchronize supported study state and identify participation in private group features. Account routes receive the identity supplied by the hosting sign-in system. Scripture Lens does not ask you to create a separate password inside the app.
The marketing counter records only the UTC day, a limited event name, a campaign source supplied in the link, a campaign label, a broad feature category, and an aggregate count. It measures app and chapter opens, visible-reader activity, study-tool views, playback runs, recorded-audio download outcomes, sharing, and installation actions. It does not collect a person-by-person journey or exact reading passages. Public welcome/discovery pages, unknown ages, under-18 readers, and parent sessions on an under-18 device are excluded. Its application table does not store an IP address, user-agent string, search query, Bible note, assistant question, email address, or account identifier.
Delete your Scripture Lens account and associated data. Sign in and explicitly confirm to remove app account records, synchronized studies, group participation, directly linked safety and moderation records, feedback, and uploaded feedback files automatically. Group creators choose a successor or confirm closure when no other active members remain. File cleanup is queued durably and retried after interruptions. The page reports pending cleanup separately from completed deletion.
The public page also offers an email request without sign-in or app reinstallation. A minimal app-specific sign-in identifier, deletion status, and timestamps are retained for 90 days after completion to block older sessions from restoring deleted data; expiry is cleaned up during normal app requests. Pending file identifiers are cleared when cleanup completes. Other devices, downloaded PDFs, independent browser-bound PIN records, and provider logs/backups require the separate steps explained on that page. This deletes Scripture Lens data, not your ChatGPT account. Contact support for provider-record requests and applicable retention details.
A neutral welcome screen asks for the reader’s age range without a default selection. The app saves a range, not a birthday. Unselected ages and readers under 18 cannot access ordinary accounts, AI, groups, uploads, cloud synchronization, donations, marketing, or external translation. Children and teens have a separate study space with 135 selected English KJV lessons, quizzes, memory practice, activities, and discussion prompts. Lesson progress stays on the device and is never included in account synchronization.
A random browser cookie identifies an account-independent record with the selected age range, mode, optional salted PIN and recovery-code hashes, failed-attempt counters, and expiry times. It is used only for access control and security, not marketing. Controls expire after at most 90 days; expired records are removed during normal app and family-API requests. An idle site removes them on its next request. A parent can immediately delete the current record and clear local lesson progress in Age & parent controls. Standard hosting and security connection logs and provider backups have separate retention practices that require operator verification.
Correcting a minor’s range requires a parent PIN; a parent first sets one if none exists. A 15-minute parent session opens the full app without changing the child’s age. A self-declared age or PIN is not verified parental consent for collecting children’s information. The protected space avoids account and sharing features. See Privacy for families for complete controls, data details, and device limits.
The app’s aggregate marketing events are skipped when the browser expresses Do Not Track or Global Privacy Control. Only shared campaign codes from a link are carried into the reader; ad-click identifiers are not forwarded. In the adult app, a short campaign label may be retained on the device for up to 30 days so a later meaningful action can be attributed to the original shared link.
The existing welcome page at / and /discover offers an optional, separate choice to allow Google Ads measurement for that visit. Nothing is preselected. The Google tag is not loaded unless the reader explicitly allows it and the app’s server confirms a saved adult age range. Unknown ages, under-18 ranges, parent sessions on a child’s device, embedded previews, and browsers expressing Do Not Track or Global Privacy Control do not qualify.
When allowed, Google can receive the welcome-page address, a limited ad-click identifier, technical connection information such as IP address, and a Start reading click when that conversion has been configured. Scripture Lens does not send notes, prayer entries, searches, verse choices, reading progress, group content, email addresses, or account identifiers to this tag. It does not configure Google Analytics or enhanced-conversion user data. The tag disables advertising personalization, remarketing collection, automatic page-view events, URL passthrough, and first-party conversion-linker cookies, and requests restricted data processing. These restrictions reduce attribution accuracy and do not make a Google request anonymous.
