Privacy Policy

Stabil Systems website

Last updated 23 October 2026

What we collect, and why

• Contact form (/contact). Your name, email, what your message is about, your church or organization (optional), your message, and a reference number the page creates. We use it to reply to you. The page also emails you a copy of what you sent.
• Updates sign-up (on the home, Mission and Give pages). Your email address and the page you signed up from. We use it to send a few emails a year about what we are building, starting with a welcome email. To stop them, reply to any of our emails and we will take you off the list.
• Your Crew Plan Session (/plan). What you tell us so we can prepare your call and write your plan:
  • your name, role, email, phone (optional), organization name, type and size, website (optional), and city and state;
  • your organization's agreement with our Statement of Faith;
  • the workflows and tools you pick, your goals and notes, any time and cost figures you choose to share, and any file you choose to upload.
  • If you picked workflows on the Your Crew catalog page, your browser remembered them and fills them in here.
  • When you finish the Review step, your answers are sent to us, before you pick a time, so we can help if the scheduler doesn't load.
  • The call is free, so nothing is paid on this page. If you later choose the written plan and pay its invoice through PayPal, PayPal tells us the amount, the payment status and the email address on your PayPal account, and we add them to your record.
  • After you book, Calendly tells us about the booking, and we add a link to it to your record.
  • We email you a copy of your answers.
• Custom quote requests (Multiple roles on /plan). The same kinds of details. We use them to price your planning session and send your quote and invoice.
• Paying an invoice (/pay) or giving (/give). These buttons open PayPal's own pages, and our pages collect nothing for them. PayPal tells us the amount, your name and email, and any note you add, so we can match your payment.
• Visiting any page. As with any website, our web server receives your IP address, the page you asked for, your browser type and the time, and records them in standard server logs. We use those logs only to keep the site running and secure, and keep them for up to 30 days.

Services that help run the site

We use a small number of outside services. Each receives only what it needs for its part, and each has its own privacy policy.

• FormSubmit (formsubmit.co) delivers what you send through our forms to our email inbox.
• Microsoft 365 hosts our email and runs the automated step that sends your confirmation emails. Plan Session calls take place on Microsoft Teams.
• Calendly runs the scheduler at the Book your call step of the Plan Session. It loads only at that step, with your name and email already filled in, and it emails your calendar invite.
• PayPal processes invoice payments, including the invoice for a written plan, and gifts. Its checkout opens on PayPal's own pages, and it does not load on the Plan Session page. Stabil never sees or stores your card number.
• Google Fonts. Most pages load their typefaces from Google's font servers, which receive your IP address and browser details when a page opens.
• YouTube. Videos on our Engraved and Your Crew pages play from YouTube's privacy-enhanced mode (youtube-nocookie.com). The Engraved page loads its video as you scroll to it. The Your Crew page loads video preview images from YouTube when the page opens, and loads a video only when you press play.
• Code and icon libraries. Our CampOS system map loads an icon font from cdnjs (Cloudflare). The Yonder and Greatest Generations pages load page code from unpkg.com.
• Cloudflare Web Analytics counts visits to this site in aggregate. It is described under Cookies, analytics and tracking below.
• Google Search Console shows us which searches bring people to the site. It relies on Google's own search data and adds nothing to these pages.
• Hosting. This site is served from Amazon Web Services.

When you follow a link to another site (an app store, social media, or our OneDrive slide template), that site's own policy applies.

Cookies, analytics and tracking

To know how many people visit the website and which pages they read, we count visits in aggregate with Cloudflare Web Analytics. It sets no cookies, stores nothing on your device, and does not follow you to other sites. It records the page you opened, the site that sent you, your country, and your device and browser type, and we see only totals. If your browser sends Do Not Track or Global Privacy Control, it does not load at all. The Engraved app has no analytics of any kind.

This site has no advertising pixels and no session recording, and Stabil sets no cookies. Your browser keeps two small preferences on your own device: the Your Crew workflows you pick in the catalog, and whether the Your Crew panel on the home page is open. They stay in your browser until you clear its storage. When an outside service loads (PayPal, Calendly or YouTube), it may set its own cookies, as its own policy explains.

Who sees it

Stabil's team, including the Solution Architect on your session, and the services listed above, for their part only. We do not sell or rent personal information, and we do not share it with advertisers or data brokers. We would disclose information only if the law requires it.

