Privacy Policy

1. Who We Are

ScOAR (Scriptural Orientation, Application & Resolution) is a free AI-powered biblical guidance application available at app.scoarapp.com. The app is operated by the ScOAR App Team and can be reached at [email protected].

2. What Information We Collect

We collect the minimum information needed to provide the service. What we collect depends on whether you use the app as a guest or create an account.

If you use ScOAR as a guest (no account):

• Your query history and saved verses are stored only on your device in your browser's local storage. We never see them, and they are never transmitted to our servers.
• Your language and translation preferences are stored locally on your device.
• We do not collect your name, email, or any identifying information.

If you create a ScOAR account:

• Email address and username — used to create and manage your account.
• Password — stored securely by Supabase (our authentication provider) using industry-standard encryption. We never see your password in plain text.
• Private Vault entries — if you choose to lock a query to your Private Vault, that entry (your query and the AI response) is stored securely in our database, linked only to your account ID. No other user can see your private entries.

3. How We Use Your Information

We use the information we collect solely to provide and improve ScOAR:

• To authenticate your account and restore your session when you return
• To store and retrieve your Private Vault entries when you are logged in
• To send a password reset email if you request one
• To respond to support or contact requests sent to [email protected]

We do not use your information to:

• Show you advertisements
• Build a profile for marketing or targeting purposes
• Train or fine-tune AI models
• Share with third parties for their own commercial purposes

4. Data Storage and Security

Guest data lives entirely on your device in browser localStorage. It is never sent to our servers. If you clear your browser data, it is gone.

Account data is stored securely using Supabase, a trusted cloud database provider. Supabase acts as a data processor on our behalf. All data is encrypted in transit (HTTPS) and at rest. Your private entries are protected by Row Level Security — only your account can access your data.

Our API proxy runs on Vercel's serverless infrastructure. Queries you submit are forwarded to the Anthropic Claude API to generate responses. We do not log or store the content of these requests on our servers.

No security system is perfect. We use industry-standard practices and will notify users of any breach that affects their data in accordance with applicable law.

5. Third-Party Services We Use

• Anthropic (Claude API) — processes your queries to generate biblical guidance. See Anthropic's Privacy Policy.
• Supabase — provides authentication and database storage for registered users. See Supabase's Privacy Policy.
• Vercel — hosts the ScOAR web application. See Vercel's Privacy Policy.
• Cloudflare — hosts our marketing site and manages our domain DNS. See Cloudflare's Privacy Policy.

We do not use advertising networks, social media trackers, or analytics tools that share your data with third parties.

6. Children and Age Requirements

ScOAR is designed for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has created an account, please contact us at [email protected] and we will promptly delete their account and associated data.

Users between 13 and 17 are encouraged to use ScOAR with the awareness of a parent or guardian. Serious personal situations should always involve a trusted adult, pastor, or counselor.

7. Your Rights and Choices

You have the following rights regarding your data:

• Access — you can view your Private Vault entries at any time within the app.
• Deletion — you can delete individual Private Vault entries within the app at any time. To delete your account and all associated data, contact us at [email protected].
• Guest data — you can clear your browser's local storage at any time to remove all guest history and favorites from your device.
• Portability — contact us if you would like a copy of the data we hold about you.

If you are located in the European Economic Area (EEA) or United Kingdom, you may have additional rights under GDPR, including the right to lodge a complaint with your local supervisory authority.

If you are a California resident, you have rights under the CCPA including the right to know what data we collect, the right to delete it, and the right to opt out of the sale of your personal information. We do not sell personal information.

8. Data Retention

We retain account information and Private Vault entries for as long as your account is active. If you request account deletion, we will delete your data within 30 days. Guest data stored in local storage on your device is not retained by us at all.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will make reasonable efforts to notify users. Continued use of ScOAR after a policy update constitutes acceptance of the revised policy.