Privacy Policy

Unlock Scripture

Last updated: 3 May 2026 Version: 2.0

1. About This Policy

Unlock Scripture ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how long we keep it, and your rights under Australian law.

This policy applies to the Unlock Scripture application, the website at unlockscripture.com, and related services (the "Service").

We comply with the Privacy Act 1988 (Cth), the thirteen Australian Privacy Principles (APPs), and the Notifiable Data Breaches scheme.

By using the Service, you consent to the collection, use, and disclosure of your personal information as described here.

2. Who We Are

Unlock Scripture is operated by an Australian-based business in Queensland.

Email: ask@unlockscripture.com
Business name: Unlock Scripture
Website: https://unlockscripture.com

3. APP 1 — Open and Transparent Management

We manage personal information openly. This policy describes our practices. Latest version always at unlockscripture.com/privacy.

4. APP 2 — Anonymity and Pseudonymity

You may use a pseudonym for your account name. Subscription billing and AI-personalised content require an identifiable account. Billing info must remain accurate per Stripe and ATO obligations.

5. APP 3, 5 — Information We Collect

5.1 Information you provide

Account: email, encrypted password, display name
Payment: billing info via Stripe (card details NOT stored on our servers)
User Content: journal entries, saved verses, prayers, reflections, reading progress, notes
Communications: messages you send us

5.2 Collected automatically

Usage data: pages viewed, features used, time spent, clicks
Device data: IP, device type, OS, browser, language, identifiers
Cookies: see section 13

5.3 Sensitive information (APP 3.3)

Some content you provide may relate to your religious beliefs, spiritual practices, prayer requests, reflections, or wellbeing. Under APP 3.3, this is sensitive information.

We collect this only with your consent — by creating spiritual content and saving it to your account, you provide explicit consent for the purposes described here.

We do not sell, share, or disclose sensitive information for marketing. We apply additional care to its handling, storage, and transmission. Access is limited to what's necessary to provide the Service.

You may withdraw consent by deleting the relevant content or emailing ask@unlockscripture.com.

5.4 Third-party login

Third-party logins (e.g., Google) provide basic profile info per permissions you grant.

5.5 Notification (APP 5)

We notify you of APP 5 matters at or before collection — via this policy, sign-up forms, and in-app prompts.

6. APP 4 — Unsolicited Information

If we receive unsolicited information about you, we determine whether we could have collected it under APP 3. If not, we destroy or de-identify it as soon as practicable.

7. APP 6 — Use and Disclosure

We use your personal information to: create and manage your account; operate, secure, and maintain the Service; process payments (Stripe); personalise your experience; generate AI-assisted content (see section 11); communicate about the Service; send marketing (only if opted in, per Spam Act 2003 Cth); improve and debug; comply with legal obligations; prevent fraud.

We do not use User Content to train AI or machine learning models.

We share information only as described in section 8.

8. Who We Share With

We do not sell your personal information. We share only with:

8.1 Service providers (subprocessors)

| Provider | Purpose | Location | Privacy policy | |---|---|---|---| | Stripe, Inc. | Payment processing | United States and regional | https://stripe.com/au/privacy | | Anthropic PBC | AI processing (Claude) | United States | https://www.anthropic.com/legal/privacy | | Base44 | Hosting and database | Per provider infrastructure | https://base44.com/privacy | | Email provider | Transactional and opt-in marketing emails | Subject to provider | To be confirmed | | Analytics provider | Aggregated usage analytics | Subject to provider | To be confirmed |

Material subprocessor changes notified per section 17.

8.2 Legal and safety

We disclose to law enforcement, regulators, or courts as required by law, to protect safety, or to investigate fraud or breaches.

8.3 Business transfers

In a merger, acquisition, or sale of business, your info may transfer. We'll notify you and explain your choices.

8.4 With your consent

Other sharing only with your specific consent.

9. APP 7 — Direct Marketing

Marketing emails sent only if you opted in or as permitted by the Spam Act 2003 (Cth). Every marketing email includes an unsubscribe link. You may unsubscribe via email link, Settings, or emailing ask@unlockscripture.com. We don't share your info with third parties for their direct marketing.

