Privacy policy

1. Data controller

NUNES COSTA PRESTACAO DE SERVICOS LTDA, Brazilian business registration (CNPJ) 39.894.069/0001-41, is responsible for personal data processing related to Gibis Bíblicos. For privacy, rights requests and support, contact dashcode2020@gmail.com.

2. Data and purposes

Account: internal identifier, email, name when provided and information needed for authentication. We use these to identify the account, provide access and support. The application platform provider handles authentication; choosing Google login also involves that provider.

Reading: language, preferences and progress organize the collection and resume reading. History remains associated with the reader’s account. It must not be interpreted as a declaration of religious belief or used to create religious profiles or targeted advertising.

Subscription: transaction identifiers and access status verify purchases, restore entitlements and track renewal, expiry, refund or revocation. Apple or Google Play processes payment information under its own terms. For Google Play, we also use the purchase token and an opaque account identifier to validate and restore access; these do not contain the card number.

Acceptance and security: we record the authenticated account identifier, server date and time in UTC, document version and cryptographic digest, language, action and receipt identifier. An IP address supplied by trusted infrastructure and the browser identification sent in the request may also be recorded. These elements help demonstrate what was presented and accepted; they are not absolute proof of the physical identity of the person using the device.

We do not collect precise location, contacts, camera, microphone, advertising identifiers or device fingerprints to record acceptance. If an IP address is unavailable from a trusted source, we record its unavailability rather than inventing or assuming an address.

3. Legal grounds and choices

Processing must have a defined purpose and appropriate legal basis, which may include performing a contract, legal obligations, exercising legal rights or another applicable ground. Acknowledging this policy is not blanket consent for any use of personal data.

Where an operation requires consent, it will be requested specifically and may be withdrawn. Advertising permissions or optional purposes are not included in acceptance of the terms. This flow does not authorize selling personal data.

4. Children and teenagers

Processing children’s and teenagers’ personal data must consider their best interests, data necessity and applicable legal grounds. A content age rating does not remove these safeguards.

The app does not request age, date of birth, identity documents or guardian registration in its acceptance flow. A receipt records an authenticated account’s action; it does not establish adulthood, guardianship or parental consent.

Apple’s age, access and purchase controls depend on platform settings and do not authorize all data processing by the app. Guardians can contact us to request information, access, correction or deletion. Where the law requires specific consent, app use, a purchase or acknowledging this policy does not replace it.

5. Providers and disclosure

We use the application platform provider for authentication, databases, functions and hosting; Apple or Google Play for distribution, subscriptions and native features on the corresponding platform; and Google if a reader selects that login method. Each provider may process data needed for its function under its contracts and policies.

Data may also be processed for support, legal duties or orders from competent authorities. Providers may process data outside Brazil, subject to safeguards and transfer mechanisms required by applicable law. For readers located in the European Union, the United Kingdom or other regions with their own data protection legislation, processing also observes, where applicable, the legal grounds, rights and international transfer safeguards required by those rules — such as the General Data Protection Regulation (GDPR) — without limiting the LGPD. Contact privacy support for provider and international transfer details.

6. Device storage

The app uses local storage for authentication sessions, language, preferences and visitor reading progress, together with technical resources needed for reading. This data may remain on the device until cleared, a session ends or the app updates. Take care to sign out on shared devices.

7. Retention and deletion

Account details, preferences and progress are used as needed to provide the service and can be deleted through Delete account or support, subject to retention obligations.

Acceptance receipts are kept for up to five years from the event to support the exercise of legal rights, including the recorded IP and browser data, which remain intact throughout that period. Exceptional retention or deletion holds require a documented legal ground; these periods are not presented as universal legal requirements to retain all data.

Account deletion removes operational data. Receipts subject to retention remain restricted and are not used to continue providing the service or for advertising. Provider backups and logs follow their own cycles and obligations.

Acceptance receipts do not replace application access logs that hosting infrastructure may be legally required to retain.

8. Your rights and security

You or your guardian may request confirmation of processing, access, correction, disclosure information, portability where applicable, anonymization, restriction or deletion of unnecessary data, and withdrawal of consent when relevant. We respond under applicable legal deadlines and criteria. We may request proportionate identity evidence to prevent unauthorized access.

We use access controls and server validation. No system is entirely risk-free. Relevant incidents are assessed and communicated when required by law. Complaints may also be submitted to the appropriate data protection or consumer authority.

9. Updates

This document identifies its version and date. Significant changes will be communicated and, when needed, followed by renewed acknowledgement or specific consent. Receipts refer to the actual text presented at the time.