The Google script runs in the welcome document on this website’s origin; it is a third-party service, not a separate storage sandbox. Google may process connection information or existing Google-side identifiers under its own policies. Opening the reader loads a fresh document without the tag, and ad identifiers are not added to that link. Permission is not saved for a later visit. Use Turn off measurement on the welcome page to reload it without the tag; information already sent cannot be recalled. Google’s privacy policy explains its processing.
Bible-version requests, automated interface translation, the generative Scripture Lens Assistant, professional-audio links, Venmo, and other external resources may be processed by their respective services when you choose to use them. A generative assistant request includes the question, recent assistant conversation, the current app screen, a built-in app feature guide, and—when the Bible reader has been opened—the current reader location, nearby verses, and available passage-study context. Private notes are not automatically included. Before a generated answer is shown, its complete draft is sent through the existing AI service again for a separate language-safety review. That review receives the draft without your conversation history or additional private notes. Blocked, incomplete, or failed reviews show a fixed message; unapproved drafts are not stored in your study data or added to the displayed conversation. Scripture Lens explains these boundaries at the point of use. Hosting and infrastructure providers may also process standard security and technical logs under their own policies.
When activated, the optional background generator sends your visual description and selected art style to Cloudflare Workers AI for a prompt-safety check and background generation. The app does not add your verse text, reference, email address, private notes, prayers, or reading history to those requests. Exact verse text and its reference are placed over the background on your device. Generated backgrounds are illustrations, not evidence of historical appearance.
This account feature is unavailable in protected study. Three generation attempts are allowed per signed-in account per UTC day. Blocked, failed, or uncertain provider attempts can count; stored backgrounds can be reused without another generation. The app also enforces a shared monthly generation allocation. Hosting, storage, and unrelated provider use have separate costs.
Generated backgrounds are stored privately with an app account identifier, random request identifier, style, timestamps, status, and usage accounting. A request fingerprint supports duplicate-request protection; the app does not retain the prompt text or log provider image contents. You can remove backgrounds from Verse Card Maker. Account deletion removes their access and queues the image files for cleanup, including a short delay for requests already processing. Anonymous allowance records are retained to prevent deletion from resetting the shared budget. Cloudflare may process content and technical logs under its own policies; no zero-retention guarantee is implied. Downloaded or shared images are independent copies.
Group names, member display names, roles, discussion notes, and shared reading progress are stored with your account identity. Approved group members can see shared discussion and progress. Admins can also see join requests and moderate the group. Invite codes are shown only to group admins; new groups require admin approval before a person can enter.
Your block list and hidden-note preferences are stored with your account. Blocking hides both people’s notes and shared progress from each other across private groups. Admins may still see reported or pending content for moderation. Reports store the reason, any details you provide, the reported person’s identity, and a copy of the reported note. Group admins can review ordinary member reports; reports about admins go to the Scripture Lens owner. The owner can review all group safety reports. The reporting account identifier is stored but is not displayed in the review screens. Details you type may identify you, so include only what is needed.
Moderation decisions are recorded. Removing a note clears it from the discussion, while copies already included in safety reports remain available for review. Leaving a group removes your shared progress, but previously shared notes remain unless you remove them. A membership record may be retained to preserve moderation restrictions if you rejoin. The primary admin must transfer leadership to another approved member before leaving or, if no other approved members remain, delete the group. Deletion removes group discussion, memberships, pending requests, and shared progress; safety reports and moderation records are retained. Approved members can download visible published discussion and shared progress as a PDF. Downloaded copies cannot be recalled by later changes or deletion in the app. Bible PDFs can include your saved verse notes; these PDFs are generated on your device without uploading your private notes to a PDF service. See the group rules and safety guide in the adult app for reporting and blocking instructions.
