Privacy Policy

1. Who we are

The Vivid Bible app (the “app”) is provided by [LEGAL ENTITY], Brazilian company registration (CNPJ) [CNPJ] (“we”, “us”). We are the controller of the personal data described in this policy under Brazil’s General Data Protection Law (LGPD) and other applicable laws.

2. Summary

• You can read, listen, save and take notes without an account. That data stays on your device.
• Payments are processed by Apple. We never receive your card number.
• Features that send data to the cloud are optional and only work with your action or consent.
• We do not sell your personal data.

3. Data that stays on your device

Reading progress, saved cards, collections, history, journal, achievements, preferences (language, font size, reminder time) and passages recorded with the scanner are stored locally on your iPhone. We cannot access this information unless you turn on a cloud backup.

4. Subscription and purchases

The Pro subscription is sold through the App Store. Apple processes the payment and only tells us the purchase status. We use RevenueCat to validate subscriptions; it receives an anonymous identifier generated by the app and the transaction data provided by Apple (product, date, expiry, store country). Legal basis: performance of a contract.

5. Reminders and notifications

Reading reminders are scheduled on the device itself. If you turn on community features, we may send notifications about interactions with your content; to do so we store a device notification token. You can turn notifications off at any time in iPhone Settings.

6. Camera and photos

The scanner uses the camera or photo library only when you tap to take or choose a picture. The photo is used to identify the Bible reference and is not sent to us, unless you turn on text recognition by an external service, described below.

7. Account, cloud backup and community (optional)

When these features are available and you choose to use them, we process: email or sign-in identifier (including Sign in with Apple), display name, profile and cover photos, the copy of your reading data, and what you post in groups or shared journeys. Posted content is visible to the participants you choose and may be moderated and reported. Legal basis: performance of a contract and consent. The data is stored with the database provider listed under “Service providers”.

8. Artificial intelligence features (optional)

Features such as text rewriting, image generation or reading text in photos (OCR) only work after your explicit consent. The content you send is processed by an AI provider solely to produce the result and is not used by us to train models. Usage limits apply, and you can turn the feature off at any time.

9. News by email

If you ask to receive news, we keep your email for that purpose. Every message has an unsubscribe link. Legal basis: consent.

10. Usage analytics and crash reports

[CONFIRM WITH DEVELOPMENT: does the app use any analytics or crash-reporting service? If yes, name it, the data collected and whether it is linked to the person. If not, write: “The app does not use third-party analytics or advertising.”]

11. Service providers

We only share data with vendors needed to run the app, who process it on our instructions:

• Apple: app distribution, payments, Sign in with Apple and notification delivery.
• RevenueCat: subscription validation.
• Supabase: database and storage for account, cloud backup and community, when turned on.
• AI provider [NAME]: only if you turn on AI features.

We may also share data when required by law or by order of a competent authority.

12. International transfers

Some vendors store data outside Brazil, including in the United States. In those cases we use the safeguards provided by law, such as contractual clauses.

13. How long we keep data

Local data stays on the device until you delete it or remove the app. Account data is kept while the account exists. When you delete your account, we delete or anonymize the data within 30 days, except what we must keep to meet legal obligations.

14. Your rights

You may request confirmation of processing, access, correction, portability, anonymization or deletion of your data, information about sharing, and withdrawal of consent. Depending on where you live (for example in the EU, UK or California), you may have similar rights under local law. You can delete your account in the app under Settings › Account › Delete account. For other requests, email [email protected]. You may also complain to your data protection authority.

15. Children

The app is not directed to children under 13 and does not knowingly collect their data. Account and community features require a minimum age of 13 or parental consent, as required by applicable law.

16. Security

We use encrypted connections, access controls and other reasonable measures to protect your data. No system is completely immune to failures; if a relevant incident occurs, we will notify you and the authorities as required by law.

17. Changes

We may update this policy. The date at the top shows the current version. Relevant changes will be announced in the app.

18. Contact and data protection officer

Data protection officer: [DPO NAME]. Contact: [email protected].