Last updated: October 23, 2026 · Version 7
This notice covers vectorbible.com, app.vectorbible.com, and the Vector Bible app for iOS and Android. Bible reading and search do not require an account. An optional account enables synchronization of bookmarks, notes, and reading positions.
Franz Josef Drexler, Silberbach 38, 4230 Pregarten, Austria, is responsible for your personal data and is the contact for privacy questions and complaints. Contact [email protected] or +43 681 208 87 501. Further business details are in the Imprint.
Technical requests. Our hosting, database, security, and other providers receive the information needed to handle requests. This can include your public IP address, time, requested URL/resource, browser/app and operating-system information, response status, and approximate country or city inferred from IP. We use it to deliver content, diagnose problems, prevent abuse, and secure the service. Approximate IP location is separate from the device-region check below.
Optional account and synchronization. We process your email address, account identifier, authentication/session information, bookmarks/highlights, verse references, notes you write, and last reading position/translation per device, with a device label and timestamps. Records are associated with your account to make them available on your other devices. Sign-in uses emailed login codes; password sign-in may also be supported. We do not receive your email-account password.
Local storage. Your app/browser stores settings, translation/passage selections, cached Bible text/structure, session information, and recent reading/search history. That history is local and older entries are pruned on app activity using a 30-day cutoff; it is separate from account-linked reading-position synchronization. Browser local storage and native app storage support these features. Cookie-free analytics does not mean the entire service uses no local storage. Clearing local data may sign you out but does not delete your server-side account.
Support. If you contact us, we process your address, message, attachments you choose to send, and correspondence metadata to respond. Do not send passwords or login codes.
These features do not require contacts, photos, microphone access, GPS/precise location, advertising identifiers, or a statement of your religion. Reading choices, notes, and queries can nevertheless reveal religious beliefs or other sensitive details. Avoid unnecessary sensitive information and other people’s private information. We do not use notes to build advertising or religious-belief profiles.
Submitting an intelligent search sends its text to our backend. On a cache miss, the backend sends the normalized text to the paid Google Gemini API to calculate a numerical representation of its meaning (an embedding). Managed Qdrant Cloud compares it with Bible passages and returns matching references.
The embedding request does not intentionally include your account email/identifier, private notes, bookmarks, or full reading history. Anything you type into the query is part of the text sent, however. Providers handling the request also receive necessary technical metadata. Ordinary reading and saved notes are not sent to Gemini for search unless you put their contents into a query yourself. Reading/navigation can be used without intelligent search.
We cache embeddings using a keyed hash-derived lookup identifier and a last-access timestamp. The cache is not designed to store original query text or account identifiers. Hashes and embeddings are not a guarantee of anonymity. The configured lifetime defaults to 30 days since last use; periodic maintenance removes stale entries, and repeated use can extend an entry’s lifetime. Temporary process-memory caching also occurs. Raw search text may remain in local history, a web search URL, or relevant technical logs.
Under Google’s paid Gemini API terms, submitted content is not used to improve Google’s products. Google may retain prompts/responses for limited abuse prevention, security, and legal purposes, separately from our cache. Search is a passage-finding tool; results can be incomplete or unsuitable and do not constitute an authoritative interpretation or personal advice.
Updated mobile versions read the country/region configured on your device to determine translation availability. The check happens locally: it does not send the region to a geolocation service, request GPS permission, or determine your physical location or app-store account country. Ordinary network requests still disclose your IP to the receiving services.
Translations including HFA and SCHL2000 can be restricted for particular device regions, including the United States (US), independently per translation and country. Missing or unrecognized regions leave restricted translations unavailable. A saved unavailable selection may be replaced, and restricted cached reading/search content is not displayed. Language and region are separate settings; your display language does not determine your configured country/region. Older app versions and the web app may behave differently.
Umami. We use self-hosted Umami on Hetzner infrastructure in Germany to understand service usage and improve Vector Bible. Events include visited pages, translations and passage/chapter references, search-feature use, and selected app interactions such as sign-in success or feedback-prompt responses. Request metadata can support approximate geography and device/browser statistics. We do not intentionally attach account emails or private notes to events. Cookie-free statistics can still involve personal data; event records are not the same as anonymous aggregate reports.
