Grafted Bible

Privacy

Grafted Bible is an offline-first, privacy-focused application. There are no privacy options to opt out of - because we don't track any user data to begin with.

Last updated: May 2026

Who we are

Grafted Bible is operated by Andrew Rice (doing business as Grafted Software), an independent developer based in Minnesota, USA. We are the data controller for the information described on this page. For any privacy question - or to exercise the rights below - email privacy@grafted.bible.

What we don't collect

The free tier collects nothing. There is no account, no telemetry, no analytics, no fingerprinting, and no IP logging. Specifically, we never collect, log, or store any of the following:

  • The content of your notes.
  • Your highlights, bookmarks, and memorizations.
  • Search queries you type into the app.
  • Which passages you read, or how long you spent on them.
  • Your IP address.
  • Your User-Agent or device fingerprint.
  • Anything else not listed below.

The only outbound network calls

In the free tier the app makes two kinds of network requests, both required to actually show you scripture:

  • Helloao API - when you pick a translation that isn't built in, we fetch the verses from the public Helloao Bible API. We send only what's needed to identify the chapter you asked for. No identifier, no cookies.
  • Same-origin assets - fonts, icons, and JSON files served from the same domain as the app itself.

There are no third-party analytics endpoints, no crash reporters, and no advertising SDKs anywhere in the codebase.

Like visiting any website, loading the app or fetching a translation sends your device's IP address to whoever serves the response - our host, and the Helloao API for translations that aren't built in. They need it to send data back to you. Grafted's own code never receives or stores it.

Where your data lives

Every note, highlight, bookmark, memorization, and reading preference is stored locally on your device - in your browser's IndexedDB on the web, and in an on-device SQLite database in the desktop and mobile apps. You can export everything to a JSON file at any time from Settings → Data. Use these files to create backups, transfer between devices, or move notes into a different app. Your data never touches a server unless you turn on Premium sync.

Premium tier

When you sign in (which is required only for Premium features), we collect a small amount of data on our backend:

  • Your email address - used to email you a one-time sign-in code and account notifications.
  • Your subscription state - what plan you're on, when it renews, whether you've cancelled. Mirrored from our payment processor.
  • A small device record per signed-in device (a generated device id, a friendly name, the platform, and a last-seen timestamp). Lets future cross-device features know where your account is signed in.
  • When you turn on Premium sync, your notes, highlights, bookmarks, and memorizations are end-to-end encrypted before they leave your device. The encryption key never leaves your devices - we can't read your sync blobs.
  • You can cancel your subscription, export everything, and delete your account from Settings → Account at any time.

How signing in works

Signing in is optional - it is only required for Premium sync. Authentication is handled by WorkOS (see the providers below). We offer three sign-in methods, and each one shares only the minimum needed to identify your account:

  • Email one-time code - we email a single-use code to the address you enter and you type it back in. You give us only your email address; there is no password.
  • Continue with Google - we receive your name, email address, and profile picture from your Google Account, and use them solely to create and identify your Grafted account. We do not request or access any other Google user data: no Gmail, Google Drive, Contacts, Calendar, or any other Google service. We never sell this information or share it with third parties for advertising, and you can delete it at any time by deleting your account.
  • Continue with Apple - we receive your name and email address (or Apple's private relay address, if you choose to hide it), used only to create and identify your account.

When you sign in, a Cloudflare Turnstile check runs to block automated abuse. It is privacy-preserving - it does not track you across sites and sets no advertising cookies.

Third-party services we rely on

These are the third-party providers behind Grafted's infrastructure - some serve everyone, some only the Premium tier. Each is named explicitly so you can audit our trust boundary:

  • Cloudflare - hosting and content delivery for the web app, its assets, and the desktop / mobile download files. Serves every visitor, free or Premium. Cloudflare also provides the Turnstile bot-check that runs on the sign-in screen. Like any host, Cloudflare's edge network processes your IP address to route requests to you; Grafted doesn't log or store it.
  • WorkOS - our authentication provider (AuthKit). Handles signing in: it issues your one-time sign-in codes and brokers "Continue with Google" and "Continue with Apple." It stores your email and the identifiers needed to recognize your account on return. Hosted in the United States.
  • Resend - email delivery. Delivers the one-time sign-in codes and account-related notifications you receive from us, and stores the contact list for our optional website newsletter (see the Newsletter section below). Sees only your email address and the contents of those messages.
  • Supabase - our backend database. Stores your email, subscription state, device records, and your end-to-end-encrypted sync blobs. Hosted in the United States.
  • RevenueCat - subscription management for the native app stores (Apple, Google). Knows your email and which products you've subscribed to. Used to unify entitlement state across those stores.
  • Polar - Merchant of Record and checkout for web and desktop purchases. As the legal seller, Polar handles payment, sales tax/VAT, and your card details; we never see or store your card.

Newsletter (optional)

If you subscribe to our newsletter on the website, your email address is added to a contact list at Resend - the same provider that delivers our sign-in emails - and used only to send you occasional updates about Grafted. It is entirely opt-in and separate from the app: nothing is sent unless you enter your address and subscribe, and every newsletter includes a one-click unsubscribe. A privacy-preserving Cloudflare Turnstile check runs when you subscribe, to block automated abuse. We never sell or share it, and the app itself still collects nothing.

Your rights and choices

You can access, correct, export, and delete the data tied to your account yourself, from Settings → Account - no request to us needed. We don't sell your data, and we never share it with third parties for advertising. If you live somewhere with specific data-protection laws - the EU, the UK, California, and others - the rights those laws grant you apply regardless of where we operate. Email us and we'll help you exercise them.

Deleting your account

You can delete your Grafted account from Settings → Account → Delete account. There is a 30-day grace window during which you can recover by signing back in. After 30 days, your account data is permanently purged from our backend - your email, subscription history, device records, and any sync blobs are removed and unrecoverable.

Children

Grafted Bible is a general-audience reader. It is not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has created a Premium account, email us and we'll remove it.

Verifying any of this

You don't have to take our word for it. Open your browser's developer tools, go to the Network tab, and use the app. As a signed-out user the only requests you'll see are to the Helloao API and to the app's own origin. If a future version ever changes that, this page will change with it.