Account: when you create an account we store your email address. If you sign in with Google, we receive your name and email from your Google account. We never see your Google password.

Your study content: notes, highlights, bookmarks, study plans, reading progress, saved answers, and any insight you choose to share. This is yours; we store it so it syncs across your devices.

Questions you ask: the questions you send to the AI and the parameters of study plans you generate.

Usage limits: to keep the AI features fair and to prevent abuse, we log each AI request with the endpoint, a timestamp, and a one-way hashed form of your IP address. We do not store your raw IP address.

Error diagnostics: if the app hits an unexpected error, we send a diagnostic event (including your account id, but not your notes or question text) to our error-tracking provider so we can fix it.

Usage analytics: we record product events such as pages viewed, a question asked, a plan generated, or a note created, tied to your account id when you are signed in, so we can understand which features help and improve them. Analytics never receives the text of your notes or questions, we do not record your screen or session, and we honor your browser's Do Not Track setting.

On your device: your sign-in session, your theme choice, and an offline cache of Scripture you have opened are stored on your device, not on our servers.

To provide the service: to save your study, sync it across devices, and generate grounded answers and study plans.

To keep it running and fair: to enforce usage limits, diagnose errors, and protect accounts.

We do not show ads, we do not sell your data, and we do not use advertising trackers.

When you ask a question, the text of your question and the Scripture, commentary, and lexicon passages retrieved for it are sent to our AI provider (Anthropic) to generate the answer. Study-plan requests send the plan parameters you choose.

Your private notes, highlights, and bookmarks are never sent to the AI provider.

We rely on a small set of providers, each handling only the part of the service it powers: Supabase (database, authentication, and storage, hosted in the United States), Anthropic (AI answers and plans), Vercel (web hosting), our error-tracking provider (diagnostics), PostHog (usage analytics, hosted in the United States), and Google (only if you choose Google sign-in).

We keep your information while your account exists. You can delete your account at any time from the You tab. Deleting your account permanently removes your profile and all of your study content from our database.

Recent encrypted backups may retain a copy for a short period under our provider’s backup schedule, after which they roll off.

You can view and edit your study content in the app, delete individual items, or delete your entire account. For any question about your data, contact us at the address below.

Data is encrypted in transit. Row-level security in the database ensures you can only read and write your own content. New passwords are checked against known breach databases and weak passwords are rejected.

Elior is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will remove it.

We may update this policy; the effective date above reflects the latest version. Questions or requests: privacy@eliorstudy.com.