Privacy policy

Updated 18 October 2026

The short version

We keep what Bible Epic needs to work: your place, your coins, your purchases, and your email if you sign in. We also keep a short record of installs and a few app events, to see whether our ads work. We never read your advertising ID. We do not sell your information, and today none of it goes to an advertising company.

Who we are

Bible Epic is operated by Odin Studio Inc., a Canadian federal corporation, corporation number 1815990-4, St. John's, Newfoundland and Labrador, Canada. Odin Studio Inc. decides how your information is used and answers for it. Questions go to collins@odinstudio.ca.

What we collect, and why

• A random code for your phone. The app makes it the first time it opens. It ties your place, coins and purchases to this phone, so you can watch with no account. It is not your name and not your advertising ID.
• Your place, coins and purchases. Which episodes you started, finished or unlocked, your coin balance, and what you bought. So the app opens where you left off and gives you what you paid for.
• Your email, if you sign in. To send your sign in code and your receipts, and to keep your place on every device you sign in on. Signing in is optional.
• How you found the app. Google Play tells the app which link or ad sent you. We use it to count installs by source. An ad's click code is kept only where you allow it (see below).
• App events. An install, an episode started, episode 3 finished, a payment screen shown and a purchase. With them: your phone's model, system version, language, time zone, the app version, your IP address and your country. We use them to see whether our ads work and to fix problems. The series and the episode stay with us and are never put in anything meant for an ad company.
• Crash reports. If the app or the website crashes, or an episode will not play, a report of what went wrong, with your phone's model and system version and the episode. Never your name, email or IP address. We use them to fix problems.
• A push token, if you allow notifications. When you say yes to notifications, Google's Firebase Cloud Messaging gives your phone a push token. We keep it with your phone's code and its time zone, so a new episode or a reminder reaches this phone at the right local time. Say no, or turn notifications off in your phone's settings, and we send none.
• A church or creator code, if you came through one. We count it to see which churches and creators bring viewers.
• Reports and email you send us. Report opens your own email app. We get only what you send: your email address and your words. We use them to answer you and to fix what is wrong.

What stays on your phone

What you liked or saved and your settings stay on your phone. Deleting the app deletes them.

Who receives it

Only companies that run Bible Epic for us, and only what each needs:

• Vercel runs our server and sees your IP address when the app calls it.
• Render holds our database: your phone's code, place, coins, purchases, events, push token and email if you signed in.
• Google Firebase Cloud Messaging delivers notifications to your phone, so it gets the push token and the notification's words. It does not get your email.
• Cloudflare stores and streams the episodes and sees your IP address.
• Resend sends your sign in code and receipts, so it gets your email address.
• Google Play, and Apple on iPhone, take app payments. RevenueCat checks app purchases for us and gets your phone's code and what you bought. We never see your card.
• Stripe takes card payments on the website.
• Google Firebase in the app also gets crash reports (Crashlytics: what went wrong, the app's state, your phone's model and system, and a random install code), app speed (Performance Monitoring: start and screen times, your IP address), a usage count (Google Analytics: screens and events with a random app code and your rough location from your IP address, never your advertising ID and never for ads) and an app check token that tells our server the request came from the real app. None of it names you: no email, no name, no account. How Google uses this: policies.google.com/technologies/partner-sites.
• Sentry receives the website's and our server's error reports, with nothing that names you.
• Google Workspace holds email you send us.
• Meta and TikTok receive nothing today. If we turn this on, they would get install and purchase events with a one way code of your phone's code, your IP address and your phone's details, to measure our ads. Never a series, an episode or your email. In the EU, the EEA, the UK and Brazil, only after you say yes. We will update this page before it starts.

Google Play

The app asks Google Play for an age signal, which Google gives where the law asks apps to check age. We use it only to follow those laws. The answer stays on your phone and is not sent to us.

Google Play handles payment in the Android app. We never see your card.

Apple

On iPhone, the app asks Apple for your age range where the law asks apps to check age. We use it only to follow those laws. The answer stays on your phone and is not sent to us. Apple handles payment in the iPhone app. We never see your card.

The Cast button, when it is on, looks for a Chromecast on your Wi-Fi so an episode can play on your TV. iPhone asks your permission first. Nothing about your network is sent to us.

If you live in the EU, the EEA, the UK or Brazil

We rely on these legal grounds (GDPR, UK GDPR and Brazil's LGPD):

• To give you the service: your phone's code, place, coins, purchases and email.
• Our legitimate interest: keeping the app safe, fixing problems and crashes, counting installs by source and counting church codes.
• Your consent: the push token, kept only once you allow notifications. App events and ad click codes for measuring ads. Nothing is kept for this until you say yes, and you can take it back at any time.
• The law: keeping purchase records for tax.

How long we keep it

• Your place, coins, events and account: until you delete them or ask us to.
• A sign in code works for 10 minutes and only once.
• A push token: until Google tells us it no longer works, or you delete your data.
• Purchase records: as long as tax law requires, up to 7 years.
• A report or email: as long as we need it to answer you and fix the problem.

Your rights

You can ask to see, copy, correct or delete what we hold about you, and to stop us using it. Write to collins@odinstudio.ca and we answer within 30 days. You can also complain to your privacy regulator, such as your EU data protection authority, the UK ICO, Brazil's ANPD or the Office of the Privacy Commissioner of Canada.

Deleting your data

• Signed in: in the app or on the website, go to Me, then Delete my account. We email you a code; enter it and your account is deleted at once, with your coins, list and history. Records of payments stay without your name or email, for refunds and tax. If you pay through Google Play, cancel there first; the screen shows you how.
• Not signed in: in the app, tap Settings, then Delete my data. It opens an email to us with your phone's code. We delete everything kept under that code within 30 days. Do this before you delete the app: deleting the app clears your phone, not our server.

Children

Bible Epic is not made for children under 13, and we do not knowingly collect information from them. If you think a child under 13 has used the app or written to us, write to collins@odinstudio.ca and we delete what we hold.

Where it is processed

Odin Studio Inc. is a Canadian corporation. The companies above may keep your information on servers in the United States and other countries outside where you live.

How we keep it safe

Everything the app sends travels encrypted (HTTPS). Our database and mail accounts are open only to the people who run Bible Epic.

Changes to this page

If this page changes, the date at the top changes with it. We do not make changes quietly.

Contact

Questions about this page or your information go to collins@odinstudio.ca.

Support line: +1 709 219 2221.