Privacy Policy

Kreyman Enterprises LLC ("VerseMine," "we," "us," or "our") operates the VerseMine mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data.

We are committed to transparency, particularly around how third-party AI services process your content. Please read this policy carefully.

1. Information We Collect

1.1 Account Data

When you create an account, we collect:

• Email address — used for authentication, account recovery, and service communications. We may in future send a welcome email or occasional product announcements about VerseMine (see Section 2).
• Display name — visible to other users in community features.
• Username — your unique identifier within the App.
• Date of birth — used for age verification under COPPA (Children's Online Privacy Protection Act) and to apply age-based safeguards: state-specific protections for minors, suppression of certain notifications for minors, and the AI assistant's age gate and minor-specific safety responses. Stored as a date; not displayed publicly.

1.2 Profile Data (Optional)

You may choose to provide additional profile information. All of the following are optional and can be removed at any time:

• Bio
• City
• Church
• Instagram handle
• Profile photo (avatar)

1.3 User Content

When you use the App, you may create the following content:

• Text reflections and comments — your written responses to daily Bible passages, and images you attach to them.
• Photos of Bible pages — images you photograph and submit for AI-powered study feedback.
• Dictation: what you say when you dictate a reflection, a comment or a message to the AI assistant. It is transcribed on your device using a local Whisper model; only the resulting text is used, and the audio never leaves your device. See Section 3.5.
• AI assistant conversations — the messages you exchange with the AI assistant. We do not keep these on our servers. They are stored on your own device, and deleting them in the App removes them from it. They are not private to your device, though: each time you send a message, that message and a recent part of the conversation are sent to us and on to our AI provider to produce the reply — see Section 3.1 for what that provider does with it and how long it keeps it. Current versions of the App keep the conversation store out of Google's backup on Android, and out of transfer to another Android phone. On iPhone the App asks iOS to leave the store out of iCloud Backup, and that request arrives with version 1.0.4 — versions before it do not make it. These are requests to the system, not guarantees. A device backup — iCloud or Google — may still hold a copy under Apple's or Google's terms rather than ours. Section 3.8 lists the AI assistant records we do keep on our servers.
• Group content — if you join or lead a church group, the group's name and any study materials or devotionals you post to it.

1.4 Usage Data

We collect usage data through PostHog (see Section 4) to understand how the App is used and to improve the experience. This data is linked to your account identifier (an internal ID, not your name or email) so that we can see how a single user moves through the App over time. It includes:

• Device type, operating system, and app version
• Screens visited, features used, and session duration
• The plan you choose when you subscribe and, when you redeem a church group code, that church's name
• In some social features, the identifier of the other user you interacted with (for example, whose reflection you reacted to)

Mitigations we apply: we have disabled PostHog's IP-based location lookup, we do not record your screen (no session replay), we do not automatically capture taps or text (no autocapture), and in current app versions the sensitive areas of the App — the AI assistant and its search — send no usage events about your conversations, and what they do send (listed under "Why we collect it" in our Consumer Health Data Privacy Policy) never includes message content. We do not collect your Advertising Identifier (IDFA) and do not engage in cross-app tracking.

1.5 Crash and Performance Data

The App includes crash reporting through Sentry (see Section 4). It is active in current builds; the App starts it only after you are signed in and your age is verified. Crash reports may include:

• Device type and operating system version
• App state at the time of a crash
• Stack traces and error messages
• A user identifier (your account ID) so we can correlate a crash to your account

We will not send your email address to Sentry, and we take measures to exclude personal content (reflections, photos, recordings, or AI assistant conversation text) from crash reports.

1.6 Purchase Data

If you subscribe to VerseMine, we use RevenueCat (see Section 4) to manage your subscription. RevenueCat receives your account identifier and device identifiers, and we receive from it:

• Subscription status (active, expired, trial)
• Purchase timestamps
• Subscription plan type

We do not receive or store your payment card details, billing address, or financial account information. All individual payment processing is handled by Apple (App Store) or Google (Google Play). Church and group plans are billed through Stripe (see Section 4).

1.7 Push Notifications

If you enable push notifications, we store a device token issued through Expo's push service, which delivers notifications through Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM), and a random identifier the App creates on your device for your account (on iPhone it can stay on the device even if you delete the App; the copy we store is deleted with your account), so that a token that has been replaced can be retired. Notification content passes through Expo's servers but is not stored there; delivery receipts are deleted after 24 hours. A notification can include the name of the person who acted (for example, who commented on your reflection) and a short excerpt of their comment. You can disable notifications at any time through your device settings.

1.8 Focus Mode Data

Focus Mode (Profile > Accountability) blocks apps you choose on your own phone: until you complete the day's study (Study to unlock), after a daily time limit, or both. On iPhone it can also turn on Apple's built-in adult-content web filter, which keeps working even while Focus Mode is off. Focus Mode is optional. If you turn it on, this is what we collect:

• Kept on your phone only: which apps, categories and websites you chose to block (on iPhone these are opaque Screen Time tokens that, by Apple's design, cannot be decoded into app names by VerseMine or our servers; on Android they are the apps' package names), the length of your daily time limit, and how long you use the blocked apps. On Android, Focus Mode uses Usage Access to see which app is open and to add up time toward your daily limit, and the permission to display over other apps to show the block screen; it reads the list of apps installed on your phone so you can choose from it. Blocking is enforced on your phone by iOS or Android, not by us. One exception leaves your phone: on Android, the names of the apps you remove from your block list are sent with the notice to your accountability partner (Section 1.9).
• Stored on our servers: whether Focus Mode is on and when it was last turned on; how many apps, categories and websites you block (one number for all three, never which ones); whether Study to unlock, the daily time limit and the web filter are on, and since when; the date you last used "Skip for today" and how many skips you have used this month; your current Away Mode dates, plus a history of every Away Mode period you set and whether a commitment was running at the time; and when the App was last opened, which every signed-in phone reports when the App comes to the foreground, at most once an hour.
• Blocking check, if enabled: when the App is opened, at most once an hour, your phone can report whether the App still has the permission it needs, whether blocking is due and applied, whether anything is selected, and your phone's clock time, which we compare with ours. We keep when the check last ran and, if it is failing, since when and how many times in a row, not the values your phone sent.
• Android Focus check-in: while Focus Mode is on on an Android phone, the phone registers with our servers using a device identifier made from a one-way hash of the phone's Android ID (the ID itself never leaves the phone); our servers give it a random token and keep only a hash of it. The phone then checks in about every 30 minutes with whether blocking is running, whether the Usage Access and display-over-other-apps permissions are on, how many items it is blocking, when it last checked, the app version and the phone's clock; we use the rest only to process that check-in and do not keep it. We keep the hashed device identifier, the token hash (and the previous one until the next renewal replaces it), whether a check-in has arrived since it registered, when the record was created and when it expires, the time of the last check-in, those two permission settings, when a permission was first reported off, and whether a partner alert is open. If you are in an active, unpaused accountability commitment and the check-ins stop for about 90 minutes, your partner is told that Focus may have stopped or the phone may be off; if a permission Focus needs is turned off, your partner is told that Focus stopped protecting you because a permission it needs was turned off. Either way your partner is told again when the phone checks in normally, and these notices stay in their notifications like the other Focus notices (Section 1.9). This record is deleted when you turn Focus Mode off on that phone (if the phone cannot reach us at that moment, it expires instead), when you delete your account, or 30 days after the phone last registered or renewed it, which it does while you keep using the app (up to 60 more days while a partner alert is still open). Signing out does not delete it, so your partner can still be told if Focus stops.
• Analytics: some Focus Mode and accountability events are recorded with PostHog (Section 1.4): for example, that a permission was revoked, that you used a skip, that you turned the web filter or accountability for a friend on or off, that you paused accountability (with the friend and the end date), and commitment events (for example, the length you chose). They never include app names or usage time.

