Privacy Policy — Refúgio

1Who controls your data

The app is developed and operated by Redarock (57.227.642 RODRIGO AUGUSTO FERREIRA FERNANDES, CNPJ 57.227.642/0001-45, Rio de Janeiro, Brazil), which is responsible for decisions about the processing of your personal data.

For any privacy matter, including contacting our data protection officer, use the email below.

Contact: redarock.apps@gmail.com

2Data we collect and why

• Anonymous identifier created by the app, device platform and usage dates: used to keep your access and subscription without asking you to sign up. It contains no name, email or phone number.
• Purchase history and subscription status: used to unlock purchased features. Payment details (such as cards) are handled by Google or Apple and never reach us.
• Content reports you submit: used to review and fix incorrect or inappropriate content.
• Device identifier for notifications: used to send notifications you have allowed.
• Technical data and crash reports (device model, OS, app version): used to find and fix errors.
• App usage records (screens opened, readings, searches, favorites, purchases and errors), tied to your identifier: used to investigate and fix problems you report to us or that the app runs into. They are kept for 30 days and then deleted automatically.

We do not collect precise location, contacts, photos, microphone or camera data unless listed above.

3No sign-up

The app does not ask for your name, email or phone number. Your account is an anonymous identifier created automatically on your device.

Favorites, reading progress, day streak and preferences (such as the devotional time and text size) are stored only on your device, not in our database. They are erased when you uninstall the app.

What you do in the app (such as opening a reading, searching or saving a favorite) shows up in the usage records described above, which we keep for 30 days.

4Legal bases

• Performance of a contract: to provide the app features.
• Legitimate interests: for security, fraud prevention and improving the app, always respecting your rights.
• Legal obligations: to keep records required by law.

5Who we share data with

We do not sell your data. We only share it with service providers that operate the app on our behalf, under contract and with data protection obligations:

• Google Firebase: authentication, database, storage and hosting of the app infrastructure. Policy: https://firebase.google.com/support/privacy
• Google Play: payment processing on Android. Policy: https://policies.google.com/privacy
• Apple App Store: payment processing on iOS. Policy: https://www.apple.com/legal/privacy/
• Public authorities, when required by law or court order.

6International transfers

Our providers may store and process data on servers outside Brazil, such as in the United States. In those cases, transfers are made with appropriate safeguards as required by articles 33 to 36 of the LGPD.

7How long we keep data

• While you use the app.
• After a deletion request, personal data is erased within 30 days.
• App access logs are kept for 6 months, as required by the Brazilian Internet Civil Framework (Law No. 12,965/2014, art. 15).
• Data may be kept longer only when required by law, to defend legal claims, or in anonymized form.

8Your rights

You may request at any time:

• Confirmation that we process your data and access to it.
• Correction of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion of unnecessary or unlawfully processed data.
• Data portability.
• Deletion of your data and account.
• Information about who we share your data with.
• Withdrawal of consent, where applicable.

9How to delete your data

See how to erase the data on your device and request deletion of the data we keep at: https://redarock.com.br/en/apps/refugio/delete-account

10Security

We use technical and organizational measures to protect your data, such as encrypted connections (HTTPS), access control and database security rules. No system is completely secure, but we work to reduce risks and will report relevant incidents as required by law.

11Children

The app is not directed to children under 14, and we do not knowingly collect data from people under that age. If you are a parent or guardian and believe a child has given us data, contact us so we can delete it.

12Changes to this policy

We may update this policy. The last update date is shown at the top of this page, and material changes will be communicated in the app.

13Contact and complaints

Contact us at the email below. You also have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD): https://www.gov.br/anpd

Contact: redarock.apps@gmail.com