Privacy Policy

Selah is a Scripture reading and reflection app operated by Cody Jo. We do not sell personal data.

Selah now runs on Bunny.net infrastructure with Bunny Database. Transactional email is sent through Postal on infrastructure we operate on Google Cloud Platform.

• Account details such as name, email address, hashed password, preferred Bible version, and privacy-policy acknowledgement timestamp.
• Study data such as bookmarks, plans, reading history, streaks, and journal entries.
• Technical and security data such as rate-limit events, operational logs, browser metadata, and IP-address-derived security signals.

• To authenticate your account and keep saved reading state available across sessions and devices.
• To provide journaling, guided study, bookmarks, plans, and related product features you request.
• To secure the service, prevent abuse, investigate incidents, and respond to support requests.

Selah is hosted on Bunny.net, including Bunny Magic Containers and Bunny Database. Depending on the route a request takes, technical delivery and logs may be processed through Bunny.net edge infrastructure in additional countries.

Bible text and translation metadata may be requested from Bolls.life when you browse Scripture content. AI study responses use Anthropic only when you intentionally invoke those features. Transactional email uses Postal. Selah also uses Plausible Analytics in a cookieless configuration for aggregate product analytics.

If you access Selah from outside the United States, your data may be processed in the United States and other countries where our infrastructure providers operate.

If you are in the European Economic Area, United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR:

• Contract: Processing your account and study data is necessary to provide the service you asked for when you registered.
• Legitimate interest: We process security logs and usage signals to protect the service, prevent abuse, and improve reliability.
• Legal obligation: We may retain certain data to comply with applicable laws, respond to lawful requests, or enforce our terms.
• Consent: Where required, we obtain your consent before processing. You may withdraw consent at any time by contacting us.

Registration uses a minimal self-attestation step rather than invasive age verification. The active minimum age threshold and current policy versions are logged when you sign up.

AI study features are limited to the passage, version, and question you submit for that feature.

Private journal entries are not used as input to study AI features unless you deliberately paste that content into a prompt yourself.

• Account and study data remain until you delete them or delete your account.
• Operational and security logs are generally retained for about 30 days unless a longer retention period is needed for security review or legal compliance.
• You can request deletion by using in-app account deletion where available or by emailing us.

Depending on where you live, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal data. You can also use the in-app data export feature in Settings.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data. You can delete your account through Settings, which removes all associated data.
• Portability: Receive your personal data in a structured, machine-readable format (JSON export available in Settings).
• Restriction: Request that we restrict processing of your personal data in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email privacy@selahscripture.com, visit the Privacy Center, or use the self-service tools in Settings. We respond to verified requests within 30 days.

EEA, UK, and Swiss residents may also lodge a complaint with their local data protection authority.

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know: You may request details about the categories of personal information we collect, the purposes for collection, and the categories of third parties with whom we share data.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to opt out of sale: We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
• Non-discrimination: We will not discriminate against you for exercising your privacy rights.

You may also use a browser-based Global Privacy Control (GPC) signal as an opt-out signal for applicable processing. When Selah detects GPC, non-essential analytics remains off.

Selah uses self-hosted Plausible Analytics on analytics.codyjo.com in a privacy-respecting configuration. Each domain uses its own site entry and script token, and analytics stays separate from essential sign-in and preference storage.

We do not intentionally send account email addresses, private journal content, or saved study history to Plausible. Analytics is used for aggregate product reporting rather than advertising or cross-site behavioral profiling.

Selah stores session and preference data in your browser's local storage to keep you signed in, remember settings, and preserve app state. That storage is used only for functionality you request.

For browsers that appear to be in the UK, EEA, or Switzerland, Selah keeps analytics off until the user opts in. Outside those regions, analytics may be enabled by default unless the user turns it off or sends GPC.

Selah's primary infrastructure is in the United States and Europe (Bunny.net edge locations). If you access Selah from outside these regions, your data may be transferred to and processed in countries where our infrastructure providers operate.

For transfers from the EEA, UK, or Switzerland, we rely on Bunny.net's data processing agreements and standard contractual clauses where applicable.

• Bunny.net (Slovenia/EU) — Hosting, CDN, database, container infrastructure.
• Anthropic (United States) — AI study features, activated only when you request guided study.
• Postal / Google Cloud Platform (United States) — Transactional email delivery for verification and password reset.
• Plausible Analytics (EU) — Cookieless, privacy-first aggregate analytics. No personal data collected.
• PayPal (United States) — Subscription billing and payment processing. Receives your email, name, and subscription status when you upgrade to Premium.
• API.Bible / Bolls.life — Bible text and translation metadata, requested when you browse Scripture.

Selah is not directed to children, and account registration is intended only for people who are at least 16 years old.

If you believe someone under 16 provided personal data to Selah inappropriately, email us and we will review and delete it where required.

Email privacy@selahscripture.com for privacy requests or questions.

General support: hello@selahscripture.com

Privacy Center

Terms of Service

Accessibility statement

Back to Selah