We do not collect which apps you use outside VerseMine, how long you use them, or what you do in them, apart from the names of apps you remove from your block list on Android: your phone sends them to us when you remove apps, and we keep them only in the notice to your partner (if no partner is told, they are not kept). We do not use Focus Mode data for advertising. To stop Focus Mode, turn it off in Profile > Accountability, or revoke VerseMine's access in your phone's settings (iPhone: Settings > Screen Time; Android: Usage Access or display over other apps). Your accountability partner may be told when Focus Mode stops (Section 1.9).

1.9 Accountability Partner Data

Accountability is off by default. Turning it on for a friend in Profile > Accountability says you are willing to be accountable with them, and your friend is told. Once you are both willing, either of you can suggest a commitment, and you become accountability partners only when one of you accepts the other's suggestion. The partnership lapses when a commitment has ended and no new one is suggested or running for 7 days. While you are partners, your partner is told the following (commitment suggestions also reach a friend before you are partners), in the App and, if they have notifications, social notifications and accountability notifications turned on, by a push notification naming you:

• During a commitment: if you use Focus Mode, your partner is told when you weaken it: turning Focus off (or it turning off because your subscription ended), turning off Study to unlock, disabling your daily time limit, removing apps from your block list (on Android your partner sees the names of up to five apps you removed; on iPhone, only how many blocked items), revoking Screen Time permission, or turning off the web filter, and when you turn Focus or Study to unlock back on within a week. They are also told if blocking was never set up on your phone, if your phone reports that nothing is actually blocking when it should be, if your device clock is set far off, or if your Android phone stops checking in for about 90 minutes while Focus is on (Focus may have stopped, or the phone may be off) or reports that a permission Focus needs was turned off. The names are those of the apps a save removed, even if apps you added in the same save hide part of the drop; a save that swaps apps without lowering the number tells nobody. Apps past the five that are named are still counted: if you remove eight, the notice in the App names five and says three more (the push notification names five and says "and others"). A second removal within an hour of the first is added to that hour's notice (the numbers added together, the names merged, up to five), and a push already sent is not sent again. App names are cleaned of control and invisible characters and shortened. When your Android phone checks in again, a partner who was told it stopped is told it is checking in again, even if your commitment has ended or either of you has paused since, but not if either of you has blocked the other. Your partner is also told if you did not study yesterday, when you have both studied today, and about milestones.
• While you are partners, including about a week after a commitment ends: they are also told if the app goes unused for days while Focus is on, or if your device goes quiet while the web filter is on (it works even while Focus Mode is off), meaning it may no longer be protecting you; that you have not submitted recently, have not been active for a while, or are back; and encouragement you send. Your partner's view of you also shows when your Focus Mode is off.
• Commitments and the partnership: suggestions, acceptances, suggested changes, declines, withdrawals and expiries, the end of a commitment (including when one of you ends it early), that you turned accountability off, that the partnership lapsed or ended because you ended the friendship or deleted your account, and that you paused accountability ("paused accountability with you for 1 week" or "2 weeks").

Pausing. You can pause accountability with a partner for 1 or 2 weeks. Your partner is told. A pause on either side stops, for its length, the Focus Mode, study and inactivity notices above about each of you, except the notice that a phone is checking in again. Your partner's view of you still shows when your Focus Mode is off.

Apart from the names of apps you remove on Android, these notifications contain no information about which apps you use, how long you use them, or what you do in them, and none about how long your daily time limit is or about your skips. You can turn accountability off for a partner at any time in Profile > Accountability, which ends the partnership, cancels a commitment between you and stops new notifications; your partner is told that you turned it off. Notifications already delivered stay in your partner's inbox, and some of them stay there after you delete your account, no longer linked to it: the notices that you turned Focus Mode, Study to unlock, the daily time limit or the web filter off, that it turned off because your subscription ended, that you removed apps from your block list (with the app names removed, leaving only how many), that nothing was blocking, that your clock was far off, that blocking was never set up, that your phone stopped checking in or is checking in again, that VerseMine had not heard from your phone, and that you paused or turned off accountability, that your partnership lapsed or that a commitment between you ended early. They stay until the inbox is cleared, at most 60 days after they were sent. A partner who has blocked you, or whom you have blocked, does not keep them.

1.10 IP Address and Approximate Location

When you use an AI assistant feature (including voice), our servers read the IP address of your request and look it up against a geolocation database running on our own servers to determine your country and state. We use this only to decide whether the feature is available where you are (the AI assistant is US-only at launch) and to apply state-specific protections. The lookup result is not sent to any third party, and it is not stored, except for the outcome we keep with an in-room conversation (below). To show the right screen when you come back, the App also keeps on your phone, for your account, only whether the full AI assistant or just "Ask theology" was last available to you (and whether you dismissed the notice about it), never which state you are in; the App checks again with our servers when you use it, the record is deleted when you sign out of the App, when the App finds your session has ended, or when you delete your account on that phone (this does not reach a copy on another phone you were signed in on or in a device backup), and it is never sent to us.

