This Privacy Policy describes how the NBC Scripture mobile application ("the App") collects, uses, and protects information. The App is developed and maintained by AI Services Group ("AISG," "we," "us") on behalf of Northport Baptist Church ("the Church"). It applies to both the congregation-facing app and the staff/admin content-management functions within it.

By creating an account or using the App, you agree to the practices described in this policy.
 

1. Information We Collect

Account information you provide directly:

• Display name

• Email address

• Password (see Section 3 for how this is stored)

Information generated by using the App:

• Daily scripture-memorization quiz responses and completion status

• Streak and progress history (which days you completed activities, current/longest streak)

• Weekly plan and content interactions (e.g., which content you've viewed)

• Wallpaper downloads

Device information:

• A push notification device token (issued by Apple or Google, described in Section 4), used solely to deliver reminders and content notifications to your device

Staff/admin-only information (if you hold a staff role):

• Content you author or publish through the app (weekly plans, focus scripture, discussion questions, wallpapers) is stored and attributed to your account

We do not collect your location, contacts, photos, or device storage beyond what's needed to save a wallpaper you choose to download.
 

2. How We Use Information

We use the information above to:

• Create and authenticate your account

• Deliver the App's core features (daily verse, weekly plans, streak tracking, wallpapers)

• Send push notifications for weekly reminders and content updates

• Allow church staff to publish and manage content

• Send you a one-time password-reset code by email, if requested

• Maintain the security and integrity of the App (e.g., detecting misuse of authentication)

We do not use your information for advertising, and we do not build behavioral profiles for any purpose beyond the App's stated features.
 

3. How Your Information Is Stored and Secured

• The App's data is stored on a server operated by AISG, using an encrypted (HTTPS/TLS) connection between the App and our servers.

• Passwords are never stored in plain text. They are hashed using bcrypt before storage, and we cannot recover your original password.

• Sign-in uses short-lived access tokens and rotating refresh tokens. Refresh tokens are stored in hashed form and are invalidated after each use, so a stolen token cannot be reused.

• Access to the underlying server and database is restricted to AISG personnel for maintenance and support purposes only.

No method of electronic storage or transmission is 100% secure. We take reasonable, industry-standard measures to protect your information but cannot guarantee absolute security.
 

4. Third-Party Services We Use

We rely on a small number of third-party services to operate core App functionality. These providers process limited data strictly to perform the function described:

Service: Provider: What it receives: Purpose

Push notifications (iOS): Apple (APNs): Device push token: Deliver notifications to iPhone/iPad

Push notifications (Android): Google (FCM): Device push token: Deliver notifications to Android devices

Password-reset email delivery: Microsoft (Microsoft Graph): Your email address and a one-time reset code: Send you the reset code you requested

We do not use third-party analytics, advertising, or tracking SDKs of any kind. No data is sold, rented, or shared with data brokers or advertisers.
 

5. Data Sharing

We do not sell your personal information. We do not share it with third parties except:

• The service providers listed in Section 4, solely to the extent necessary to provide their function

• If required by law, legal process, or to protect the rights, safety, or property of AISG, the Church, or others

• With church staff, in the limited case of content you've authored being attributed to your account within staff-facing screens
   

6. Data Retention

We retain your account and activity data for as long as your account remains active. If you delete your account (Section 7), your personal account data is deleted, with the following exception: if you are a staff/admin user who has published content (weekly plans, daily verses, wallpapers), that content remains available to the congregation after account deletion, but is no longer attributed to your identity.
 

7. Your Rights and Account Deletion

You may delete your account at any time:

• In the App: Go to Profile → Account, and select the account deletion option. You will be asked to re-enter your password to confirm.

• Without the App installed: Submit a deletion request at www.aiservicesgroup.org/nbc-delete-account, and we will process it within 5 business days.

You may also update your display name and email address at any time from within the App's Profile screen.
 

8. Children's Privacy

The App is intended for use by members and staff of Northport Baptist Church, including families. It is not directed specifically at children under 13, and we do not knowingly collect personal information from children under 13 without parental involvement. If you believe a child under 13 has created an account without appropriate parental consent, please contact us at [CONTACT EMAIL] and we will delete the account and associated data.
 

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
 

10. Contact Us

Questions about this policy, or requests regarding your data, can be directed to:

AI Services Group (AISG) [CONTACT EMAIL] [CONTACT ADDRESS, IF REQUIRED FOR YOUR JURISDICTION]

This document is a draft prepared for AISG's use and has not been reviewed by an attorney. Given that this app processes account credentials and is distributed through the App Store and Google Play, we'd recommend a licensed attorney review it before publication — particularly the account-deletion, children's-privacy, and retention sections, since those are the specific clauses both Apple and Google's automated policy checks cross-reference against actual app behavior.


Last updated: 9/8/2026