How long we keep it

• Messages, Plan Session details and quote requests: while we are working with you, then up to 3 years.
• The updates list: until you ask to come off it.
• Payment records: as long as tax and accounting rules require, usually 7 years.
• Server logs: up to 30 days.

Your choices and requests

Email help@stabilsystems.com to see, correct or delete what we hold about you, or to come off the updates list. We will answer within 30 days. We may keep payment records the law requires us to keep. PayPal, Calendly and Microsoft also hold their own copies, which their tools let you manage. Forms are sent over an encrypted connection (HTTPS), but no system is perfectly secure, so please don't send passwords, card numbers or sensitive pastoral-care details through a form.

Children

This website is for churches, ministries and the adults who serve in them. It is not directed to children, and we do not knowingly collect personal information from children under 13 through it. If you believe a child has sent us information through this site, email help@stabilsystems.com and we will delete it. The Engraved app has its own rules for children, described below.

Changes and contact

If this part changes, we will post the new version here with a new date.

Stabil Systems LLC
331 Bethaven Dr, Spring City, TN 37381
730-226-9136
Privacy and general questions: help@stabilsystems.com
Plan Sessions, quotes and billing: solutions@stabilsystems.com

Engraved Privacy Policy

Last updated 10 October 2026

What Engraved stores, and where

Everything below is kept only on your device, in the app's local storage and in the operating system's own preference store (Preferences on iOS, SharedPreferences on Android). Two exceptions are yours to turn on. A list you choose to share publicly is described under "List sharing." A church or ministry group you choose to join is described under "Church and ministry groups." We do not hold a copy of your personal library, your voice, or your progress outside a group you joined.

• The verses you are learning and your progress through them: the spaced-repetition schedule, review history, streak, and the collections and lists you build.
• Your preferences: translation, reminder time, memory method, display and voice settings.
• Family Profiles, if you use them. Each person's progress is stored separately on the same device. Profiles are local; they are not accounts and nothing about them is sent anywhere.
• Cached verse text for translations you have opened, so the app works offline.

Deleting the app removes what is on the device. You can also clear practice data at any time from Settings, Reset all progress. That reset does not by itself delete a church group's copy of your group progress. Leave the group, or delete the church account, to do that.

Your voice

Engraved listens while you recite so it can follow along word by word. This matters enough to state plainly:

You can decline microphone access and keep using Engraved; recitation can be typed instead.

Network requests

Engraved makes a network request in three situations: fetching the text of a licensed Bible translation, sharing or loading a list by code when you choose to (see "List sharing"), and signing in and sending group progress when you choose to join a church or ministry group (see "Church and ministry groups"). The King James Version and the World English Bible ship inside the app and need no connection at all.

If you choose a licensed translation (ESV, NLT, NKJV, NASB, NIV or CSB), that verse text is fetched from one of our Bible text providers, the NLT API from Tyndale House Publishers (api.nlt.to), API.Bible (American Bible Society), Crossway's ESV API (api.esv.org), and, on mobile devices for some translations, the YouVersion Platform, through a small proxy of ours, and then cached on your device for offline use. Those requests carry the Bible and verse identifiers being fetched and, as with any web request, your device's IP address reaches our proxy. They carry no name, no account, no progress and no identifier of you, because the app has none to send. You are never asked to sign in to any provider, and no provider account is created for you.

The proxy is a lightweight Cloudflare Worker that exists solely to keep our NLT API, API.Bible, ESV API and YouVersion keys off your device. It does not log request contents to build any profile of you.

The Bible publishers whose translations you read require us to report basic, aggregated usage statistics, such as which translations and passages are opened, so they can see how their texts are used. These reports are anonymous and aggregated and contain no name, account or identifier of you.

Church-group sign-in and progress use a separate service from that proxy. The email and name you enter for a group are not attached to Bible-text fetches.

List sharing

Engraved lets you share one of your own lists so others can load it. It is entirely opt-in, and it is off on Kids Mode profiles. It is separate from church groups.

• What is shared. Only the list's name and its verse references (for example, "Romans 3:23"). Never your progress, your voice, your other lists, your device, or any identifier of you. The app has none to send.
• How it works. When you tap Share and confirm, the name and references are sent to a small database of ours (a Cloudflare D1 store) and given a random 6-letter code. Anyone with that code can load that list. Codes expire after about one year. Before a code is created you see a notice that the name and references become public, and confirm you are 18 or older. That confirmation is your statement. We do not check identity documents.
• It is public, so treat the name as public. Shared list names are screened for obscenity and rejected if they fail, and we ask you not to put private or personal information in a name.
• Reporting. If you load a shared list you find objectionable, a "Report this shared list" link emails us the code so we can remove it.
• Abuse prevention. To stop spam, we limit how many lists one internet connection can share in a short window. To do this we briefly use your connection's IP address, stored only as a one-way salted hash (never the raw address) and discarded after it ages out. It is used solely to rate-limit sharing, never to identify, profile, or track you.
• Taking a shared list down. Contact us at help@stabilsystems.com with the code and we will remove it; it also stops resolving automatically when it expires.

