Summary
- We use your data to provide Verbo Vivo: your account, your reading, your studies and your subscription.
- Your notes, highlights and conversations with Bereia are private. We do not sell data or use it for advertising.
- We do not use advertising cookies. On public pages, analytics cookies only with your permission. See the Cookie Policy.
- We use usage data, without the content of your study, to improve the app. You can turn it off in Settings.
- You can ask for access to, correction, a copy or deletion of your data by writing to usebibliaverbovivo@gmail.com.
1. Who is responsible for your data
The data controller is Biblia Verbo Vivo, CNPJ 65.489.661/0001-78, at Rua Severino Nicolau de Melo, 1100, Jardim Oceania, João Pessoa - PB, CEP 58037-700. As a small processing agent under Brazilian rules (Resolução CD/ANPD nº 2/2022), we have not appointed a formal data protection officer. For anything about your data, write to usebibliaverbovivo@gmail.com.
2. What data we process and why
| Data | Purpose | Legal basis (Brazil's General Data Protection Law, LGPD, art. 7) |
|---|---|---|
| Email, password (stored only as an Argon2id hash), language and sign-up date; Google or Apple identifier and email, if you sign in with them | Create and protect your account, sign you in, confirm your email and reset your password | Performance of a contract |
| The name you want to be called, time zone, preferred translation, and the goal and minutes per day from onboarding | Personalise the app and suggest a reading pace | Performance of a contract |
| Chapters read, reading days, streak, plans and progress, reminder time | Show your progress, "Your Journey" and your streak | Performance of a contract; consent for reminders |
| Notes (free text) and highlights | Keep your studies for you | Performance of a contract |
| Bereia questions and answers, cited passages, model used and usage log | Answer with references, keep your conversation history and audit the use of AI | Performance of a contract; legitimate interest in auditing and security |
| Subscription status, plan, trial and billing dates, Stripe customer identifier | Grant access according to the subscription and handle cancellation and refund requests | Performance of a contract; legal obligation (tax records) |
| Records of your acceptance of the Terms and this Policy, and of optional choices (marketing, reminders and sharing notes with the AI) | Prove acceptance and respect your choices | Legal obligation and exercise of rights; consent for the optional items |
| Usage data: screens opened, chapters read, main buttons used, Bereia's response time, site errors and performance, device and browser type and approximate region from the IP. In some sessions of onboarding, plans and the reader, a screen recording with all text masked | Understand how Verbo Vivo is used, find where people get stuck, fix errors and improve the product | Legitimate interest in the app, with the option to turn it off in Settings; consent for analytics cookies on public pages |
| Technical access records (date, time and IP address) and session records | Security, fraud prevention and compliance with Brazil's Internet Civil Framework (Marco Civil da Internet) | Legal obligation; legitimate interest |
We do not collect sensitive data on purpose. But notes and questions about faith may reveal your religious beliefs, which the LGPD treats as sensitive data (art. 5, II). We process this content only to provide the service you asked for, never share it for other purposes, and give it the same care required for sensitive data.
Card details are typed directly into Stripe's environment. We never receive or store the card number.
3. Bereia and the AI provider
- When you ask a question, we send OpenAI the question, the latest messages in that conversation, the selected Bible passages and the language. We do not send your name, email or account identifier.
- We use the OpenAI API with storage turned off (
store: false). Under OpenAI's API rules, this content is not used to train its models and is kept only as long as needed for processing and abuse monitoring. - Today your notes are not sent to the AI. If we start using them in answers, that will only happen with your consent ("share notes with the AI"), which you can withdraw at any time.
- We keep your conversation history in your account so you can come back to it.
4. Who we share data with
We do not sell or rent data. We share it only with processors that help us provide the service, each limited to its role:
| Processor | Role | Location |
|---|---|---|
| Railway | Hosting for the website, the API and the database | United States |
| Stripe | Payments and subscriptions | United States and European Union |
| OpenAI | Processing questions to Bereia | United States |
| Cloudflare | Delivering the map files (receives your IP address) | Global |
| Google and Apple | Signing in with those accounts, when you choose to | United States |
| Email provider | Sending confirmation, password and subscription emails | United States |
| PostHog | Product analytics, site errors and session recordings with text masked. It does not receive name, email, notes, questions or conversations | European Union |
| Discord | Internal team notices about subscriptions, without your name or email | United States |
We may also share data when required by law, a court order or a competent authority, or to defend our rights.
5. International transfers
Because the processors above are outside Brazil, your data is transferred to other countries, mainly the United States and the European Union. These transfers rely on art. 33 of the LGPD, with contractual clauses and the safeguards these providers offer, and are needed to perform our contract with you.
6. How long we keep data
- Account and studies (profile, reading, plans, notes, highlights and conversations): for as long as the account exists.
- Inactive account: after 24 months with no subscription and no sign-in, we notify you by email. If there is no reply within 30 days, the account and its data are deleted.
- Deletion request: we erase the data within 30 days. Backup copies expire within 90 days.
- Payments and acceptances: billing records and records of your acceptance of the Terms and this Policy are kept for 5 years, for tax purposes and to prove acceptance.
- Access records: 6 months, as required by Brazil's Marco Civil da Internet (art. 15).
- Usage data (analytics): up to 12 months in PostHog. Session recordings, up to 30 days.
7. Security
We use encrypted connections (HTTPS), passwords stored with Argon2id, session tokens stored only as hashes, session cookies that scripts cannot read, CSRF protection and restricted access to data. No system is completely immune. If an incident could pose a significant risk to you, we will notify you and Brazil's data protection authority (ANPD) as the law requires.
8. Your rights
Under the LGPD (art. 18), you can ask at any time for:
- confirmation that we process your data, and access to it;
- correction of incomplete, wrong or outdated data;
- a copy of your data in a structured format (portability);
- anonymisation, blocking or deletion of unnecessary data or data processed unlawfully;
- deletion of data processed on the basis of your consent, and withdrawal of that consent;
- information about who we share your data with;
- review of decisions made solely by automated processing.
Write to usebibliaverbovivo@gmail.com from your account's email. We reply within 15 days. Reminders can be turned on and off directly in your reading plan, usage data in Settings → "Help improve Verbo Vivo", and the other optional choices can be withdrawn through the same email. You can also complain to Brazil's National Data Protection Authority (ANPD).
9. Minors
Verbo Vivo is meant for people aged 18 or over. We do not knowingly create accounts for minors. If you know of an account belonging to a minor, write to usebibliaverbovivo@gmail.com and we will delete it.
11. Changes to this Policy
When this Policy changes, we update the date and version at the top and keep the history below. If a change is significant, we tell you by email or in the app and, when needed, ask you to accept it again.
Version history
- October 6, 2026Adds product analytics (PostHog): what is collected, the legal basis, where it is stored and how to turn it off.
- October 1, 2026First published version.