Privacy
In plain words: what Opened keeps about you, and how you stay in control. Opened is an initiative of The Kingdom Tribe (TKT).
Draft for development. The legal privacy policy will replace this before public launch.
What we collect
- Your email address, to sign you in. No password and no real name are required.
- Your study choices: where you are in faith, what you want to understand, your tradition if you choose one, and how long you'd like to study each day. Opened uses them to shape your daily plan and the short tour of the app, and remembers whether you’ve taken the tour.
- Only if you turn them on: a record of what you study (so Opened can plan your next step) and personal notes you choose to write.
- Product events, such as “finished onboarding”. These never include what you typed, read or asked.
- Anonymous counts of landing-page visits and sign-in requests, with nothing that identifies you or your device.
- Page views and how fast pages load, counted by Cloudflare Web Analytics without cookies: the page’s address (never anything after “?”, so never what you searched), your type of browser and your country. It can’t tell who you are and isn’t linked to your account. If your browser sends Do Not Track or Global Privacy Control, it isn’t loaded at all.
How we protect it
- Personal notes are encrypted with a key that belongs to your account alone, and that key is itself encrypted with a server key that never touches the database.
- Your personal data is kept in its own private database, separate from everyone else's.
- Nothing is sold, shared with advertisers, or used for advertising.
- Discreet mode can give Opened a neutral name and icon and lock it with a passcode on your device.
AI
- When AI features answer a question, your question is sent to an AI provider that does not train on it. We log the cost and outcome of each request, never its text.
- Ask doesn’t keep your conversation: your questions and answers stay on your screen and are gone when you leave. Each question is first checked for signs that someone may be in danger; if so, Opened shows care and helplines instead of an answer. Only the kind of concern is counted, never what you wrote, and no one is contacted.
- One exception helps everyone. When a question is general, the kind anyone might ask with nothing about you or anyone you know (“Who wrote Hebrews?”), its answer is kept in Opened’s shared answer library with no link to you, so the next person who asks gets it straight away. Questions about your own life, and any question that raised a concern, are never kept. Explanations of a verse are kept the same way, since they contain nothing you wrote.
- As you type a question, Opened looks in that library for questions already answered. What you type is used for that search and isn’t kept.
- Ideas you suggest on the Ideas board are public, shown without your name. Your ideas, votes and reports are stored under a code made from your account that can’t be turned back into it, so your own ideas show as yours; they’re deleted with your account. An idea that mentions something worrying is read by someone from Opened before it’s shown.
- When you rate or report an answer, Opened keeps your rating and the reasons you chose, under a code that can’t be traced back to you, so each person counts once. The question and answer are kept only if you tick “Share with Opened’s editors”; they’re kept without your name and deleted after 180 days.
Your choices
- Turn each kind of memory on or off at any time in Me › Privacy. Turning off personal notes deletes them immediately.
- Download everything we hold about you in Me › Your data.
- Delete your account in one step. Your data is removed at once, and from backups within 30 days.
Your profile
- If you choose a username, Opened stores it with your account and whether your profile is private, shared by link, or public. Profiles start private: only you can see them.
- Shared by link, your profile is seen only by people who have the address, and search engines are asked not to list it. Public profiles can be found by anyone.
- A profile shows only what you switch on: your name, a short bio, a life verse, the passages you feature with your reflections, your reading progress and where you are in the library. Your notes and highlights are never shown.
- If you pay for Opened Plus or have it through your church, your profile can show a small Plus supporter badge. It says only that you support Opened, never your plan, what you paid or how. It’s on unless you switch it off, and it disappears when Plus ends.
- Reading progress needs your reading history, which is off until you turn it on. It keeps the days you read and which chapters, in your own private space. Turning it off erases it, and removes your weekly goal, which is measured from it.
The Bible Quiz
- Anyone can play without an account. While you play, Opened keeps the round (its questions, your answers and your score) so it can time and score it fairly; rounds are deleted after a day. A signed-in player’s rounds are stored under a code made from the account that can’t be turned back into it.
- Your totals (games, right answers, best streak) are kept with your account in your private store, and deleted with it.
- Leaderboards are only for players who choose to join. You pick the name shown, and it appears publicly beside your points, as do the month’s winners on the Challenge page. Leave the leaderboard at any time to remove your name, points and past wins.
- In a live battle, the nickname you type and your answers are held only by that game’s room, which is deleted six hours after it opens.
- A shared score link carries the score, and your name only if you choose to show it.
Reporting a problem
- A problem you report is private: only Opened’s team reads it. It’s kept with a code that can’t be traced back to your account, so you can see your own reports, and deleted after 180 days or with your account. Please don’t include anything personal you don’t want us to see.
Opened Plus and giving
- Paying for Plus or giving happens on Stripe’s or Paystack’s own payment page. Opened never sees or stores card or bank details.
- Opened keeps whether you have Plus, until when, and a record of each payment (amount, currency, date). Payment records are kept for accounting even if you delete your account, without your name or account attached.
- Paystack needs an email address for a payment, so Opened passes on the one you signed in with (or the one you type when giving without an account). Stripe asks for it on its own page.
- Readers who ask for a gifted year of Plus aren’t asked why, and no one is told who received one.
- Churches asking for early access give a name and email so we can reply; they are used for nothing else.
Who processes your data
- Cloudflare hosts Opened and stores its data. It also counts page views and loading speed for us (Cloudflare Web Analytics), without cookies and without identifying you.
- Sentry (Functional Software, Inc.) receives reports when something breaks in Opened, so we can fix it. A report holds the error and only the first part of the page address (“/read”, never the passage). It never includes your name, email, IP address, account, what you typed, read or asked, or the pages you visited before.
- Stripe (in US dollars) and Paystack (in naira, shillings, cedis and rand) process payments for Plus and gifts. Prices outside US dollars use the day’s exchange rates from ExchangeRate-API; Opened fetches the rates, so nothing about you is sent there.
- When Opened AI answers you, the AI service provider we use processes that request on our instructions to produce the answer. It isn't used to train their models.
- Maps load only when you tap Load Map. The map images then come from OpenFreeMap (openfreemap.org), which, like any website, receives your IP address and which part of the map is on screen. It isn’t told what you’re reading or who you are, and Opened doesn’t record which maps you open.
- Audio recordings are fetched from their public-domain sources (openbible.com, ebible.org, and archive.org for the LibriVox KJV) once and then served by Opened; nothing about you is sent to those sites.
Sensitive data
- Religious belief is sensitive personal data under laws such as the EU GDPR (Article 9) and Nigeria's Data Protection Act 2023. We process it only with your explicit consent, which you can withdraw at any time.
Contact
Questions about your data, or a request to see, correct or delete it: email hello@openedbible.com. A concern about someone on Opened: email admin@openedbible.com. We aim to reply within 24 hours.