Privacy

MannaForMe is free, carries no ads, and makes no money from anything on this page. There are no analytics, no advertising SDKs and no third-party trackers in the website or the app — not “anonymised” ones either. What follows is the whole of it. Last updated 5 September 2026.

• Reading Scripture, browsing maps and images, and looking things up need no account and no sign-in. Nothing about that reading is tied to you.
• An account exists so that your own questions, notes and place in a book follow you between your phone and the web.

• Your email address and password, held by Supabase Auth. The password is stored only as a hash; nobody here can read it.
• An optional profile — display name, city, country, where you would put yourself on a faith journey, and a church affiliation. Every field is optional and exists to make answers better suited to you. Leave them blank and the app works the same.
• Your Ask conversations — the questions you type and the answers you get back, kept so a thread makes sense when you return to it.
• Your reading — passage notes, bookmarks, and the last place you were reading.

All of it is scoped to your user id in the database and enforced by row-level security, so one account cannot read another’s rows even if the application layer has a bug.

• Anthropic receives the text of an Ask question, and the Scripture and commentary passages retrieved for it, in order to generate the answer. It is sent through the API, which is not used to train models.
• An embedding provider receives the question text to turn it into the vector used to find relevant passages.
• Supabase hosts the database and authentication. Vercel hosts the website and its API. Both necessarily process what passes through them.

Your conversations are not sold, not shared with advertisers, not published, and not used to train anything.

Every message you send to Ask is checked before it is answered, so that a message about suicide, abuse or violence is met with real helplines rather than a commentary quotation. No person reads those messages. We do not monitor your conversations, nobody reviews them, and we do not pass them to anyone. If what you need is a human, the helplines we show you are staffed by people trained for exactly that, and they answer at three in the morning — which is the honest reason we hand you over rather than try to help ourselves.

What we keep is a count: that the check fired, which category it was, and which helplines were shown. It carries no link to you, to your account or to what you wrote, and it is readable only by server-side code — no application role can read it at all. It exists so we can tell whether the check is too sensitive or not sensitive enough, and for nothing else. See Ask for how the feature works.

Donations are handled entirely by Stripe on Stripe’s own hosted page. Card numbers never touch this site and we never see them. What we keep is the Stripe session and payment reference, the amount, the currency, whether it succeeded, and the email address Stripe reports — enough to answer a question about a gift. Giving happens only on this website; the phone apps have no donation screen and no link to one.

• Map tiles come from CARTO and OpenStreetMap, so loading a map reaches those servers the way any image on any web page does.
• Two translations (NIV and NKJV) are fetched live from api.bible, whose licence requires usage reporting. That report carries a random identifier generated by our server and contains nothing about you.
• Hosting providers keep short-lived operational logs, including IP addresses, as every web host does.
• Choosing the right crisis helplines. If a message needs helplines rather than a commentary answer, our host tells us which country the request came from, derived from the network address, and we use it to pick numbers that work where you are. We do not store it, and it is never attached to your account — showing an Australian number to someone in Ohio is the failure this prevents.

Your account page — on the web and in the app — has a delete control. It removes your login, profile, conversations, notes, bookmarks and reading positions. It is immediate and it is not recoverable. The only things that remain are the donation records Stripe and Australian financial record-keeping require us to keep. If you cannot sign in, ask us to delete it for you.

MannaForMe is not directed at children under 13 and we do not knowingly hold their personal information. If you believe a child has created an account, write to us and we will delete it.

For a copy of your data, a correction, a deletion you cannot perform yourself, or any question about this page, email jan@kvell.net. If this policy changes, the date at the top changes with it.