Sacred Scroll Privacy Policy

Last updated: 7 November 2026

This Privacy Policy explains how Nexify Labs Pty Ltd ("we", "us") handles information when you use Sacred Scroll (the "App"). Contact: privacy@nexifylabs.io.

1. Information Stored on Your Device

Sacred Scroll does not require an account. Your notes, highlights, saved verses, settings, and which chapters and plans you read are stored on your device and are not sent to us, except as described in section 3. Deleting the App removes this information from your device. If your device backs up to iCloud or to a computer, this information is included in that backup, which is kept under your own Apple account or on your own computer, not by us.

What the App keeps on your iPhone, and how to refuse. Besides the information above, the App keeps on your iPhone a random identifier that our subscription management provider uses for your purchases, a random identifier for verse counts (sent only if you choose Share), and crash details until they are sent to our error reporting provider. Outside the European Union, the European Economic Area, the United Kingdom and Switzerland, it also keeps the identifiers described in sections 2 and 5 for usage information and for advertising measurement. You can refuse verse counts by choosing Not now when the App asks, or by turning them off at any time in the App's settings, and where the App asks about tracking, you can refuse it there. Deleting the App removes what it keeps on your iPhone, except two small records our measurement partner AppsFlyer keeps in your iPhone's keychain, a count of reinstalls and the date of the last install, to tell a reinstall from a new install.

2. Information We Collect Automatically

When you use the App, we and our service providers may collect:

  • Device and app information, such as device model, operating system, app version, language, time zone and a random identifier created for your installation.
  • Usage information, such as features used, screens viewed and actions taken in the App.
  • Diagnostic information, such as crash reports and error details, used to keep the App working.

Our servers and service providers also receive your IP address when the App connects to them. We do not use it to find your location.

If your App Store country is in the European Union, the European Economic Area, the United Kingdom or Switzerland, the App does not collect usage information, except which subscription screens you view, close or tap, as described in section 4.

We do not collect your name, email address, precise location, contacts or photos through the App.

3. Optional Features

If you choose to share verse counts, the App sends which verses are hearted or studied, with a random identifier, so that totals can be shown to readers. That identifier is a random number kept on your iPhone, and our server stores it only inside a one-way code, deleted within 48 hours apart from the restore points described in section 15. To show you those totals, it also asks our server for the totals of the chapter on your screen, without the identifier. You can turn this off at any time in the App's settings.

Audio is streamed or downloaded from our own server or, when ours cannot be used, from audio hosting providers, which receive standard technical information such as your IP address and which chapter's recording is being requested. The App may request a chapter's recording before you press play. No account, name or reading history is sent with these requests.

4. Subscriptions and Purchases

Purchases and subscriptions are processed by Apple. We do not receive your payment card details. We and our subscription management provider, RevenueCat, receive purchase information, such as the product purchased, trial and renewal status and a transaction identifier, to provide access and restore purchases. With each request, RevenueCat also receives an identifier Apple gives the App for your device, your device's model and version and your IP address, used to provide its service to us, and your device's answer to Apple's tracking question, whichever it is, which it keeps.

Outside the European Union, the European Economic Area, the United Kingdom and Switzerland, whether or not you allow tracking, our subscription management provider may also record the identifier Apple gives the App for your device, your IP address and our measurement partner AppsFlyer's identifier for your device and a token from Apple about the Apple ad, if any, that led to your install, and pass your trials and renewals to AppsFlyer, as described in section 5. When the App shows you a subscription screen, our subscription management provider also receives whether you view it, close it or tap its buttons, with its random identifier for your purchases, so we can see how those screens work. If you allow tracking, it may also record your device's advertising identifier. We keep a copy of what our subscription management provider records, including these identifiers, with our analytics provider, to understand how subscriptions are used.

5. Advertising Measurement and App Tracking

We use tools from advertising partners, including Meta, to measure and improve our ads.

If you allow tracking when the App asks, Meta may receive your device's advertising identifier, other device identifiers and your IP address, together with installs, app opens, finishing the App's introduction, viewing the trial page, starting a purchase, and trial starts, purchases and renewals, including the price. Trials, purchases and renewals reach Meta through our subscription management provider and our measurement partner, AppsFlyer. Meta may use this information under its own privacy policy to measure ads and to show ads, including ours, to people likely to be interested. You can manage this in your Facebook or Instagram ad settings.