10. APP 8 — Cross-border Disclosure

Some subprocessors (Stripe, Anthropic) are outside Australia. By using the Service you consent to your information being transferred and processed in the US, EU, UK, or other locations.

We have contractual data protection arrangements with cross-border subprocessors consistent with the APPs.

If you don't consent to overseas transfer, please don't use the Service.

11. AI Processing

Some features (DevotionalFlow, PrayerCompanion, UnlockPrayer, scripture exploration) use Anthropic (Claude).

11.1 What's sent

The scripture passage you're reading
Prompts or messages you enter
Other inputs strictly necessary for content generation

11.2 What's NOT sent

Your full journal history
Your password (never)
Your payment information
Long-form saved content unless you actively use it in a query

11.3 AI provider obligations

Our agreement with Anthropic prohibits training on your inputs, requires privacy-law-compliant handling, and includes data retention and deletion commitments.

11.4 Your control

You can skip AI-powered features. You can delete generated content anytime.

12. APP 11 — Data Security

We protect personal information via: HTTPS encryption, encrypted password storage, access controls, security-certified providers (Stripe PCI-DSS Level 1), regular review, minimal data collection.

No system is 100% secure. Report suspected compromise to ask@unlockscripture.com.

Notifiable Data Breaches scheme

For eligible breaches (likely serious harm), we comply with the Notifiable Data Breaches scheme: prompt assessment, notification of affected individuals, notification of the OAIC, remedial action.

13. Cookies and Tracking

13.1 Strictly necessary

Authentication, security, load-balancing. Cannot be disabled.

13.2 Functional

Remember preferences (reading plan, dismissed banners).

13.3 Analytics

Help us understand usage in aggregated form.

13.4 No advertising cookies

We do not use third-party advertising, retargeting, or behavioural advertising cookies.

13.5 Your choices

Control via browser settings. EU/UK users receive a cookie consent banner.

14. APP 10 — Quality of Information

We take reasonable steps to ensure personal info is accurate. Help us by keeping account info current via Settings and reporting inaccuracies to ask@unlockscripture.com.

15. APP 12, 13 — Access and Correction

15.1 Access

Request a copy of personal information we hold. Most account info is in Settings. Email ask@unlockscripture.com for full requests. We respond within 30 days normally.

15.2 Correct

Update account details in Settings. Other corrections via ask@unlockscripture.com.

15.3 Delete

Email ask@unlockscripture.com to request account deletion. We delete or de-identify within reasonable time, subject to retention requirements.

15.4 Export

Request a portable copy of your User Content (journal, verses, prayers) via ask@unlockscripture.com.

15.5 Withdraw consent

Withdraw consent at any time. May limit feature availability.

15.6 Complaints

Website: https://www.oaic.gov.au
Phone: 1300 363 992
Email: enquiries@oaic.gov.au

We respond to privacy requests normally within 30 days.

16. How Long We Keep Information

| Data | Retention | |---|---| | Account data | While account is active | | User Content | While active, deletable individually | | Payment/subscription records | At least 7 years (Australian tax obligations) | | Support communications | Up to 2 years after resolution | | Webhook and event logs | Up to 2 years | | Backups | Up to 30 days after deletion | | Aggregated/anonymised analytics | Indefinitely |

On account deletion, we delete or de-identify within reasonable time, subject to legal retention requirements.

17. Changes to This Policy

We may update this policy. Material changes notified by email or in-app at least 14 days in advance. Continued use after changes take effect = acceptance.

18. Children's Privacy

Service is for users 18 and over. We don't knowingly collect from anyone under 18. Inadvertent collection will be deleted as soon as possible. Contact ask@unlockscripture.com to report.

19. Third-Party Links

External links are not covered by this policy. Review their privacy policies separately.

20. How to Contact Us

Email: ask@unlockscripture.com
Business: Unlock Scripture
Website: https://unlockscripture.com

For unresolved complaints: Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au or 1300 363 992.

Version 2.0 — last updated 3 May 2026.