Privacy Policy

Last updated 7 November 2026

Who is responsible for your data

Verso is published by Miguel Ridruejo Mendoza, a sole trader established in Spain (NIF 02585581J), Calle de Travessera 44, 08021 Barcelona, Spain — hello@versobible.com. "We" and "us" below mean him.

He is the data controller for the processing described here.

In short

Verso is a Bible reading app. We built it so that almost nothing about you needs to reach us. An account is optional: without one, nothing identifies you. There is no advertising in Verso, and we do not sell personal data. From version 2.5 the iPhone app measures which of our own ads bring people to Verso, through AppsFlyer, and uses your device's advertising identifier only if you allow it; see "Analytics, tracking and ads".

What stays on your device

The Bible text ships inside the app, so reading never involves us. These stay on your phone and in your own backup, which we cannot read: on iPhone, if you use iCloud, in your private iCloud database; on Android, if backup is on, in Android's backup of the app to your Google account:

• Verses you save, bookmarks and your reading position
• Notes you write
• Prayers you write in your prayer journal, who they're for, and the answers you note
• Reading plans, plan progress and the days you opened the app
• Your daily reading progress (which verses and chapters you read each day and how many, the studies you finished, whether you prayed, the minutes you read and that day's goal), your daily goal and the milestones you've earned
• Your settings, including reminder time and translation
• Since version 2.0: the tradition you choose (Catholic, another Christian tradition or everything) and whether the saint of the day shows, the prayers you star and their reminders, your novena progress, the guided prayers you prayed (the Rosary, the Stations of the Cross) and the milestones for them. These stay on your phone and in your iCloud only: they are never sent to our server, even when you are signed in. Praying one of them does add to that day's count of prayers in your daily progress, which syncs with an account (see below): the count says that you prayed that day, never which prayer or devotion

Deleting the app removes the local copy. To remove the iCloud copy, delete Verso's data from Settings → Apple Account → iCloud on your iPhone. On Android, the backup holds your library and settings, never your sign-in session or the account's sync state; Google keeps it with your Google account's device backups, which you manage in your phone's backup settings and your Google account (Google's help on Android backups).

If you create an account (optional)

You can sign in to Verso with your email address, in the app or at app.versobible.com, to use your library and Verso Plus on more than one device. We send a 6-digit code to that address; there is no password. When you are signed in:

• Your email address is stored with your account, and used only to send you sign-in codes and, if you buy Verso Plus on the web, to fill in Paddle's checkout. We never send marketing email.
• Your library syncs through our server: saved verses, bookmarks, notes, studies you saved, chapters read, reading plans and their progress, the days you opened Verso, your reading position, your translation (which may be a Catholic edition; we keep it only as a reading preference, like any translation) and whether you have finished the app's introduction. Since version 2.0 it also includes your prayers (their text, who they're for, any verse and reminder time you added, and the answers you note), your daily reading progress (the counts for each day, including how many times you prayed, not which verses you read or which prayers you prayed), your daily goal and the milestones you've earned (except those for guided prayers, which stay on your devices). Prayers are kept with your account only to sync them: they are never sent to an AI provider or shown in Community. It is stored in the EU (Frankfurt) and is only used to show it back to you on your devices. Verse references are stored, never the Bible text.
• Your account identifier is also the identifier our payment provider uses, so a subscription you bought applies wherever you sign in.

Deleting a saved verse, note, bookmark, prayer or plan in the app removes it from our server at the next sync; we keep only a marker, without its content, that tells your other devices to remove it too.

You can delete your account at any time in the app on iPhone or Android (Settings → Account → Delete account), on the web, or by writing to us: see Delete your Verso account. This deletes your email, your synced library, your Community profile, messages and reactions (as described under "Community"), the Ask the Bible usage records made under your account and your subscription record from our servers; your devices keep their own copy. Deleting the account does not cancel a subscription: cancel it where you bought it.