Your account's time zone. We also use the time zone saved with your account, which the App takes from your phone and which we use for streaks. If the IP lookup cannot place you, the time zone decides whether you are in the US and which state rules apply; if your IP address and your time zone point to different states, some AI assistant features may be limited. We keep the time zone, and a record of past changes to it, until you delete your account. The App may also send your phone's current time zone setting with an AI assistant request; we use it only for this location check and do not store it. What we keep from the check is only its outcome on an in-room conversation's record (below).

Device location (optional). The App asks for permission to use your device's approximate location only when you start a "Talk it through" or "In-room conversation" session with the AI assistant, or tap "Check my location". It never asks for Scripture Q&A ("Ask theology") or before showing crisis help. If you allow it, the App works out on your device which US state you are in or, if you are near a state line, the strictest of the states within reach, using state boundaries built into the App; no map or geocoding service is used. Only that state, whether you are near a state line, and whether the reading is out of date are sent, or, if you declined, just that fact. Once you have answered, the App sends this result with your AI assistant requests, Scripture Q&A included, for up to 24 hours, or until your phone's time zone changes; a reading older than 60 minutes is sent as out of date. We use it together with the IP check above: if your device's state restricts a feature, the feature stays restricted, and where the whole AI assistant is unavailable that includes Scripture Q&A. Your device's state can make a feature available only if at least one of our IP sources also places you in that state and the reading is neither near a state line nor out of date, so your location alone never unlocks a feature. When a feature is restricted, the App tells you, and names the state when the check settled on one. Your location and coordinates are never sent to us; the state itself is not stored or logged, and the App keeps it only in memory while it is open. If you decline, or no location is available, the IP check applies exactly as before, and declining does not change what you can use.

In-room conversations. When an in-room conversation starts, and again when it ends, we keep the outcome of these checks on that session's record, which is linked to the account of the person who started it: whether the checks placed the session in the US, which AI assistant features are available there, and the kind of server check behind it (an IP lookup, the time zone, or undetermined). The outcome reflects your device's location when it was used, but the record does not say whether it was. We keep it so that anything we process for that session later follows the same state rules. It does not include your state, your IP address or your coordinates. It is deleted with the session record: automatically after 365 days without activity (because we do not store conversation messages, that is 365 days after the session started), or sooner if the person who started it deletes all of their AI assistant history (Profile > Settings > AI Assistant > Delete all AI history) or their account. Deleting a single in-room session in the App removes it from that phone only and does not delete this record. One-to-one conversations keep no such record.

Our IP geolocation databases: IP Geolocation by DB-IP (licensed under CC BY 4.0). VerseMine uses the IP2Location LITE database for IP geolocation.

1.11 Website Waitlist

If you join the waitlist on our website (versemine.app/waitlist), we collect the email address you enter, your first name if you choose to give it, the language of the page you used, and where the link you followed came from (a source label and any "utm" campaign tags in the link). We use them only to email you when VerseMine launches and to count which links brought sign-ups. The waitlist does not store your IP address. It keeps only a keyed, daily-rotating one-way hash of the IP address your request came from (for an IPv6 address, of its network prefix), to limit repeated sign-ups; the hash and the key behind it are deleted after about a day. Your waitlist entry is not linked to an App account, and we keep it until you ask us to delete it by emailing privacy@versemine.app.

1.12 Store Links on Our Website

Most of the App Store and Google Play links on our website, and our versemine.app/get links, tell the store which of our links or channels you came from, using a fixed label such as "website" or "instagram". They pass nothing about you.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the service — delivering daily Bible passages, processing your submissions, generating AI-powered study feedback, running the AI assistant, transcribing voice recordings, and displaying your reflections.
• Community safety — scanning user-generated text and images for content that violates our Community Guidelines (see Section 3.3 for the full scope).
• Account management — authenticating your identity, managing your subscription, and communicating with you about your account.
• Age verification and eligibility — verifying that you meet the minimum age requirement (13 years) as required by COPPA, applying age-based safeguards, and confirming that AI features are available in your location (Section 1.10).
• App improvement — analyzing usage data to improve features, fix bugs, and understand usage patterns.
• Notifications — sending push notifications you have opted into (e.g., daily reminders, friend activity).
• Focus and productivity: running Focus Mode as you have set it up (blocking apps you have selected, on your own phone) and, if you have turned on accountability with a partner, sending that partner the notices described in Section 1.9.
• Pastoral care (opt-in, when available): pastoral care is not available in the current release. If it becomes available and you enable it and connect to your church, letting your pastor know when the AI assistant detects that you may be in serious distress (see Section 4, Resend).
• Product announcements — we may send you a welcome email or occasional announcements about VerseMine features and updates. These are first-party messages about our own app, sent by us (through our email provider, Resend). We do not send them today; if we start, we will provide an opt-out, and you can ask us to stop at any time by emailing privacy@versemine.app. You will still receive essential account and transactional messages.

We do not use your information for third-party advertising, cross-app ad targeting, or selling to data brokers, and we do not share your email with third parties for their own marketing. As used above, "marketing" means only our own first-party communications about VerseMine, which you can opt out of as described above. Your email is shared with service providers only where they need it to do their job for us (Section 4).

3. Third-Party AI Services

VerseMine uses third-party AI services to provide core features. This section names each provider, describes what data is sent, explains why, and states each provider's data retention policy. Per Apple Guideline 5.1.2(i), we disclose each provider that processes your data.

Our own servers. AI assistant requests are handled on servers VerseMine operates at a US cloud host, alongside the Supabase database (Section 4). While a request is being handled, those servers hold the message you sent, the recent part of the conversation your device sent with it, your account identifier, age status, and church identifier — for as long as it takes to produce the reply. We do not keep the text of your conversations after that; Section 3.8 lists the AI assistant records we do keep. Nothing is shared from these servers except to the providers named in this section.

