Privacy Policy

Last updated: 22 September 2026

This Privacy Policy applies to the Cloud Bible mobile application and related website pages. For terms of use, see our Terms of Service.

Who We Are

Shinefort Ltd ("we", "our", or "us") is the data controller responsible for your personal data. We are a company registered in England and Wales (company number 17081874), with our registered office at 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the Cloud Bible mobile application, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Cloud Bible Is Built to Keep Your Reading Private

Reading, highlighting, underlining and writing notes all work on your device, with no account required. What you write and what you mark stays on your device unless you deliberately choose to sync it (see "Account and Sync Data" below) or contribute it anonymously (see "Popular Highlights" below).

Scanning a paper Bible. When you photograph a page of your own Bible, that photo is analysed entirely on your device to find your highlights and underlines. The photo is never uploaded to us or to any third party, and it is deleted from your device once you have reviewed the result.

What you write. Notes you write on a verse or passage, and anything you type into search, are never sent to our analytics providers and never read by us. If you choose to sync your data (below), note text and highlighted verses are stored on our server so they can reach your other devices — but they are never analysed, shared, or used for anything other than getting them back to you.

What Data We Collect

Cloud Bible is designed with privacy in mind. We collect the minimum data necessary to provide and improve the app. Depending on how you use Cloud Bible, this can include:

• Device information: Basic device type and operating system version, collected for compatibility and debugging purposes.
• Usage data: Anonymous or aggregated usage statistics such as session duration and feature usage (for example, that a highlight or a scan was made — never the verse, colour, or text involved), collected to improve the app experience.
• Crash and performance data: If the app crashes or performs poorly, we receive a technical report (device type, OS version, and the code path involved) via Sentry, so we can fix the issue. This does not include your highlights, notes, or search terms.
• Support enquiries: If you contact us via the support page, we collect your name, email address, topic selection, and the content of your message. Support enquiries are stored in Google Sheets (Google LLC).
• Account information (optional): If you create an account, we collect your email address, and — depending on how you sign in — your name from Google, or nothing further from Sign in with Apple (Apple does not share your name with us on a returning sign-in).
• Subscription information: If you purchase a subscription or Lifetime access, we receive purchase and subscription status details from the App Store or Google Play via RevenueCat (such as product identifiers, transaction IDs, and renewal status). We do not receive your full payment card details.
• Account and sync data (optional): If you create an account and enable sync, we store your highlights, underlines, notes, bookmarks, and reading position on our server so they reach your other signed-in devices. See "Account and Sync Data" below.
• Popular Highlights contributions (optional, off by default): If you turn this on, we receive which verses you have marked and what kind of mark it is — never note text — under a random identifier generated on your device. See "Popular Highlights" below.
• Website data: When you visit our website, our servers may log your IP address, user agent, and access time for security and troubleshooting.

We collect personal data directly from you and do not obtain personal data about you from third-party sources, other than the account details Apple or Google share with us when you sign in with them.

Please avoid sending sensitive personal data in support messages.

Account and Sync Data

Creating an account is entirely optional. Nothing behind the subscription depends on being signed in, and the app works fully offline whether or not you have an account.

If you create an account and are signed in, your highlights, underlines, notes, bookmarks, and reading position are stored on our server — hosted on our own database, on servers operated by Hetzner Online GmbH in Helsinki, Finland — so that they reach your other signed-in devices. This data is tied to your account and protected so that only you can read it. We do not read, analyse, or share the content of your notes or which verses you have marked, other than to store and return them to your own devices.

Which verses a person marks, and what they write about them, can reveal religious beliefs — a special category of personal data under Article 9 UK GDPR. Account and sync data is processed on the basis of your explicit request to use that feature (Article 9(2)(a): explicit consent, given by choosing to create an account and enable sync), and is never combined with the Popular Highlights contribution described below.

If you delete your account, your synced highlights, notes, bookmarks, and reading position are deleted from our server. Anything already on your devices remains there, since Cloud Bible is designed to keep working fully offline.

Popular Highlights

Popular Highlights is an optional, off-by-default feature that contributes anonymised data about which verses people mark, so that (in a future version of the app) we can show which verses are widely highlighted. It is a separate system from account sync, and the two are never linked.

• It is off unless you explicitly turn it on, on its own consent screen in the app.
• What is sent is a verse reference and a kind of mark (highlight, underline, or note) — never the text of a note, and never which colour you chose.
• It travels under a random identifier generated on your device, which is not your account and is never linked to your account, your sync data, or our analytics.
• The database tables that receive this data are locked so that no one — including us, through the ordinary API — can read individual contributions back out; only an aggregate count across many contributors is ever produced.
• Turning the feature off, or withdrawing consent, stops further contributions and deletes what you had already contributed.

Because this is data about religious belief, we only process it with your explicit, freely given consent (Article 9(2)(a) UK GDPR), recorded against a version number for the consent wording you were shown. If we change what the feature does or what wording describes it, we will ask for consent again under a new version.

