Privacy Policy

1. Who we are

Ingrain (the “App“) and the website at ingrainbible.com (the “Site“) are operated by Ingrain LLC, a Colorado limited liability company whose sole member is MyVersion LLC (“Ingrain,” “we,” “us,” or “our“).

For the purposes of the EU and UK General Data Protection Regulation, Ingrain LLC is the data controller for personal data described in this policy.

Mailing address: 1500 N Grant St, Ste R
Denver, CO 80203, USA
Email:support@ingrainbible.com

2. Scope of this policy

This policy explains what information we collect when you use the Ingrain mobile apps for iOS and Android, the Ingrain web app at app.ingrainbible.com, and the marketing website at ingrainbible.com, and how we use, share, and protect that information.

It does not apply to third-party services you may reach from the App or Site, including the Apple App Store and Google Play, which handle your information under their own privacy policies.

3. Information we collect

3.1 Information you provide directly

Category	What it includes	When we collect it
Account information	Email address and a securely hashed password	Only if you choose to create an account
Learning content	Verses and chapters you’ve started, milestone progress, streaks, practice scores, quiz and trivia results, trivia XP and level, favorites, highlights, saved trivia questions, and your own custom verse lists and passage plans	As you use the App; synced to our servers only if you have an account
Preferences	Preferred Bible translation, reader font and theme settings, notification times, audio playback speed and pause length	As you set them
Group information	Group names you create, join codes, group membership, and the display name you choose to show other members	Only if you create or join a group (see §3.6)
Voice recordings	None. Speech recognition runs entirely on your device and no audio is ever transmitted to us	Never (see §3.4)
Support & marketing	Your email address and the contents of your message	If you email us or subscribe to our mailing list
Referral code	A partner or social referral code you enter, and the fact that a promotional benefit was applied to your account	Only if you enter a code during onboarding

3.2 Information collected automatically

• Device and technical data — device type, operating system version, app version, language, and general region.
• Usage data — screens viewed, features used, session length, and interactions with the App and Site. Collected through Google Analytics, which runs in the mobile apps, the web app, and on our website. You can switch this off in the App at Settings → Privacy → Usage Analytics (see §3.14).
• IP address — received automatically when your device connects to our servers or to our analytics provider. Google Analytics is configured to anonymize IP addresses where that setting is available.
• Subscription events — purchase, renewal, trial start, and cancellation events, received through RevenueCat and the app stores. We also provide RevenueCat with your name and email address, and record which paywall a purchase came from and how long after signing up it happened (see §3.15).

3.3 Guest mode

Ingrain is designed to work without an account. If you use the App as a guest, your progress, streaks, favorites and settings are stored locally on your device and are not transmitted to us.

If you later sign in, what happens depends on which case you’re in. Creating a new account uploads your guest data into it. Signing into an account you already have merges the two: we take a snapshot of what’s on the device, fetch what’s on the account, and combine them, rather than one side overwriting the other. Only then is the result saved back to your account.

3.4 Voice input — your recordings never leave your device

Two features use your microphone: the Speak It exercise, and hands-free audio memorization, where you say a verse back aloud.

Your spoken audio is converted to text on-device, compared against the verse, and scored. The audio and the transcription are both discarded immediately afterward. Only the resulting score is saved to your progress.

You can decline or revoke microphone permission at any time in your device settings. Every other part of the App continues to work normally without it — Speak It and hands-free practice are simply unavailable.

3.5 Verse audio playback

The Listen exercise and hands-free memorization play verse audio spoken by a synthetic AI voice. This audio is generated on our servers, not on your device.

Requesting audio for a passage transmits only the verse reference — for example “John 3:16” — to our audio provider. It does not transmit your identity, your account, your progress, or anything you have said. Once generated, audio is cached so that repeat playback is fast.

To be explicit about the distinction: audio travels to your device from us. Audio never travels from your device to us.

3.6 Groups — information other people can see

Groups are the only feature in Ingrain where your information becomes visible to another person. Please read this section before joining one.

If you create or join a group, other members of that group can see:

• The display name you choose for that group
• Your number of memorized passages
• Your current streak

Other members cannot see: your email address, your account details, which specific verses you are learning, your quiz or trivia results, your recall scores, or anything else in your account.

We store the group name, its join code, and the list of members on our servers so the group can function across devices. Groups contain no messaging, comments, posts or photos — there is no way for members to send each other content of any kind.

