Privacy Policy

When you use HolyStudy, we may collect the following information:

• Account information: name, email address, password (hashed), and display preferences.
• Profile information: bio, country, church affiliation, and anonymous username.
• Content you create: notes, comments, votes, and follow relationships.
• Usage data: pages visited, features used, and interaction patterns.
• Technical data: IP address, browser type, device type, and operating system.
• Cookies: essential session cookies, and optional analytics/session-recording cookies (only with your consent).

We process your personal data for the following purposes:

• To provide and maintain the HolyStudy service.
• To authenticate your identity and secure your account.
• To display your contributions to the community (according to your privacy settings).
• To send transactional emails (e.g., password resets, email verification).
• To improve the service through aggregated, anonymised analytics (only with your consent).
• To comply with legal obligations.

Our legal bases under the GDPR are: performance of a contract (providing the service), legitimate interest (security, fraud prevention), consent (analytics, session recording), and legal obligation (regulatory compliance).

We do not sell your personal data. We may share data with:

• Supabase (database and authentication provider, EU-hosted) — to operate the service.
• Vercel (hosting provider) — to serve the application.
• Analytics providers (only if you consent) — to help us understand usage patterns.
• Law enforcement — only when required by applicable law.

Under the GDPR, you have the right to:

• Access your personal data — you can download a copy of your data from your account settings.
• Correct inaccurate data — you can edit your profile at any time.
• Delete your account and personal data — available in your account settings. Personal information is removed within 30 days; public contributions are anonymised.
• Withdraw consent — you can change your cookie preferences at any time via the cookie settings in the footer.
• Data portability — you can export your data as a JSON file from your account settings.
• Lodge a complaint — you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Your data is stored on EU servers. Our database is hosted by Supabase in the EU region. We retain your personal data for as long as your account is active. If you delete your account, your personal information is removed within 30 days. Anonymised content (comments, notes) may be retained indefinitely. Consent records are retained for legal compliance purposes even after account deletion.

HolyStudy is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us with personal data, please contact us and we will delete that information promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of HolyStudy after changes constitutes acceptance of the revised policy.

For privacy-related inquiries, data requests, or complaints, contact us at privacy@holystudy.com.