Privacy Policy
Last updated: 3 June 2026
BibleQ — operated by BibleQ.
Contact: hello@thebibleq.com
Who We Are
BibleQ is a Bible study app designed for Coptic Orthodox Sunday school students. It is operated by BibleQ (“we”, “us”, or “our”). This policy explains what information we collect, how we use it, and your rights.
If you have any questions, contact us at hello@thebibleq.com.
Who Uses BibleQ
BibleQ is designed for children. Children do not create their own accounts. All accounts are created by authorised Sunday school teachers or administrators. Teachers create a child’s account using only the child’s name; the system generates a username and PIN, which the teacher then gives to the child. Children never enter personal information themselves.
What Information We Collect
Information created by teachers when setting up a child’s account
- Display name (the child’s full name, entered by the teacher)
- Username (auto-generated by the system)
- PIN (4-digit PIN, auto-generated and stored in hashed form — we cannot read it)
- Cohort and class (the cohort, and optionally the class, the child is assigned to)
- Church (the church the child belongs to)
Information collected automatically when the app is used
- Lesson activity — which lessons were completed, quiz answers submitted, and scores
- Verse recitations — which verses were recited and whether they were scored correctly
- Streaks — consecutive days of lesson completion (calculated from activity data)
- Stickers and badges earned — collectible rewards unlocked through lesson completion
- Timezone — your device’s local timezone, used to correctly calculate daily streaks (e.g. so a lesson completed at 11pm counts as that local day, not the next UTC day)
Speech recognition (verse recitation feature)
When a child recites a Bible verse:
- The device’s microphone captures speech locally on the device
- On iPhone/iPad: speech is processed entirely on-device — audio never leaves the phone
- On Android: on Android 12 and above, speech is processed on-device; on older Android devices, speech may be processed by Google’s on-device speech service
- We do not record or store audio. Only the text transcript is sent to our server for scoring
- The transcript is stored as part of the recitation record and deleted when the account is deleted
What we do NOT collect
- Email addresses from children
- Phone numbers
- Photos or camera data
- IP addresses
- Device identifiers (advertising IDs, hardware serial numbers)
- GPS or location data
- Contacts or calendar data
How We Use This Information
| Information | How it’s used |
|---|---|
| Name, username, PIN | To identify the child and allow them to log in |
| Lesson activity and scores | To show progress to the child, calculate points and rewards, and help teachers see how students are going |
| Timezone | To correctly calculate daily and weekly streaks |
| Verse transcripts | To score recitations and award halos |
| Stickers and badges | To track collectible rewards earned |
We do not use any of this information for advertising, profiling, or any purpose other than operating the app.
Analytics
We use PostHog for optional usage analytics. When enabled, this records events such as “lesson completed” or “verse recited” along with the lesson or verse identifier, score, and app version.
PostHog is configured to:
- Not collect IP addresses
- Not collect device identifiers
- Not collect geolocation
Analytics can be disabled entirely by the app operator via a server environment variable.
Who We Share Information With
We do not sell, rent, or share children’s personal information with third parties for commercial purposes.
| Service | What is shared | Why |
|---|---|---|
| Neon (PostgreSQL hosting) | All app data | Encrypted database hosting |
| AWS S3 | Lesson audio and images uploaded by teachers | Media file storage — no child PII in these files |
| PostHog (optional) | Anonymised usage events | Analytics — no IP, no device ID, no name |
| Expo | App binary | Mobile app deployment platform — no runtime data collection |
Children’s Privacy (COPPA and Australian Privacy Act)
BibleQ is designed for children and we take this responsibility seriously.
- No self-registration. Children cannot create their own accounts. All accounts are created by authorised adults (teachers or church administrators).
- No email or contact information collected from children. We collect only a display name (entered by the teacher) and auto-generated login credentials.
- Parental/guardian rights. Parents or guardians may request to review, correct, or delete their child’s information by contacting us at hello@thebibleq.com or by asking their Sunday school teacher to access the admin portal.
- Account deletion. Teachers and administrators can delete a child’s account at any time. Deletion removes all associated data immediately and permanently — lesson history, scores, stickers, and badges.
- Data minimisation. We collect only what is necessary for the app to function.
If you believe we have inadvertently collected information from a child without appropriate authorisation, please contact us immediately at hello@thebibleq.com and we will delete it promptly.
Data Retention
Data is retained for as long as a child’s account is active. When an account is deleted, all associated data is deleted immediately and permanently. There is no retention period — we do not archive deleted accounts.
Security
We protect data using:
- Encrypted HTTPS connections for all data in transit
- Hashed PIN storage (PINs are never stored in readable form)
- Rate-limited login (5 failed attempts triggers a 15-minute lockout)
- JWT session tokens with expiry
- Encrypted database hosting (Neon)
Your Rights
Parents, guardians, and authorised church administrators may:
- Access — request a copy of the information held for a child
- Correct — ask us to correct inaccurate information
- Delete — request deletion of a child’s account and all associated data
- Withdraw — ask us to remove the child from the app
To exercise any of these rights, contact us at hello@thebibleq.com or speak to your Sunday school teacher who can take action directly through the admin portal.
Request Account Deletion
To request deletion of your child’s account and all associated data, email us at hello@thebibleq.com with your child’s username and the name of their Sunday school.
We will action all deletion requests within 7 days. Deletion removes all associated data immediately and permanently — lesson history, scores, stickers, and badges.
Alternatively, any authorised Sunday school teacher or administrator can delete a child’s account directly through the admin portal at any time.
Changes to This Policy
We will post any updates to this page and update the “Last updated” date at the top. If changes are significant, we will notify church administrators directly.