Privacy Policy

Last Updated: September 30th, 2026

Scrollture (the "App") is the Bible one verse at a time, with a short study for every verse. It is built by Mango Lab ("we", "us", or "our"). This Privacy Policy explains what happens to your information when you use the App.

The short version: there is no account and no signup, and we run no server of our own. What you write in the App never reaches us. Your notes stay on your devices and in your own private iCloud. The App does report how it is used, under a random identifier and never under your name. Four named third parties are involved: Apple, RevenueCat, PostHog, and Google (Google Analytics). The sections below say exactly what each of them receives.

We want to be precise rather than flattering here. It would be easy to write "we collect no data at all," and it would not be true: the App reports how it is used, and the sections below say exactly what that means.

If you do not agree with this Privacy Policy, please do not use the App.

A Note on Faith

Reading the Bible can say something about what you believe, so we treat this App's data with more care than an ordinary app's, not less.

The App never asks for your name, email address, church, or denomination. The one choice that comes close is the canon you pick when you start (Protestant or Catholic), which decides which books and translations the App offers. It is included in the usage reports described below, under the same random identifier as everything else, so that we can tell whether both kinds of reader are being served well.

The same goes for the verse topics named after how you feel, such as "Anxious" or "Grieving". Which topic you open is reported, so that we can learn which ones people reach for. It is never connected to who you are.

Data Stored on Your Device

All of the following is stored on your iPhone and, if you are signed in to iCloud, mirrored into your own iCloud as described under iCloud Sync below:

★ Your saves: the verses you keep, the colour tags and folder names you give them, and any note you write.

★ Your reading: where you left off, the book you are reading through if you chose one, the chapters and books you have finished, your daily goal, the days you met it, and your streak. These also build your city in the App.

★ Your studies: which studies you have opened.

★ Your answers and preferences: the canon and translation you read, the reason for reading you picked when you started, your reminder hour, and the name you gave Ari if you renamed Ari. Text size and theme are kept on each device and are not synced.

★ Your widgets: a small snapshot of this week's verses and your place in the Bible, written to a container on your iPhone that the App's widgets can read. It is rebuilt every time you open the App and never leaves the device.

The App does not ask for your name, email address, phone number, date of birth, church, or any other detail that could be used to contact or identify you. There is no user profile, because there are no user accounts.

iCloud Sync

If you are signed in to iCloud, two Apple services carry your data between your devices, so a new phone picks up where the old one left off:

a) Your saved verses and notes go into your own private iCloud database through Apple CloudKit.

b) Your reading progress, the studies you have opened, and your preferences go into iCloud's key-value storage for the App.

Both are Apple infrastructure, tied to your Apple ID and governed by Apple's Privacy Policy. The data lives in your iCloud account, not ours. It is not sent to a Mango Lab server, because we do not operate one.

We cannot read, access, or recover data stored in your iCloud. Neither can we restore it for you if it is lost. Apple does not grant developers access to a user's private data.

You can stop sync at any time by turning off iCloud for Scrollture in iOS Settings → your name → iCloud, or by signing out of iCloud. If you do, the App keeps working and your data stays on that one device only.

The Free Studies Count

Twenty studies are free. So that the count does not reset by accident, the App keeps the list of verses whose study you opened on the free tier in your device's keychain, which means it survives deleting and reinstalling the App.

The list is only verse addresses, such as "John 3:16". It stays on that device: it is not synced to iCloud Keychain and it is not sent to us. The Analytics section below covers the one number from it that is reported, which is how many free studies have been used.

Subscriptions

Scrolling through the Bible, 20 studies and 20 saves are free forever. Scrollture Plus unlocks every study, one for each of the 31,086 verses, and unlimited saves.

Payment is processed entirely by Apple. The App never sees or handles your card details, your billing address, or your Apple Account credentials.

