Privacy

MannaForMe is free, carries no ads, and makes no money from anything on this page. There are no analytics, no advertising SDKs and no third-party trackers in the website or the app — not “anonymised” ones either. What follows is the whole of it. Last updated 15 August 2026.

• Reading Scripture, browsing maps and images, and looking things up need no account and no sign-in. Nothing about that reading is tied to you.
• An account exists so that your own questions, notes and place in a book follow you between your phone and the web.

• Your email address and password, held by Supabase Auth. The password is stored only as a hash; nobody here can read it.
• An optional profile — display name, city, country, where you would put yourself on a faith journey, and a church affiliation. Every field is optional and exists to make answers better suited to you. Leave them blank and the app works the same.
• Your Ask conversations — the questions you type and the answers you get back, kept so a thread makes sense when you return to it.
• Your reading — passage notes, bookmarks, and the last place you were reading.

All of it is scoped to your user id in the database and enforced by row-level security, so one account cannot read another’s rows even if the application layer has a bug.

• Anthropic receives the text of an Ask question, and the Scripture and commentary passages retrieved for it, in order to generate the answer. It is sent through the API, which is not used to train models.
• An embedding provider receives the question text to turn it into the vector used to find relevant passages.
• Supabase hosts the database and authentication. Vercel hosts the website and its API. Both necessarily process what passes through them.

Your conversations are not sold, not shared with advertisers, not published, and not used to train anything.

Every message you send to Ask is checked before it is answered, so that a message about suicide, abuse or violence is met with real helplines rather than a commentary quotation. When that happens the app records the event separately from your conversation, to keep the safeguarding record honest and reviewable. Those records are locked down harder than the rest of the database: no application role can read them at all, only server-side review tooling. They also outlive a deleted account, with the link to your user id removed. We do this because a safeguarding record that can be erased by tidying your chat history is not a safeguarding record. See Ask for how the feature works.

Donations are handled entirely by Stripe on Stripe’s own hosted page. Card numbers never touch this site and we never see them. What we keep is the Stripe session and payment reference, the amount, the currency, whether it succeeded, and the email address Stripe reports — enough to answer a question about a gift. Giving happens only on this website; the phone apps have no donation screen and no link to one.

• Map tiles come from CARTO and OpenStreetMap, so loading a map reaches those servers the way any image on any web page does.
• Two translations (NIV and NKJV) are fetched live from api.bible, whose licence requires usage reporting. That report carries a random identifier generated by our server and contains nothing about you.
• Hosting providers keep short-lived operational logs, including IP addresses, as every web host does.

Your account page — on the web and in the app — has a delete control. It removes your login, profile, conversations, notes, bookmarks and reading positions. It is immediate and it is not recoverable. The only things that remain are the safeguarding records described above, with your user id stripped out, and the donation records Stripe and Australian financial record-keeping require us to keep.

MannaForMe is not directed at children under 13 and we do not knowingly hold their personal information. If you believe a child has created an account, write to us and we will delete it.

For a copy of your data, a correction, a deletion you cannot perform yourself, or any question about this page, email jan@kvell.net. If this policy changes, the date at the top changes with it.