Privacy policy

Last updated: October 27, 2026

BibleForSI is a free Bible reading app and website published by Veritas Nexus Legal LLC under its Veritas Digital brand. It is a non-commercial project: no ads, no sales, no paid features and no selling of data; voluntary donations only cover running costs. We collect as little as possible. This policy applies to the website, the Android app, the Windows desktop app and the Edge/Chrome browser extension.

• No account is required. To use BibleForSI we do not ask for your name, email address, phone number or location. If you donate or write to us, see the donation and message items below.
• Your notes, highlights, bookmarks, reading history, prayer intentions, collections, plan and rosary progress and settings are stored only on your device (browser storage). You can export them, or delete them all with "Delete all local data" on the My notes page, at any time. We never see them.
• Storage on your device: we only use storage that is strictly necessary for features you use. Cookies (first-party, functional, 1 year): bfsi_locale (your language), bfsi_edition (your Bible edition) and bfsi_tz (your device's time zone, set automatically on your first visit so that the liturgical day, the Mass readings and the Liturgy of the Hours follow your local date). Browser storage (keys starting with "bfsi"): your settings and theme, notes, highlights, bookmarks, reading history, prayer intentions, collections, reading-plan and rosary progress, voice and player preferences, home-page layout, welcome choices, daily-verse hour and offline-reader choices. Offline copies (service-worker caches): pages, images and app files you have opened, the Faith and readings pages saved for offline use, prayer audio and the Bible editions you download. None of this is sent to us or used for tracking, analytics or ads, so no consent banner is required. "Delete all local data" on the My notes page removes all of it from this browser. In the Android app, the offline reader keeps its downloaded editions and its own settings separately: remove them with "Delete offline data" on the offline reader's screen, or by clearing the app's storage in Android settings.
• To show Bible text, search results and the liturgical calendar, your device sends requests to our server over HTTPS. Search terms and questions are processed to answer you and are not stored with your identity. We do not use analytics, tracking cookies or advertising identifiers.
• Server logs: our web server keeps access logs (IP address, time, page path without the search terms or other query text, browser type) to keep the service secure and block abuse. Security logs (firewall, blocked login and scanning attempts) also contain IP addresses. Both are deleted automatically after at most 14 days. Rate limiting uses IP addresses in memory only.
• Security: every connection uses HTTPS with HSTS; off-site backups are encrypted before they leave the server; the app runs as a restricted service account with only the access it needs, behind a firewall and with automatic security updates; logs that contain IP addresses are deleted after at most 14 days; and because there are no accounts, there are no passwords or profiles to steal. No system is perfectly secure: if we learn of a breach that affects you, we will act and notify as the law requires.
• The optional question answering runs on our own server. Your question is not sent to third-party AI companies and is not used to train models.
• Daily verse (optional, website only): if you turn it on, your browser's push service gives us a delivery address (endpoint) plus your language, preferred hour and time zone. We use it only to send the verse. Turning it off, or using "Delete all local data", deletes it from our database; copies in our encrypted backups expire as described under Backups. The Android app does not use push notifications.
• Browser extension and desktop app: the Edge/Chrome extension keeps its settings and today's verse in the browser's local extension storage and asks our site for the verse of the day once a day. Text you select on a web page or type into its search box is sent to our site only when you choose to search, as part of the search address, and is not stored with your identity. The Windows desktop app opens this website or its bundled offline reader and adds no tracking of its own.
• Donations are optional and are made on PayPal's website. We never receive your card or bank details. As the recipient, we do receive from PayPal your name, email address, the amount, currency and date, any note you add and, depending on your PayPal settings, your country or postal address. We use these records only to keep our accounts and meet tax and accounting obligations (legal basis: legal obligation), keep them as long as those laws require (generally up to 7 years), never use them for marketing, and share them only with our accountants or with authorities when the law requires. PayPal's own privacy statement covers what PayPal does with your data.
• Messages to us: if you write to legal@veritasnexuslegal.com, we receive your email address, your name if you give it, and what you write. We use it only to answer and handle your request (legal basis: our legitimate interest in answering you, or a legal obligation for privacy and copyright requests), and we delete it no later than 12 months after the matter is closed, unless we need it longer to establish or defend legal claims.
• Service providers: a hosting provider and a backup storage provider process data on our behalf, only on our instructions and under data processing agreements. Their names are available on request at legal@veritasnexuslegal.com. If you turn on the daily verse, your browser vendor's push service (for example Google, Mozilla, Apple or Microsoft) delivers the encrypted message. PayPal is an independent controller for donations.
• Backups and retention: our server database (which holds daily-verse subscriptions and anonymous statistics about questions asked) is backed up every night. Copies on the server are kept for 14 days. Encrypted copies stored off-site with a backup storage provider (see Service providers) are kept for up to 12 months and then deleted automatically, so a subscription you turned off can remain in an encrypted backup until that copy expires. The question statistics (type of question, verse references found, outcome and time, never the question text) are deleted after 30 days.
• No ads. No selling or sharing of personal data. No third-party analytics or advertising SDKs.
• Legal bases (GDPR, UK GDPR, LGPD): our legitimate interest in providing and securing the service (requests and logs) and your consent for the daily verse, which you can withdraw at any time by turning it off. We do not build profiles and do not use sensitive data to infer characteristics. Donation records and messages to us have the bases stated in those items (legal obligation; legitimate interest).
• International transfers: our servers and backups may be located outside your country, for example in the USA or the EU. When data leaves your country (for example the EU/EEA, UK, Brazil or India), we rely on adequacy decisions or standard contractual clauses as the law requires. Details of these safeguards are available on request at legal@veritasnexuslegal.com.
• You can delete all local data on the My notes page at any time: this removes everything listed above from this browser and, if the daily verse is on, deletes its subscription from our server. We keep no account or profile. The only other personal data we hold are the donation records and messages described above, which you can ask to see, correct or delete at legal@veritasnexuslegal.com (donation records that tax law requires us to keep are deleted when that period ends), and encrypted backups, which expire as described under Backups.
• Your rights: depending on where you live (GDPR, UK GDPR, CCPA/CPRA, LGPD, India's DPDP Act 2023 and others) you can ask to access, correct, delete or port your data, object to or restrict processing, withdraw consent, nominate someone to act for you, and complain to your data protection authority. We reply within 30 days or sooner if your law requires. We do not sell or share personal information and will not discriminate against you for using your rights.
• BibleForSI is intended for people aged 13 and over (or the minimum age in your country). We do not knowingly collect personal information from children; if you believe a child has given us data, contact us and we will delete it.

Controller (data fiduciary): Veritas Nexus Legal LLC (Veritas Digital), New Mexico, USA; see the Legal notice. Write to legal@veritasnexuslegal.com for every privacy request; whoever answers that address also acts as our grievance officer. Legal notice

Questions or requests about privacy: legal@veritasnexuslegal.com