Privacy Policy

Last updated: 21 October 2026

1. Introduction

GreekByVerse (“we”, “us”, or “our”) is a web app that teaches you to read the Greek New Testament. Lessons are ordered by how often words appear in the text, exercises use real verses, reviews bring words back on a spaced-repetition schedule, and audio is playback of Greek we generated in advance.

This policy describes how GreekByVerse, at https://greekbyverse.com, accesses, uses, stores, and shares personal information, including Google user data when you sign in with Google. The public pages, including this one, can be read without an account.

GreekByVerse is free. We do not take payment, and we do not collect card or billing details.

We do not ask for your phone number, postal address, date of birth, or religious beliefs. If you sign in with Google, we copy the name Google shares onto your profile when the account is created. You can change that name, or set one if you signed in by email. Studying the Greek New Testament in this app is not stored as a record of your faith, and we do not build a religious profile.

You sign in with an email address or with Google. Email sign-in uses a code and a link sent to that address. There is no password. Google shares your name, email address, and profile picture, which Supabase stores with the sign-in record.

2. Google user data

If you choose Continue with Google, GreekByVerse accesses this Google user data: your name, your email address, and your profile picture. Those are the basic sign-in fields Google shares for OpenID, email, and profile. We do not access Gmail, Drive, Calendar, contacts, or any other Google data.

We use that Google user data to create your GreekByVerse account, keep you signed in, and show your name on your own Profile page. Supabase stores the name, email address, and profile picture with the sign-in record. We copy the name onto your profile when the account is created. You can change that name on Profile.

We do not sell Google user data. We do not share it for advertising. We do not use it to determine credit-worthiness. We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine-learning models. GreekByVerse does not generate images, and it does not use Google user data or Google APIs to create imagery.

We disclose Google user data to Supabase, the provider that stores the account and signs you in, and only for that purpose. We do not transfer it to advertisers, data brokers, information resellers, or other learners.

Google user data is sent over HTTPS and stored in our Supabase project. Database rules limit each signed-in user to their own rows.

We retain Google user data for as long as the account exists. You can delete it from Profile, or by emailing support@greekbyverse.com. Deletion removes the login user and the profile tied to it. A provider may keep a backup copy until its backup window ends, and we do not use that copy in the product.

Our use of Google user data is limited to the practices in this policy and follows the Google API Services User Data Policy, including the Limited Use requirements.

3. Personal information we collect

The categories below are what we keep about you.

Account data

When you create an account, we keep your email address, when the account was created, when you last signed in, how many days you have practiced, and when you last practiced. If you sign in with Google, we copy the name Google shares onto your profile. You can change that name, or set one if you signed in by email. Supabase also stores the name, email address, and profile picture Google shares with the sign-in record.

Usage data

As you learn, we keep the lessons you finish and when you finish them, which Greek words are ready for review and how often you have seen or missed them, the answers you choose and when you answer, and your placement results, including how many you got right or missed and whether you passed.

Data that stays on your device

Your browser remembers your theme preference (light, dark, or match the system), whether listening exercises and unread-verse markers are on, which verses you have already opened, and whether the verse list shows only passages you have unlocked. We do not receive these settings. Deleting your account does not clear them. Clear this site’s data in the browser if you want them gone.

Technical data from hosting

When you open the site, we receive your IP address, your browser type, and the pages you request. We do not collect payment details, your precise location, your contacts, voice recordings, or advertising identifiers.

4. How we use your information

We use your personal information for a variety of purposes, including to:

Provide the services

• Create the account, keep it secure, send sign-in email, and keep you signed in.
• Unlock lessons in order, run placement, schedule reviews from your lemma memory state, and show NT coverage, lemmas known, verses unlocked, and days practiced.
• Choose exercises you missed for a unit’s personalized practice.
• Show your display name on your own Profile page.

Serve administrative purposes

• Send administrative information to you.
• Develop new services and improve the services.
• Communicate with you about your account and activities on our services.
• Operate, debug, and protect the service using host and login logs (legitimate interests in keeping the app available and preventing abuse). We do not use those logs to advertise.
• Comply with a legal demand if one arrives.

Display settings stored on your device are read by the app in that browser so it can follow them. They are not used on our servers.

We do not use your learning history or your name to advertise, to score credit, or to show them to other learners. The app has no social features. Your name appears only on your own Profile page.

