Privacy, in plain language.
Last updated September 14, 2026
Bible Miles turns your activity distance into a scripture reference and, with your permission, appends Scripture to your Strava description.
Gift memberships
For gifts, we store payment references, the purchaser’s account association, an encrypted gift code and its verification hash, and redemption dates and account association. Buyers can see whether their gift was redeemed, but not the recipient’s account details. Account deletion removes the account association from gift records; payment references and gift records remain so shared gifts can be honored and refunds handled. Deleting the recipient’s account removes that account’s gifted access and does not make a used gift redeemable again.
If a buyer chooses to email a gift, we use the supplied recipient address and optional sender name to send that gift through Resend. We encrypt the saved email content and recipient address, and keep delivery references to prevent duplicate sends and show the buyer where they sent it. These delivery records remain while the buyer’s account is open and are removed when that account is deleted. Receiving a gift email does not create an account or enroll the recipient in marketing emails.
What we collect
When you sign up, we use your email address and an account identifier to manage your account. We store your verse preferences, including your selected scripture collection and Bible translation, and membership status. If you connect Strava, we store your athlete identifier and encrypted authorization tokens so we can process activities when you are away.
For new activities, we read the distance, activity type, description, and ownership details needed to choose and append a verse. Strava’s response may contain other activity information; we do not store route coordinates, heart rate, photos, or an activity archive. We retain a short processing record containing the activity identifier, distance, selected verse, and result for up to seven days.
The operator can view account and billing details to provide support. Support actions record a brief reason, payment or internal record references, and the outcome. Completed action records are kept for up to one year; unresolved requests remain until reviewed. Account deletion removes the account association from these records.
What changes on Strava
We append a verse to eligible new activities after you connect. Your existing description is preserved, and we do not change activity visibility. The permissions you grant include private activities, whose descriptions remain subject to your Strava privacy settings. Your followers may see verses on activities you share with them.
Who processes your information
Supabase provides authentication and database storage. Resend delivers account emails and optional gift emails using the destination email address and message content. Our hosting provider runs the application and its background processor. Stripe handles subscriptions, billing, and payment details; Bible Miles does not receive or store your card number. If you use an optional Buy Me a Coffee link, that service processes your contribution under its own policy.
Strava may monitor API usage and use usage information for purposes described in its API agreement, including operating and improving its services. Service providers may process information in countries other than your own.
Public activity examples
The homepage includes a small set of approved example distances and verses. These examples are stored separately from account activity records and remain until replaced or removed. The example cards do not load Strava embeds or show athlete identities, maps, or activity links.
Cookies and tracking
We use essential cookies to keep you signed in and verify your Strava connection. When you open a gift link, your browser temporarily stores its private code for up to one hour to carry it through sign-in. Redeeming the gift or clearing the code removes that copy; the gift itself does not expire. We do not sell your data, run advertising trackers, or send your Strava information to an AI service. The public verse explorer works without an account.
Retention and your choices
Activity processing records are automatically removed after seven days. Account preferences and billing status remain while your account is open. Disconnecting Strava removes its stored connection and activity records, and stops automation. Deleting your account also cancels your membership and removes your account records. Existing verses in your Strava descriptions stay on Strava; you can edit them there.
You can pause automation, export your account data, disconnect Strava, manage billing, or delete your account in your dashboard. Payment providers may retain transaction records where legally required. Hosting and database backups follow the operator’s retention schedule and are not used as an activity archive.
Contact and requests
For privacy questions or an access, correction, or deletion request, email [email protected]. You may also have rights under the privacy laws where you live, including a right to contact your local data protection authority.