Privacy Policy
1. About Us
Concora is an AI-powered Bible study and preaching assistance tool operated by Relead Pty Ltd (61688610611), a company registered in Queensland, Australia.
In this Privacy Policy, 'Concora', 'we', 'us', and 'our' refer to Relead Pty Ltd. 'You' and 'your' refer to any person who accesses or uses the Concora application at concora.app.
We are committed to protecting your privacy and handling your personal information responsibly in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. Information We Collect
2.1 Account Information
When you create a Concora account, we collect:
Your email address
A username or display name of your choosing
A hashed password (we never store your password in plain text)
Your profile avatar image, if you choose to upload one
We do not collect your full name, date of birth, phone number, physical address, or any other personal identifying information beyond what is listed above.
2.2 Payment Information
If you subscribe to a paid plan, payment is processed by Stripe, Inc., a third-party payment processor. We do not collect, store, or have access to your credit card number, bank account details, or any other full payment card information.
We store only the following Stripe-provided identifiers in our database for subscription management purposes:
Your Stripe customer ID
Your Stripe subscription ID
Your subscription status (e.g. trialing, active, canceled)
Your current billing period end date
2.3 Audio and Transcript Data
Concora listens via your device microphone during an active session. All audio processing occurs entirely within your browser using the native Web Speech API — a built-in browser capability provided by your device's operating system. No audio data is ever transmitted to Concora's servers or any third party.
The only data that leaves your device is the transcript text produced from your speech. This transcript text is sent to the Anthropic Claude API for the purpose of identifying and surfacing relevant Bible passages. Transcript text is processed in real time and is not stored by us at any point.
2.4 Session History
If you choose to save a session after use, the following data is stored locally on your device using your browser's localStorage:
The Bible verse references surfaced during your session
The verse text in your selected translation
The mode used (Context, Quote, or Concordance)
A timestamp for each result
Session history is stored on your device only. It is never transmitted to or stored on our servers. It is not available across multiple devices. It will be lost if you clear your browser data. Session history is capped at 50 saved sessions per user.
2.5 Usage and Technical Data
We may collect limited technical information necessary to operate the service, including:
Authentication events (sign in, sign out, password reset)
Subscription lifecycle events (trial start, plan change, cancellation)
Error logs where required for diagnosing service issues
We do not use analytics tracking tools, advertising pixels, or behavioural tracking technologies on our platform.
2.6 Organisation Account Data (Ministry Tier)
If you are on a Ministry plan, we collect additional information necessary to manage your organisation:
The name of your organisation
The email addresses of users you invite to your organisation
The status of each invitation (pending, accepted, expired)
The association between sub-user accounts and your organisation
3. How We Use Your Information
We use the information we collect solely for the following purposes:
To create and manage your Concora account
To provide, operate, and maintain the Concora application
To process your subscription payments through Stripe
To send you transactional emails (account confirmation, password reset, subscription notices, invitation emails)
To manage Ministry tier organisation memberships and invitations
To diagnose and resolve technical issues
To comply with our legal obligations
We do not use your data for advertising purposes. We do not sell, rent, or trade your personal information to any third party. We do not use your data to train AI models.
4. Third-Party Services
Concora uses the following third-party service providers to operate the application. Each provider processes data only as necessary to perform their specific function:
4.1 Supabase
Supabase provides our authentication system and database infrastructure. Your account information (email, hashed password, username) and subscription data are stored in a Supabase-hosted database. Supabase is SOC 2 Type II certified. Data is stored in AWS data centres. For more information, see supabase.com/privacy.
4.2 Anthropic
Anthropic provides the Claude AI API used to analyse transcript text and surface relevant Bible passages. Transcript text from your active session is sent to Anthropic's API for real-time processing. Anthropic does not use API inputs to train its models by default under its API usage policy. For more information, see anthropic.com/privacy.
4.3 Stripe
Stripe processes all subscription payments. Stripe collects and stores your payment card details directly and is PCI DSS Level 1 certified. We do not handle your payment card data. For more information, see stripe.com/privacy.
4.4 Resend
Resend provides transactional email delivery for account-related emails including signup confirmation, password reset, invitation, and subscription notices. Your email address is shared with Resend for the sole purpose of delivering these emails. For more information, see resend.com/privacy.
4.5 Cloudflare
Cloudflare provides DNS and network security services. Cloudflare may process connection metadata as part of standard network operations. For more information, see cloudflare.com/privacypolicy.
4.6 Vercel
Vercel hosts the Concora web application. Standard web server logs may be retained by Vercel as part of their infrastructure operations. For more information, see vercel.com/legal/privacy-policy.
4.7 BollsLlife
BollsLife provides the Bible verse text API used to retrieve and display scripture passages in your selected translation. When you request a verse or passage within the app, the verse reference is sent to the BollsLife API to retrieve the corresponding text. No personal information is transmitted to BollsLife — only the verse reference (e.g. 'John 3:16') and translation identifier. For more information, see bolls.life.
5. Data Storage and Security
Your account data is stored in Supabase-hosted databases with the following protections:
Row Level Security (RLS) policies ensure each user can only access their own data
All data is transmitted over HTTPS using TLS encryption
Passwords are hashed and never stored in plain text
Authentication is managed through Supabase Auth with JWT-based session tokens
Session history is stored in your browser's localStorage on your own device. We have no access to this data and cannot recover it if lost.
While we take reasonable steps to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal data for as long as your account remains active. If you delete your account, your profile information, subscription records, and organisation associations are permanently deleted from our database. Deletion is processed immediately upon request.
Stripe may retain billing records for their own legal and compliance purposes in accordance with their privacy policy.
Session history stored in your browser is retained until you clear your browser data or it is displaced by newer sessions (capped at 50 sessions).
7. Your Rights
Under the Australian Privacy Act 1988 (Cth) and applicable privacy laws, you have the following rights:
Access: You may request a copy of the personal information we hold about you
Correction: You may request that we correct inaccurate or incomplete information
Deletion: You may delete your account at any time from within the app, which permanently removes your data from our systems
Portability: You may request a copy of your data in a portable format
Complaint: You have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au
To exercise any of these rights, contact us at [email protected].
8. Children's Privacy
Concora is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child under 13 has created an account, please contact us at [email protected].
9. International Users
Concora is operated from Queensland, Australia. If you access Concora from outside Australia, your information may be transferred to and processed in Australia and in the countries where our third-party providers operate (including the United States). By using Concora, you consent to this transfer.
If you are located in the European Economic Area (EEA), the United Kingdom, or other regions with data protection laws, you may have additional rights. Please contact us at [email protected] for further information.
10. Cookies and Local Storage
Concora uses browser localStorage to store your session history and authentication state on your device. We do not use third-party advertising cookies or cross-site tracking technologies.
Your browser may also store session cookies required for authentication. These are strictly necessary for the application to function and cannot be disabled without affecting your ability to use the service.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this document and notify you by email if the changes are material. Your continued use of Concora after any changes constitutes your acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:
Relead Pty Ltd
Trading as Concora
Queensland, Australia
Email: [email protected]
Website: concora.app