Biblinário Privacy Policy

Version 2026.11.02 · The version number is its date (year.month.day). The publication and effective dates are those recorded in this version's metadata, which accompanies this text.

This Policy explains how Biblinário processes personal data, in line with the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018). It complements the Terms of Use. The Portuguese (Brazil) version is the reference text; translations are provided for convenience and, if they differ, the Portuguese version prevails.

In short: we collect what is needed for you to read, study, play and sync your data; we do not sell personal data and we do not show ads; we use a small number of third-party tools to monitor technical failures and understand feature usage in the app, described in section 4; you can delete your account and your data inside the app.

1. Who the controller is and how to reach us

The controller of personal data is the person responsible for Biblinário: an independent developer (an individual), who is not identified in this text by name, ID number or address. The only contact is the e-mail address feedback@biblinario.app.

Data Protection Officer (encarregado): none has been appointed; we keep this communication channel instead: the e-mail address feedback@biblinario.app receives data subjects' requests (section 8) and communications from the ANPD. We understand that Biblinário qualifies as a small-scale processing agent (agente de tratamento de pequeno porte) and that, under ANPD Resolution CD/ANPD No. 2/2022, such agents are not required to appoint an encarregado as long as they keep a communication channel with data subjects and the ANPD. This understanding may be revisited as the service grows.

2. What data we process

Category	What it is	Where it comes from
Account	E-mail, display name, nickname, profile picture (if it comes from your Google account), account type (guest or registered), creation date	You; Google or Apple, if you sign in with them
Credentials	Password (we only keep a hash, never the password itself); the stable identifier of your Google/Apple account	You; Google or Apple
Guest	A device identifier generated by the app and a guest secret (we only keep its hash)	The app
Session and security	Active sessions (we keep a hash of the refresh tokens, the device identifier and the expiry date); "recognised device" markers (hash); one-time codes sent by e-mail (hash and expiry); counters of login attempts per e-mail and per IP address; date of the last login-lockout notice	The app and the server
Your content	Favorites, highlights, notes on verses (up to 2,000 characters), notes on hymns (up to 1,000 characters), reading progress, story progress, preferences (translation, hymnal, theme, language, font, scrolling, reminders)	You, by using the app
Games and progress	Games, answers, scores, daily challenge, day streak, weekly and monthly points, estimated skill level, questions already shown, device time zone	You, by playing
Notifications	The device's notification token, platform (iOS or Android), device identifier, your reminder preferences	The app, if you allow notifications
Acceptance record	Which version of the Terms and of the Policy you accepted or took note of, the code (hash) of the text, the language and the server date and time	You, when creating the account or accepting a new version
Technical diagnostics and app usage	Failure reports (error message and stack trace, without the content of your requests), an account identifier (when you are signed in) or an anonymous device identifier, app/device type, app version, and feature-usage events (for example, opening a chapter or a hymn, starting a search, starting or finishing a game), without the text you typed	The app and the server, automatically, sent to third-party providers (section 4)
Technical data	IP address, app/device type (user agent), date and time, route accessed and result of the request, language and time zone reported by the device	The app, automatically

Public ranking. If you have an account and score points, your nickname, display name, profile picture (when there is one) and your scores and streaks appear in the app's and the API's rankings, which other people can see, including people without an account. Guests do not appear. There is currently no option to stay out of the ranking: to avoid appearing, you can choose a nickname and display name that do not identify you, or delete your account.

What we do not collect. We do not collect your location, contacts, photos, microphone or camera, and we do not use advertising identifiers. There are no ads in the app or the API. The technical diagnostics and feature-usage tools in section 4 do not show ads, do not sell or share your data for advertising purposes, and do not receive the text you type (for example, a search term or the content of a note). There is currently no in-app option to individually turn off these tools: to avoid being included in this data, you can delete your account (section 8).

Sensitive data. The law treats data revealing religious belief as sensitive personal data. Which translations you read, which hymns you favorite and what you write in your notes may, in some cases, allow beliefs to be inferred. For that reason we process this data only to provide the service you use (store, sync and show it to you), we do not use it for commercial profiling, advertising or decisions about you, and we do not share it for those purposes; the diagnostics and usage tools in section 4 receive only which screen or feature was opened (for example, "a chapter was opened"), never which book, chapter, translation or hymn specifically. Legal basis. Because this content may, in some cases, reveal religious belief, we process it on the basis of your consent for that specific purpose (LGPD, art. 11, I): the content exists only because you yourself choose to create it (favoriting, highlighting, taking notes, reading and adjusting preferences) and, by creating it with your account, you authorize us to store it, sync it and show it to you. You can withdraw consent at any time by deleting the content or the account (section 8); withdrawal does not affect processing already carried out. If you do not want this processing, simply do not create this content.

