Search it out
Search it out
Legal
Every outside company that touches your family's data, and what each one does.
Last updated
For a product used by children, we think you should be able to see the whole list rather than a phrase like “we work with trusted partners”. This is every outside company that touches the service, what each one receives, and why. Each is bound by contract to use it only to provide that service to us.
Hosting, database, authentication and file storage
What it receives: Parent account and sign-in records, family and child profiles, learning progress, written answers, and parent voice recordings.
This is where the product's data lives. Access is restricted row by row so one family's records cannot be read from another family's session, and voice recordings sit in a private bucket that is not publicly readable.
Their privacy policyParent sign-in (OAuth)
What it receives: Your email address, name and profile picture, released by Google when you choose to sign in with it.
Used only to identify the parent at sign-in. We never ask a child to sign in with Google, and we receive nothing else from your Google account.
Their privacy policyBible text
What it receives: The passage reference being displayed. No personal information about you or your child is sent.
Scripture text is fetched by our servers, not by your browser or your child's device, so YouVersion does not see your family at all.
Their privacy policyWebsite and application hosting
What it receives: Standard server logs, including IP address, for delivering pages and for security.
Serves this website and the parent and child web app. No analytics product is enabled.
Their privacy policyBot protection on sign-in, and DNS
What it receives: Your IP address and signals about your browser or device, collected by the security check on the sign-in and sign-up screens.
The check confirms a real person is signing in, so our email service cannot be abused to send messages to strangers. It runs only on those two screens, never anywhere a child uses, and Cloudflare states it is not used to build advertising profiles.
Their privacy policyError monitoring
What it receives: Technical details of a failure: the error, the page it happened on, the browser or server involved, and the account identifier of whoever hit it.
Used only to find out when something breaks. Reports are stripped before they are sent: no names, no email addresses, no Kid Codes, no Scripture or written answers, and no session cookies. Screen recording is switched off.
Their privacy policyPayments for the family plan
What it receives: Your email address, and the card and billing details you enter on Stripe's checkout page. Nothing about your children is sent.
Only involved if you choose a family plan. Card numbers go to Stripe directly and never reach our servers; we keep only a customer reference and the state of your subscription.
Their privacy policyDistribution of our mobile app
What it receives: Whatever the store records about a download. We do not receive personal information about you from either store.
Applies only if you install the mobile app. Each store's own privacy policy governs what it collects.
Products you would find in most consumer apps, and will not find here:
We will update this page before a new provider starts processing your family’s data, and where the change is material we will email the parent on the account. If you would like to be told about any change at all, write to our contact form and we will add you to that list.