On the websites, the tracker is configured to omit URL query parameters and fragments, which may contain search/authentication information, and to honor an available browser Do Not Track setting. Paths and passage references may still be recorded. URLs can remain in browser history and infrastructure logs. These tracker settings do not govern native-app requests or essential/security logging.
Publisher reporting. Some publishers require monthly active-user counts per translation. The reporting system uses salted IP-derived hashes for deduplication, retained for at most 30 days. Publishers receive aggregate counts, not account emails, private notes, individual reading histories, or deduplication hashes. Hashes are pseudonymous, not necessarily anonymous. Receiving a request still involves its IP, and separate technical/security logs can contain it.
We do not sell personal information, share it for cross-context behavioral advertising, or use targeted advertising. We do not send newsletters, advertising emails, or push notifications. Contact us to object to statistics processing; we assess and handle requests under applicable law. Emailing an IP address does not automatically disable every analytics/logging system.
Processing can occur outside your country, including in the European Economic Area and the United States, where lawful authority access may differ from your home jurisdiction. For transfers subject to GDPR restrictions, the applicable safeguard must be an adequacy decision or another lawful mechanism, such as European Commission standard contractual clauses, with additional measures where required. Contact us for the safeguards relevant to your data and a copy where available. A provider’s certification alone does not establish coverage of every service or transfer.
We may disclose information where legally required, to protect the service/legal rights, or at your direction. App stores, external publisher websites, and sharing destinations you choose process data under their own terms.
Where GDPR applies, account/synchronization and requested search processing rely on Article 6(1)(b) where necessary to deliver the requested service. Security, proportionate diagnostics/statistics, license reporting, and ordinary support rely on Article 6(1)(f): our interests in operating, securing, and improving the service, balanced against your rights. Legal duties rely on Article 6(1)(c).
Where consent is required, a separate valid consent is necessary; this notice or agreement to the Terms is not itself consent. Consent may be withdrawn for the future without affecting prior lawful processing. Religious-belief information can receive additional protection, including under Article 9 GDPR and applicable US state laws. Contract or legitimate-interest grounds alone do not satisfy those additional requirements. We do not use this information for advertising profiles or solely automated decisions with legal or similarly significant effects.
You can delete individual notes and bookmarks with their app controls. To request account deletion and deletion of synchronized data, use Delete account in the app’s account settings or the web deletion page. Sign in, confirm the request, and review the scheduled date. You can cancel on that page or in the app before the seven-day deadline; after that deadline cancellation is unavailable. You can also contact [email protected] from your account address for privacy requests or help. We may verify account control without asking you to send us a password or login code. Signing out/uninstalling does not delete the account. Private account caches on an updated client are cleared when it detects deletion or signs out; deletion cannot remotely erase a device that remains offline.
You can read without an account, avoid intelligent search, clear local history/storage, delete individual records, and contact us about your data. Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection, and withdraw consent where it is the processing basis.
Email the privacy contact with the request and service/account concerned. We ask only for reasonably necessary verification. Authorized representatives may act where law permits. We respond within the applicable legal period, explain refusals, and provide review/appeal information where required. We do not discriminate against you for exercising legal privacy rights.
Europe: complain to the Austrian Data Protection Authority or your competent supervisory authority.
United States: state-law rights, including sensitive-data protections, depend on your state and the law’s applicability. Low revenue does not automatically exclude every sensitive-data law. You may contact your state attorney general or other competent authority. Because we do not sell/share data for advertising or use targeted advertising, there is no such activity for a Global Privacy Control signal to stop; the signal does not prevent essential requests or logging.
Vector Bible is a general-audience Bible reader, not specifically directed to children under 13. We do not knowingly collect children’s data in circumstances requiring parental consent without that consent. Contact us if a child has provided such information so we can investigate and remove it as required. Age/parental-consent rules vary. This paragraph does not authorize access to an AI feature contrary to age restrictions or its provider’s conditions.
We use encrypted connections, access controls, and provider security features. No system guarantees absolute security. Protect your device/email account and do not share login codes.
Updates show a new revision date above. For material changes, we provide additional notice or obtain consent where applicable law requires it before relying on the change. See also the Terms of Use.