Privacy policy

This policy explains how the luxveritas.site website handles personal data under Brazil’s General Data Protection Law (Law 13,709/2018, LGPD). The data controller is Pryvion Studio, the business name used by Diego Ferreira da Costa, reachable at pryvionstudio@gmail.com, who also serves as the data protection officer (DPO).

1. This policy covers the website and the account shared with the app

The luxveritas.site website and the Lux Veritas app (Google Play) use the same sign-in account and subscription. This policy describes data processing by the website and the account and subscription services shared between them. Processing exclusively within the app is described in section 13. This same policy appears in the app under Settings → Privacy policy.

2. Data we collect

• Registration: email, password (stored in encrypted form by Firebase Authentication) and, optionally, name. If you sign in with Google, we receive your email, name and profile photo.
• Subscription: purchased plan, status, subscription identifier with the billing provider, payer email and renewal date.
• Payment: processed by the provider indicated when you subscribe (Mercado Pago, Stripe or Google Play, depending on where you purchase). We do not receive or store card numbers, CVV or bank details.
• Living Word and topic study queries: the text you write is sent to the AI provider to generate a response. We do not store the content of your queries in our database. So you can reread what you received, the question and response are stored in your own browser (the latest 50 of each type), never on our servers. They are removed when you sign out or use the clear data button under My account.
• Preferences and reading: font size, favorite verses, chapter history and consecutive-day streak are stored only in your browser (local storage), not on our servers.
• Technical data: aggregated, anonymous audience and performance metrics (Cloudflare Web Analytics), without individual profiles. If a page contains ads, Google also receives browsing data, as explained in section 10.
• Google sign-in: when you sign in with your Google account, we receive your name, email, profile photo and an account identifier from Google. We do not receive your Google password or access to other data in your Google account.
• Subscription: subscription identifier with the provider (Stripe, Mercado Pago or Google Play), plan, expiration date and origin. We use this to enable Premium access on the website and app with the same account.

3. How we use the data

• create and maintain your account and subscription;
• enable Premium features and process renewals and cancellations;
• respond to support requests you make;
• meet legal, tax and fraud prevention obligations;
• measure audience and performance in aggregate.

4. Legal bases (article 7 of the LGPD)

• Performance of a contract (item V): account, subscription, access to paid features and support.
• Legal obligation (item II): retention of access logs required by Brazil’s Civil Rights Framework for the Internet and tax records.
• Legitimate interest (item IX): security, fraud prevention and aggregated usage metrics.

5. Who we share data with

• Google (Firebase) — authentication and subscription database.
• Mercado Pago — processing payments and subscriptions purchased through this provider.
• Stripe — processing and managing charges purchased through this provider.
• Google Play — processing in-app purchases and subscriptions; subscription status is used to recognize access with the same account on the website.
• Cloudflare — website hosting on Workers and aggregated audience and performance metrics through Web Analytics.
• AI providers — receive only the text of a Living Word or study query, without your registration data.
• Cloudflare R2 — delivery of audio files.
• Google — when the website contains ads, Google and its advertising partners receive browsing data to display and measure them (details in section 10).

We do not sell your personal data or give advertisers your email, name or query content.

Google (Firebase Authentication and Google Play): account authentication (email/password or Google) and validation of subscriptions purchased in the app.

6. International transfers

Some of these providers process data outside Brazil (in the United States and European Union). Transfers are based on article 33 of the LGPD, supported by standard contractual clauses and each provider’s safeguards. The subscription database is hosted in the São Paulo region.

7. How long we keep data

• Account and subscription: while the account exists and for up to 5 years after closure, for tax purposes and defense in potential proceedings.
• Access logs: 6 months, under article 15 of Brazil’s Civil Rights Framework for the Internet.
• Data in your browser: until you sign out, clear it with the button under My account, or delete it through the browser. Signing out deletes favorites, highlights, notes, reading history, Living Word history and study history from this device.
• Account deletion: when you delete your account at /excluir-conta, we delete the sign-in account and subscription, usage and preference data stored on our servers for both the website and app. Google Play purchases remain in your Google account and are managed there.

