Trust & Security

This page is maintained by The Studio 1216 to answer common security and privacy questions about Daily Bible Plan. It describes current practices and enabled controls; it is not a certification or independent audit.

Authentication & access

• Sign-in via email/password and Google OAuth.
• Sessions use signed JWTs; tokens are revalidated server-side on every privileged request.
• Each user can only read or modify their own reading progress, bookmarks, highlights, and reflections.

Data protection

• All traffic is served over HTTPS/TLS.
• User data is stored in a managed Postgres database with row-level security policies that scope reads and writes to the owning account.
• Server-side secrets (API keys, webhook secrets) are kept out of client code and accessed only from server functions.

Hosting & platform

Daily Bible Plan runs on the Lovable platform with a managed serverless runtime for server functions and a managed Postgres backend for user data. Lovable provides platform-level infrastructure; The Studio 1216 is responsible for the application's data handling and access rules described on this page.

Subprocessors

• Lovable — application hosting, database, and authentication.
• Paddle.com Market Ltd. — Merchant of Record for subscriptions, payments, tax, invoicing, and refunds.
• AI model providers — used to generate study notes and devotionals on request.

Data collection & retention

We collect only what is needed to run the Service: account email, your reading progress, bookmarks, highlights, reflections, and basic device/log data for security. Payment details are collected by Paddle, not by us. See the Privacy Notice for full details, legal bases, and retention.

Your rights

You can request access to, correction of, or deletion of your personal data at any time. EU/UK users may also lodge a complaint with their local supervisory authority. Contact details are in the Privacy Notice.

Cookies

We use essential cookies and local storage to keep you signed in and to remember your reading progress. We do not set advertising cookies. Paddle's checkout may set cookies necessary to complete a purchase.

Payments & refunds

Paddle.com is the Merchant of Record for all subscriptions and handles billing, tax, and refund requests. See our Refund Policy and Terms.

Reporting a security issue

If you believe you have found a security vulnerability in Daily Bible Plan, please contact The Studio 1216 through the support channel on the site so we can investigate and respond. Please do not publicly disclose details until we have had a chance to address the issue.

Changes

This page is editable content maintained by The Studio 1216 and may be updated as the Service evolves. Material changes are reflected here.