From version 1.2.1, if you allow tracking, our attribution provider, AppsFlyer, receives your advertising identifier, its own identifier for your installation, basic device information and your IP address, and receives your trials, purchases and renewals, with the price, from our subscription management provider; AppsFlyer passes them to Meta on our behalf. Our measurement partner AppsFlyer also tells Meta when you finish the App's introduction, when you view the trial page and when you start a purchase, without the price or the plan. The App sends no advertising identifiers to our own server.

In versions before 1.2.1, if you allow tracking, the App sends your advertising identifiers, with our subscription management provider's random identifier for your purchases, to our own server, which matches your trials, purchases and renewals to them and passes those events to Meta. The App also tells our server when you finish the App's introduction and when you start a purchase, and our server passes those two events to Meta in the same way, without the price or the plan. If you later turn tracking off, the App asks our server to delete them.

If you do not allow tracking, we do not collect your advertising identifier; what we and our measurement partner AppsFlyer send Meta (installs, app opens, finishing the App's introduction, viewing the trial page, starting a purchase, and trials and renewals) is marked tracking off and carries no advertising identifier. Outside the European Union, the European Economic Area, the United Kingdom and Switzerland, if you do not allow tracking, our measurement partner AppsFlyer also receives that the App was installed, when you finish the App's introduction, when you view the trial page and when you start a purchase, with the identifier Apple gives the App for your device and your IP address and that token from Apple, but no advertising identifier, and passes them to Meta marked tracking off. If you allowed tracking before, our subscription management provider may still hold the advertising identifier it recorded then. If you turn tracking off later, this applies from the next time you open the app. If you reinstall the app or turn tracking off later, an advertising identifier recorded earlier can stay with that earlier purchase record. Apple may tell Meta, with no identifier, that an ad led to an install. Our subscription provider keeps your answer with a random number for your purchases and the device details in section 4. We never receive your notes or highlights; verse counts and audio downloads carry no name.

The App also uses Apple's privacy preserving ad measurement, which lets Apple tell ad networks and our measurement partner AppsFlyer, after a delay and without identifying you or your device, whether an ad led to an install, to finishing the App's introduction, to starting a purchase or to a subscription. This does not depend on your tracking choice or your age.

If your App Store country is in the European Union, the European Economic Area, the United Kingdom or Switzerland, the App sends nothing to Meta or AppsFlyer, sends nothing to our server for advertising, gives our subscription management provider no advertising identifier, and does not report installs or subscriptions to other ad networks. If you move to an App Store in one of these countries, this applies from the next time you open the App, and a stage, such as finishing the App's introduction, already given to Apple's ad measurement before the move may still reach the ad network or AppsFlyer.

You can change your tracking choice at any time in your device settings under Privacy and Security, Tracking. The App does not respond to browser Do Not Track signals; your iPhone's tracking setting is the control.

6. Your Faith and What You Read

Using a Bible app may suggest an interest in faith. We do not ask about or record your beliefs.

Your notes and highlights stay on your device and in your own backup; the App does not send them to us or to anyone else. Apart from what you share yourself, what you read leaves your device in only two cases, both described in section 3: if you turn on verse counts, the App sends which verses you heart or study and asks for the totals of the chapter on your screen; and when you listen, or the App prepares a recording for you, it requests that chapter's recording from our own server or an audio hosting provider. No name or account is sent with these requests.

From the European Union, the European Economic Area, the United Kingdom and Switzerland, the App sends nothing to Meta. Elsewhere, Meta receives only the events described in section 5, and none of them includes what you read, note or highlight.

7. Support

If you contact us, we receive the information you choose to send, such as your email address and message, and use it to respond.

8. How We Use Information

We use information to provide, maintain and improve the App; process and restore purchases; show verse counts; diagnose problems; understand how the App is used; measure and improve our advertising; respond to you; and comply with the law.

We do not sell personal information for money. Sharing app events with Meta for advertising may count as "sharing" under California law. To opt out, email privacy@nexifylabs.io; turning off tracking in your iPhone settings also stops your advertising identifier being shared.

9. How We Share Information

We share information with service providers that help us operate the App, including providers of cloud hosting, content delivery, analytics, error reporting, subscription management, advertising and attribution, and email. Our service providers may use information only to provide their services to us and must protect it consistently with this policy. Apple, Meta and the public audio sites the App falls back to (section 3) use information they receive under their own privacy policies.