List sharing remains on Cloudflare. It is not the church-group database.

Church and ministry groups

A church, camp, or kids club that uses Engraved Organizations can invite you to memorize a set of verses together. This is optional and separate from list sharing. List sharing stays off on Kids Mode. Children join through a parent, as described below.

• What you sign in with. You join with your email address and the group's join code (the short code printed beside its QR code), then answer one question, "I am 18 or older". The number follows the organization's setting: an organization may raise it as high as 21, never lower it below 18. An adult then chooses a password, and we email a six-digit code to confirm the address first. We store that email, a one-way hash of the password, the name you choose to show your organization, and a record that you joined that group. After that, a six-digit email code is only for invites and recovery, not everyday sign-in.
• Children, added by a parent. The main way a child joins is from a parent's own account, under Family. Adding children is voluntary, and a parent never has to add any. When a parent adds a child, we store the child's first name and link the child to that parent's account. The form has a box, checked by default, that says the child's information will be shared with the group and organization the parent is linked to. Leaving it checked is the parent's consent for that one organization, and we record when and by which parent. If the parent unchecks it, the child stays in the family account only: on no roster, in no totals, and never checked off. A parent can turn sharing with an organization on or off later, for each child. Turning it off removes the child from that organization's rosters and totals, and deletes that child's progress and check-offs held for that organization. We keep a dated record of every on and off choice, so the parent's consent can be shown later. A parent may give a child a login on the parent's own device. The child gets no email address and no password of their own on our server, and the parent can turn that login off at any time.
• Children who try to join on their own. If someone who is not old enough tries to join with a code, we ask only for their own sign-in email and a parent's email. We do not ask for a name, a password, or any progress, and the child does not join anything yet. We email the parent, and nothing else happens until the parent confirms. If the parent does not confirm within 14 days, we delete both email addresses. This is the slower path; the page says "Ask a parent to add you from their account — it's faster."
• Children added by the organization, with no login. A church may add a child to a group roster with a parent's name and email, for example a child with no phone. Such a child has no login: a leader checks off the verses the child recites in person. We email the parent, who can confirm or add the child to their own family account. Until a parent does, nothing is checked off for that child. The parent's contact details are visible only to that child's leaders and your church's admins.
• Paper consent. If a parent signs a paper consent form instead, a church director or admin records the name on the form, the date it was signed, and who recorded it. Group leaders cannot. That record counts as the parent's consent for that organization.
• A confirmation is still not an identity check. We do not claim to verify age or family relationship. A guardian email stored on a child, with no login of its own, is not an account and is not a billed seat. A billed seat is a person with a login. Kids Mode on the phone is the child join path, not a wall that hides Join.
• What progress we store. For verses in that group only, we store whether you have opened the verse and whether you have engraved it, and when. We do not receive your voice, a transcript, your other verses, your streaks, your family profiles, or the detailed schedule the app keeps on your device.
• Who sees it. Admins and group leaders of that organization see your name, your email, and that progress. Other members do not. Stabil sees it to run the service. We do not sell it.
• Email. We email invites, password-setup links, sign-in codes (organization leaders get one each time they sign in), and recovery codes. If you leave reminders on, we email you reminders about that group. Admins can receive a progress digest. Reminder and digest mail has an unsubscribe link. Codes are sent only when you sign in or ask for one.
• How long. We keep group progress while you are a member. If you leave, are removed, or delete your group account, we delete that progress. A closed group is kept for up to 24 months so the organization can export it, then deleted. Codes and reset tokens are discarded when they expire. We do not keep the body of old emails.
• The organization's role. The organization decides who is invited and what the group is memorizing. Stabil hosts the group for them. To review or delete what an organization holds, leave the group in the app or write to help@stabilsystems.com.
• Voice. Unchanged. Recognition stays on your device. No audio is uploaded.
• Where it is hosted. The group database runs on Amazon Lightsail (Amazon Web Services). Those emails are sent with Amazon SES. Cloudflare remains the host for the Bible-text proxy and for list sharing, not for this group database.
• Payment. Members do not pay in the app. An organization admin who chooses a paid seat bucket pays Stabil through PayPal Subscriptions. PayPal processes that payment. We store the organization's plan, seat cap, billing status, current period end, and PayPal subscription id, and the sales-tax rate applied to the subscription, not members' PayPal credentials. PayPal's own privacy policy covers the payment account the admin uses. When an admin subscribes or changes the plan, we record which admin accepted the Engraved Organizations Terms, the version, and when (not their IP address). We email the organization's admins when a subscription starts, changes, or is cancelled. Organizations of 1,000 or more people write to solutions@stabilsystems.com instead of checking out.
• Tax exemption. If an organization's admin tells us the organization is exempt from sales tax, we collect the exemption certificate they upload (a PDF or image, which may show the name and signature of the person who signed it), the issuing state, the certificate number, and, if they give them, the organization's EIN and the certificate's expiry date, along with which admin sent it and when. We store the file privately on the group server, never at a public web address. Only Stabil staff who review certificates, and that organization's own admins, can open it, and each time it is opened is logged. We use it only to decide whether to charge sales tax and to keep tax records. We do not share it, except with tax authorities or our accountants when the law requires it. We keep a certificate we approved for four years after it stops applying (for example, after it expires or is replaced), because state tax audits look back that far, and then delete it. That holds even if the organization asks us to delete its account, unless the law requires otherwise. A certificate we could not approve is kept for one year. One that is replaced before we review it is deleted.

