Privacy Policy · The Lion & The Lamb Bible App

The Lion and the Lamb Bible App ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our app and website at thelionandthelamb.app.

1. Information We Collect

Information you provide

Email address — collected when you create an account or subscribe.
Password — stored as a one-way cryptographic hash (SHA-256). We cannot recover or view your password.
Payment information — processed entirely by Stripe. We do not store your credit card number, CVV, or billing address. We only store your Stripe Customer ID and Subscription ID to manage your access.

Information collected automatically

Usage data — basic analytics such as pages visited and features used, collected to improve the app experience.
Device & browser information — browser type, OS, and screen size for compatibility purposes.

Local storage

We use your browser's localStorage to maintain your session and remember your subscription status. This data is stored on your device only and is not transmitted to our servers except as described above.

2. How We Use Your Information

To create and manage your account
To process and verify your subscription through Stripe
To restore access if you are logged out
To respond to support requests
To improve the app experience

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services to operate the app:

Stripe — payment processing. Subject to Stripe's Privacy Policy.
Netlify — hosting and serverless functions. Subject to Netlify's Privacy Policy.
Google Fonts — typography. Font requests are made to Google's servers.
Google Gemini API — powers the AI Scripture Search feature. Queries are processed server-side and not stored by us.

4. Data Retention

Your account data is retained for as long as your subscription is active. If you cancel and request deletion, we will remove your email and account records within 30 days. Payment records are retained by Stripe per their policies for legal and financial compliance.

5. Your Rights

Depending on your location, you may have the following rights:

Access — request a copy of the data we hold about you
Correction — request correction of inaccurate data
Deletion — request deletion of your account and associated data
Portability — receive your data in a machine-readable format

To exercise any of these rights, contact us at the address below.

6. Children's Privacy

This app is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

7. Security

We use industry-standard security measures including HTTPS encryption, hashed password storage, and server-side API key handling. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.