Your control: you choose your display name and can change it, and you may leave a group at any time, which removes your information from that group’s view. A group’s creator can remove members and delete the group entirely. Deleting a group removes it and its membership records from our systems.

3.7 Shared verse images

Ingrain can turn a verse — or a completed passage milestone — into an image you can share. These images are generated on your device and handed to whichever app you choose to share through. We do not receive, store or track the images you create, and we do not know who you send them to. Once an image leaves Ingrain, the receiving app’s own privacy terms apply.

On iPhone and iPad, saving an image to your Photos library requires your permission the first time, which iOS will ask for. That permission only allows Ingrain to add images; it does not give us access to your existing photos, and we never read your library. On Android, images are passed to the system share sheet instead, so Ingrain requires no photo-library access at all.

3.8 Scripture Reference Import

Ingrain+ members can paste a link to a supported public video or a transcript, and Ingrain will find the Scripture references inside it and offer to build a verse list.

What happens to what you submit. The link or text you provide is sent to our processors to be read and analysed — Supadata retrieves the transcript for a supported public link, and Cloudflare Workers AI identifies Scripture references within the text. We keep the resulting list of verse references. We do not build a permanent archive of the transcripts themselves.

We also keep a short-retention record of import attempts. This exists to enforce rate limits and prevent abuse of the feature, not to profile you.

3.9 Scripture Compass

Ingrain+ members can describe a topic or phrase — for example “comfort during loss” — and Scripture Compass suggests verses that relate to it, which you then review before any are added to your list.

What happens to what you type. The topic text you enter is sent to our server to produce suggestions. We first look for matching references in a topical index of Scripture that is bundled with our own service, so many searches are answered without going anywhere else. Where additional suggestions are needed, the topic text is also sent to Cloudflare Workers AI as a supplemental source. Every suggestion returned is then checked against our own Bible data before you see it.

What we keep. We keep the verses you choose to add, because they become part of your list. We do not keep a log of the topics you search. Our diagnostic records for this feature are aggregate counts used to tell whether the feature is working — they do not include the text you typed.

Compass works only from the words you enter. It does not read your other lists, your highlights, your notes, your learning history, or anything else in your account in order to generate suggestions.

3.10 Ingrain Study

Ingrain Study is an Ingrain+ feature in the Bible reader. You pick a verse and one of six angles — Commentary, In Context, Book Background, History & Culture, People, or Places & Geography — and we generate an explanation using an AI service. You must be signed in to use it.

What is sent. A Study request sends only four things to our server, which passes them to Cloudflare Workers AI:

• The verse you selected
• Which translation you’re reading
• Which of the six angles you chose
• A limited amount of the surrounding passage, for context

What is not sent. This is the part worth being explicit about. A Study request does not include your email address or account identity, your learning progress, milestones, scores or streaks, your lists or favorites, your highlights, anything you have typed anywhere in the App, or any record of what else you have been reading. The AI service receives a Bible passage and a category. It does not receive you.

The results are shared, not personal. Study responses are cached by verse, translation, category, and prompt version — not by user. The cached text is material derived from public-domain Scripture, so two people who ask about the same verse from the same angle will usually be served the same stored response. That cache contains no user content and is not linked to any account. It exists so that a common question is answered instantly and without a repeat AI call.

Abuse safeguards, and what we log. To stop automated abuse we count requests per account and per requesting network over short windows. The network identifier is a one-way HMAC hash — we do not store your raw IP address for this purpose, and the hash cannot be reversed back into one. Our diagnostics for this feature are deliberately limited to aggregate counts and error classifications. We do not log the verses you study, the prompts sent, the responses returned, or your network address.

3.11 Support Ingrain contributions

Support Ingrain opens a contribution page hosted by Stripe. Contributing is entirely optional, and nothing about your account changes if you never use it.

We never see your card details. The page is Stripe’s, not ours. Your card number, security code, and bank credentials go directly to Stripe and are never transmitted to or stored by us. Stripe processes that information as its own controller under Stripe’s privacy policy.

From Stripe we receive the information needed to keep our own records — that a contribution was made, the amount, the date, and the contact details you gave Stripe, such as an email address for your receipt. We use that to acknowledge contributions, keep accurate books, and meet our tax and accounting obligations.

A contribution is not linked to your Ingrain account unless you use the same email address, and it does not change your entitlements, unlock Ingrain+, or affect what you see in the App. Contributions are voluntary and not tax-deductible — Ingrain LLC is a for-profit company, not a charity. See section 8 of our Terms of Use.

