Privacy

The whole book, the audiobook, every published Article, and everything published in Watch are open on this site and in the app with no sign-in. Read, listen, or watch from beginning to end and nothing about you reaches an account.

Your own device remembers a few things so you can come back to them: the page you stopped on, where you paused, Day or Night, and Scripture source choices you save. Browser memory clears when you clear that browser's data. Signing out starts clearing the account-linked local copy. Completing account deletion requires confirmed cleanup on the device you are using; if cleanup cannot be confirmed there, POLOE asks you to retry. On iPhone, removing and reinstalling the app does not guarantee that every value in Apple's protected Keychain has been erased.

When the app or site connects, the services carrying it may retain ordinary technical records such as the network address a request came from, an approximate country or region derived from that address, its time, the requested page or service, the operating system or device kind, update checks and downloads, a random app-installation identifier, and technical errors. These records are used to deliver updates, protect the service, diagnose failures, and provide limited aggregate update-usage counts, not for advertising or a behavioral profile.

When you open an account, this is the whole list:

• Your email address, including an Apple private relay address if you chose to hide your email. It is how you sign in and how one person is told from another. There is no password. Signing in sends a six-digit code and a link to that address, good once, for up to an hour.
• Your internal account identifier, the name you choose to show, the date the account was opened, and how you signed in: by email, with Apple, or with Google. A sign-in provider may also return basic profile information, such as a name or profile-image link. The provider identity returns you to the same account. Where Purpose of Life on Earth has the Apple grant needed for later revocation, it is encrypted and held only so deletion can ask Apple to end the sign-in link; an older account may not have one.
• Your places: the page you stopped on in the book, the furthest page you reached, and where you paused in the audiobook, a Stream, a video, or an Article, along with the things you finished.
• Your Private Notes and Bookmarks, with the words you marked. A Note you remove from your Notebook goes out of sight at once, but the account record keeps it, with its edit history, until the account itself is deleted.
• Your Sent Notes, with the history of your edits to them. An unpublished Sent Note is removed when the account is deleted. Published work grown from one remains the publisher's own, without your name.
• Your settings: Day or Night and the notification switches.
• Your notification history, the quiet list of things the app told you.
• If you allow notifications on your phone, the token that lets us reach that phone.
• When POLOE sends a push notification, a separate delivery-queue record may contain your internal account identifier, the notification kind, and its display text while it is delivered and retained for delivery reliability.

On the phone, the app also keeps its own copy of your Notes and Bookmarks in its folder, so they open without a connection. Signing out starts clearing that account-linked copy, and account deletion does not report completion on the current device until its cleanup is confirmed.

POLOE does not ask for payment details, contacts, health information, or precise location, and it does not use your phone's location services or collect your activity in other companies' apps or sites.

POLOE does not use Private Notes for curation or show them to other readers. Access is limited to the automated services that store and return them and to authorized access needed for security, support, legal compliance, or service operation. A Sent Note is read by the one who curates Purpose of Life on Earth while its review is open. No other reader sees either kind of Note. There are no social features here, nothing you write is automatically published, and no one can find you through this site or this app.

• No advertising of any kind.
• No tracking pixels and no tracking across other companies' apps or sites. Limited technical update, usage, and crash information is used only to deliver, secure, and maintain the app.
• Nothing about you is sold, rented, or traded, and nothing is shared for advertising or marketing.
• POLOE does not build an advertising or behavioral profile and does not infer your beliefs from your activity or Notes. It stores Notes only because you choose to save or send them. The purposes on an Article are ours, a way to find things; they say nothing about you.

A few service providers receive or hold limited information so the site and the app can run. The providers working for POLOE receive only what their work requires, use it only to provide or protect the service, and must protect it at least as carefully as described here. Apple and Google also handle sign-in under their own terms when you choose them.

• An account, database, and authentication provider keeps accounts, account data, and sign-in and session security records.
• Transactional-email providers deliver account and security messages.
• Apple and Google handle sign-in only if you choose their sign-in option.
• An app-update and push-notification provider delivers app updates and, if you allow notifications, carries notifications to your phone through the phone platform's notification service. Update checks give the provider the app's operating system, the POLOE project identifier, and a random installation identifier. The provider can aggregate those checks into limited app-usage and reach statistics and may receive technical errors. If notifications are enabled, the provider receives the phone's push token, and it and the platform notification service handle notification content for delivery. POLOE separately keeps the notification history listed above in your account until you dismiss it or delete the account.
• Network, domain, content-delivery, and support-mail providers carry requests, public media, and messages sent to our support address.
• A server-hosting provider supplies the infrastructure the site runs on.

An account keeps what it keeps for as long as the account is open. A sign-in code or link is good once and expires within an hour. Behind the player, the app fetches private media through links that expire within a week and renew themselves; a link you share with someone is an ordinary web address and does not expire. Connection, sign-in, notification-delivery, update, and diagnostic records are kept under the operational settings and policies of the service or queue that handles them. They are used to deliver updates and notifications, secure the service, diagnose failures, and meet legal obligations. Some aggregate, security, audit, or de-identified records may remain longer.

When you delete your account, the POLOE account record and the information linked to it are removed once deletion is confirmed. Three things may remain. A de-identified record that a security event occurred may stay, with the account link, sign-in subject, network address, and device field removed. Technical delivery, update, and security records kept separately from the account may remain under the rule above. A notification delivery record may contain a retired internal identifier and display text, but that identifier no longer points to an active POLOE account. Any published work grown from a Sent Note may remain as the publisher's own, without your name.

Open Account, then Settings. Under MY DATA choose Delete my account, then Delete now. Once deletion is confirmed, it removes your POLOE account record: your email, name, account-linked places, Notes and Bookmarks, settings, notification history, phone token, and the other account information listed above. It also clears the account-linked copy from the device you are holding. The deletion cannot be undone.

Another device may keep its local offline copy until its app or browser completes cleanup, or until you clear that app or browser storage. It is no longer attached to an active POLOE account. Your browser also keeps one small marker so a stale sign-in cannot reopen a deleted account. On the phone, Day or Night remains a setting of the device; in a browser, deletion clears it with the rest.

Apple deletion is handled according to the grant available for that exact account. When Purpose of Life on Earth has the Apple grant needed to do so, deletion asks Apple to end the sign-in link. An older account may require manual removal under Settings, your name, Sign in with Apple. The deletion result says which occurred.

Purpose of Life on Earth does not put a Google access token in its account database. A current token returned with Google sign-in may remain in the signed-in session on your device or browser and is used only to ask Google to revoke access during deletion. It is cleared with the session. If no current token is available, you can remove access at myaccount.google.com/linkedapps.

A page saying exactly this, reachable without signing in, stands at /account/delete on this site. The book itself never needed an account. It stays yours to read.

Accounts are for people thirteen and older, or older where your country's law says so. Reading, listening, and watching need no account and no age. If a younger child has opened an account, a parent can delete it from the Account page in a moment, or write to us and we will remove it.

You can manage the personal features shown in Account and Notebook from inside the app and the site, and you can delete the whole account yourself. Notifications have their own switches, by kind, and your phone's settings can turn them off entirely.

If you live in the European Union, the United Kingdom, or a state with its own privacy law, you have the right to ask what we hold, to correct it, to delete it, and to complain to your supervisory authority. You can do the first three yourself in the app or site, and writing to us works too. In the language of those laws, we keep account data because you asked us for an account, send notifications only with your permission, and keep necessary security, update, and diagnostic records in our legitimate interest in keeping this place safe and working.

If any of this changes, the date at the top changes too, and anything that matters is said in plain words rather than buried.