Community (optional)

Community lets signed-in readers read the Bible together in groups. It is optional and for people aged 13 and over. If you use Community we store your display name, handle and colour, your profile photo if you add one, the groups you join, your messages and reactions, the reports you file and the people you block, linked to your account. Other members see your name, handle, colour, photo, reading streak and what you post in groups you share. A profile photo is stored without its metadata (such as where it was taken) and is checked automatically against the Community Guidelines before anyone sees it; changing or removing it, or deleting your account, deletes it, unless it was reported (then it is kept with the report, at most 180 days after the report is resolved). Messages you delete are erased and kept only as an empty "Message deleted" marker; deleting your account erases your profile, messages and reactions the same way. Notifications of replies and reactions are kept for 90 days. Reports and their content are kept while needed to moderate and to comply with the law, and for 180 days after the report is resolved; if you delete your account, reports about you keep what was reported but no longer your name or handle. A report, with what was reported, is emailed to our moderator so it can be reviewed within 24 hours. We also keep when you last opened Verso, only to count how many members of a group were active in the last 24 hours; nobody sees it for you.

What reaches our servers

Without an account, only these leave your phone. None includes your name, email or reading (unless you type them into a question):

• Verse studies and the Discover feed. When you open a study, the app asks our server for that verse by reference (for example "John 3:16") and your chosen language. We do not receive your notes, your saved verses or your reading history.
• Subscription status. The first time the app opens, our payment provider, RevenueCat, gives it a random identifier. The app sends this identifier with study requests so our server can tell whether Verso Plus is active. If you're signed in, it sends your account identifier instead. In the Android app, RevenueCat's own code may also send RevenueCat technical diagnostics, described under "Analytics, tracking and ads".
• Where you heard about Verso (iPhone app). Setting up the app asks once "How did you hear about Verso?". The answer you tap (TikTok, Instagram, YouTube, a friend or family, church, the App Store, Google or Other) goes to RevenueCat with the subscription identifier above, so we can see which places bring people who try and keep Verso Plus. Nothing else goes with it, and it is never used for advertising. It is not asked if you sign in to an existing account while setting up the app.
• Questions you ask in Ask the Bible (Verso Plus). The question you type or dictate, your language and your translation go to our server, which sends the question to Anthropic to choose the verses and write a short answer (see "Verse studies, Ask the Bible and AI"). We don't store the question or the answer, and they never appear in our logs.

Our servers keep ordinary web logs (IP address, time, the path requested) for a short period to keep the service running and to stop abuse. When your browser blocks something on Verso on the web for security reasons, it may report that to our server; we log only what was blocked and the page's path. We do not use any of this to build a profile of you.

Everything the apps and the web send to our servers and to our providers travels encrypted (HTTPS).

Purchases

In the iPhone app, subscriptions are sold by Apple. In the Android app, they are sold through Google Play and billed to your Google account. On the web (app.versobible.com), they are sold by Paddle, which acts as the merchant of record: Paddle takes the payment, handles tax and sends your receipts. We never see your card details in any of these cases. We use RevenueCat to tell us whether a subscription is active, which involves your anonymous or account identifier, the purchase information Apple, Google Play or Paddle provides and, for purchases on the web, your email address. Apple's, Google's, Paddle's and RevenueCat's own privacy policies apply to what they collect.

Verso on the web

At app.versobible.com, your browser downloads the Bible text from our host, Vercel, and keeps your library (saved verses, notes, plans) in the browser's own storage on your device. If you sign in, it syncs as described above. Fonts and everything else the page needs come from our own servers.

Two things on the web involve our payment partners. The Verso Plus page uses RevenueCat's web kit to show prices: it creates an anonymous identifier and tells RevenueCat when the page is shown. If you subscribed on the web, Settings also uses it, with your account identifier, to find the link where you manage your subscription. If you start a checkout, or open a payment link from a Paddle email, Paddle's checkout runs Paddle's own scripts, including fraud prevention and Paddle's subscription analytics (ProfitWell), under Paddle's privacy policy. Nothing else on the web tracks you.

Verso itself sets no cookies. To work, and to work offline, it keeps these in your browser's storage on your device (IndexedDB and localStorage): your library and the studies you've opened; your preferences (language, appearance, reading position, the Discover cards you've seen and whether you've seen the welcome screens); if you sign in, your session token and your account's details (email address and Verso Plus status), and, for 10 minutes after you ask for a sign-in code, the address it went to; and, if you open the Verso Plus page without signing in, the anonymous identifier RevenueCat's web kit uses, kept between visits so that each visit doesn't create a new one (signing in or out forgets it). The browser also keeps a copy of the app's files and the Bible text, so reading works offline. None of this is used to track you. Signing out removes the session; clearing the site's data in your browser removes all of it. If you start a checkout or open a Paddle payment link, Paddle's scripts (fraud prevention and its subscription analytics, ProfitWell) may store their own data in your browser, under Paddle's privacy policy.