3.12 Verse backgrounds

Your Verse of the Day can be shown over public-domain artwork, a photograph, or a solid colour, chosen in Settings → Appearance.

We host the images ourselves. Artwork and photographs are served from our own domain, ingrainbible.com. They are not loaded from an advertising network, an image CDN that profiles visitors, or any third-party tracker. Displaying a background therefore involves no third party at all.

What that means in practice. Because your device requests an image file from our server, that request appears in our ordinary web server logs — including the IP address it came from, as described in §3.2. We use those logs to operate and secure the service. They are not linked to your Ingrain account or to the verse you were shown.

Images are also cached on your device, and a small set is bundled inside the app so a background still appears when you are offline. The Verse of the Day home screen widget uses only those bundled images, because widgets never make their own network requests.

The artwork collection is public domain and credited on the card and in any image you share. The photographs are licensed in a way that does not require crediting the photographer, which is why no photographer name is shown.

3.13 Onboarding measurement

To understand where new people get stuck in the first-run experience, Ingrain records a small, deliberately limited set of onboarding events — for example, that a step was reached or that the practice verse was completed.

What is recorded:

• A one-way hash of a random identifier generated on your device when you install the app. It is not your device’s hardware identifier, not an advertising ID, and cannot be reversed to identify your device.
• Your account ID, only if you have created an account by that point.
• The name of the event, from a fixed approved list, and which platform you are on.
• Short, structured details — never free text.

3.14 Usage analytics, and how to switch them off

We use Google Analytics to understand how Ingrain is actually used — which screens people reach, which features get used, how long sessions run, and where people get stuck. This runs in the mobile apps as well as the web app and our website.

What this is used for. Improving the product — finding the exercise people abandon, the screen that confuses, the feature nobody discovers. It is aggregate analysis of how the app performs.

What it is not used for. We do not use analytics to build advertising profiles, we do not sell this data, and we do not use it to target ads — there is no advertising in Ingrain at all. Analytics does not receive the Scripture you are learning as personal content, your notes, or your private study activity in a form we use to profile you.

Google processes this data under its own terms as described in Google’s information about how it uses data from sites and apps that use its services. IP addresses are anonymized where that setting is available.

3.15 Subscription data (RevenueCat)

Ingrain+ subscriptions are managed through RevenueCat, which verifies with Apple or Google that your subscription is valid and tells the App what you are entitled to.

What RevenueCat receives:

• Your name and email address
• Your account identifier and subscription status — active, trialling, lapsed, and the related events
• Which paywall a purchase was made from
• How long it was between creating your account and subscribing

The last two are there so we can tell which upgrade paths genuinely help people and which are just getting in the way.

4. What we don’t collect

• We do not collect your name, phone number, mailing address, or date of birth.
• We do not collect precise geolocation data.
• We do not access your contacts, camera, calendar, or health data. On iPhone, permission to save a share image lets us add to your Photos library — it does not let us read it.
• We never see or store your payment card details. All purchases are processed by Apple or Google.
• We do not collect your voice. Speech recognition happens entirely on your device; no recording is ever transmitted to us.
• We do not build advertising profiles, and we do not serve third-party ads in the App.
• We do not send your account or learning data to any AI service. Ingrain Study and Scripture Compass receive Scripture text and a category or topic — never your identity, progress, notes, or reading history.
• We never receive your payment details, for subscriptions or contributions. Apple, Google, and Stripe handle those.

5. How we use information

• To provide the App — running the spaced repetition schedule, tracking milestones and streaks, and generating your exercises and quizzes.
• To sync your progress across the devices where you’re signed in.
• To manage your account, including sign-in and password resets.
• To manage subscriptions — verifying entitlements, trials, and renewals.
• To send notifications you’ve enabled — daily reminders, evening nudges, streak-at-risk alerts, and milestone celebrations.
• To improve the App — understanding in aggregate which features are used and where people get stuck.
• To respond to you when you contact support.
• To send marketing email, but only if you have subscribed. Every marketing email includes an unsubscribe link.
• To protect the service — detecting abuse, fraud, and security incidents, and complying with legal obligations.

6. Legal bases for processing (EEA & UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following bases:

• Performance of a contract — to provide the App and your account, and to fulfil a subscription.
• Legitimate interests — to secure and improve the service, understand aggregate usage, and prevent abuse, balanced against your rights.
• Consent — for analytics cookies, marketing email, push notifications, and microphone access. You may withdraw consent at any time.
• Legal obligation — where we must retain or disclose data to comply with applicable law.

7. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share information only in these circumstances:

• With service providers who process data on our behalf under contract, listed in section 8.
• For legal reasons — to comply with a law, regulation, subpoena, or valid governmental request, or to establish or defend legal claims.
• To protect people — where we believe in good faith that disclosure is necessary to prevent fraud, address security issues, or protect the rights or safety of our users or the public.
• In a business transfer — if Ingrain LLC is involved in a merger, acquisition, or sale of assets, your information may transfer. We will notify you before your information becomes subject to a materially different privacy policy.
• With other members of a group you join — limited to your chosen display name, memorized passage count and streak. See §3.6.
• With your direction — when you ask us to.

8. Service providers

We use the following processors. Each is contractually limited to using your information only to provide services to us.

Provider	Purpose	Data involved
TiDB Cloud (PingCAP)	Cloud database for account and progress sync	Email, hashed password, learning progress and settings
RevenueCat	Subscription management, entitlement verification, and subscription analytics	Account user ID, your name and email address, subscription status and events, which paywall a purchase came from, and the time between account creation and purchase (see §3.15)
Apple App Store / Google Play	Payment processing and subscription billing	Handled entirely by Apple or Google; we receive only transaction status
Google Analytics	Aggregate usage measurement in the mobile apps, the web app, and on ingrainbible.com	Device and browser data, screens and pages viewed, feature interactions, IP address (anonymized where available). Can be switched off in the App — see §3.14
Mailchimp (Intuit)	Marketing email to subscribers	Email address and email engagement data
Resend	Transactional email, including password resets	Email address
Jotform	Hosting the support contact form on our website	Whatever you submit: name, email address, device and app version, your message, and any file you attach
ElevenLabs	AI-generated verse and reference audio	Verse reference only; no personal identifiers
Cloudflare R2	Private storage for generated verse audio	Audio files and cache metadata; no personal identifiers
Supadata	Retrieving transcripts for Scripture Reference Import	The public link you submit (see §3.8)
Cloudflare Workers AI	Finding Scripture references in an imported transcript, supplementing Scripture Compass suggestions, and generating Ingrain Study explanations	Transcript text you submitted for import (§3.8); the topic text you type into Scripture Compass (§3.9); the selected verse, translation, category and limited surrounding passage for Ingrain Study — no account or progress data (§3.10)
Stripe	Hosting the voluntary Support Ingrain contribution page and processing contributions	Whatever you enter on Stripe’s page: payment details (which we never receive), amount, and contact details such as an email for your receipt (see §3.11)
Cloudflare Turnstile	Verifying you’re a person, not an automated script	Browser and device signals used for the challenge
Expo (650 Industries)	Push notification delivery	Anonymous device push token
Railway	Application hosting for app.ingrainbible.com and our backend services	Data transmitted between the App and our database; server logs including IP address
Hostinger	Web hosting for ingrainbible.com, and serving the artwork and photographs used as verse backgrounds	Server logs including IP address (see §3.12)

9. Cookies and analytics

The mobile apps do not use cookies.

The Site and web app use a small number of cookies and similar technologies:

• Strictly necessary — to keep you signed in and to remember your preferences. These cannot be disabled without breaking the service.
• Analytics — Google Analytics cookies that help us understand aggregate usage. These are optional.

In the mobile apps there are no cookies, but Google Analytics still runs. Turn it off at Settings → Privacy → Usage Analytics. See §3.14.

Where required by law, we ask for your consent before setting analytics cookies, and you can change your choice at any time through the cookie settings on the Site. You can also block or delete cookies through your browser settings, and you can install Google’s opt-out browser add-on.

We do not currently respond to browser “Do Not Track” signals, as no common standard has been adopted. We do honor Global Privacy Control (GPC) signals where required by applicable law.

