Effective Date: June 18, 2026 · Last Updated: June 18, 2026
Footsteps is operated by PassageLab LLC. We are the "data controller" for the personal information described in this policy.
Contact us: info@biblefootsteps.com
| Data | Why We Collect It | Retained Until |
|---|---|---|
| Email address | Account creation, login, and account-related communications | Account deletion |
| Password (hashed) | Authentication — we never store your actual password | Account deletion |
| Display name | Personalized experience within the app | Account deletion |
| Child profile name and age | Distinguishing child profiles; age-appropriate content routing | Profile or account deletion |
| Avatar selection | Visual personalization of profiles | Profile or account deletion |
| Data | Why We Collect It | Retained Until |
|---|---|---|
| Reading progress (which stories have been read) | Tracking journey completion and awarding badges | Profile or account deletion |
| Badge history | Celebrating milestones and motivating continued reading | Profile or account deletion |
| Quiz results | Awarding mastery badges; not stored long-term | Session only (not persisted) |
| Session activity timestamps | Concurrent session enforcement (up to 4 per account) | 30 days rolling |
Footsteps is designed for families with children. We take our obligations under the Children's Online Privacy Protection Act (COPPA) seriously.
Children do not create their own accounts. Only adults (18+) may create a Footsteps account. A parent or guardian creates child profiles from within their parent account. By creating a child profile, the parent provides verifiable parental consent for the limited data collection associated with that profile.
For child profiles, we collect only: a display name (which need not be the child's real name), an optional age, an avatar emoji selection, reading progress (story IDs completed), and badge history. We do not collect email addresses, phone numbers, or any identifying information directly from or about children.
As the parent or guardian, you have the right to:
To exercise any of these rights, contact us at info@biblefootsteps.com. We will respond within 5 business days.
We use the information we collect exclusively to:
We do not use your data for advertising, do not share it with advertising networks, and do not build behavioral profiles for any commercial purpose.
We use a small number of third-party services to operate Footsteps. Each is chosen carefully:
Supabase (database and authentication) — stores your account data, child profiles, reading progress, and manages authentication sessions. Data is stored on servers in the United States. Supabase's privacy policy: supabase.com/privacy
GitHub Pages (web hosting) — serves the Footsteps web application. GitHub may collect standard server logs (IP addresses, user agents) as part of hosting. GitHub's privacy policy: GitHub Privacy Statement
We do not use Google Analytics, Facebook Pixel, or any advertising or behavioral tracking tools.
We take reasonable technical and organizational measures to protect your information:
No system is perfectly secure. In the event of a data breach that affects your personal information, we will notify you by email within 72 hours of discovery, as required by applicable law.
You can view and update your display name, avatar, and account details from your Account page at any time.
You may request deletion of your account and all associated data at any time by emailing info@biblefootsteps.com with the subject line "Delete My Account." We will process your request within 10 business days.
We send transactional emails only (account confirmation, password reset). We do not send marketing emails unless you explicitly opt in. You can unsubscribe from any email using the link at the bottom of the message.
If you are a California resident, you have the right to know what personal information we collect, the right to delete it, and the right to opt out of the "sale" of your personal information. We do not sell personal information. To exercise your rights, contact us at info@biblefootsteps.com.
Footsteps uses browser localStorage (not cookies) to store your session state and reading progress locally on your device. This allows the app to function without requiring a network request for every interaction. We do not use third-party cookies or tracking cookies of any kind.
You can clear your local storage at any time through your browser settings. If you do, your local progress will be lost, though progress synced to your account will be preserved.
We retain your personal information for as long as your account is active or as needed to provide the service. If you delete your account, we will delete or anonymize your personal information within 30 days.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last Updated" date at the top of this page. Your continued use of Footsteps after the effective date of the revised policy constitutes your acceptance of the changes.
For privacy questions, data requests, or concerns about how we handle your information:
PassageLab LLC — Privacy
Tulsa, Oklahoma
info@biblefootsteps.com
We aim to respond to all privacy inquiries within 5 business days.