AI-generated content. We use artificial intelligence tools to produce app content (quiz questions, story translations, narration and cover images). These processes do not receive users' personal data.

3. What we use the data for and the legal basis

Purpose	Data	Legal basis (LGPD art. 7)
Create and maintain your account, authenticate you and keep your session	Account, credentials, session	Performance of a contract (V)
Provide the service: reading, syncing across devices, games, scoring, rankings, progress	Your content, games and progress, account	Performance of a contract (V); for content that may reveal religious belief, consent (art. 11, I; see section 2)
Send confirmation-code e-mails (login, password, account deletion) and account security notices	E-mail, session and security	Performance of a contract (V); legitimate interest in account security (IX)
Service security: prevent fraud, abuse and improper access, enforce usage limits and investigate incidents	Technical data, session and security	Legitimate interest (IX)
Diagnose technical failures and understand feature usage, to keep the app working and prioritize improvements	Technical diagnostics and app usage	Legitimate interest (IX), processed in a minimized way (without the text you type) and proportionate to this purpose
Keep application access records for the period the law requires	IP address, date and time of access	Compliance with a legal obligation (II), if and to the extent art. 15 of the Brazilian Internet Civil Framework applies to Biblinário; otherwise legitimate interest in security (IX)
Notifications and reminders on the device	Notifications	Consent (I), which you give by allowing notifications in the device system and can withdraw at any time
Prove that you accepted the Terms and took note of this Policy, and defend rights in proceedings	Acceptance record	Performance of a contract (V); regular exercise of rights (VI)
Comply with legal obligations and orders from authorities	As required	Compliance with a legal obligation (II)

We do not make automated decisions that produce legal effects on you. The difficulty of quiz questions adapts to your performance only to make the game more suitable.

We do not sell or rent personal data. We share it only with those who help us run the service (processors), under contracts that require data protection, and as the law requires:

API hosting: Render.
Database: MongoDB (Atlas).
Network, protection and file storage: Cloudflare (proxy and protection of the API; storage of story audio).
Transactional e-mail: Resend (the codes and notices sent to you).
Error and technical performance monitoring: Sentry (Functional Software, Inc.), which receives technical failure reports (error message and stack trace) and an account or device identifier, never a password, token, cookie or the content of your requests.
Understanding app usage: PostHog, Inc., which receives feature-usage events (for example, opening a chapter, starting a search or playing a game) identified by your account when you are signed in, or anonymously when you are not, always without the text you typed.
Sign-in with Google or Apple, when you choose that route: we receive from the provider an identifier, your e-mail (when verified), your name and, for Google, the picture; the provider has its own policy.
Notifications: we store your device's notification token. Today the API does not send remote notifications (reminders are scheduled on the device itself); if that changes, delivery will go through the platforms' notification services (Apple and Google) or a delivery service, and we will say so in a new version of this Policy.
App stores (Apple App Store and Google Play): they govern distribution of the app, under their own policies.
Other users: the public ranking described in section 2.
Authorities, when there is a legal obligation or a valid order; and in a corporate reorganization, with these protections continuing.

5. International transfers

Some of these providers (Render, MongoDB Atlas, Cloudflare, Resend, Sentry, PostHog, Google and Apple, and the platforms' notification services) may process data outside Brazil, depending on where they operate; we do not control, and do not state here, the region of each one. When an international transfer takes place, it relies on a mechanism under art. 33 of the LGPD, such as the contractual clauses and other safeguards those providers offer in their data-processing terms (for example standard contractual clauses or a country with an adequate level of protection).

6. How long we keep it

Account and your content: while the account exists. When you delete the account, we delete the data linked to it (profile, sessions, codes, favorites, highlights, notes, annotations, progress, preferences, stories, games, statistics, notification tokens and acceptance records). Temporary technical data (usage-limit counters, request-replay keys) expires on its own within 24 hours. Backups kept by the hosting and database providers may retain this data for limited periods set by those providers' own policies and are then discarded; we do not control those periods.
Items you deleted: stay marked as deleted for at least 30 days so that your other devices learn of the removal; they may be erased afterwards.
Guests: a guest profile is kept until the guest deletes it in the app (Delete account) or asks for deletion by e-mail. There is currently no automatic deletion of unused guest profiles.
Sessions: a session renewal lasts about 30 days; one-time codes expire in minutes.
Technical diagnostics and app usage: technical failure reports stay with the monitoring provider for up to 30 days; feature-usage events stay with the analytics provider for up to 12 months; they are then deleted by the providers themselves, under their own policies.
Access records (logs): the server records the IP address, the app/device type, the date and time and the route accessed. These records sit with the hosting and network services (Render, Cloudflare), which keep them for limited periods under their own policies and then discard them. Where the law requires retention for a set period (for example art. 15 of the Brazilian Internet Civil Framework, if it applies to us), access records may be kept for the period required.
Messages you send us by e-mail: they stay in the contact mailbox for as long as needed to handle the request and meet any legal obligation; you can ask for them to be deleted.
Acceptance records: erased together with the account.