We use RevenueCat to validate purchases and to check whether you have Plus. RevenueCat is a data processor acting on our behalf. It receives:

a) a random identifier that RevenueCat creates for this installation of the App

b) purchase and transaction data from Apple, including which plan, whether a free trial is running, and whether the subscription is active

c) basic device and country information that Apple provides with the purchase

d) the PostHog identifier described under Analytics, so that a purchase can be matched to the usage that led to it

RevenueCat reports purchase events (a trial started, a purchase, a renewal, a cancellation) to PostHog under that identifier. RevenueCat does not receive your notes, your saves, or anything you have read.

Analytics

This App is made by one person, and there is no other way to find out whether it actually helps anybody read. So it reports how it is used to PostHog, which is hosted in the United States.

What PostHog receives:

a) a random identifier that PostHog creates for this installation. It is not connected to your name, your email, your Apple ID, or any identifier belonging to your phone. Deleting the App discards it, and a reinstall starts a new one

b) when the App is installed, opened, updated, and closed, and which tab you open

c) how far through the opening questions you get, and your answers: your reason for reading (one of five choices, such as "Daily encouragement" or "Just curious"), your daily goal, your reminder hour, whether you renamed Ari, and the first verse you were shown

d) the verse address, such as "John 3:16", when you finish a chapter, open a study, save or unsave a verse, save a note, or share a verse. For a note, only its length and colour tag are sent, never its words

e) which verse topic you open, such as "Anxious", "Tired" or "Hopeful"

f) for a search: how long it was, how many results it found, and which one you picked. If you picked nothing, the words you typed are sent too, because a search that found nothing useful is the thing we most need to fix. Please do not type anything personal into search

g) your standing in the App: Free or Plus, your streak and best streak, chapters read, daily goal, how many studies you have opened and how many free ones you have used, your canon and translation, and whether you have a widget on your home or lock screen and which kind

h) whether the paywall was opened, why, and for how long, and whether a purchase was started, finished, cancelled, failed or restored, and whether you asked for the trial reminder

i) whether you changed your reminder, opened the widget guide, or were shown Apple's rating prompt. Apple does not tell us whether or how you rated

j) your device model, iOS version, app version, and language and time zone settings

k) your IP address, which PostHog uses to estimate your approximate location, at most to the level of a city. This is not a precise location, and the App never asks for or uses location services

The App does not record your screen. PostHog's session replay is switched off, and so is its automatic capture of taps. The events above are the only ones the App sends.

Google Analytics for Firebase is also used, for one thing only: to see how many people are reading right now and roughly which countries they are in. Google receives much less than PostHog:

a) a random identifier that Firebase creates for this installation. Like PostHog's, it is not connected to your name, your email, your Apple ID, or your phone's advertising identifier

b) when the App is opened and for how long it is used, and which tab you open

c) that one of these happened, with no detail attached: finishing the opening questions, meeting your daily goal, finishing a chapter or a book, opening a study, seeing the paywall, buying Plus, saving a verse, or opening the share sheet

d) whether you have Free or Plus

e) your device model, iOS version, app version, and language settings

f) your IP address, which Google uses to estimate your approximate location, at most to the level of a city

Google never receives a verse address, the words of a search, or anything you wrote. What you read stays out of Google's reports entirely.

The App does not track you across other companies' apps or websites, shows no ads, and sells nothing. It does not collect Apple's advertising identifier (IDFA): the App uses the build of the Firebase SDK that leaves it alone.

This analytics collection is a standard part of the App and cannot currently be turned off from within it. If you would prefer not to be included, you may stop using the App and delete it. Data handled by these services is subject to PostHog's privacy policy and Firebase's privacy documentation.

Notifications

If you allow them, the App sends two kinds of notification, and no others:

a) a daily reading reminder at the hour you choose, from Ari (or whatever you named Ari)

b) if you ask for it when you start a free trial, one reminder two days before the trial ends, so that you can decide whether to keep Plus

These are local notifications. They are scheduled and delivered by your own device. No server is involved, no message is sent to us, and we do not know whether you opened one.

