Privacy Policy

1. Who we are

Ingrain (the “App“) and the website at ingrainbible.com (the “Site“) are operated by Ingrain LLC, a Colorado limited liability company whose sole member is MyVersion LLC (“Ingrain,” “we,” “us,” or “our“).

For the purposes of the EU and UK General Data Protection Regulation, Ingrain LLC is the data controller for personal data described in this policy.

Mailing address: 1500 N Grant St, Ste R
Denver, CO 80203, USA
Email:support@ingrainbible.com

2. Scope of this policy

This policy explains what information we collect when you use the Ingrain mobile apps for iOS and Android, the Ingrain web app at app.ingrainbible.com, and the marketing website at ingrainbible.com, and how we use, share, and protect that information.

It does not apply to third-party services you may reach from the App or Site, including the Apple App Store and Google Play, which handle your information under their own privacy policies.

3. Information we collect

3.1 Information you provide directly

Category	What it includes	When we collect it
Account information	Email address and a securely hashed password	Only if you choose to create an account
Learning content	Verses and chapters you’ve started, milestone progress, streaks, recall scores, quiz and trivia results, favorites, highlights, and your own custom verse lists	As you use the App; synced to our servers only if you have an account
Preferences	Preferred Bible translation, reader font and theme settings, notification times, audio playback speed and pause length	As you set them
Group information	Group names you create, join codes, group membership, and the display name you choose to show other members	Only if you create or join a group (see §3.6)
Voice recordings	None. Speech recognition runs entirely on your device and no audio is ever transmitted to us	Never (see §3.4)
Support & marketing	Your email address and the contents of your message	If you email us or subscribe to our mailing list

3.2 Information collected automatically

• Device and technical data — device type, operating system version, app version, language, and general region.
• Usage data — screens viewed, features used, session length, and interactions with the App and Site. Collected through Google Analytics on the Site and in the web app.
• IP address — received automatically when your device connects to our servers or to our analytics provider. Google Analytics is configured to anonymize IP addresses where that setting is available.
• Subscription events — purchase, renewal, trial start, and cancellation events, received through RevenueCat and the app stores.

3.3 Guest mode

Ingrain is designed to work without an account. If you use the App as a guest, your progress, streaks, favorites and settings are stored locally on your device and are not transmitted to us. If you later create an account, your local data is uploaded so it can be synced.

3.4 Voice input — your recordings never leave your device

Two features use your microphone: the Speak It exercise, and hands-free audio memorization, where you say a verse back aloud.

Your spoken audio is converted to text on-device, compared against the verse, and scored. The audio and the transcription are both discarded immediately afterward. Only the resulting score is saved to your progress.

You can decline or revoke microphone permission at any time in your device settings. Every other part of the App continues to work normally without it — Speak It and hands-free practice are simply unavailable.

3.5 Verse audio playback

The Listen exercise and hands-free memorization play verse audio spoken by a synthetic AI voice. This audio is generated on our servers, not on your device.

Requesting audio for a passage transmits only the verse reference — for example “John 3:16” — to our audio provider. It does not transmit your identity, your account, your progress, or anything you have said. Once generated, audio is cached so that repeat playback is fast.

To be explicit about the distinction: audio travels to your device from us. Audio never travels from your device to us.

3.6 Groups — information other people can see

Groups are the only feature in Ingrain where your information becomes visible to another person. Please read this section before joining one.

If you create or join a group, other members of that group can see:

• The display name you choose for that group
• Your number of memorized passages
• Your current streak

Other members cannot see: your email address, your account details, which specific verses you are learning, your quiz or trivia results, your recall scores, or anything else in your account.

We store the group name, its join code, and the list of members on our servers so the group can function across devices. Groups contain no messaging, comments, posts or photos — there is no way for members to send each other content of any kind.

Your control: you choose your display name and can change it, and you may leave a group at any time, which removes your information from that group’s view. A group’s creator can remove members and delete the group entirely. Deleting a group removes it and its membership records from our systems.

3.7 Shared verse images

Ingrain can turn a verse into an image you can share. These images are generated on your device and handed to whichever app you choose to share through. We do not receive, store or track the images you create, and we do not know who you send them to. Once an image leaves Ingrain, the receiving app’s own privacy terms apply.

3.8 Scripture Reference Import

Ingrain+ members can paste a link to a supported public video or a transcript, and Ingrain will find the Scripture references inside it and offer to build a verse list.