Bug reports, suggestions, private replies, status history, and read markers are stored so you and the owner can follow the conversation. Contact email is optional. Signed-in reports are linked to your app account. New guest reports use a random, secure browser cookie, with only its hash stored with the report; this cookie is used only to open your feedback, not to track your Bible study. Guest access is limited to the submitting browser and lasts until cookies are cleared or the access cookie expires (up to one year). Anyone using that browser can access its guest conversations. Clearing the cookie removes access but does not delete stored reports; ask the owner to delete a report from its conversation before clearing access. Older anonymous reports cannot be claimed by email or confirmation number. In-app unread notices are checked while the app is open and online; no feedback email or push notifications are sent automatically. Account deletion removes linked feedback and its conversation, and owner deletion removes the report, conversation, and attachments. Study backups do not include feedback conversations. If you attach a file, it is stored with the report and may contain information visible in the attachment. Do not upload secrets, financial information, or private material that is unnecessary to diagnose the issue.
If you keep Include helpful context enabled, the report also includes a snapshot of the selected passage and Bible version, active app screen, audio and display settings, connection state, and browser details. You can review or omit this snapshot before submitting. It does not include your private notes, messages, passwords, or browsing history.
When you choose a published recording, Scripture Lens requests its verse text and audio from Cloudflare. You can stream chapters or download a complete Bible version and voice to this device. Downloads are checked against their published file fingerprints. Verse highlighting follows the recording’s timestamps. Playback position and downloaded files stay in this browser and are not synchronized with your account. Manage or remove recordings in Downloads → Recorded Bibles. Browsers may clear saved files when storage is low. Cloudflare and the app host receive normal file requests and connection information; your private notes are not included.
When you select or preview an app voice, Scripture Lens downloads the free standard or natural voice engine and language files from this app. Natural voice files are saved in verified parts so interrupted downloads can resume. Progress and a Ready message show when installation finishes. Speech is generated in your browser; passage text and generated audio are not sent to a speech service. The engine, selected voices, and generated chapter audio may remain in browser storage for reuse. Saved audio includes its Bible text and is grouped by version, voice, and speed; manage or remove it in Downloads. Generated chapter audio is limited to 1 GB and is not included in account synchronization. An optional speed test saves the engine choice and timing results on this device. Guided-study reflections save with your study documents and use the existing optional study synchronization. The download providers receive normal file requests and connection information. No voice account or paid speech service is required. Device voices remain a separate option and may use the phone or browser provider’s speech service.
The optional PIN, device biometric prompt, and authenticator-code features protect access on that device. Their availability depends on browser and device capabilities. Both the parent PIN and private-study PIN support recovery options set up while the PIN is known: a saved backup code, three private recovery phrases, and a verified adult email when email delivery is configured. Recovery phrases and codes are salted/hashed; optional email addresses and private-study recovery keys are encrypted on the server. The private-study recovery record contains no notes, PIN, or authenticator secret: the authenticator recovery bundle remains encrypted in this browser. Email delivery, when enabled, uses Resend to process the recovery address and security messages. The owner’s Resend API key is encrypted on the server until removed through Recovery email setup. Connection verification sends a temporary setup code to the adult inbox chosen by the owner. That address stays encrypted with the saved connection settings; only a salted hash of the code is saved. The owner can see the latest test result, and technical logs contain a fixed error category and reference without the address, key, or code. Codes expire after ten minutes and are single-use; requests and guesses are limited. Private-study recovery records expire after 90 days and are removed when the lock is disabled online. Parent recovery expires with or is deleted with its parent-control record. Recovery is browser-specific and does not reset account sign-in or the device’s own passcode. Authenticator protection remains required if it was enabled. A local lock is not a substitute for securing the device itself or keeping recovery information safe.
Last updated: October 3, 2026 · Operator: Levi Ballard, Scripture Lens. Parents and other readers can contact scripturelensbibleapp@gmail.com for privacy questions or deletion requests. Adults can also use Report or suggest in the app menu.