OracleMemorizer ("we", "us", "the app") is a Bible verse memorization app. This policy describes what data the app collects, why, who it's shared with, and your rights. Plain English. No tricks.
| Data | When collected | Why |
|---|---|---|
| Firebase Authentication user ID (UID) | On first launch (anonymous account auto-created) | Anchors your local data so it can sync to other devices if you sign up. Anonymous UIDs are not personally identifying on their own. |
| Username (chosen by you) | If you create a named account | Identifier for sign-in, group features, and friend imports. |
| Display name (chosen by you) | If you create or update your profile | Shown in groups and on friend cards you share. |
| Recovery email (optional) | Only if you add one in Account Settings | Used solely to send password-reset emails. Not used for marketing. |
| Memorization statistics | Continuously, as you use quizzes | Tracks your progress (accuracy, streaks, mastery, time spent). Powers your stats screen and cross-device sync if signed in. |
| Spiritual profile (prayers, habits, reading journal) | When you add entries to those features | Stored so you can review your own spiritual record. Visible only to you unless you explicitly share within a group. |
| Group memberships, group content (prayer requests, assignments, shared lists) | When you join or create a church group | Group features (church/study group). Visible to other members of the same group. |
| Friend profiles you import | When you scan a friend's QR code or import their profile | "My Circle" social feature. Stored locally and synced to your account. |
| Analytics (page views, feature usage, device type) | While using the website / app | Google Analytics 4 — helps us understand which features get used. No personally identifying info is sent to Analytics. |
We share data only with the service providers that make the app work:
We do not sell, rent, or trade your data. We do not use it for advertising. We do not share it with third parties beyond the providers above.
Data is kept until you delete your account. You can delete your account in-app from Account Settings → Delete Account. That removes your user record and username mapping from our database and deletes your Firebase Authentication identity. Backups roll off within 30 days.
OracleMemorizer is appropriate for general audiences. We do not knowingly collect personal information from children under 13. If a parent or guardian believes their child has provided personal data, please contact us at [email protected] and we will delete it.
We use HTTPS everywhere (HSTS preload-eligible). User data in our database is gated by per-user authentication rules — only you can read or write your own data. Group content is gated by group membership. Firebase App Check is enforced to ensure requests come from genuine instances of the app. We do not store passwords ourselves; Firebase Authentication handles password hashing and storage.
The website uses Google Analytics, which sets cookies for usage measurement. No advertising cookies are set. The app itself stores your data locally using SharedPreferences (mobile) or IndexedDB (web) — not cookies.
If we change this policy, the "Last updated" date at the top will change and we will surface a notice in-app for material changes. Continued use after a change means you accept the updated policy.
General questions and data-rights requests: [email protected].
Security disclosures: [email protected] — see the vulnerability disclosure policy for scope, rules of engagement, and safe-harbor terms.