TOT Bible Privacy

Effective October 12, 2026.

This policy describes TOT Bible and its optional TOT and Spitsbergen Library account service, operated by Cade Muhlig in association with Abiding Place Ministries. Account features are optional; their availability depends on the website or app version you use. For privacy questions, contact totbible@abidingplace.org.

Your study content

You can read and study in TOT Bible without a separate TOT account. Native app Bible searches and word lookups run on your device. Personal study content is not uploaded to our account service unless you choose to copy it or enable account sync, as described below.

Your device stores notes, bookmarks, highlights, notebooks, photos and drawings added to notebooks, folders, reading plans, your reading marker, history, searches, and preferences. Recovery copies and synchronization records help prevent loss of saved work.

Optional TOT account

You may sign in with Google, Apple, or an available email-and-password option. Supabase provides our account authentication and storage service. Your TOT account supports personal-data sync between TOTBible.org and updated iPhone, iPad, and Mac apps. Android support and the future Spitsbergen Library are separate developments, not services promised by this release.

When you sign in, Supabase receives and stores your provider identifier, email address, authentication and session records, and basic profile information supplied by your sign-in provider, such as a name or profile image. Apple may supply a private relay email address. Google sign-in requests only basic identity, email, and profile access—not Gmail, Google Drive, contacts, or other account content. We do not receive your Google or Apple password. When Apple supplies a credential for disconnecting your linked Apple sign-in, we store it encrypted on the server and use it when you explicitly request account deletion. This credential is not stored in your browser.

We use this information to create and secure your account, recognize you on supported devices, link sign-in methods when you request it, and provide account support. Signing in or linking a sign-in method does not itself upload your study content or make it public.

Optional account sync and test copies

If you enable account sync or request a cloud test copy, Supabase additionally stores your notes, notebook photos and drawings, highlights, bookmarks, tags, folders, reading plans, checklist progress, reading streak information, and reading marker. Bible text, downloaded audio, appearance preferences, and reading and search history are not part of that transfer.

Account sync combines supported saved data across the website and updated apps using the same account. It checks while TOT is open and active; offline edits wait for a connection. Website editing supports a subset of the apps’ tools and preserves other supported app data.

Enabling account sync saves a recovery backup. In the Apple apps, it pauses iCloud sync on that device. Existing iCloud copies are not deleted. Account data is protected by account access controls, but authorized service administrators can access the database. This is not end-to-end encrypted storage.

Recovery versions, synchronization records, and any original one-time test copy may contain earlier or deleted content. Removing a visible item does not necessarily erase every historical copy. Pausing sync or signing out does not delete your local or cloud data; local notes remain visible on the device, and iCloud sync does not automatically restart.

Optional iCloud sync

If you enable iCloud sync, supported study data is stored in your private iCloud database and synchronized to enabled devices using the same Apple Account. This is not public sharing with other users. Apple processes iCloud data under its own privacy terms.

Turning sync off does not delete local data or copies already in iCloud. Recovery versions and synchronization records may retain earlier or deleted content; deleting a visible item is not necessarily a complete purge of all copies.

Online audio

The app checks an online audio catalog. Recordings and approved offline audio downloads may come from TOTBible.org, Spotify for Creators/Anchor, and their hosting or delivery providers. These requests expose network information, including your IP address and the requested catalog or recording, to those services. Audio can continue loading during background playback.

The providers may process and retain connection or listening information under their own privacy practices. Saved recordings can play offline. Bible reading and bundled study resources do not require streaming.

Website and online service requests

When the app or website connects to account, content-update, audio, or other online services, those services and their hosting providers receive network information such as your IP address and the resource requested. Authentication providers also process sign-in requests under their own privacy policies.

TOTBible.org stores supported notes, bookmarks, highlights, reading progress, and settings in your browser. Clearing website data may remove them. Website search and content requests may send the search phrase, passage, or resource requested to our server. If you choose to enable account sync, supported account study data is also stored in Supabase. Existing browser-only notes remain separate unless you explicitly move or copy them.

Photos, drawings, backups, and sharing

Photos and drawings you add become part of your notebook and may be included in enabled iCloud sync, optional account sync, cloud test copies, and backups. Exports and restorable backups may contain personal study content. When you share a file or notebook, the destination you choose receives that content.

Device backups may contain app data depending on your Apple settings. Removing the app may remove local work but does not necessarily remove iCloud data, device backups, exports, or shared copies.

Your choices and deletion

You may use the app without a TOT account or cloud sync, edit or remove individual saved items, and export backups. Available data-management options depend on your build and sync mode. Read confirmation screens carefully before removing data. Account settings offer deletion of your TOT account and its account-service study data after you confirm your identity and the request. Deletion also disconnects linked Apple sign-in when the required Apple credential is available. An older Apple sign-in may require you to disconnect TOT in your Apple Account settings; the deletion screen explains this if needed. Deleting your TOT account does not delete your Apple or Google account. For account access or deletion assistance, contact cade@abidingplace.org; we will need to verify account ownership. Deleting an original cloud test copy removes that copy, not the account or its separate synced data. Previously exported, shared, iCloud, and device-backup copies must be managed separately.

Support messages and external websites

If you email support or use the contact form, we receive your email address and the information you include, and use it to respond and investigate the issue. Contact-form messages are delivered to our support email. The form uses a temporary session cookie and Cloudflare Turnstile to protect against spam; Cloudflare processes technical request information for that check. We keep short-lived, hashed request identifiers for submission limits. See Cloudflare’s privacy policy. Avoid sending private notes or images unless needed. Independently operated external websites, including linked ministry websites, may use separate cookies, analytics, and privacy practices.

Advertising and analytics

The app does not include advertising or third-party analytics SDKs. This does not mean its external audio host receives no network information.

Policy updates

We may update this policy when the app or its data handling changes. The effective date above identifies the current policy.