Where the law requires or allows us to keep some data for longer (for example for the regular exercise of rights), we will keep only the minimum necessary for the applicable period.

7. How we protect the data

We use encrypted connections (HTTPS); we keep passwords only as a hash; we keep tokens, one-time codes and guest secrets only as a hash; we keep tokens on the device in the system's secure storage; we limit login and code attempts, notify you of lockouts, and revoke sessions when you sign out, change your password or delete your account; we restrict administrative access; and we actively filter sensitive data (passwords, tokens, cookies and the content of requests) before any data is sent to the diagnostics and usage tools in section 4. No system is completely secure. If an incident occurs that may cause relevant risk or harm, we will notify the ANPD and affected data subjects, as the law requires.

8. Your rights and how to exercise them

Under the LGPD (art. 18) you may ask for: confirmation that we process your data; access; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary data or data processed in breach of the law; portability; deletion of data processed with consent; information about whom we share it with; information about the possibility of not giving consent and its consequences; and withdrawal of consent. You may also object to processing carried out on a basis other than consent if the law is not being complied with, and complain to the National Data Protection Authority (ANPD).

In the app you can:

edit your display name and nickname;
adjust or turn off reminders and notifications (in the app and in the device settings);
sign out, which ends the session on this device;
delete your account and your data (Settings > Delete account), confirmed by a code sent to your e-mail, by re-authenticating with Google/Apple or, for guests, from the device itself.

By e-mail, for what the app does not yet do on its own: a copy of your data (access and portability), correction of data, changing the account e-mail and other requests, by writing to the contact in section 1. Today there is no data-export function inside the app. We will answer as provided in art. 19 of the LGPD (immediate confirmation in simplified form or a full statement within 15 days). To handle the request securely, we may ask you to confirm that you control the account e-mail address (for example by writing from it).

9. Children and teenagers

Biblinário is intended for people aged 13 or over and is not directed at children. Teenagers (under 18) should use it with the knowledge and authorization of a parent or legal guardian. Processing the data of children and teenagers must serve their best interest (LGPD, art. 14); for children (under 12) it requires the specific and prominent consent of at least one parent or legal guardian. We do not knowingly collect children's data. If we learn that we collected a child's data without the required authorization, we will delete it. Guardians can contact us through section 1.

10. Cookies and similar technologies

The Biblinário API does not use cookies. The app stores information on the device itself (preferences, downloaded content, data not yet synced and, in secure storage, session tokens) in order to work, including offline. We do not use tracking technologies for advertising purposes. The technical diagnostics and feature-usage tools in section 4 do not serve advertising: they exist only to detect failures and understand app usage.

11. Changes to this Policy

We may update this Policy. Each version has a number and an effective date, and earlier ones remain available. Material changes (for example a new purpose, a new sharing or a change of legal basis) will be announced in the app, and we will ask you to take note of the new version; where a change depends on your consent, we will ask for that consent. Editorial changes do not require a new notice.

12. Supplementary notices by region

These notices are high-level summaries.

European Economic Area and United Kingdom (GDPR / UK GDPR). The equivalent legal bases are performance of a contract (art. 6(1)(b)), legitimate interests (art. 6(1)(f)), legal obligation (art. 6(1)(c)) and consent (art. 6(1)(a)); for data revealing religious belief, art. 9. You may exercise rights of access, rectification, erasure, restriction, portability and objection, and complain to the data protection authority of your country. Transfers outside the EEA/UK depend on appropriate safeguards. At this time we have not designated a representative in the European Union or the United Kingdom.

California, USA (CCPA/CPRA). We do not sell or share personal information for cross-context behavioural advertising. California residents may ask for access, correction and deletion, and will not be discriminated against for exercising these rights.

13. Contact

Controller and data protection officer: see section 1. National Data Protection Authority (ANPD): www.gov.br/anpd.