Privacy notice

Last updated October 10, 2026

Stillwater is a Bible reading and reflection app. This notice explains what the app stores, what becomes public in Community, and which services help it work.

Information in your account

Your browser sends your email address and password to Supabase Auth to create or access an account. Stillwater does not store your password in its account-data table. Supabase stores your account details and login session. The current project setting allows account creation without confirming ownership of the email address, so a mistyped or someone else’s address may be accepted. Password recovery depends on access to the address on the account.

When you use an account, Stillwater stores your notes, saved verses, highlights, reading preferences and progress, profile display name, optional bio and photo, and Little Frogger conversation history. The app keeps a local browser copy so your reading space can open quickly and retain changes during connection problems. This browser copy is not separately encrypted by Stillwater. Signing out does not clear it. On shared devices, clear Stillwater’s site data when you are finished.

What is public in Community

Community posts and replies, the display name attached to them, optional Scripture references, Amen reactions, and their timestamps are visible to anyone who can access the feed. Your email address, profile photo, bio, notes, saved verses, highlights, and Frogger chats are not published with a post. Do not include personal or sensitive information in a public post.

Reports are stored in a separate private database table for the app operator to review. They are not displayed in the public feed. Reports are not monitored continuously.

Services and connection data

• Supabase provides sign-in and account storage. Authenticated account data is restricted by database policies. Community posts are public by design.
• Midvash Bible API supplies translation lists, passages, and the daily verse. A passage or translation request is sent from your browser without your Stillwater account email or password. The API provider and network operators may receive standard connection information such as your IP address and request details.
• jsDelivr delivers the Supabase browser library. Your browser connects to that CDN to load the library.

Little Frogger is a built-in study guide and does not send your prompts to an AI service. When signed in, its chat history is included in your private Stillwater account data.

Retention and deletion

Account data remains in Supabase until the account is deleted. After the account-deletion service is deployed, use Profile → Delete your account to permanently remove the account, synced reading data, and that account’s Community posts and replies. Stillwater also removes the current browser’s account cache. Other devices or browsers may retain local copies until their site data is cleared. Reports associated with a deleted account or deleted post are removed with it.

Contact and launch information

Publisher: Stillwater publisher details must be added before launch.
Privacy contact: Set the publisher’s support email before launch.

Before publishing, the app operator should confirm the statements above against the live Supabase settings, service agreements, hosting provider, and applicable privacy requirements.