Privacy Policy

1. Who is responsible

Provider

DGMD Software Solutions UG (haftungsbeschränkt)

Address

Luko - Dorfstr. 41, 06869 Coswig (Anhalt) OT Luko, Sachsen-Anhalt, Germany

Email

contact@totascriptura.com

We are the controller for the personal data described here.

2. What we collect, and why

Your account

When you create an account we store your email address and a password, which is stored only in hashed form by Firebase Authentication and is never visible to us.

Purpose: to give you an account. Basis: Art. 6(1)(b) — performance of a contract.

Your profile

A name, a nickname, whether you prefer your real name shown, and optionally a profile photo. Your nickname or name appears beside anything you post publicly.

Basis: Art. 6(1)(b).

Your private study

Notes, bookmarks, categories and reading preferences, including which Bible passages they relate to. These are visible only to you. Nobody else, including us, browses them in the ordinary course of running the service.

Basis: Art. 6(1)(b).

What you post

Discussion topics and messages, the passage they relate to, and the time you posted. These are visible to other users. In private study groups they are visible to that group.

Content of this kind can reveal religious beliefs, which makes it special-category data within the meaning of Art. 9 GDPR. We treat it accordingly: it is not used for advertising, not used to profile you, and not passed to any third party other than those named here.

Basis: Art. 6(1)(b).

Safety and moderation

• Content you report, and reports about your content, including a copy of the reported text as it was at the time.
• A moderation record of decisions made about your content, and any appeal you file.
• Any restriction applied to your account and the reason for it.
• People you have blocked (visible only to you).

Basis: Art. 6(1)(f) — our legitimate interest, and that of other users, in a service that is safe to use, and compliance with our obligations as a hosting service.

Notifications

If you turn them on, a device token so we can send push notifications, and which topics, groups or passages you follow.

Basis: Art. 6(1)(a) — consent, withdrawable at any time in the app or in your device settings.

Diagnostics

If the app crashes, Firebase Crashlytics records the error, your device model and operating system version, and your user identifier.

Basis: Art. 6(1)(f) — keeping the app working.

Audio Bible

When you play a chapter of an audio Bible, your device fetches the recording from Cloudflare, which stores our audio files. To deliver it, Cloudflare processes your device's IP address and the file requested (which recording and chapter), together with the technical details any web request carries. No account details or user identifier are sent to Cloudflare: the link your device uses is signed by our server and expires after an hour. We do not record what you listen to.

Basis: Art. 6(1)(b) — delivering the recording you asked to hear.

Feedback

Anything you write in Send feedback, plus the app version and platform, and your email address if you choose to give one.

Basis: Art. 6(1)(f), or Art. 6(1)(a) where you supply contact details.

3. Automated checking of content

Messages, topic titles and nicknames are checked automatically before they become visible to others, against a word list held on our own servers. Nothing you write is sent to any outside service for this.

Profile photos and pictures are not checked automatically before they appear; reports from other users and our moderators catch those.

Content that appears to break our Rules is withheld and reviewed by a person. No decision to remove your content is made by automated means alone — you can appeal, and a person reads the appeal.

Basis: Art. 6(1)(f).

4. Who else processes your data

We do not sell your data, we do not use it for advertising, and we do not profile you.

5. How long we keep it

• Your content and account data: until you delete them or your account. Inactive accounts are not deleted automatically — we do not delete your data unless you ask us to.
• Moderation records: retained after account deletion with your identity removed, as the record of decisions taken.
• Deletion requests: retained as evidence that erasure was requested and when.

6. Your rights

In the app, under Your data:

• Export — a machine-readable copy of your data (Art. 20).
• Delete your account (Art. 17). Your private study, profile and account are deleted. Messages and topics you posted publicly remain in the conversations they belong to, with your name removed, because other people took part in those discussions and their contributions are their data too.

You may also request access (Art. 15), correction (Art. 16), restriction (Art. 18) or object to processing (Art. 21) by writing to contact@totascriptura.com. Where processing rests on consent, you may withdraw it at any time without affecting what was done beforehand.

You may complain to a supervisory authority. Ours is:

Landesbeauftragter für den Datenschutz Sachsen-Anhalt
Leiterstraße 9, 39104 Magdeburg, Germany

7. Children

The service is not for people under 18. We do not knowingly collect data from them. If you believe a child has an account, write to contact@totascriptura.com and we will remove it.

8. Changes

We will post any change on this page and update the date below. Significant changes will be notified in the app.

Last updated: October 2026. This is a courtesy translation; in case of doubt, the German version prevails.