Cookies and Similar Technologies

Our website uses essential cookies or similar technologies necessary to provide basic functionality. We do not use marketing cookies. If we add analytics or marketing cookies in the future, we will update this policy and, where required, request your consent.

Lawful Basis for Processing

We process your personal data under one or more of the following legal bases in the UK GDPR:

• Contract: To provide the app and any paid subscription features you request.
• Legitimate interests: To maintain and improve Cloud Bible, provide support, and keep the service secure.
• Consent: For optional communications or features where consent is required — including account sync and Popular Highlights, both described above — and which you can withdraw at any time.
• Legal obligation: To meet legal, tax, or regulatory requirements.

We assess our legitimate interests against your rights and freedoms and only rely on them when the impact on your privacy is minimal.

Providing support information is optional, but we may be unable to respond without it. Subscription status data is required to enable paid features. An account and sync are entirely optional.

How We Use Your Data

• To provide and maintain the Cloud Bible service.
• To deliver optional account sync if you enable it.
• To respond to support enquiries and provide customer service.
• To monitor and improve performance, stability, and usability.
• To process subscription status and manage access to paid features.
• To detect, prevent, and address technical issues or misuse.
• To comply with legal obligations.

Content Accuracy and Nature of Information

Cloud Bible is provided for Bible study and personal reflection. While we aim for accuracy, we do not guarantee that all content — including scanned results — will always be complete, current, or free from error. You are asked to review every highlight found by scanning before it is applied.

Content in Cloud Bible is not official doctrinal guidance and is not legal, pastoral, medical, or therapeutic advice.

Sharing and Third-Party Services

We do not sell your personal data. We share data only as described below:

• Service providers: We use vetted processors to host and operate parts of the service, including Hetzner Online GmbH (hosting in Helsinki, Finland), RevenueCat, Inc. (subscription management), Sentry (crash and performance reporting), and PostHog, Inc. (product analytics).
• App stores: Apple and Google process payments and manage subscriptions through the App Store and Google Play. They are separate controllers of your payment data and their privacy policies apply.
• Legal and safety: We may disclose data if required by law or to protect our rights, users, or the public.
• Business changes: If we are involved in a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction.

Our service providers process data only on our instructions and under appropriate agreements.

Data Storage, Security & International Transfers

Highlights, notes, bookmarks and reading history are stored locally on your device by default. Where you enable account sync, that data is transmitted to and stored on servers operated by Hetzner Online GmbH in Helsinki, Finland, which is within the European Economic Area.

Subscription status data is processed via RevenueCat, Inc. Crash and performance data is processed via Sentry. Product analytics data is processed via PostHog, Inc. These providers may process data in the United States and other countries. When personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as standard contractual clauses and related UK addenda where required.

We use industry-standard technical and organisational measures to protect your data, including encryption in transit, encryption of scanned photos on-device, and access controls. Server-side tables holding sync data are restricted so that only your own signed-in account can read them; tables holding Popular Highlights contributions carry no read access at all through the ordinary application interface.

Data Retention

We retain anonymous usage data for up to 24 months from collection, after which it is deleted. Support enquiry data is retained for up to 12 months after your enquiry is resolved, unless we are required by law to keep it longer. If you enable account sync, we retain synced data while your account is active and delete it within a reasonable period after you delete your account, unless retention is required by law. Popular Highlights contributions are retained only in aggregate once a floor of contributors is met, and individual contributions are deleted if you withdraw consent.

If we receive subscription records or transaction identifiers, we retain them for as long as needed for accounting and legal compliance.

Automated Decision-Making

We do not use automated decision-making or profiling that has legal or similarly significant effects on you. The scan feature analyses a photograph you take to detect highlights, entirely on your device, and every result is one you review and confirm before it is applied — it does not decide anything about you.

Children's Privacy

Cloud Bible is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13 in accordance with section 9 of the Data Protection Act 2018. If we become aware that we have collected personal data from a child under 13 without appropriate consent, we will delete it promptly.

Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure — to request deletion of your personal data where there is no compelling reason for continued processing.
• Right to restrict processing — to request that we limit how we use your data.
• Right to data portability — to request your data in a structured, commonly used, machine-readable format.
• Right to object — to object to processing based on legitimate interests.

You can delete your account, and everything synced under it, directly in the app at any time. For any other request, contact us via the Cloud Bible support page. We will respond to your request within one month.

Where we rely on consent — including for account sync and Popular Highlights — you can withdraw consent at any time, in the app, with immediate effect.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date above. We encourage you to review this page periodically.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, contact us via the Cloud Bible support page.

Shinefort Ltd
3rd Floor, 86-90 Paul Street
London, EC2A 4NE
United Kingdom

We are not required to appoint a Data Protection Officer and do not have a UK representative.