Privacy Policy

Last updated 30 September 2026 · Effective 30 September 2026

This policy applies to the Amen Scroll app on the Apple App Store and Google Play and to the amenscroll.com website. It describes every category of data we collect, why we collect it, who it is shared with, how long we keep it, and how to delete it. The same disclosures are declared in Apple's App Privacy section and Google Play's Data safety form; the three must never disagree.

1. Who we are

Amen Scroll is operated by UAB Minderse, a private limited liability company registered in the Republic of Lithuania under company code 306238029, with its registered office at Laisvės al. 110, LT-44253 Kaunas, Lithuania. For the purposes of the EU and UK GDPR, UAB Minderse is the data controller. Contact: [email protected].

2. What we collect, how, and why

• Account data. Your email address, if you sign in with email, Google, or Apple. Used to sign you in (for email sign-in, by sending you a one-time code), restore your account across devices, and send a few emails about your subscription: if you close the subscription screen without subscribing, up to two emails, one day and three days later, which stop as soon as you start a trial or subscribe; and if you turn off renewal during your free trial, one email on its sixth day, the day before it ends. Each of these emails carries a one-click unsubscribe link, and once you use it we send you none of them. An anonymous device account works before you sign in; signing in merges it.
• Device identifiers. A device-scoped identifier and basic device information (platform, OS version, app version). Used to operate the anonymous account, keep sessions working, and debug crashes.
• Subscription state. Receipt and entitlement information from Apple's App Store Server API and Google Play Billing (plan, trial status, renewal state, store transaction identifiers). Used to unlock the app you paid for. We never see or store your card number; payment runs entirely through Apple or Google.
• Usage events. First-party analytics events collected by our own app code and stored in our own database. In full, these are: your onboarding answers (preferred reading time, starting book, translation choice); screens viewed, including paywall screens; whether you granted the notification permission and the reminder time you chose; subscription funnel events (plan chosen, trial started); reading interactions (verses viewed, Amens given or removed, Voices opened, verses shared); and app settings changes (theme, type size). These first-party events stay in our own database; the only third-party measurement in the app is the ad measurement described in the next bullet. Used to fix problems and understand which features matter.
• Ad measurement data. To measure whether our own app-install ads worked, the app includes the Meta (Facebook) SDK. When the Ad measurement setting is on, the SDK reports to Meta the app install, app opens, that a trial started and, on iOS from app version 1.1.4, that the purchase sheet on the subscription screen was opened, with an app-scoped anonymous identifier (and, on Android only, the resettable advertising ID). Our server reports to Meta that the purchase sheet was opened on Android and on iOS versions before 1.1.4, that a trial started (the same trial, counted once) and that a purchase was made, with its price. The purchase sheet opening carries no plan or price; our server reports it at most once per account, and the SDK at most once per account on each installation, so someone who opened it on an earlier version, on another device or before reinstalling the app may be reported again. On iOS we never show the App Tracking Transparency prompt and never read the IDFA; install attribution uses Apple's aggregated SKAdNetwork. From app version 1.1.7, with the setting on, the iOS app also asks Apple's AdServices framework for a one-time attribution token, and our server sends that token to Apple, which answers whether an Apple Search Ads ad led to the download and, if so, which campaign, ad group and keyword; the token itself is never stored, and Apple's answer is kept with your account until you delete it. What you read, pray, note, or save is never part of ad measurement (section 3). In the EEA, the UK, and Switzerland this setting starts OFF and measurement begins only if you turn it on; everywhere else it starts on and the same switch is the opt-out. You can change it at any time in Settings > Privacy > Ad measurement; off means the SDK is silenced and our server drops the account's unsent measurement events.
• User content. Voices (public comments) and prayer wall posts you choose to publish, with the display name you post under. Public by design, visible to other subscribers.
• Reading data. Your reading position, streak, Amens, notes, and preferences, so the app can hold your place and restore it.

We collect this data directly from you and from your device; we do not buy data about you from anyone.

3. Your scripture reading history

What you read is between you and God. Your per-user scripture reading history (which verses, books, and passages you read, when, and how often) is used only to run the app for you: holding your place, keeping your streak, and shaping your own feed. It is never shared with, sold to, or disclosed to any third party. It is not used for advertising, and it is not included in any data we disclose to service providers beyond the encrypted infrastructure that stores it.

4. What we do not do

• We do not sell your personal data. The only data shared for advertising purposes is the ad measurement data described in section 2, which some US state laws treat as "sharing"; the Ad measurement toggle in Settings > Privacy is the opt-out and it works without asking anything else of you.
• The app shows no third-party ads. The Meta SDK exists to measure our own install ads, never to display anything.
• We do not use your data to train models outside the Service, and we do not profile you for marketing.

5. Sharing

We share personal data only with:

• Infrastructure providers that host our servers and database, under contracts that require them to protect your data with at least the same level of protection described in this policy and to process it only on our instructions.
• Apple and Google, who process your subscription payment under their own privacy policies when you purchase through their stores.
• Meta Platforms, which receives the ad measurement data described in section 2 (install signal, anonymous identifier, purchase sheet opened, trial started, purchase made) when the Ad measurement setting is on, under Meta's business tools terms. Meta does not receive your email, your name, or anything you read.
• Apple, which receives the one-time attribution token described in section 2 when the Ad measurement setting is on, and answers with its own Apple Search Ads record. Apple receives nothing else from us for this.
• Authorities, if required by valid legal process, and parties to a corporate transaction (merger or acquisition) under confidentiality, with notice to you.