8. Your rights

The LGPD gives you the rights to confirm processing, access, correct, anonymize, port and erase data, receive information about sharing and request review of automated decisions. To exercise any of these rights, email pryvionstudio@gmail.com; we respond within 15 days. Account deletion cannot be undone. Check cancellation with the provider where you subscribed; deleting your account does not automatically cancel Google Play charges.

You do not need to wait for us or have the app installed to delete your account: use the Delete my account page, where the account holder can request deletion directly. Also check cancellation with your subscription provider. For in-app purchases, go to Google Play → Payments and subscriptions → Subscriptions, even if you delete your account here.

9. Security

We use an encrypted connection (HTTPS), authentication managed by Firebase, database rules that prevent any user from reading or writing another user’s subscription, and access keys kept only on the server. No system is infallible: in the event of a significant incident, we will notify you and Brazil’s data protection authority (ANPD) under article 48 of the LGPD.

10. Cookies, advertising and local storage

Essential: a session cookie keeps you signed in, and browser local storage holds reading preferences, favorites, highlights, notes, reading history, the Living Word revelations and studies you generated, and your consecutive-day streak. The website cannot function without them.

Advertising: this website may show ads provided by Google (Google AdSense). When displayed, Google and its partners use cookies and identifiers to serve and measure ads, including personalized ads based on your previous visits to this and other websites. You can turn off personalization at any time in Google Ads Settings or opt out of third-party cookies at aboutads.info/choices. Google’s partner site privacy practices also apply here.

Consent: visitors from the European Economic Area, United Kingdom and Switzerland see a notice to accept or refuse advertising cookies before any personalized ad loads, and can revisit their choice through the same notice. Refusing does not block access to any text in the collection.

No ads for Premium: subscribers browse without advertising or the corresponding ad cookies.

11. Children and teenagers

The website is not directed at people under 18, and we do not knowingly collect children’s data. If we identify a minor’s registration without parental or guardian authorization, we close the account and erase the data.

12. Changes

This policy may be updated. The update date appears at the top, and material changes will be announced by email or on the website.

13. Lux Veritas app (Google Play)

The Lux Veritas app published on Google Play follows everything above regarding accounts, subscriptions, payments, AI, rights and retention periods. In addition, it handles the following data, which is not present on the website.

• Anonymous identifier (default): when you open the app, Firebase Authentication creates an anonymous identifier (UID) to store credits, highlights and notes without requesting personal data. You do not need to create an account to use the app. If you sign in later, this progress is linked to your account.
• Highlights, notes and studies: stored under your UID (Firestore) so you can find them again. Reading progress, favorites, daily streak, Living Word history and preferences stay on the device.
• In-app purchases: subscriptions and credits are billed exclusively through Google Play (Google Play Billing). We use the purchase receipt to validate and enable Premium in the app and on the website with the same account.
• Technical data: crash reports and aggregated usage metrics (Firebase Crashlytics and Google Analytics for Firebase), associated with the UID, solely to keep the app stable.
• Advertising (free plan only): Google AdMob may receive the device’s advertising identifier to display and measure ads according to your choice in the consent message. Premium subscribers do not see ads.
• Narrated audio: narrated chapters and studies are delivered by Cloudflare (R2). To prove a request comes from the original app, the device sends a Firebase App Check token (Google Play Integrity), which contains no name, email or advertising identifier.

Who the app shares data with: Google (Firebase Authentication, Firestore, Cloud Functions, App Check, Crashlytics, Analytics, Google Play and AdMob), Cloudflare (audio) and AI providers (query text only). Delete the account and data: in the app, go to Settings → Data & Privacy → Delete My Data, or without the app visit /excluir-conta. Cancel your Google Play subscription first to prevent further charges. Age: the app is not directed at children under 13.