This policy explains how Next Arc Studio (“we”, “us”) handles information in the Pip's Bible Quest app for iPhone and iPad and on this website. It applies to everyone who uses the app, including children and the parents and caregivers who set it up. Please also read our Children’s Privacy Notice.
The short version
- A child can use every lesson, game and the Bible without an account, an email address or any personal details.
- Learning data (profiles, progress, notes, journal entries and prayers) is kept on the device.
- Besides anonymous crash reports, anonymous usage analytics and ad measurement (all on by default, all can be turned off), nothing leaves the device unless a grown-up saves a family backup, buys Journey Plus or sends us a message.
- We don’t show ads in the app or sell information. To learn which of our Facebook and Instagram ads bring families to the app, we share a few app events with Meta, and the advertising identifier only if you allow tracking when your iPhone asks.
What the app keeps on the device
Explorer profiles (a nickname, an age group and character choices), lesson progress and history, saved verses and bookmarks, notes, journal entries and prayers, preferences and reminder times, and optional on-device usage counts. A local database keeps checkpoints so progress isn’t lost. Journal entries and prayers are encrypted with a key that never leaves the device. This information stays on the device and we can’t see it.
What can leave the device
Only what a grown-up chooses:
- Caregiver sign-in (optional). If a caregiver creates an account, our sign-in provider Clerk processes the caregiver’s email address and session information. A caregiver can also sign in with Apple or Google; that provider then shares the caregiver’s name and email address (with Apple, optionally a private relay address) with Clerk. We never receive Apple or Google passwords. Children never sign in.
- Family backup (optional). If a caregiver saves a backup, our database provider Convex stores the family’s explorer profiles, progress, notes, bookmarks and character choices, linked to the caregiver account. Journal entries and prayers are never included.
- Crash reports (on by default, can be turned off). Sentry receives anonymous crash reports with the device model, system version and app version. Screenshots, session replay, network tracking and personal details are switched off.
- Usage analytics (on by default, can be turned off). PostHog receives anonymous events such as app opens, screens viewed and “lesson completed”, tied to a random installation ID, plus short session recordings in which every word, text field and picture is blurred. Names, emails, notes, journal entries and prayers are never sent.
- Purchases. Apple processes all purchases and subscriptions; we never see payment details. Our subscription service, RevenueCat, receives the App Store purchase records, an anonymous app ID and device identifiers so it can confirm Journey Plus access, report subscription totals and tell Meta about trials and purchases (see Advertising measurement). No name, email or child details are sent.
- Advertising measurement (Meta). The Meta SDK in the app tells Meta when the app is installed and opened, when setup is finished and when the first lesson is finished, with Meta’s anonymous app ID and device identifiers. The advertising identifier is included only if you allow tracking when your iPhone asks. No names, emails, answers, notes, journal entries or prayers are ever sent.
- Messages to us. Feedback and support messages written in the app leave the device only when the sender sends them. They are stored by Convex and emailed to our team through Brevo, with the app version and, if the sender allows it, device details. A support question can include an email address so we can reply. A problem report with a screenshot opens in the share sheet instead, so the sender chooses where it goes.
- Account emails. Brevo delivers two emails to a caregiver’s address, each sent once: a welcome when a caregiver account is created and a confirmation when it is deleted. We send no marketing email and never email children.
How we use information
We use the information above only to provide the app: to sign a caregiver in, to keep and restore a family backup, to confirm Journey Plus access, to fix crashes, to understand which parts of the app families use so we can improve it, to measure which of our own ads bring families to the app, and to answer messages. We don’t show ads in the app, profile children or build marketing lists, and we don’t sell or rent information to anyone.
Service providers
We work with a small number of providers who process information on our behalf and only for the purposes above:
- Apple: App Store purchases, subscriptions and Family Sharing.
- RevenueCat: confirming subscriptions, subscription reporting, and reporting trials and purchases to Meta.
- Clerk: optional caregiver sign-in, including Sign in with Apple and Google.
- Convex: optional family backup and in-app support messages.
- Brevo: delivering support messages to our team and caregiver account emails.
- Sentry: anonymous crash reports.
- PostHog: anonymous usage analytics.
- Meta: measuring which of our Facebook and Instagram ads lead to installs and subscriptions.
These providers may store information in the United States or other countries. We may also disclose information if the law requires it, or to protect the safety of our users.
Children
Children never need an email address. There are no public learner profiles, chats, ads or rankings of children, and nothing a child reads or writes is shared for advertising. The caregiver account, family settings and data controls are kept in the Caregiver area and Settings, away from lessons and games. Purchases are confirmed by Apple with Face ID, Touch ID or the account password, and Apple’s Ask to Buy lets a parent approve them. See the Children’s Privacy Notice for details.
Analytics
Pip's Bible Quest uses PostHog for anonymous usage analytics, as described above. A grown-up can turn usage analytics and crash reports off in Settings › Privacy & Data › Analytics, which stops collection immediately. This website does not use cookies, analytics or tracking.
Advertising measurement
We advertise Pip's Bible Quest on Facebook and Instagram and use Meta’s tools to see which ads lead to installs and subscriptions. Shortly after setup, once, your iPhone asks whether Pip's Bible Quest may track. Our note under Apple's question reads: “Only used to see which of our own Facebook and Instagram ads helped your family find this app. We show no ads and never sell your data.” You can change the answer anytime in Settings › Privacy & Security › Tracking. Without permission, Meta receives no advertising identifier and measures through Apple’s privacy-preserving SKAdNetwork. Turning off usage analytics in the app also stops the app events sent to Meta.
Microphone, speech and camera
If a memory activity asks a child to say a verse aloud, speech is recognised on the device and nothing is recorded or stored. The camera is used only to scan an invitation code, and only when a family chooses to.
Notifications and email
Reminders are optional. iOS schedules them on the device, and they can be turned off in the app or in the device’s Settings. Pip's Bible Quest doesn’t send marketing email today. A caregiver’s email choices are stored on the device; every kind is off until a grown-up turns it on, every email will include an unsubscribe link, and children never receive email.
How long we keep information
- Information on the device stays until it is reset or erased, or the app is deleted.
- A family backup and caregiver account stay until the caregiver deletes them in the app or asks us to.
- Crash reports and usage analytics are kept only as long as needed to fix problems and improve the app.
- Purchase records are kept as long as needed to provide Journey Plus and to meet accounting and legal obligations.
Your choices and rights
In Profile › Settings › Privacy & Data a grown-up can export a copy of all data on the device, reset an explorer’s progress, erase all local data, and delete the caregiver account and its cloud backup. Deleting the app doesn’t delete a cloud backup or cancel an Apple subscription; here’s how to cancel.
Depending on where you live (for example in the EU, UK or California), you may have the right to access, correct, delete or receive a copy of your information, and to object to or restrict how it is used. You can do most of this in the app, or email us at pipsbiblequest@nextarcstudio.com and we’ll respond within 30 days. You can also complain to your local data protection authority.
Security
Information sent to our providers is encrypted in transit. Journal entries and prayers are encrypted on the device. No system is perfectly secure, but we limit what we collect so there is very little to protect in the first place.
Changes to this policy
We’ll update this policy when the app changes how it handles information, and show the new effective date at the top of this page and in the app.
Contact us
Next Arc Studio
Email: pipsbiblequest@nextarcstudio.com
Website: pipsbiblequest.nextarcstudio.com