3.1 Anthropic, PBC — AI Assistant

• What data is sent: Your AI assistant conversation text. Conversation text in every mode except discipleship is anonymized while our anonymization safeguard is on (it is on at launch): names and places we detect are replaced with placeholders before the request that produces the reply, and if that replacement fails, no reply request is made. If we ever turn the safeguard off, we will update this policy first. Your original words are always screened for crisis and abuse on every turn — some checks run on our own servers without any AI model, and others are sent to Anthropic — so that detection keeps working even with placeholders in place. Discipleship conversations, a mode not available in the current release, would be sent as written. We also send: your "Ask theology" questions and answers; your conversation text to generate a conversation title (only while the anonymization safeguard is off, so at launch no title request reaches Anthropic); if AI assistant memory is enabled for your account (it is not in the current release), your conversations to extract the AI assistant profile notes described in Section 8, and your conversations plus an anonymized sample of your graded reflection text for the period to produce faith-growth recaps; and, when a subscriber asks the community fact-checker (by mentioning @AI in a comment), the comment that triggered it, the shared reflection it is on, and other comments in that thread — including other users' words, with the display names of members mentioned there in place of their account identifiers. We never send your account identifier, or any other member's, to Anthropic, so it cannot tell which account a request belongs to. If your date of birth shows you are 13 to 17, the instructions we send with your AI assistant conversations state that the person is a verified minor, so that it applies stricter protections; they do not say who you are.
• Why: To generate AI assistant responses, faith-growth recaps, conversation titles, and "Ask theology" and fact-check answers, and to run crisis and safety classifiers that detect when you may need urgent help.
• When: On each AI assistant turn (a conversation or an "Ask theology" question); on the first exchange of a new conversation (titles, when applicable); after a conversation ends (notes, recaps); and when a subscriber in a comment thread mentions @AI. The AI assistant is available only to US users at launch; the core Bible-study app is global.
• Retention: Anthropic deletes inputs and outputs within 30 days, except that content flagged for a safety review may be kept for up to 2 years. A data processing agreement applies.
• Model training: Anthropic does not use your content to train its models.

3.2 Google Gemini (Google LLC)

• What data is sent: Photos of your Bible pages; the public portion of your reflections and comments for theology and guardrail analysis; the public portion of your reflections for historical-quote matching, if that feature is turned on (it is not in the current release); the public portion of a reflection or comment for translation; and, if AI assistant memory is enabled for your account, the anonymized text of your AI assistant profile notes, which Google's embedding service turns into a numeric representation that we store for retrieval. If anonymization of those notes fails, nothing is sent.
• Photos are sent whole. The photo you submit is sent uncropped and unredacted, at a quality chosen to keep handwriting and pencil marks legible, and it is sent to Google more than once per submission — to check that it is a Bible page, to grade it, and to an image-generation model that produces the annotated copy you see. Anything on the page — margin notes, bookmarks, a name written inside the cover — goes with it. Please avoid photographing pages that carry private notes.
• Why: To analyze your highlighting work and generate study feedback and annotated images; to keep community posts within our theological guardrails; to surface related historical quotes; to translate posts; and to let the AI assistant recall relevant notes.
• When: Each time you submit a photo. Theology and guardrail analysis runs automatically whenever a public reflection or comment is created or edited by a member who has given AI consent; withdrawing AI consent stops it (Section 3.6). Quote matching is not turned on in the current release. Translation runs when you or another user taps Translate on your post. When you ask to translate a reflection or comment, only its public portion is sent to our translation provider, with other members' names in place of any account identifiers. Text from a private reflection or journal entry, and from the private or Close Friends segments of a shared one, is never sent to Google (translation sends only the public portion, whoever asks); the page photos you submit are, as described above.
• Retention: Google retains submitted data for up to 55 days for abuse monitoring and safety purposes, after which it is deleted. VerseMine uses the paid API tier, which provides enhanced data protections.
• Model training: Google does not use data submitted through the paid API tier to train or improve its models.

3.3 OpenAI (OpenAI, LLC)

• What data is sent: For content moderation only: text you share with other members (your shared reflections, except any passage you mark private inside a reflection you share, which is removed before the check; comments, including a reply the community fact-checker posts in a thread; your display name, username and profile details such as your bio and church; and group and church details you enter, including group study materials) plus images: your profile photo, and any image you attach to a shared reflection or to a comment on one, checked when you upload it. When you change a private reflection to shared, its text, its photos, and the text and photos of your own comments on it are checked at that moment. If a photo or one of your comments is blocked or cannot be checked, the reflection is not shared; if its text cannot be checked because the moderation service is unreachable, it is shared without that check. If the text itself is blocked, the reflection is not shared either. OpenAI checks them for safety categories, one of which is self-harm. When a comment mentions another member, OpenAI receives that member's display name in place of their account identifier.
• What is never sent: Your conversations with the AI assistant, typed or spoken, are never sent to OpenAI. Neither are your private reflections and journal entries while they stay private: their text, their photos, and your own comments on them and those comments' photos. GIFs, which you pick from a G-rated GIF catalogue (Section 4), are never sent to OpenAI. Only a crisis check on our own servers reads private text, and it stores nothing. (Rare exception: if you change a reflection's privacy on another device while it is open for editing here, the save uses the setting this screen showed.)
• Why: To scan the content listed above for violations of our Community Guidelines and to maintain community safety (this moderation is part of our Terms of Service).
• When: Moderation runs automatically when you post or edit any of the content listed above, including when you change a private reflection to shared. It is always active for that content and cannot be turned off, because it is necessary to enforce our Community Guidelines. If OpenAI cannot be reached, new reflections and comments, your username and group study materials can be published without the check, and an edit to a reflection or comment keeps the status it had; your display name, bio and church, a group's name, church and description, a reading plan's name and the church name typed when buying a church plan are refused until they can be checked, and a photo is not accepted.
• Retention: OpenAI's moderation service keeps nothing. We keep: for text that passes, only that the check happened, for 90 days; for blocked text, which safety category blocked it, for 90 days; for something that could not be checked, only that the check could not run, for 90 days, and for a photo uploaded while it could not be checked, also a moderation report naming the reason and where the photo is stored, until your account is deleted. A reflection or comment flagged in a middle range (which can include signs of distress) is held, hidden from others, until a moderator reviews it; the moderator reads it, and the record that it was held is kept for 90 days, or for as long as the post stays held if that is longer. For a blocked photo, we keep a moderation report naming the categories and where the photo is stored, until your account is deleted. We never keep the moderation scores, and none of these records outlives your account.
• Model training: OpenAI does not use data submitted through its API to train or improve its models.

3.4 Voyage AI (a MongoDB company) — Theology Retrieval

• What data is sent: A de-identified topical query built from the App's internal theological framework vocabulary — a fixed set of phrases we wrote, not your words. This query contains no message content and no personal information — Voyage never receives your AI assistant conversations.
• Why: To retrieve relevant theological reference material that helps ground the AI assistant's responses in our theological framework.
• When: Only when the AI assistant's theology retrieval is enabled. Like the rest of the AI assistant, this feature is available only to US users at launch and is consent-gated.
• Retention: Voyage processes the query to return reference material; it does not receive, store, or process your conversations or personal information.
• Model training: VerseMine has opted out of Voyage's use of its data for model training.