We may also disclose information to comply with law, to protect rights and safety, or in connection with a merger, acquisition or sale of assets.

10. Legal Bases (EEA, UK and Similar Jurisdictions)

Where required, these are the legal bases we rely on:

  • Our contract with you: providing and restoring your purchases, and delivering the App's content and the recordings you ask for.
  • Our legitimate interests: crash reports, used only to find and fix faults; understanding how the App is used, where section 2 says usage information is collected; keeping the App and our servers secure; answering your emails.
  • Your consent: verse counts, tracking where the App asks for it, and any other optional feature you turn on.
  • Our legal obligations: keeping purchase records for as long as tax law requires.

11. Your Rights and Choices

We are an Australian company, and we handle personal information in line with the Privacy Act 1988 and the Australian Privacy Principles, wherever you live.

Depending on where you live, you may have rights to access, correct, delete or restrict the use of your personal information, to receive it in a portable form, to object to processing, or to withdraw consent at any time (withdrawing does not affect what was done before). To make a request, email privacy@nexifylabs.io. Because the App does not use accounts, we may need information from you to locate data associated with your installation. Deleting the App deletes the random identifiers stored on it, although restoring from a backup can bring them back. Verse counts can be turned off in the App's settings.

California residents may have the right to know what personal information we collect and to request its deletion or correction, and the right to opt out of the sharing of personal information for cross-context behavioural advertising, as described in section 8. We will not discriminate against you for exercising these rights.

If you are unhappy with how we handle your information, please tell us first, by email to privacy@nexifylabs.io or by post to the address in section 17. We reply to every complaint within 30 days, look into it, keep you told of our progress and tell you the outcome without undue delay. If you are in the United Kingdom, this is your right to complain to us under section 164A of the Data Protection Act 2018.

You may also complain to a data protection authority: in Australia, the Office of the Australian Information Commissioner (oaic.gov.au); in the United Kingdom, the Information Commission, known as the ICO (ico.org.uk); in the European Union, the European Economic Area or Switzerland, the authority where you live.

12. Children

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Where Apple says an age law applies to you and your iPhone runs iOS 26.2 or later, the App asks Apple for your age range and uses the answer on your device only, without storing it. If Apple says you are under 18, if you decline to share your age range, or if the App cannot learn it, the App does not ask about tracking, does not start Meta's or AppsFlyer's tools, and gives our server and our subscription management provider no advertising identifier. Where Apple says no age law applies to you, or your iPhone runs an iOS before 26.2, the App does not ask for your age range and treats you as an adult. Apple's privacy preserving ad measurement, described in section 5, does not depend on your age. If you believe a child has provided us with personal information, contact us and we will delete it.

13. International Transfers

Your information may be processed outside your country, including in the United States and in the countries where our content delivery providers operate, where data protection laws may differ. Where required, we use appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses. For information from Switzerland, where a service provider in the United States is certified under the Swiss-U.S. Data Privacy Framework, which Switzerland recognises as giving adequate protection, we rely on that; otherwise we rely on the Standard Contractual Clauses with the changes Swiss law requires, which Switzerland's Federal Data Protection and Information Commissioner recognises. You can ask for a copy of these safeguards by emailing privacy@nexifylabs.io.

14. Security

We use reasonable measures designed to protect information. No method of transmission or storage is completely secure.

15. Retention

  • Crash reports: kept for 30 days.
  • Usage information: kept for up to one year.
  • Advertising identifiers on our server: from version 1.2.1 our server no longer receives them; those kept from earlier versions are deleted when version 1.2.1 is released, and our database host's backup copies clear within 7 days.
  • Verse count receipts: deleted within 48 hours; only the totals are kept. Our database's own restore points, kept for 7 days, may hold them until those expire.
  • Purchase records: kept while you subscribe and for as long as tax law requires.
  • Support emails: kept while needed to help you, then deleted.

Information that Apple and Meta receive is kept under their own policies.

16. Changes

We may update this policy from time to time. We will post the updated version at https://nexifylabs.io/apps/sacred-scroll/privacy and change the date above.

17. Contact

Nexify Labs Pty Ltd, Shop 2, 290 Boundary Street, Spring Hill QLD 4000, Australia. Email: privacy@nexifylabs.io.