What happens to what you submit. The link or text you provide is sent to our processors to be read and analysed — Supadata retrieves the transcript for a supported public link, and Cloudflare Workers AI identifies Scripture references within the text. We keep the resulting list of verse references. We do not build a permanent archive of the transcripts themselves.

We also keep a short-retention record of import attempts. This exists to enforce rate limits and prevent abuse of the feature, not to profile you.

4. What we don’t collect

• We do not collect your name, phone number, mailing address, or date of birth.
• We do not collect precise geolocation data.
• We do not access your contacts, photos, camera, calendar, or health data.
• We never see or store your payment card details. All purchases are processed by Apple or Google.
• We do not collect your voice. Speech recognition happens entirely on your device; no recording is ever transmitted to us.
• We do not build advertising profiles, and we do not serve third-party ads in the App.

5. How we use information

• To provide the App — running the spaced repetition schedule, tracking milestones and streaks, and generating your exercises and quizzes.
• To sync your progress across the devices where you’re signed in.
• To manage your account, including sign-in and password resets.
• To manage subscriptions — verifying entitlements, trials, and renewals.
• To send notifications you’ve enabled — daily reminders, evening nudges, streak-at-risk alerts, and milestone celebrations.
• To improve the App — understanding in aggregate which features are used and where people get stuck.
• To respond to you when you contact support.
• To send marketing email, but only if you have subscribed. Every marketing email includes an unsubscribe link.
• To protect the service — detecting abuse, fraud, and security incidents, and complying with legal obligations.

6. Legal bases for processing (EEA & UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following bases:

• Performance of a contract — to provide the App and your account, and to fulfil a subscription.
• Legitimate interests — to secure and improve the service, understand aggregate usage, and prevent abuse, balanced against your rights.
• Consent — for analytics cookies, marketing email, push notifications, and microphone access. You may withdraw consent at any time.
• Legal obligation — where we must retain or disclose data to comply with applicable law.

7. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share information only in these circumstances:

• With service providers who process data on our behalf under contract, listed in section 8.
• For legal reasons — to comply with a law, regulation, subpoena, or valid governmental request, or to establish or defend legal claims.
• To protect people — where we believe in good faith that disclosure is necessary to prevent fraud, address security issues, or protect the rights or safety of our users or the public.
• In a business transfer — if Ingrain LLC is involved in a merger, acquisition, or sale of assets, your information may transfer. We will notify you before your information becomes subject to a materially different privacy policy.
• With other members of a group you join — limited to your chosen display name, memorized passage count and streak. See §3.6.
• With your direction — when you ask us to.

8. Service providers

We use the following processors. Each is contractually limited to using your information only to provide services to us.

Provider	Purpose	Data involved
TiDB Cloud (PingCAP)	Cloud database for account and progress sync	Email, hashed password, learning progress and settings
RevenueCat	Subscription management and entitlement verification	Anonymous or account user ID, subscription status and events
Apple App Store / Google Play	Payment processing and subscription billing	Handled entirely by Apple or Google; we receive only transaction status
Google Analytics	Aggregate usage measurement on our marketing website, ingrainbible.com	Device and browser data, pages viewed, IP address (anonymized where available)
Mailchimp (Intuit)	Marketing email to subscribers	Email address and email engagement data
Resend	Transactional email, including password resets	Email address
Jotform	Hosting the support contact form on our website	Whatever you submit: name, email address, device and app version, your message, and any file you attach
ElevenLabs	AI-generated verse and reference audio	Verse reference only; no personal identifiers
Cloudflare R2	Private storage for generated verse audio	Audio files and cache metadata; no personal identifiers
Supadata	Retrieving transcripts for Scripture Reference Import	The public link you submit (see §3.8)
Cloudflare Workers AI	Finding Scripture references within an imported transcript	Transcript text you submitted for import (see §3.8)
Cloudflare Turnstile	Verifying you’re a person, not an automated script	Browser and device signals used for the challenge
Expo (650 Industries)	Push notification delivery	Anonymous device push token
Railway	Application hosting for app.ingrainbible.com and our backend services	Data transmitted between the App and our database; server logs including IP address
Hostinger	Web hosting for ingrainbible.com	Server logs including IP address

9. Cookies and analytics

The mobile apps do not use cookies.

The Site and web app use a small number of cookies and similar technologies:

• Strictly necessary — to keep you signed in and to remember your preferences. These cannot be disabled without breaking the service.
• Analytics — Google Analytics cookies that help us understand aggregate usage. These are optional.

Where required by law, we ask for your consent before setting analytics cookies, and you can change your choice at any time through the cookie settings on the Site. You can also block or delete cookies through your browser settings, and you can install Google’s opt-out browser add-on.