Any third party that receives personal data from us is required to provide the same or equal protection of that data as described in this policy. No third party receives your scripture reading history (section 3).

6. Retention and deletion

• Account data, reading data, and usage events are kept while your account is active.
• If you delete your account, your account record, email, identifiers, reading history, and preferences are deleted within 30 days. Your prayers and voices are anonymized rather than erased (see the account deletion page for exactly what that means).
• Subscription ledger records are retained as long as tax and accounting law requires.
• Server logs are retained for at most 90 days.

You can delete your account in the app (Settings) or from the account deletion page without reinstalling the app. Where processing is based on consent (such as optional emails), you can withdraw consent at any time in Settings or by writing to [email protected]; withdrawal does not affect processing that happened before it.

7. Your California privacy rights

Under the CCPA as amended by the CPRA, California residents have the right to know what personal information we collect, use, and disclose; the right to delete it; the right to correct it; the right to opt out of its sale or sharing; and the right not to be discriminated against for exercising these rights. We do not sell personal information. Ad measurement data sent to Meta may count as "sharing" under the CPRA; the Ad measurement toggle in Settings > Privacy opts you out, and you can also email us. The categories we collect are listed in section 2; the parties they can be disclosed to are listed in section 5.

To exercise any right, email [email protected] or use the account deletion page. We verify requests against your signed-in account or the email on file, and you may use an authorized agent. We respond within the time the law requires.

8. Other US state privacy rights

Residents of Virginia (CDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Texas (TDPSA) have similar rights: to confirm and access personal data, to correct it, to delete it, to obtain a portable copy, and to opt out of targeted advertising, sale, and certain profiling. We do not sell personal data and do not profile you with legal effects; to opt out of the ad measurement described in section 2, use the Ad measurement toggle in Settings > Privacy. Submit requests to [email protected]; if we decline a request, you may appeal by replying to our decision, and we will answer the appeal within the statutory period.

9. Children's privacy

Amen Scroll is a general-audience subscription app. Its store content rating is 4+ (Everyone), but the Service is not directed to children under 13, requires a paid subscription, and includes public community areas. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child under 13 has an account, contact [email protected] and we will delete the account and its data.

10. EU and UK users (GDPR)

Our legal bases are: performance of a contract (running the app, your account, and your subscription), legitimate interests (first-party analytics, security, and abuse prevention, balanced against your rights), consent (optional communications, and the ad measurement described in section 2, which you can withdraw at any time with the Ad measurement toggle in Settings > Privacy), and legal obligation (tax and accounting records).

You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent. Exercise them in the app or via [email protected].

Representative. We are established in the European Union, in Lithuania, so no representative under Article 27 of the GDPR is required.

Complaints. You can lodge a complaint with the supervisory authority where you live. Our lead supervisory authority is the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, 10312 Vilnius, vdai.lrv.lt).

International transfers. Our servers and database are hosted by DigitalOcean in the United States, so personal data is transferred outside the EEA and the UK. Those transfers are made under the European Commission's standard contractual clauses (and the UK addendum) in our data processing agreement with that provider, together with the technical measures described in section 11.

11. Security and store disclosures

Data is encrypted in transit. Access to production data is limited to the people who operate the Service. The data types in this policy are the same ones declared in Apple's App Privacy labels and in the Google Play Data safety form for Amen Scroll, including the availability of in-app and web deletion requests.

12. Changes to this policy

If we change this policy materially, we will give notice in the app before the change takes effect and update the date at the top. Change log: 30 September 2026, stated that from app version 1.1.7, with the Ad measurement setting on, the iOS app looks up with Apple whether an Apple Search Ads ad led to the download (a one-time token sent to Apple through our server and never stored; Apple's answer kept with the account), and named [email protected], an inbox a person reads, as the contact for every request in this policy, in place of an address that did not receive mail; 27 September 2026, replaced the mention of a trial reminder email, which we no longer send, with the emails we do send about your subscription and their one-click unsubscribe; 25 September 2026, stated that the opening of the purchase sheet on the subscription screen is also reported to Meta (the same setting, the same recipient, with no plan or price): by our server on Android and on iOS versions before 1.1.4, at most once per account, and by the Meta SDK in the app on iOS from version 1.1.4, at most once per account on each installation; 20 September 2026, stated that the Meta SDK in the app, and not only our server, reports that a trial started (the same fact, to the same recipient, under the same setting); 4 September 2026, named the operating company and its registered address, stated the supervisory authority, and replaced the general transfer wording with the actual hosting location; 31 August 2026, added the ad measurement disclosure (Meta SDK, conversion reporting, and the in-app toggle); 21 August 2026, first published version.

13. Contact

UAB Minderse
Laisvės al. 110, LT-44253 Kaunas, Lithuania
Company code 306238029 · VAT code LT100015812514
Email: [email protected] · Phone: +370 684 44656