Privacy Policy
I am Dat Vu, an independent developer, and I make Nox Bible on my own. This policy explains, in plain terms, what the app does with information. It covers the iOS and the Android version, which behave the same way except where this page says otherwise.
The short version
Nox Bible is a Bible reader. Every translation in it ships inside the app, so reading, searching, highlighting, writing notes and keeping a streak all work offline and without an account. What you create stays on your phone.
- No account is needed, and none is made for you. Signing in with Google or Apple is optional and does one thing: it copies your library to a server so it follows you to another device.
- No ads, no analytics, no tracking. There is no advertising SDK, no analytics SDK and no crash-reporting SDK in the app, and it never asks to track you.
- Nothing to buy. There are no in-app purchases and no subscriptions.
If you never sign in, nothing you do in the app leaves your device.
What stays on your device
Two databases live in the app's own storage:
- The Bible text, read-only, the same for everyone. It is part of the app, not information about you.
- Your library: the verses you have marked and with which marker style, your notes (their text, tags and the verses they are attached to), your bookmarks, and your reading log — for each day, how many verses and chapters you read and whether the day counted towards your streak, together with the chapters already counted that day so none is counted twice.
Your settings sit beside them: theme, text size, interface language, the translation you are reading, the chapter you were last on, the widget's theme, and the reading reminder — whether it is on, its time and how often it repeats.
If you add the home-screen widget, the app lays out the coming days' passages in storage the widget shares with the app on your phone, so the widget can show them without the network. If you turn on the reading reminder, its notifications are scheduled on your phone by the phone itself; no server sends them, and nothing about them leaves the device.
While you are signed out I never receive any of it. Deleting the app removes all of it the way your phone normally does.
The account, if you create one
How it starts
It starts when you tap Continue with Google or Continue with Apple (Apple is offered on iPhone and iPad only), and not before. Until then no account of any kind exists for you and no request is made about you.
What the sign-in creates
The app trades the credential your provider hands back for a session on Google Firebase Authentication, in a project I control. Firebase then holds an account record for you: a user id it generated, which provider you used, and whatever that provider passed along — typically the email address and the display name on your Google or Apple account, and the profile picture address on a Google account. I can see that record in the Firebase console. The app shows your name and email on the account card in the You tab so you can tell which account you are in.
With Sign in with Apple you can choose Hide My Email in Apple's own sheet; the address Firebase records is then Apple's relay address rather than your real one.
What is synced
Once you are signed in, your library is mirrored to Cloud Firestore, under users/<your user id>, where only you can read or write it:
| What | What is stored |
|---|---|
| Marks | The verse, the translation it was marked in, and the marker style. |
| Notes | The text you wrote, its tags, the verses it is attached to, and the translation. |
| Bookmarks | The verse, its label (such as “John 3:16”) and the translation. |
| Reading log | For each day you read: the date, how many verses and chapters, whether the day counted, the time it counted and your time-zone offset (so a day is judged by your own midnight, not the server's). |
| Settings | Theme, interface language, text size and translation. |
| Reading position | The book and chapter you were last on. |
Each record also carries when it was last changed and when the server received it, which is how two devices agree on which copy is newer. A deleted mark, note or bookmark is kept as a small “deleted” marker so the deletion reaches your other devices too.
Your notes are private. Nobody else can read them — not other readers, and there is no feature that publishes them. I can technically see the database as its administrator; I do not read it, and I would only open an individual record if you asked me to fix something in it.
Signing out
When you sign out, the app asks whether to keep your library on this device or remove it from this device. Either way the synced copy stays in your account, ready for the next sign-in. If some changes had not reached the server yet, the app tells you how many before you choose.
Deleting the account
You tab ▸ account card ▸ Delete account asks your provider to confirm it is you, then deletes every synced record listed above from the server and deletes the Firebase account itself. The library on the phone you did it from is kept, as a signed-out library, so you do not lose your notes by deleting the account. See how to delete your account, including by email if you no longer have the app.
Sharing and copying
A share card is drawn on your device and handed to your phone's own share sheet; where it goes from there is your choice and the receiving app's business. Copying a verse puts its text and reference on your clipboard. The app does not upload either. If you choose Save Image in the share sheet, your phone asks once whether Nox Bible may add images to your photo library; that permission lets it add the card, not see your photos.
If you email me
If you write to me for support, I process what you send — your email address, device and app details, screenshots and your message — to answer you and to look into problems. I keep support emails for 12 months unless I have a legal or security reason to keep them longer.
What the app never asks for
Nox Bible does not ask for your contacts, location, camera, microphone, health data, or payment details, never reads your photos, and has no password of its own. It asks for two things, and only when you use the feature that needs them: permission to send notifications, when you turn on the reading reminder; and, on iPhone and iPad, permission to add a share card to your photo library, when you save one there. On Android the app also declares internet access, which sync needs, and permission to run at start-up and to wake the phone briefly, so a scheduled reminder still comes after a restart.
Why I process this, and on what basis
- The account and sync: because you signed in. That is your consent, and deleting the account withdraws it.
- Support email: to answer the request you made of me.
Who else is involved
- Google — Firebase Authentication and Cloud Firestore, for the account and sync; and Google Sign-In if you choose it.
- Apple — Sign in with Apple if you choose it.
- Apple App Store and Google Play — app distribution.
I do not sell personal information, and I do not share it for advertising.
Where the data goes
Firebase is operated by Google and may process information on servers outside the country you live in, under Google's own terms and transfer protections. I hold no separate database of my own.
Security
Your library sits in the app's own sandboxed storage, which your phone protects along with the rest of the device. Everything that leaves the app travels over HTTPS. The server's rules let a signed-in reader read and write only their own records, check the shape and size of every write, refuse to let an older copy overwrite a newer one, and refuse every other path in the database outright. No method of storage or transmission is completely secure, and I will not pretend otherwise.
Children
Nox Bible is a general-audience app and is not directed at children. It has no ads, no public profile and nothing that other people can see, and I do not knowingly collect personal information from children below the minimum digital-consent age in their country. If you believe a child has created an account, email me and I will delete it.
Your choices
- Read signed out — that is how the app arrives. Everything but sync works.
- Sign out at any time, and choose whether to keep your library on the device.
- Delete the account and everything synced to it from the You tab, or by email.
- Delete the app to remove everything held on the device.
- Email me with a question, a request for a copy of your data, or a complaint about any of this.
- Complain to your local data-protection authority if you are in a country that has one.
Changes
I will update this page when the app, its providers or the law changes, and the new effective date will appear at the top.
Contact
Dat Vu
Ho Chi Minh City, Vietnam
datvu.meo@gmail.com