Verse studies, Ask the Bible and AI

Studies are generated on our servers with an AI model the first time a verse is requested, checked automatically, and stored so every reader gets the same text.

Ask the Bible (Verso Plus) answers a question with verses. Our server sends your question, with your language and our instructions, to Anthropic's AI model, and passes back a short answer and the references of the verses; the app shows the verses from the Bible on your device. Your name, email address and account or subscription identifier are not sent with it. We don't store your questions or the answers, keep them in our logs or reuse them for anyone else; to apply the daily limit we keep only when a question was asked, with a one-way code made from your identifier, for two days (deleting your account deletes the ones made under it at once). Anthropic processes the question to produce the answer, does not use it to train its models, and keeps it only for a limited time under its commercial terms. Avoid putting things in a question that you would not want to share.

On a saint's page, "Ask about…" starts an Ask the Bible question with the saint's name, which you can change; it is sent only if you send it, like any other question.

Your requests are not used to train any model. Apart from a question you ask in Ask the Bible, nothing you write in the app (notes, prayers, plan journals) is ever sent to an AI provider.

Camera, microphone and speech

Scan a verse uses your camera to read a reference or a verse from a page, and you can dictate a prayer or a question by voice. Both run entirely on your device: no image, video or audio is sent to us or to anyone else, and nothing is kept. Only the resulting text is used, like text you type: a prayer stays on your device (and syncs with your account if you have one), and a question you dictate to Ask the Bible is sent as described above. The camera and the microphone are used only when you open these features, after you allow them. Read aloud, for prayers, uses your device's own voices: nothing is sent.

Notifications

Reminders are scheduled on your device. If you turn them off, nothing is sent.

Analytics, tracking and ads

No ads in Verso. Our own analytics are three things: where you heard about Verso, described under "What reaches our servers", anonymous usage statistics from the iPhone app, and the measurement of our own ads, both described below. Apart from that measurement, Verso does not track you across apps or websites. The only other exceptions are our payment partners' scripts on the web's Verso Plus and checkout pages, described under "Verso on the web", and RevenueCat's diagnostics in the Android app.

Measuring our ads (iPhone app, from version 2.5). We advertise Verso on other apps, such as TikTok. To know which ads bring people who go on to use and pay for Verso, and to spend less on ads that don't, the iPhone app uses AppsFlyer, a mobile measurement company. During setup, after "How did you hear about Verso?", iOS asks whether Verso may track you. If you tap Allow, AppsFlyer receives your device's advertising identifier (IDFA) and can match your install to the ad you saw or tapped; it shares that result, your install and the subscription events below with the ad network that showed the ad (TikTok), so that network can measure and improve our ads. If you tap Ask App Not to Track, the advertising identifier is never used and nothing that identifies you is shared with ad networks: the network whose ad led to the install learns only that an install came from one of its campaigns, without any identifier for you or your device, and Apple's own system (SKAdNetwork) reports to it, in aggregate and without any identifier, whether installs went on to finish setup, start a trial or keep Verso Plus.

For every install of version 2.5 or later, AppsFlyer receives: an identifier it creates for your install, your device's vendor identifier (IDFV), the IP address, the device model, iOS version, language and country, when the app is opened, three steps in the app (setup finished, Verso Plus started, Verso Plus still active 15 days later), and, from RevenueCat, your subscription events (trial started, converted, renewed, cancelled, refunded) with their price. AppsFlyer's identifier is also stored with your subscription record at RevenueCat. AppsFlyer never receives your name, email, Verso account, or anything you read, write, pray, ask, search or scan. You can change your answer at any time in iOS Settings → Privacy & Security → Tracking → Verso.