3.5 Voice: Transcription and Read-Aloud

Transcription. Dictation is transcribed on your device using a local Whisper model, and that audio never leaves your device. The model itself is downloaded from Hugging Face (huggingface.co) the first time you use dictation, so your device's IP address reaches Hugging Face; no audio or text is sent there. Your voice recordings are never sent to OpenAI. In-room conversations (group sessions with the AI assistant) are transcribed on your device in the same way, and only the text is sent. We do not record group-session audio: no audio from these sessions is uploaded or kept.

Read-aloud. Read-aloud runs when you tap Read aloud (or Listen) on an AI assistant reply, or automatically when you use open mic (a hands-free voice conversation), and is subject to the same age and region gate as the AI assistant. Replies are spoken either on your device, by its built-in voice or by a downloadable voice model (nothing leaves your device), or, for premium voices, by a speech server VerseMine operates, which receives the reply text transiently and does not store it. The downloadable voice model (about 335 MB) comes from Hugging Face (huggingface.co); on iPhone it downloads automatically over Wi-Fi for subscribers, and on a cellular connection the App asks first. Your device's IP address reaches Hugging Face when it does; no text or audio is sent there. One third-party voice provider, ElevenLabs, Inc., is also built in for premium voices but is not turned on; we will update this section before it is. If it is turned on, it will receive the reply text only, with no identifier, and what ElevenLabs itself keeps is governed by its own terms; separately, the audio it returns is cached in VerseMine's own storage, private to your account, for up to 30 days (Section 8). AI assistant replies are never sent to OpenAI to be read aloud.

3.6 Your Control Over AI Features

You control the optional AI features that process your data:

• AI consent — before the App first sends your data to a cloud AI provider for an optional AI feature (content moderation is not optional and runs from sign-up — see Section 3.3), it presents a consent screen explaining which providers will process your data. You can withdraw that consent at any time in Settings; withdrawing disables the AI features that depend on it — study feedback, the AI assistant, read-aloud, and theology analysis of your public posts — and stops those features from sending your data. You can keep using the App for Bible reading, text reflections, journaling, and on-device dictation.
• AI assistant — a separate, AI-assistant-specific consent and provider disclosure is presented before your first conversation with the AI assistant. The AI assistant is available only to US users at launch.
• Read-aloud: a reply is read aloud only when you tap Read aloud (or Listen) on it, or automatically while you use open mic (a hands-free voice conversation), which you can mute or turn off. On-device voices keep everything on your phone.
• Content moderation: runs on everything you share and cannot be disabled, because it is necessary to enforce our Community Guidelines (Section 3.3). This is disclosed during the consent process and in our Terms of Service. Theology analysis runs on your public posts only while you have given AI consent.

3.7 Search Over Your Own AI Assistant Conversations

The App provides a search feature over your own AI assistant conversation history. This lets you find past conversations by searching the full text of your own messages and your conversation titles. It searches both the copy of your conversations stored on your device and any conversation records held on our servers, so the words you type into the search box are sent to our servers to run the second half of it. Because we do not store your conversation text (Section 3.8), that half currently returns nothing — but the search words are sent all the same, and this search does not run only on your device.

• Scoped strictly to you. Search results include only your own conversations. There is no cross-user access — you cannot search, and others cannot search, anyone else's conversations.
• Crisis-affected content is excluded. Messages and conversations associated with a safety/crisis response are deliberately excluded from search and never appear in your search results.
• Search queries are not logged with content. Your search words are sent to our servers to run the search, but we do not store the text of your search queries or the content of the results alongside them. We retain only a minimal record of search activity (a timestamp tied to your account) used solely to rate-limit and prevent abuse of the search feature — it contains no query text, message content, or conversation titles. Usage counts may flow to our analytics provider (see Section 4) without any query or conversation content.

3.8 How Private Are My Conversations?

We designed VerseMine to minimize who and what can see your conversations: we don't sell your data, we don't share it with advertisers, and we don't use third-party ad trackers in the app. AI assistant conversation text in every mode except discipleship is anonymized while our anonymization safeguard is on (it is on at launch): names and places we detect are replaced with placeholders before the request that produces the reply. If we ever turn it off, we will update this policy first. Your original words still go to the safety checks that watch for crisis and abuse, and discipleship conversations are sent as written. Our AI provider processes all of it under a contract that prohibits using your content to train its models, and never receives your account identifier. But we want to be straight with you about the limits. We do not keep the text of your AI assistant conversations on our servers — not in one-to-one sessions and not in group sessions — except the text of a reply you choose to report (below). Your conversations are stored on your device, and deleting them in the App removes them from it. In an in-room conversation, the whole transcript, including what each participant said, is kept on the phone of the person who started it, and that person can export it. A copy they export is theirs to keep or share; we cannot reach or delete it. Each message you send — together with a recent part of the conversation, so the AI assistant can follow it — is sent to us and on to our AI provider only for as long as it takes to produce the reply. That does not make the conversation private to your device: our AI provider keeps inputs and outputs for the limited period described in Section 3.1. Current versions of the App keep the conversation store out of Google's backup on Android, and out of transfer to another Android phone. On iPhone the App asks iOS to leave the store out of iCloud Backup, and that request arrives with version 1.0.4 — versions before it do not make it. These are requests to the system, not guarantees. A device backup — iCloud or Google — may still hold a copy under Apple's or Google's terms rather than ours. Keeping the text off our servers also means we cannot recover a conversation for you if you lose your device. If we ever begin storing conversation text ourselves, we will update this policy before we do.

Context from your other conversations. The setting "Use context from your other chats" is off unless you turn it on. When it is on, the App can automatically add a few short snippets from your other recent conversations on your device to a message, so the AI assistant has context between chats. Whether that setting is on or off, when a message you send to the AI assistant mentions or asks about an earlier or other conversation, the App looks through the conversations on your device and adds the matching snippets to that message. Either way, the snippets are chosen on your device and travel with that message to our servers and on to our AI provider like the rest of the message: our servers do not store them, and our AI provider keeps them only for the period described in Section 3.1. The one exception is a reply you choose to report (below): we keep its text, and it may quote a snippet. Conversations associated with a safety/crisis response are never used this way.