We do not currently respond to browser “Do Not Track” signals, as no common standard has been adopted. We do honor Global Privacy Control (GPC) signals where required by applicable law.

10. Data retention

• Account data — kept while your account is active. If you delete your account, we delete your account record and synced progress from our production systems within 30 days, and from routine encrypted backups within 90 days.
• Local device data — remains on your device until you delete the App or clear its data. Deleting the App from your device does not delete a cloud account, and deleting a cloud account does not remove data already on your device.
• Voice recordings — never collected in the first place, so nothing is retained (see §3.4).
• Group data — group names, join codes and membership are kept while the group exists. Deleting a group removes them within 30 days.
• Email preferences and delivery records — we keep your email preferences and a record of messages we sent you, so we can honour unsubscribes, avoid emailing an address that bounces, and respond to spam complaints. Kept until you unsubscribe or delete your account, plus a suppression record so we don’t email you again.
• Scripture import records — a short-retention log of import attempts, used for rate limiting.
• Analytics data — retained according to our Google Analytics configuration, currently 14 months.
• Support correspondence — kept up to 24 months.
• We may retain limited information longer where necessary to comply with law, resolve disputes, or enforce our agreements.

11. Security

We protect your information with measures including encryption in transit (TLS), encryption at rest for our cloud database, industry-standard password hashing, signed authentication tokens, and access controls limiting who can reach production systems.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password and let us know promptly at support@ingrainbible.com if you believe your account has been compromised.

12. Your rights and choices

Regardless of where you live, you can:

• Use Ingrain without an account, keeping your data entirely on your device.
• Access and correct your account information in the App’s settings.
• Delete your account and synced data from the App’s settings, or by emailing support@ingrainbible.com.
• Request a copy of the personal data associated with your account.
• Turn off notifications in the App’s settings or in your device settings.
• Revoke microphone access in your device settings.
• Unsubscribe from marketing email using the link in any such email.

To exercise any of these rights, email support@ingrainbible.com. We will respond within the timeframe required by applicable law — generally 45 days in the United States and one month in the EEA and UK — and we may need to verify your identity, usually by asking you to respond from the email address on the account. We will not discriminate against you for exercising your privacy rights.

13. U.S. state privacy rights

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, or another state with a comprehensive consumer privacy law, you may have the right to confirm whether we process your personal data and to access it; to correct inaccuracies; to delete it; to obtain a portable copy; and to opt out of targeted advertising, sale, or profiling with legal or similarly significant effects.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not engage in profiling with legal or similarly significant effects. We have not sold or shared personal information in the preceding 12 months, including the personal information of consumers under 16.

In the preceding 12 months we have collected the categories of personal information described in section 3 — identifiers, internet and network activity, audio information (transiently, per §3.4), and commercial information relating to subscriptions — for the purposes described in section 5, and disclosed them for business purposes to the service providers listed in section 8.

You may designate an authorized agent to make a request on your behalf; we will require written proof of authorization. If we deny your request, you may appeal by replying to our decision with the subject line “Privacy Appeal.” Colorado residents may also contact the Colorado Attorney General and California residents the California Privacy Protection Agency with concerns.

14. EEA and UK rights

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, rectify, erase, restrict, and port your personal data; to object to processing carried out on the basis of legitimate interests; and to withdraw consent at any time without affecting the lawfulness of processing already carried out.

You also have the right to lodge a complaint with your local supervisory authority. In the UK this is the Information Commissioner’s Office. We would appreciate the chance to address your concern first at support@ingrainbible.com.

15. Children’s privacy

Ingrain is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. You must be at least 13 years old to create an Ingrain account.

Because the App can be used as a guest without an account, a younger child may use it under a parent’s supervision without any information being collected by us.

If you believe a child under 13 has provided us with personal information, contact support@ingrainbible.com and we will delete it promptly. Parents and guardians may also contact us to review or delete their child’s information.

16. International data transfers

We are based in the United States, and our service providers may process data in the United States and other countries. If you access Ingrain from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, as applicable.

17. Changes to this policy

We may update this policy as the App changes or as the law requires. When we do, we’ll revise the “Last updated” date above. If the changes are material, we’ll give you prominent notice — by in-app notice, by email if you have an account, or both — before they take effect.

Continuing to use Ingrain after an update takes effect means you accept the revised policy.

18. Contact us

Questions, requests, or concerns about privacy:

Ingrain LLC
1500 N Grant St, Ste R
Denver, CO 80203, USA
Email: support@ingrainbible.com