From version 2.4, the iPhone app sends anonymous usage statistics to TelemetryDeck, so we can see how many people use Verso each day and which parts they use: for example, that a study was opened, a tab chosen, a plan's day read or a paywall shown, and how many verses a visit counted toward the daily goal. From version 2.7 they also say which setup pages were reached, how a paywall was closed, whether a Verso Plus purchase went through (or the store's error code if it didn't), whether it began a free trial, and whether a trial that started on the iPhone ended in a subscription, with which parts of the app were used during it. From version 2.9 they also say how long a study took to appear and whether a study or an answer could not be given (and why: no connection, too slow, busy), which plan was bought, whether a subscription screen could not load its plans, whether a reminder is on and when one of Verso's notifications opened the app, how many of Verso's widgets are on your screens, roughly how much you keep (saved verses, notes, bookmarks, saved studies and prayers, as ranges such as "5 to 19", never what they are), your reading streak as a range, how many milestones you earned (never which), that a plan was started or finished, that a Community message or reaction was sent or a group joined or created (never what was written, or which group), that a search was typed (never what), when the app asked for a rating, and your answer to Apple's tracking question. They also carry your answer to "How did you hear about Verso?" (for example TikTok or a friend), so we can see which channels bring people who stay. Each statistic also carries technical context such as the app version, the device model and screen size, the iOS version, language, region, time zone, the day and hour, light or dark mode, accessibility settings (text size, Reduce Motion, Bold Text and similar), whether you have Verso Plus, and counts of sessions and days used. Your install is counted with an identifier that is scrambled (hashed) twice, on your iPhone and again on TelemetryDeck's servers, so neither we nor TelemetryDeck can trace it back to you or your device; it is not linked to your account, your email or your subscription. These statistics never include what you read, write, pray, ask, search or scan, which saint or prayer you open, or the tradition you chose.

From version 2.9, the iPhone app also sends the same anonymous statistics to PostHog, on servers in the EU (Frankfurt, Germany), while we compare the two services. Alongside them PostHog receives when the app is installed, updated, opened and closed, and technical context such as the app and iOS versions, the device model, screen size, language, time zone and whether it is on Wi-Fi or mobile data. Your install is counted with a random identifier the app creates for PostHog. We never link it to you: no account, email, subscription identifier or name is sent, no profile of you is created, and PostHog is told not to work out your location from your IP address and to discard it. PostHog records no screens, taps, screen recordings or crash reports from Verso. The same never applies: no statistic includes what you read, write, pray, ask, search or scan, which saint or prayer you open, or the tradition you chose.

In the Android app, the RevenueCat code that handles purchases may send RevenueCat technical diagnostics about its own work: how long its requests took and how they ended, Google Play billing response codes, product identifiers, the results of purchases and restores, the versions of the Play Store and Google Play services, and a random session identifier. The app turns these diagnostics off, but RevenueCat can switch them on from its servers without an app update. They are used to run and fix purchases, never for advertising, and contain nothing you read or write.

Children

Verso does not knowingly collect personal information from children. Reading needs no account, and an account is never required. Community, which is optional, asks only for a display name and a handle, and is for people aged 13 and over. If you believe a child under 13 has created a Community profile, write to us and we will delete it.

Your rights

Without an account, most data requests are satisfied on your own device. With an account, you can delete it yourself or ask us to (see Delete your Verso account), and we will send you a copy of your synced library on request. If you subscribed and want the subscription record associated with your identifier deleted, write to us and we will remove it. Depending on where you live, you may have rights of access, correction, deletion, objection, restriction and portability under laws such as the GDPR or the CCPA; we will honour them.

Legal bases

• Providing the app and your subscription — performance of the contract you enter into when you use Verso or subscribe (GDPR art. 6(1)(b)). This covers the verse and language sent with a study request, the questions you ask in Ask the Bible, the subscription identifier and, if you sign in, your email address and synced library (including your prayers and daily reading progress) and, if you use Community, your profile, groups, messages, reactions, reports and blocks.
• Keeping Community safe — our legitimate interest in moderating it and our legal obligations (art. 6(1)(f) and (c)). This covers reports, what was reported and the moderator's emails, kept as described below.
• Knowing where people hear about Verso — our legitimate interest in spending our small marketing budget where it works (art. 6(1)(f)). This covers your answer to "How did you hear about Verso?", which is a single choice and can always be "Other".
• Understanding how Verso is used — our legitimate interest in improving the app (art. 6(1)(f)). This covers the anonymous usage statistics described under "Analytics, tracking and ads".
• Measuring our ads — your consent for the use of your advertising identifier and the sharing with ad networks it allows, given by tapping Allow and withdrawn at any time in iOS Settings (art. 6(1)(a)); for the rest of the ad measurement described under "Analytics, tracking and ads", our legitimate interest in knowing which of our ads work, so a small budget isn't wasted (art. 6(1)(f)). You can object to it by writing to us.
• Keeping the service secure and running — our legitimate interest in operating the service and preventing abuse (art. 6(1)(f)). This covers server logs and RevenueCat's diagnostics in the Android app.
• Answering you — when you write to us, we use your email and message to reply (art. 6(1)(b) or (f)).