What we do keep about AI assistant use. These records live on our servers, and like records held by any company they can be reached by valid legal process:

• Group session records — that a group session with the AI assistant happened, who started it and in which group, when it started and ended and how long it ran, whether it was a marriage session, whether a safety concern changed how the assistant responded during it, how often its oversight check raised an alert, the display names participants chose for it, and the outcome of the location check for it (Section 1.10). Not what was said. We do not record group-session audio.
• Content-free safety records: that a crisis resource was shown, the exact time, and the type of concern. They contain no message text and no account identifier, so they are not part of what we delete when you delete your account; they are deleted automatically after 732 days. They are not anonymous, though: the time on a safety record can be matched to other records we keep. For example, for up to 90 days, the time on a safety record can be matched to the daily crisis-check count below, which is linked to your account, so someone with access to our database could tell whose it is (this applies to one-to-one conversations: a crisis-check match in a group session is not counted); and if the resource was shown in a group session, its time can be matched to that session's record (Section 8). That count keeps the exact time of its latest match for a few hours, then only the day, so after that a safety record can be matched to it by day, not by time. Safety records made before 01:30 UTC on September 22, 2026 could carry an account identifier; it was removed from all of them on October 25, 2026, and backup copies made before then expire on their normal schedule.
• A reply you report — if you tap Report this reply on one of the AI assistant's replies, the text of that one reply is kept with your report so we can review it. Your own messages are not included. It can include names and details from that conversation. In a group session, only your reason is sent, not the reply. It is deleted when you delete your account.
• Derived notes, recaps and shared snapshots, if those features are enabled — AI assistant memory (profile notes and faith-growth recaps) and conversation sharing are turned off for accounts in the current release. If they are enabled for your account, the derived note or recap is stored on our servers, and a conversation you choose to share is frozen into a shared snapshot on our servers that does contain the text of the shared turns. Deleting a conversation on your device does not by itself remove any of these.
• Daily usage counts — a daily count of how many assistant messages you sent and, only if ElevenLabs premium voices are turned on, how many ElevenLabs voice requests you made, used only to apply usage limits. Message counts are deleted after 90 days; ElevenLabs voice request counts are kept until you delete your account.
• A daily crisis-check count: for each day, a count of how many of your messages in one-to-one conversations matched our crisis check, and of the extra replies it allowed that day, linked to your account. It holds no message text and is kept for 90 days. It is used to alert us to unusual volume, and in one-to-one assistant conversations: if a message of yours matched it within the last hour, reaching the daily limit does not stop the assistant from answering you, for up to 10 extra replies in any 7 days, which do not count toward your limit; otherwise, if one matched it on a day your current limit still counts, the limit screen shows no upgrade offer, only the limit, when it resets, and the 988 crisis resources. It never limits crisis help.
• A conversation-turn record — a subject-free record that a conversation turn happened and when: a conversation identifier and a timestamp, with no message text and no account identifier. Because it carries no identifier that links it to your account, it is not part of what we delete when you delete your account; once your account's records are gone, nothing on our servers connects it back to you.
• A search timestamp — one per conversation search, used to rate-limit the feature. It holds no query text (Section 3.7).
• A delete-all time — when you use "Delete all AI history", the time of your most recent use, linked to your account. It holds no conversation text. It is used only so that your other devices signed in to the same account can remove the conversations they hold that were created before that time, and it is deleted when you delete your account.

Our staff can access the records we do keep — session records, safety records, and the text of any reply you reported — but not the text of your conversations, because we do not have it. So if we receive a subpoena or court order: we do not keep the text of your conversations, so we have no transcripts to hand over; the records listed above can be reached by legal process, and our AI provider and your device backup may hold copies under their own terms. VerseMine is not a church, pastor, or healthcare provider, and conversations with the AI assistant are not protected by clergy-penitent, therapist, or attorney privilege. Please weigh that before sharing details you would only tell a person bound by those protections.

Not therapy. VerseMine offers spiritual guidance rooted in Scripture. It is not therapy, counseling, or medical or mental-health care, and it can't diagnose or treat any condition. If you're in crisis or thinking about harming yourself, call or text 988 (the U.S. Suicide & Crisis Lifeline) — a real person is available 24/7. Nothing here replaces a conversation with your own pastor — what you share with a pastor in person has legal protections that conversations with an app do not.

4. Other Third-Party Services

In addition to the AI providers listed above, we use the following third-party services to operate the App:

Scripture text is fetched from ESV, getbible.net, and bible-api.com servers by passage reference only; no user data is sent to them.

Each of these providers processes data on our behalf and is bound by their respective terms of service and privacy policies, except where noted above.

5. AI Model Training Disclosure

We do not use your data to train, fine-tune, or improve any artificial intelligence or machine learning models, and we contractually require our AI processors not to train their models on your content (see provider-specific terms below).

We require each AI provider listed in Section 3 not to use your data for model training. Specifically:

• Google Gemini (paid API tier): Your data is not used for model training.
• OpenAI (API): Your data is not used for model training.
• Anthropic (AI assistant): Your data is not used for model training; a data processing agreement applies.
• Voyage AI (theology-retrieval embeddings): We have opted out of Voyage's use of our data for model training.
• ElevenLabs (premium read-aloud, if enabled): We will confirm its training terms in this section before enabling it.
• On-device Whisper (voice transcription): Runs locally on your device; no audio or text is transmitted to any external service (the model file is downloaded from Hugging Face on first use — Section 3.5). The same is true of the downloadable read-aloud voice model.

This disclosure is made in compliance with Connecticut Senate Bill 1295 and to provide you with clear information about how your data is handled.

6. Automated Decision-Making

VerseMine uses AI to provide educational study feedback on your Bible highlighting. This feedback is informational and educational in nature. It does not constitute a consequential decision as defined under applicable law (e.g., it is not used for employment, housing, insurance, credit, or similar decisions).

Specifically:

• AI study feedback is a learning tool. It scores and comments on your highlighting to help you engage more deeply with the text. It has no impact on your access to the App, your account standing, or any real-world outcome.
• Content moderation and theology analysis use automated scanning to flag potential Community Guidelines violations. Flagged content may be reviewed and actioned according to our Community Guidelines. You can appeal moderation decisions by contacting us at support@versemine.app.
• Crisis and distress detection in the AI assistant is automated. It changes what the AI assistant says (for example, surfacing the 988 Lifeline). Pastoral care is not available in the current release; if it becomes available and you enable it, the detection can also notify your pastor. It never suspends your account.

7. Data Sharing

We do not sell your personal information. We do not share your personal information with third parties for their own marketing purposes.

We share your data only with the service providers named in Sections 3 and 4 of this policy, and only to the extent necessary to provide the App's functionality. Each provider acts as a data processor on our behalf, except Stripe (an independent controller for its own fraud prevention) and Klipy and Tenor (which see the search terms and viewer IP addresses described in Section 4 under their own policies).

