Privacy Policy

What is stored on your device

Saved locally using Apple's standard UserDefaults storage:

• Game statistics — games played, best streak, and best score percentage.
• The name you enter, so you do not have to type it every time.
• Which questions you have already seen, so rounds do not repeat themselves.
• Daily practice — your streak, and the reminder time if you switch reminders on.
• Appearance preferences — theme, accent colour, roundness, and flourish level.

All of this stays on your device, is not backed up to any server we operate, and is deleted when you delete the app.

The optional daily reminder is a local notification scheduled by your iPhone. It involves no server and no push token, and nothing about it is sent anywhere. You can turn it off in the app or in iOS Settings.

Head to Head: what is sent

Only while you are in a head-to-head room, and only these things:

• The display name you type before joining, limited to 24 characters. It is shown to the other player. It can be anything you like — a first name, an initial, a nickname.
• The room code you created or entered.
• How each question went — whether your answer was right or wrong, and how many milliseconds you took. This is what produces the scoreboard.
• A one-time device check. The app uses Apple's App Attest to show our server that the request came from a genuine copy of the app rather than a script. This uses a key identifier created by iOS for this app on this device. It is not the advertising identifier, it is not shared with anyone, and it identifies an installation of the app rather than you.
• Your IP address, which our server necessarily sees, as any web server does. It is used only to limit how many rooms one address can create in a minute, and it is not stored with your name or your play.

Reporting a question

Every question is written by hand, and some of them are wrong. If you tap Report a problem on an answer, we receive:

• Which question it was, its wording at the time, and which of the five reasons you picked.
• Anything you type in the note field, which is optional and limited to 1,000 characters. Please do not put anything private in it.
• Your email address, only if you type one. It is optional and exists so we can tell you what we found. Leaving it blank does not change what happens to the report.
• The app version and which question set you were on, so we can tell whether a problem is already fixed.
• A device check and your IP address, exactly as described above. The IP is not stored: what is kept alongside the report is a one-way keyed hash of it, which lets us group repeated reports from one source without holding the address itself.

Nothing is sent unless you fill the form in and tap send. Reading a question and disagreeing with it silently costs nothing and tells us nothing.

Keeping the questions up to date

Every question is written by hand, and a few of them turn out to be wrong. Rather than make you wait for an App Store update to get a fix, the app checks for a corrected set of questions — at most once a day, shortly after you open it.

The check is a download of two files from this same website. It sends what any web request sends: your IP address, and the fact that a copy of the app asked for a file. It carries no name, no identifier, no score, and nothing about which questions you have seen or answered. We cannot tell from it who you are or how you played, and there is nothing in it to join up with anything else.

If the check fails, or you are offline, nothing happens and nothing is retried — the app already has a complete set of questions built in and plays perfectly well on those alone. A downloaded set takes effect the next time you open the app, never in the middle of a round.

What is never sent

Not even the questions. The two devices in a match agree on a random seed and each works out the same list of questions on its own, so the questions, the answers, and which ones you got wrong never cross the network.

Playing itself sends nothing, in any mode. Which questions you were asked, which you got right, how long you took, what your streak is — none of that leaves the phone in Solo or Pass & Play, and the daily question check does not carry it either. No personal information beyond the display name you choose to type and, if you report a question, the email address you choose to give. No address book, no location, no photos, no advertising identifier (IDFA), no usage or crash analytics, no cookies. The app does not track you across other apps or websites and contains no code capable of doing so.

How long it is kept

A head-to-head room is temporary. Everything held for it — the display names, the scores, the answers — is deleted automatically one hour after the room is created, whether or not the game was finished. We keep no record of matches, no history, and nothing that could be assembled into a profile.

A question report is kept until the question is dealt with, because that is the whole point of it. If you gave an email address, write to us at the address below and we will delete the report, or just the address, whichever you prefer.

Who else is involved

The head-to-head server runs on Cloudflare Workers. Cloudflare processes the data described above on our behalf in order to pass messages between the two phones, and applies its usual network protections. See Cloudflare's privacy policy. Apple's App Attest is part of iOS; see Apple's privacy policy.

There are no other third parties. The app bundles no analytics, advertising, or tracking libraries. Scripture text is included under Crossway's standard ESV permission grant, which involves no data sharing.

Children

The app is suitable for all ages. It collects nothing from anyone, including children under 13, except the display name a player types in order to play head-to-head — which need not be a real name, and which is deleted with the room within the hour.

Your choices

Head to Head and reporting a question both happen only when you start them, so not using them means nothing about you is ever sent. The daily question check is the one request the app makes on its own; turning off the phone's network access, or leaving the app closed, is what stops it. Deleting the app removes everything stored locally.

Changes

If this policy changes — for instance if a future version adds a feature that needs data — this page will be updated and the date at the top revised.