How long we keep it

• Server logs: up to 30 days.
• The subscription record tied to your identifier: while the subscription is active and for up to 24 months after it ends, or until you ask us to delete it. Your answer to "How did you hear about Verso?" is kept with it, for as long, as is AppsFlyer's identifier for your install (iPhone, from version 2.5).
• Ad measurement data at AppsFlyer: up to 24 months.
• Your account, email address and synced library: until you delete the account. Sign-in codes expire after 10 minutes and are deleted within two days, together with the IP address that asked for them and a record of wrong codes typed, with the IP address they came from (both kept only to limit abuse). Our email provider, Postmark, keeps a copy of each email it sends (your address and the code) for up to 45 days. A signed-in device's session ends after 180 days without use.
• Ask the Bible: we don't keep your questions or the answers. The record that a question was asked (the time and a one-way code made from your identifier, for the daily limit) is deleted after two days.
• Community: your profile, photo, groups, messages and reactions until you delete them or your account (a deleted message leaves only an empty marker); notifications of replies and reactions, 90 days; reports and what was reported, while needed to moderate and to comply with the law, and 180 days after the report is resolved.
• Emails you send us: as long as needed to deal with your request, and no longer than 24 months.

Who processes data for us

We use a small number of providers, each only for the purpose stated:

• Fly.io — hosts our server and its database in Frankfurt, Germany (EU), including the account data described above (email, synced library) and Community, profile photos included.
• Vercel — hosts this website and the web app (app.versobible.com).
• RevenueCat — checks subscription status for every install of the app, every visit to the Verso Plus page and, for web subscribers, Settings on the web (your identifier, Apple, Google Play or Paddle purchase data and, for web purchases, your email); from the iPhone app, your answer to "How did you hear about Verso?" and, from version 2.5, AppsFlyer's identifier for your install and your device identifiers (the advertising identifier only if you allowed tracking), so your subscription events reach AppsFlyer; in the Android app, it may also receive the technical diagnostics described under "Analytics, tracking and ads".
• TelemetryDeck — receives the iPhone app's anonymous usage statistics described under "Analytics, tracking and ads", on servers in the EU (Germany and the Netherlands).
• PostHog (PostHog Inc.) — receives the same anonymous usage statistics from version 2.9, as described under "Analytics, tracking and ads", on servers in the EU (Frankfurt, Germany).
• AppsFlyer — measures which of our ads bring installs and subscribers, as described under "Analytics, tracking and ads" (iPhone app, from version 2.5).
• Postmark (ActiveCampaign) — sends the sign-in codes (your email address and the message) and Community reports to our moderator, and keeps a copy of each sent email for up to 45 days.
• Google Workspace — the hello@versobible.com mailbox.
• Anthropic — generates study text and answers Ask the Bible questions on our servers. For a study it receives the verse being studied, with its reference and the verses around it in a public-domain translation, the kind of study, the language and our instructions; never data about you. For Ask the Bible it receives the question you asked, the language and our instructions, without your name, email or identifier. It also checks each Community profile photo against the Community Guidelines (it receives the photo, without its metadata or your name, email or identifier). It does not use any of these to train its models.

Apple (payments in the iPhone app, the App Store and iCloud), Google (payments in the Android app, Google Play and Android's backup to your Google account), Paddle (payments on the web, as merchant of record) and TikTok (which shows our ads and receives the measurement described under "Analytics, tracking and ads") are not our processors: they decide how they use what they collect, as independent controllers, under their own terms and privacy policies.

Some of these providers are based in the United States. Where personal data leaves the European Economic Area, the transfer relies on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

Complaints

If you think we have handled your data wrongly, please tell us first. You also have the right to complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or the data protection authority where you live.

Changes

If this policy changes in a way that matters, we will update this page and the date above, and note it in the app's release notes.

Contact

Questions about privacy, or a request to exercise your rights: hello@versobible.com, or by post to Miguel Ridruejo Mendoza, Calle de Travessera 44, 08021 Barcelona, Spain.