Link previews. When a reflection contains a web link, our server fetches that page to show a preview (its title, description and image). The linked site sees a request from our server, not from your device. We refresh a stored preview once it is more than 7 days old. It is stored by the link's address only (not with your reflection or your account), and other members cannot list the links we have previewed. A stored preview is not deleted. One case is outside our control: the App loads the preview image directly from wherever the page says the image is hosted (usually the linked site), so that host can see the IP address of every viewer whose App shows the preview. Which sites those are depends entirely on what people link to.

If you have explicitly opted into accountability (Section 1.9), we share the Focus Mode and study notices described there with the partner you have chosen. If pastoral care becomes available and you enable it, we may notify your pastor as described in Sections 2 and 4; if you use pastoral outreach, when available, we send your message to the pastor or care team you chose, naming you and your church. All of these are consent-based, opt-in, and can be revoked at any time in Settings.

We may also disclose your information if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of VerseMine, our users, or others.

8. Data Retention

When you delete your account, we delete the personal data associated with your account from our systems, including the AI assistant session records in Section 3.8. The exceptions in that section are the subject-free conversation-turn record and the content-free safety records, which carry no identifier that links them to your account and are therefore not part of that deletion. Some other records stay, no longer linked to your account: a report another member filed about something you posted, with their reason; a record of an action our team took on your content; and your speaker entry in another member's group session, including the name you used there, until that session record is deleted. Two more stay for a limited time: the Focus Mode and accountability notices your accountability partners received (Section 1.9), which stay in their inbox, no longer linked to your account, until it is cleared, at most 60 days after they were sent; and, if a deletion step fails (at a provider such as RevenueCat or Stripe, or removing photos other people attached to comments on your reflections), a record of what is left to delete, which keeps your account's identifier and can hold the storage locations of those photos so the cleanup can be finished. It is kept while the cleanup is open, for at most 90 days, and for 30 days after it is finished. A Stripe customer record that still has an active church or group subscription is not deleted. Deleting your account from the App also removes your conversations from the phone you delete from. It does not reach a copy on another phone you were signed in on, or any copy in an iCloud or Google device backup — to clear those, delete your conversations in the App there, or remove the App and its data. Data that has already been transmitted to third-party AI providers is subject to those providers' retention policies as described in Section 3.

9. Data Security

We implement reasonable technical and organizational measures to protect your personal data, including:

• All data transmitted between the App and our servers is encrypted in transit using TLS.
• User data is stored in Supabase with row-level security (RLS) policies that ensure users can only access their own data.
• AI provider API keys are stored server-side and are never exposed in the App's client code.
• Photos of Bible pages and reflection images are stored in user-scoped storage paths with access controls. Profile photos are stored so that any user of the App can view them, as required to display them next to your posts.
• Authentication uses industry-standard protocols (email/password with email verification, Apple Sign-In, Google Sign-In).

No method of electronic storage or transmission is 100% secure. While we strive to use commercially reasonable means to protect your data, we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

10.1 All Users

• Access — You can download a copy of your data yourself in the App: Profile > Settings > Legal & Support > Export My Data. It saves one file that contains your profile, your Mines, your photo submissions with their study feedback (photos are listed by where they are stored, not included), and the AI assistant conversations and in-room conversations stored on that phone. You can also request a copy of the personal data we hold about you by emailing privacy@versemine.app; we fulfill those requests manually, including anything the export does not contain, such as your comments. The export takes the text of your AI assistant conversations from your device, because we do not hold it, so it includes only the conversations stored on the phone you export from.
• Deletion — You can delete your account and its data at any time from within the App (Profile > Settings > Delete Account, at the bottom of Settings), unless you manage a church or group plan that is still in effect, including its grace period after it is cancelled; then the account can be deleted once the plan ends or our support team transfers it. That deletes what we hold about you on our servers, with the exceptions listed in Section 8. It also removes your conversations from the phone you delete from. It does not remove what you said in an in-room conversation someone else started; that text is on their phone. It does not reach a copy on another phone you were signed in on or in a device backup — delete your conversations in the App there, or remove the App and its data, to clear those. You may also request deletion by emailing privacy@versemine.app; that does not reach the conversations on your phone.
• Withdrawal of AI consent — You can withdraw AI consent at any time in Settings; this disables the AI features that depend on it (Section 3.6). Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.
• Withdrawal of Focus Mode access: you can turn Focus Mode off at any time in Profile > Accountability, or revoke VerseMine's access in your phone's settings (iPhone: Settings > Screen Time; Android: Usage Access or display over other apps).
• Removal of accountability partner: you can turn accountability off for a partner at any time in Profile > Accountability. That immediately stops new notices to that partner (Section 1.9).
• Pastoral care: not available in the current release. If it becomes available and you enable it, you can turn it off at any time in Settings, which stops any further notifications to your pastor.
• Opt out of announcement email — If we send announcement emails, you can ask us to stop at any time by emailing privacy@versemine.app. You will still receive essential account and transactional emails.

10.2 European Economic Area (EEA), United Kingdom, and Switzerland Residents

Under the General Data Protection Regulation (GDPR) and equivalent laws, you also have the right to:

• Rectification — Request correction of inaccurate personal data.
• Restriction — Request that we restrict processing of your personal data in certain circumstances.
• Data portability — Request a copy of your personal data in a structured, commonly used, machine-readable format. The in-app export described in Section 10.1 (Export My Data) gives you that copy yourself: your server records are written as JSON inside the file. For anything it does not contain, email privacy@versemine.app and we will fulfill the request manually. As with access, the text of your AI assistant conversations comes only from the phone you export from, because we do not hold it.
• Object — Object to processing based on legitimate interest (including content moderation). We will cease processing unless we demonstrate compelling legitimate grounds.
• Lodge a complaint — File a complaint with your local data protection authority (e.g., the ICO in the UK, the CNIL in France, or any EU supervisory authority).

10.3 California Residents

Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, you have the right to:

• Know — Request the categories and specific pieces of personal information we have collected about you.
• Delete — Request deletion of your personal information.
• Opt out of sale — We do not sell your personal information. No opt-out is necessary.
• Non-discrimination — We will not discriminate against you for exercising your CCPA rights.