An adult joining confirms they are 18 or older, or older still if their organization set a higher age, up to 21. That confirmation is their statement. A child is added by a parent instead. We do not check identity documents, and we do not claim to verify age.

Notifications

If you turn on reminders, Engraved schedules local notifications on your device at the times you choose. No push server is involved and no notification data leaves your device. A church-group reminder email, if you leave that option on, is separate from these on-device notifications and is described under "Church and ministry groups."

What Engraved does not do

• No account is required to memorize Scripture. If you join a church or ministry group, we collect the email and name you enter for that group, as described below. No advertising, and no data shared with advertisers or data brokers.
• No analytics, telemetry, crash-reporting or attribution SDKs.
• No location, contacts, photos, calendar or health data; the app never requests them.
• No selling of information, under any definition. What can leave your device is a list you deliberately publish with a share code (its name and verse references), and, if you join a church or ministry group, the email, name, and group progress described under "Church and ministry groups."

Children's privacy

Engraved is suitable for families and is often used by children. Memorizing Scripture on the device does not require an account. List sharing stays off on Kids Mode. A child takes part in a church, camp, or club group through a parent. A parent adds the child from their own account, and adding the child with sharing on is that parent's consent for that one organization. Or the organization adds the child and a parent confirms by email or on a signed paper form. We store the parent's email (and an optional name, and a phone number if the organization gives us one) with the child's group membership, so the organization can reach a grown-up. Only that child's leaders and the organization's admins see those details. We do not knowingly collect a child's personal information except as needed to run that group for the organization that invited them. We do not use it for advertising. Before any of the child's practice progress is stored for an organization, a parent must consent for that organization. Consent for one church or camp does not cover another, and a parent can withdraw it later from their account. If a child tries to join without a parent, we keep only the child's sign-in email and the parent's email until the parent confirms, and delete both after 14 days if no one does. We do not check identity documents, and an email confirmation is not a verified identity; the organization remains responsible for how it invites children. Passive guardian addresses without a login are not billed seats. Family Profiles remain on the device.

Your choices

• Microphone. Grant or revoke at any time in your device settings; typed recitation remains available.
• Notifications. Turn reminders off in the app or in your device settings.
• Shared lists. Sharing is entirely opt-in. To take a shared list down, email us the code and we will remove it; it also expires on its own after about a year.
• Church groups. Joining is optional. You can leave a group in the app, which deletes that group's progress from our server, or delete the email account we hold for groups. You can also email help@stabilsystems.com. Resetting practice data on your device does not by itself delete the church copy; leave or delete does.
• Organization billing. Only an organization admin pays. That payment is processed by PayPal. Members have nothing to buy in the app.
• Your data on the device. Clear it with Settings, Reset all progress, or by deleting the app.

Changes to this policy

If this policy changes materially, the updated version will be published at this address with a new date above, and in the app's store listing.

Contact

Questions about privacy in Engraved: help@stabilsystems.com