10. Data retention

• Account data — kept while your account is active. If you delete your account, we delete your account record and synced progress from our production systems within 30 days, and from routine encrypted backups within 90 days.
• Local device data — remains on your device until you delete the App or clear its data. Deleting the App from your device does not delete a cloud account, and deleting a cloud account does not remove data already on your device.
• Voice recordings — never collected in the first place, so nothing is retained (see §3.4).
• Group data — group names, join codes and membership are kept while the group exists. Deleting a group removes them within 30 days.
• Email preferences and delivery records — we keep your email preferences and a record of messages we sent you, so we can honour unsubscribes, avoid emailing an address that bounces, and respond to spam complaints. Kept until you unsubscribe or delete your account, plus a suppression record so we don’t email you again.
• Scripture import records — a short-retention log of import attempts, used for rate limiting.
• Ingrain Study cache — retained indefinitely, because it holds Scripture-derived explanatory text keyed by verse, translation, category and prompt version. It contains no user content and is not linked to any account, so deleting your account does not need to remove it.
• Ingrain Study abuse counters — short rolling windows only (minutes to 24 hours), holding aggregate counts and a one-way network hash, never raw addresses.
• Contribution records — kept as long as our tax and accounting obligations require, generally seven years. Stripe retains its own records under its own policy.
• Onboarding measurement events — retained in aggregate for product analysis. They contain no free text, no hardware identifier and no email address (see §3.13).
• Analytics data — retained according to our Google Analytics configuration, currently 14 months.
• Support correspondence — kept up to 24 months.
• We may retain limited information longer where necessary to comply with law, resolve disputes, or enforce our agreements.

11. Security

We protect your information with measures including encryption in transit (TLS), encryption at rest for our cloud database, industry-standard password hashing, signed authentication tokens, and access controls limiting who can reach production systems.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password and let us know promptly at support@ingrainbible.com if you believe your account has been compromised.

12. Your rights and choices

Regardless of where you live, you can:

• Use Ingrain without an account, keeping your data entirely on your device.
• Access and correct your account information in the App’s settings.
• Delete your account and synced data from the App’s settings, or by emailing support@ingrainbible.com.
• Request a copy of the personal data associated with your account.
• Turn off notifications in the App’s settings or in your device settings.
• Revoke microphone access in your device settings.
• Unsubscribe from marketing email using the link in any such email.
• Turn off usage analytics in the App at Settings → Privacy → Usage Analytics.

To exercise any of these rights, email support@ingrainbible.com. We will respond within the timeframe required by applicable law — generally 45 days in the United States and one month in the EEA and UK — and we may need to verify your identity, usually by asking you to respond from the email address on the account. We will not discriminate against you for exercising your privacy rights.

13. U.S. state privacy rights

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, or another state with a comprehensive consumer privacy law, you may have the right to confirm whether we process your personal data and to access it; to correct inaccuracies; to delete it; to obtain a portable copy; and to opt out of targeted advertising, sale, or profiling with legal or similarly significant effects.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not engage in profiling with legal or similarly significant effects. We have not sold or shared personal information in the preceding 12 months, including the personal information of consumers under 16.

In the preceding 12 months we have collected the categories of personal information described in section 3 — identifiers, internet and network activity, audio information (transiently, per §3.4), and commercial information relating to subscriptions — for the purposes described in section 5, and disclosed them for business purposes to the service providers listed in section 8.

You may designate an authorized agent to make a request on your behalf; we will require written proof of authorization. If we deny your request, you may appeal by replying to our decision with the subject line “Privacy Appeal.” Colorado residents may also contact the Colorado Attorney General and California residents the California Privacy Protection Agency with concerns.

14. EEA and UK rights

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, rectify, erase, restrict, and port your personal data; to object to processing carried out on the basis of legitimate interests; and to withdraw consent at any time without affecting the lawfulness of processing already carried out.

You also have the right to lodge a complaint with your local supervisory authority. In the UK this is the Information Commissioner’s Office. We would appreciate the chance to address your concern first at support@ingrainbible.com.

15. Children’s privacy

Ingrain is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. You must be at least 13 years old to create an Ingrain account.

Because the App can be used as a guest without an account, a younger child may use it under a parent’s supervision without any information being collected by us.

If you believe a child under 13 has provided us with personal information, contact support@ingrainbible.com and we will delete it promptly. Parents and guardians may also contact us to review or delete their child’s information.

16. International data transfers

We are based in the United States, and our service providers may process data in the United States and other countries. If you access Ingrain from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, as applicable.

17. Changes to this policy

We may update this policy as the App changes or as the law requires. When we do, we’ll revise the “Last updated” date above. If the changes are material, we’ll give you prominent notice — by in-app notice, by email if you have an account, or both — before they take effect.

Continuing to use Ingrain after an update takes effect means you accept the revised policy.

18. Contact us

Questions, requests, or concerns about privacy:

Ingrain LLC
1500 N Grant St, Ste R
Denver, CO 80203, USA
Email: support@ingrainbible.com