10.4 Connecticut Residents

Under the Connecticut Data Privacy Act (as amended by SB 1295), you have the right to:

• Access — Confirm whether we process your personal data and obtain a copy of it (see Section 10.1).
• Correction — Correct inaccuracies in your personal data. You can edit your profile in the App yourself; for anything else, email privacy@versemine.app.
• Deletion — Delete your personal data. You can delete your account and its data in the App (Profile > Settings > Delete Account, at the bottom of Settings) or by emailing privacy@versemine.app (see Section 10.1).
• Portability — Obtain your personal data in a portable and readily usable format (see Section 10.2).
• Opt out of targeted advertising, sale and profiling — We do not sell your personal data, we do not use it for targeted advertising, and we do not use it for profiling in furtherance of decisions that produce legal or similarly significant effects (see Sections 6 and 7). There is therefore nothing to opt out of today. If that ever changes, we will update this policy first and give you a way to opt out.
• Consent for sensitive data — Data revealing religious beliefs is sensitive data under Connecticut law. What you do in VerseMine — your reading activity and streaks, the highlights and Bible photos you submit, your Mines, your church, your prayer and study content, and your conversations with the AI assistant — can reveal your religious beliefs, so we process it only with your opt-in consent. We ask for it as its own step before any screen that processes that data: if you sign up with email, Apple or Google from the sign-up screen, before your account is created; if a new account is created by signing in with Apple or Google from the log-in screen, or your account existed before we added this step, the first time you open the App, before any of those screens. We record which version of the consent you accepted and when our server received it; for an email sign-up, that time is your first signed-in open after you confirm your address, not the moment you ticked the box. Giving it is your choice, but the App cannot work without it, so withdrawing it means deleting your account: in the App (Profile > Settings > Delete Account), or by emailing privacy@versemine.app, which deletes your account; that does not reach the conversations on your phone. Withdrawal does not affect processing that took place before it.
• Appeal — If we decline to act on a request, we will tell you why. You can appeal that decision by emailing privacy@versemine.app with "Appeal" in the subject line within a reasonable time after you receive it. We will respond to your appeal within 60 days, in writing, explaining what we did and why. If we deny your appeal, you can contact the Connecticut Attorney General to submit a complaint (portal.ct.gov/ag).
• AI disclosure — Be informed about how AI processes your data, including whether your data is used for model training (it is not — see Section 5).

10.5 Exercising Your Rights

To exercise any of these rights, contact us at:

• Email: privacy@versemine.app
• In-app: Profile > Settings > Delete Account, at the bottom of Settings (for account deletion)

We will respond to verified requests within 30 days (or the timeframe required by applicable law). We may ask you to verify your identity before processing your request.

11. Children's Privacy

VerseMine is intended for users aged 13 and older. We comply with the Children's Online Privacy Protection Act (COPPA).

• Age gate: Every user must provide a date of birth before using the App. When you sign in with Apple or Google, your account is created first and the date of birth is asked right after, so an account can exist for a short time before the age check runs.
• If we learn a user is under 13: When a user confirms a date of birth under 13, the App deletes the conversations stored on that phone, we delete the account and the information we hold about it, and the phone is signed out. Before deleting anything, our servers record the account for deletion, so a deletion that cannot finish at that moment is retried automatically until it completes, and our team is alerted to any deletion that has not completed within a day. There are three exceptions. If the phone could not reach our servers at that moment, or reached them after its sign-in had expired, or our servers could neither record the account nor finish deleting it, nothing is recorded. If, rarely, the App cannot tell which account is signed in on the phone, nothing is deleted from the phone and nothing is recorded, and the phone is signed out. And an account that administers a church group plan cannot be deleted while the plan is in effect, which continues through a grace period after it is cancelled; the App says so, and nothing is recorded. In each case a parent can contact us as described below and we will delete the account. Messages already sent to an AI provider are deleted under that provider's retention terms, described in Section 3 (for conversations, Section 3.1).
• If you tell the AI assistant you are under 13: In a one-on-one conversation, the App asks you to confirm your age. If you confirm you are under 13, the account is deleted as described in the item above, with one difference: because a date of birth is on record (the question is asked about it), the account is not recorded for deletion first, so a deletion that stops part-way is not retried automatically. In that case the App says the deletion did not finish, our team is alerted when a deletion step fails, and a parent can contact us as described below and we will delete the account.
• Retention: We keep information from a child under 13 only as long as is reasonably necessary to delete it. The record we use to track a pending deletion holds only the account identifier and the times the deletion was requested, and it is removed when the deletion completes.
• Parental contact: If you believe your child under 13 has provided personal information to us, please contact us immediately at privacy@versemine.app. We will promptly delete any such information.

The AI assistant is available only to US users at launch and is subject to additional age safeguards: a fail-closed age gate denies access to the AI assistant when age cannot be verified, and minors receive additional crisis safeguards.

12. International Data Transfers

VerseMine is based in the United States. All data processing occurs in the United States through US-based service providers (Supabase, our own cloud servers, PostHog, Sentry, Resend, RevenueCat, Stripe, Expo, Klipy, Tenor) and cloud AI providers (Google, OpenAI, Anthropic, Voyage AI, and ElevenLabs if enabled). Dictation is transcribed on your device, and OpenAI receives content only for moderation (Section 3.3). The AI assistant is available only to US users at launch.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your data is transferred to the United States. We rely on the following safeguards for these transfers:

• Standard Contractual Clauses (SCCs) — we require Standard Contractual Clauses, as adopted by the European Commission, with our processors that transfer EEA/UK/Switzerland personal data, including Anthropic.
• Data Processing Agreements (DPAs) — we require Data Processing Agreements with our processors that transfer EEA/UK/Switzerland personal data on our behalf, establishing data handling, retention, and deletion obligations.

By using the App, you acknowledge that your data will be processed in the United States, which may have different data protection laws than your country of residence.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy.
• Notify you through the App (e.g., an in-app notice or push notification) if the changes are material.
• Where required by law (e.g., changes to AI processing or new third-party providers), request your renewed consent before processing your data under the new terms.

Your continued use of the App after an updated policy takes effect constitutes your acceptance of the changes, except where renewed consent is required by law.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

• General support: support@versemine.app
• Privacy inquiries and data rights requests: privacy@versemine.app
• Legal entity: Kreyman Enterprises LLC
• Contact email: david@kreymanenterprises.com

If you email us, including from "Contact support" in the App's conversation menu, we keep your email and anything you choose to write in it or attach, so we can answer it. The App adds nothing from your conversations to that email.

Kreyman Enterprises LLC ("VerseMine," "we," "us," or "our")
Website: https://versemine.app
Privacy Policy: https://versemine.app/privacy