Privacy Notice

Who we are

Ledger (also known as My Bible Read, at mybibleread.app) is operated by Grubby Garb. Grubby Garb is the data controller for the personal data described here, which means we decide how and why it is used.

What we collect and why

• Account details — your email address and sign-in credentials, so we can create your account, keep you signed in, and let you reset your password. Legal basis: performance of our contract with you.
• Your reading content — chapters you log, reading plan progress, grades and streaks, verse highlights, study notes, daily notes, and your prayer list, so we can show your calendar and sync it across your devices. Legal basis: performance of our contract with you.
• Suggestions and support messages — the name, optional email and message you send us, so we can reply and improve the app. Legal basis: legitimate interests.
• Gift records — the transaction reference, amount, currency and status of a gift, so we can keep accurate records. Card details never reach us; they are handled by Paddle. Legal basis: legal obligation and legitimate interests.
• Technical and usage data — IP address, device and browser information, and error logs, used for security, fraud prevention, and fixing problems. Legal basis: legitimate interests.

We do not sell your data, and we do not use your notes or prayer list for advertising. We use your email to send service messages (sign-in links, password resets); marketing email, if we ever send any, is only with your consent and you can withdraw it at any time.

Who we share it with

• Hosting, database, authentication and email delivery providers who run the app on our behalf.
• Bible text providers (such as API.Bible and Crossway/ESV) receive only the passage requested, not your identity or notes.
• Paddle.com, our Merchant of Record, for the sale of gifts, payments, tax compliance, invoicing and customer service.
• Professional advisers (legal, accounting) where needed.
• Authorities where we are required to by law.

International transfers

Our providers are based in the United States, so your data may be processed outside the UK and EEA. Where that happens we rely on appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision.

How long we keep it

We keep your account and reading content for as long as your account is active. If you delete your account or ask us to, we delete or anonymise your data within 30 days, except records we must keep for tax and accounting (typically up to 7 years) and security logs (kept for a short period).

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its use, receive a copy in a portable format, and withdraw consent. You can export everything yourself from the Backup page at any time. To make a request, contact us through the About page. We respond within one month. If you are in the UK or EEA, you can also complain to your local data protection supervisory authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and per-user database rules so that only you can read your own reading records, notes and prayer list.

Cookies and local storage

We use only essential cookies and browser storage — to keep you signed in, remember your chosen Bible translation, and store your reading data on your device so the app works offline. We do not use advertising cookies. You can clear this data at any time in your browser settings, though doing so signs you out.

Changes

If we update this notice we will change the date above and, for significant changes, tell you in the app. See also our Terms & Conditions and Refund Policy.