You can turn them off in the App's settings or in iOS Settings at any time.

Sharing

When you share a verse, the App draws the share card on your iPhone and hands it to the iOS share sheet. Where it goes from there is your choice, and we do not receive a copy. We only learn that the share sheet was opened, and for which verse.

Network Requests

The App makes only five kinds of network request, and no others:

a) RevenueCat's API, for purchase validation and checking Plus, as described above.

b) PostHog's API, which receives the usage events described in the Analytics section.

c) Apple's App Store, to show prices and to make and restore purchases.

d) Google's Firebase Analytics endpoints, which receive the small set of usage events described in the Analytics section.

e) Apple iCloud, which carries your saves, notes, and progress to and from your own iCloud. This goes to your Apple account rather than to any server of ours.

The App contacts no other server. The Bible text and every study are inside the App itself, so reading works with no connection at all.

What We Do Not Do

We never see what you write. Your notes go to your own devices and your own iCloud, and to nobody else.

The App contains no advertising and no cross-app tracking. We serve no ads, we do not collect Apple's advertising identifier, and we do not track you across other companies' apps or websites. This is why the App never shows you an App Tracking Transparency prompt: it has nothing to ask you for.

We do not sell, rent, or share your information with a data broker.

The App does not ask for access to your location, contacts, photos, camera, or microphone.

Data Retention and Deletion

★ Local data: Deleting the App from your iPhone removes all of its local data. The one exception is the free studies list described above, which stays in your keychain so that the count does not reset.

★ iCloud data: Deleting the App does not by itself remove what is already in your iCloud. That data is managed by you through iOS Settings → your name → iCloud. Because it is private to your Apple ID, we cannot delete it for you.

★ Our systems: We hold nothing of yours on any server of ours, because we operate none.

★ Everything else: Your purchase record at RevenueCat and your usage records at PostHog and Google are filed under the random identifiers described above, not under your name or email, and the App does not currently show those identifiers. That means we cannot pick out your records from a name or an email address. Deleting the App discards the identifiers from your phone, and from then on the old records are no longer connected to your device. If you would like us to delete records, write to us and we will do everything we can to find and remove them.

Note that deleting the App does not cancel a subscription (cancelling is done in your Apple Account subscription settings), and that Apple separately retains its own record of every transaction.

Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect personal information from them. It requires no account and collects no name, email address, photograph, contact, or precise location from anybody of any age, so we have no means of determining a user's age.

Third Party Providers

Four third parties are involved in the operation of the App.

• Apple: Apple processes your subscription through the App Store and stores your synced saves, notes, and progress in your own iCloud. Your relationship for this data is with Apple, under your Apple ID. We have no access to it.

• RevenueCat: RevenueCat validates purchases and manages access to Plus. It receives its own random identifier, the PostHog identifier, purchase and transaction data, and basic device information. It receives no notes, no saves, and no reading history. RevenueCat acts as a processor on our behalf and honours data deletion requests.

• PostHog: PostHog processes product usage on our behalf: the random identifier, the events listed in the Analytics section, device and app version information, and your IP address for approximate location. It is hosted in the United States. It receives no note text.

• Google (Analytics for Firebase): Google processes aggregate usage measurement on our behalf: an app installation identifier, device and app version information, automatically collected session events, the small set of events listed in the Analytics section, and your IP address for approximate location. It receives no verse address, no search, and no note text.

Links to Other Sites

The App may contain links to sites we do not operate, such as the App Store for reviews or your email app to contact us. We have no control over, and assume no responsibility for, the content or privacy practices of any third-party site. We encourage you to review their policies.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last Updated" date. Continued use of the App after a change takes effect constitutes acceptance of the revised policy.

Who We Are

Scrollture is built by Mango Lab, a small indie studio. You can reach us about any privacy question at: