Privacy Policy

What we collect

• Account: your email address (and a password, if you set one) so we can sign you in and sync your data. Authentication is handled by Supabase.
• Your content: the things you create - colour lenses, highlights, comments, chains, threads, bookmarks, favourites, pinned verses, reading-plan progress and your reading streak. When you're signed in these are stored in our database so they sync across your devices.
• Usage analytics: aggregate, privacy-friendly page analytics (via Vercel). These are cookieless and do not identify you.
• Licensed-API usage: when you read a translation served through our server (currently the ESV), we keep a per-day count of those requests. If you are signed in, we also record that your account used that source in a given month - so we can report distinct-user numbers. We do not log which passages you read, your IP address, or any anonymous-reader identifiers. See Reporting to content publishers below.

If you don't sign in

Everything you create stays only in your browser on that device. It is never sent to us until you sign in.

On-device storage

SESIL stores data in your browser to work offline and remember your settings: your notes and lenses (IndexedDB), preferences such as theme, font and chosen voice (localStorage), and any downloaded voice models (the browser's private file storage). This stays on your device and is not sent to us unless you sign in to sync. Clearing your browser's site data removes it.

Who can see your content

Your synced content is private to your account - database row-level security restricts every row to its owner. The one exception is the optional social features: if you share a lens via a link, anyone with that link can view that lens; and if you add a friend by code, you and that friend can see each other's email and reading streak. You can revoke a share link or remove a friend at any time.

Service providers

We use a small number of processors who handle data only on our instructions to run SESIL:

• Supabase - authentication and database hosting (your account and synced content).
• Vercel - app hosting and the aggregate analytics above.
• Cloudflare - our domain and content delivery, hosting of pre-generated audio narration (no personal data), and routing of inbound email to us.
• Resend - delivers account emails (sign-in links and confirmations) from our domain. It receives only the recipient email address needed to send them.
• Crossway (ESV API) - when you read the ESV translation, the text is fetched on demand from Crossway's ESV API through our server, under their API licence. Your identity is not sent to Crossway.

These providers operate in the EU and/or the United States; international transfers rely on the providers' standard contractual safeguards.

Reporting to content publishers

Our licences for some translations require us to report how much the text is used. We share only aggregate figures with the publisher (for example: total ESV requests per month, and the number of distinct signed-in accounts that used it). We never share your identity, your email, your IP address, or what you read. This processing is based on our legitimate interest in meeting our content licences.

Account management

As the operator of SESIL we can see and manage account details - your email, the name you set, and sign-in activity - to run the service, provide support, keep it secure, and enforce our terms. We may suspend or remove an account that abuses the service. We do not read the private content you create (your highlights, comments and notes), except where strictly necessary to investigate a specific abuse report or where required by law.

Why we're allowed to process your data

• To provide the service (your account, sign-in and sync) - performance of our agreement with you.
• Analytics, security and licence reporting - our legitimate interests in running, protecting and lawfully operating SESIL, kept to the minimum needed.

Cookies

We use only the cookies needed to keep you signed in. There are no advertising or cross-site tracking cookies, and the analytics are cookieless.

Keeping and deleting your data

We keep your account and synced content until you delete it. You can delete individual items (lenses, comments, etc.) in the app at any time, and you can export a full backup from the Lenses screen. Signing out removes this device's local copy; it stays safe in your account and downloads again next time you sign in. To permanently delete your account and all of its synced data, use Delete accounton your account screen - or email us and we'll remove it. Deletion also removes the monthly usage record tied to your account. Backups are rotated and purged within 30 days. Aggregate usage counts (which contain no personal data) may be retained for licence reporting.

Your rights

Depending on where you live (including under the EU/UK GDPR), you have the right to access, correct, delete, export, or restrict/object to our use of your personal data. Most of this you can do yourself in the app (export from Lenses; Delete account on the account screen); for anything else, email us at the address below and we'll help. You also have the right to complain to your local data-protection authority.

Children

SESIL is not directed to children under 13, and we don't knowingly collect their data.

Changes

We may update this policy; the date at the top reflects the latest version.

Contact

Questions, rights requests or deletion requests: privacy@sesil.net.