Privacy Policy

Effective October 1, 2026. This policy explains how Aatmik Studio handles information in its hymn library, Bible tools, and Aatmik Community.

Information used by the service

Community registration and sign-in use Supabase with your email and password, Google account, or Apple account when that provider is enabled. We use your account identifier, email, and chosen public name to recognize your account and keep private messages separate. Supabase processes your password; Aatmik Studio does not store it in its community database or receive your Google password. Owner administration uses a separate ChatGPT sign-in provided by the hosting service, which supplies the owner identifier and may supply name and email. This does not give Aatmik Studio access to ChatGPT conversations.

We store posts, comments, reactions, new-song contributions, private prayers, messages, and admin replies that you submit. Admin uploads, song lyrics, and website settings are stored by our hosting and storage providers. Technical request and error logs may be processed to operate and secure the service.

Public and private content

Public posts, comments, display names, and shared songs can be seen and copied by anyone. Do not include another person’s personal information without permission. A private prayer or message is visible to its sender and the administrator; earlier private prayer requests remain accessible to the administrator. Private does not mean end-to-end encrypted.

Browser storage and downloads

The app uses browser storage for display preferences, your chosen community display name, Bible highlights, and presentation settings. Bible image creation happens in your browser; the app does not upload the generated PNG. Shared-device users should clear browser data after use. Community sign-in stores session tokens in your browser so you can stay signed in. Owner sign-in may use authentication cookies managed by the hosting provider. Sign out when using a shared device.

Use and sharing

We use information to provide the features you request, respond to messages, moderate content, and address abuse or copyright reports. Data may be processed by hosting, authentication, and storage providers and disclosed where legally required. The app does not include advertising trackers or a feature for selling personal information.

Optional browser notifications

If you enable Scripture notifications, we store the browser push endpoint, your account identifier, selected language, subscription date, and delivery timestamps. Push services operated by your browser provider process notification delivery. You can turn notifications off in Bible Quiz or revoke permission in your browser settings. Automatic daily scheduling is not currently active.

Retention and your choices

Use Settings → Account settings → Delete Account to request permanent deletion of your signed-in account. The service removes your profile, authored Community content, stored media identified with your account, relationships, notifications, synced study and reading records, and account-linked Quiz history. Shared groups transfer to another active member where possible. Authentication is removed server-side; Apple authorization is revoked using the server-held provider credential when available. A failed or unconfigured deletion is reported explicitly; contact support if deletion cannot complete. A disabled account identifier and hashed deletion marker are retained solely to prevent old or in-flight account sessions from recreating data. These markers contain no profile, content, or sign-in token. Unlinked historical uploads or anonymous submissions may require a separate support request to identify them. Separate guest Quiz identities on the device are not your signed-in account and are not automatically deleted with it. You can delete your public posts and comments. To request access, correction, or deletion of your other information, contact us from an account we can verify. Backup copies and service logs may persist for operational or legal reasons; downloaded or reposted public content cannot be recalled.

Children and sensitive information

Community participation is intended for people aged 13 or older who meet the sign-in provider’s requirements. Avoid posting sensitive health, financial, or identity details. Please contact us if a child has submitted personal information.

Contact and changes

Email songsnepalichristian@gmail.com for privacy questions or requests. We will update the effective date when this policy changes.

Activity privacy and analytics

Reading, quiz and contribution statistics are private by default. You can change each setting under Settings → Privacy. Sharing an achievement is an explicit public post. Reading time is estimated from visible, focused, active reading; it does not prove comprehension.

We count page visits using a random browser identifier stored on your device, page path, device category and time. These statistics are approximate and begin when tracking is enabled. We respect browser Do Not Track and Global Privacy Control signals. The administrator can see aggregate engagement and registered account names and dates, but not individual private reading history through analytics.

Private church content may be accessed by authorized platform moderators for documented investigations. Important access and actions are logged.

Mobile accounts, guest play and safety

The mobile app uses the same Supabase account system and native browser callback. Apple private relay email addresses are supported; a real email is not required as your public name. Session credentials persist through the existing Supabase client. Apple provider refresh tokens received for revocation are verified server-side and encrypted with a server-held key; they are not placed in URLs or display-name preferences.

Guest Quiz play uses a separate device guest identity and scoped guest credential. We store quiz responses, scores, progress and leaderboard preferences, and the chosen display name. Public leaderboards can display player names and scores. Local preferences include language, appearance, saved Bible data and guest display name. Synced notes, highlights and reading records are associated with the signed-in account.

Profiles can include a public name, bio, avatar and cover. Stories, posts and comments can include photos or videos. Friends, group membership, private group content, reports, block relationships and moderation history are stored to provide social and safety features. Private messages are messages to the administrator, not end-to-end encrypted chat. Reports are visible only to authorized moderators; reporter identity is not shown publicly. We use limited automated text rules and human moderation, not a new external media analysis service.

Hosting and object/database storage process data on our behalf, including Cloudflare-backed infrastructure. Supabase handles authentication; Google and Apple process their own sign-in flows. Optional push delivery uses the relevant browser or platform provider when enabled. The separate administrator-only Harmony feature may process submitted content with its configured OpenAI service; guest Bible, Hymns and Quiz do not require that feature.