5. Disclosing your information to third parties

We do not sell personal information. We do not share it for cross-context behavioral advertising.

Service providers:

• Supabase provides the database and authentication. It receives your account data, including your display name, and the learning rows described above. Database rules limit each signed-in user to their own rows.
• Resend sends the sign-in code and link to your email address.
• Google provides sign-in. It shares your name, email address, and profile picture, which Supabase stores with the sign-in record. If you sign in with Google, we copy that name onto your profile when the account is created.
• Vercel hosts the app. It receives request data such as IP address, browser type, and the URL, because that is how the site is served.
• Cloudflare R2 stores the lesson audio files. Your browser fetches those files when a lesson plays sound. The files are pronunciations of Greek course text, not recordings of you. Cloudflare can see the IP address of that request. Cloudflare Turnstile checks email sign-in and can see the IP address of that check.

We use Microsoft Azure Speech offline, on our side, to synthesize that public Greek audio before it is published. Your account and your answers are not sent to Azure.

We may disclose information if the law requires it. We do not share your progress or your name with churches, schools, or other users.

6. International transfers

Supabase, Vercel, Resend, and Google are United States companies. Your account and learning data are stored in our Supabase project. Vercel may handle a request at a location outside that project’s region. Resend receives the email address a sign-in message is sent to. If you sign in with Google, that sign-in goes to Google. Cloudflare may serve lesson audio, and may run the email sign-in check, from a location outside that project’s region.

If you are in the European Economic Area or the United Kingdom, transfers to these providers are covered by their data-processing terms, including Standard Contractual Clauses where GDPR or UK GDPR requires a transfer tool.

7. Data retention

We keep your account, lesson progress, lemma memory state, review log, placement attempts, and days practiced until you delete the account.

You can delete the account from Profile. The control asks you to type “delete”. Deletion removes the login user and the profile, lesson progress, lemma memory state, review log, and placement attempts tied to it.

Our providers may keep a backup copy until their backup window ends. After you delete the account, we do not use it in the product.

Sign-in cookies last for the session lifetime set by Supabase Auth, then expire. Settings and seen-verse ids in this browser stay until you change the setting or clear site data. Deleting the account does not remove them.

We do not keep a marketing list. There is no payment history to retain.

8. Your rights

To erase your data, delete the account on Profile, or email support@greekbyverse.com.

Your learning record updates as you practice. You can change your name on Profile. Email is the account identifier. Until the app has a control for changing it, email us to correct the address.

Most of the processing above is required to provide the lessons you signed up for. If you object or ask us to restrict that processing, the practical result is usually closing the account.

Review scheduling only chooses which Greek words to show you next. We do not make solely automated decisions that produce legal effects or similarly significant effects on you.

We do not collect commercial or payment information, precise geolocation, or sensitive personal information. We do not collect religious beliefs.

You can ask to delete or correct personal information, and we will not discriminate against you for asking. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is no “Do Not Sell or Share” control. We do not offer a financial incentive tied to your data.

9. Cookies and similar storage

There is no separate cookie policy. The only cookies we set are the ones required to keep you signed in.

Supabase Auth session cookies are strictly necessary for a logged-in account. We do not set analytics cookies or advertising cookies, so there is no cookie banner and nothing further to opt out of.

Appearance, listening exercises, unread-verse dots, verses you have opened, and the unlocked-only filter are stored in local storage, not in cookies. Listening exercises and unread-verse dots can be changed on Profile. You can clear the rest in your browser’s site data.

If we later add analytics, we will update this section before those cookies are set.

10. Security of data

Account data, including Google user data, is transmitted over HTTPS and stored in Supabase with row-level access limits. Sign-in is handled by Supabase Auth. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

11. Children’s privacy

GreekByVerse is not directed to children under 18 (or other age as required by local law), and we do not knowingly collect personal information from children. We do not ask for your age, and we do not knowingly create an account for anyone under 18.

If you become aware that a child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information and deactivate the account.

12. Changes to this policy

We post changes on this page and update the date at the top. If a change materially expands what we collect or who receives it — for example, if we add analytics — we will also surface that change in the app before it applies.

If you keep using GreekByVerse after the updated date, the new policy applies to information collected from then on.

13. Contact

If you have any questions about this Privacy Policy, please contact us at support@greekbyverse.com.