Privacy policy

Who looks after your data

The controller of the data handled by the Jesusinho app and the jesusinho.app site is the Jesusinho project. For anything about privacy, including reaching our data protection officer, write to contato@jesusinho.app.

What stays on your phone

While you are signed in to your account, the app keeps on the phone, so that it works offline:

• your prayer requests, gratitude journal, candles and intentions;
• your Bible highlights and notes, the constancy candle, and your reading and prayer progress;
• the faith tradition you chose, if you chose one;
• your preferences (notification time, text size, whether Jesusinho stays on screen).

This data is left out of Android's automatic backup.

When you sign out, the app first sends to the cloud whatever has not been sent yet, and then erases the content and preferences from the phone. Jesusinho (and your patron saint, if you chose one) leaves the screen, and the reminders stop. Without internet, the app won't let you sign out, so nothing is lost. When you sign in again, on any phone, your content comes back from the cloud; you choose your preferences again.

You can export everything (Settings → Export my data). Erase everything (Settings → Erase everything) removes it from the phone and also the cloud copy.

Uninstalling the app erases what is on the phone. The cloud copy stays until the account is deleted.

Your account and the cloud copy

To use the app, you create an account with an email and password. With it, we handle:

• your email;
• your password, kept only in hashed form: no one in the project can read it;
• the cloud copy of your prayer requests, gratitude journal, candles and intentions, highlights and notes, constancy candle and faith tradition;
• the record of your consents (see "Consent at sign-up").

Each person only reaches their own data: the server checks your account on every request. The cloud copy is kept on servers in São Paulo, Brazil.

The app syncs when you sign in, when you open the app, when it goes to the background and when you sign out. This content is never logged, never shared, never sold and never used for anything other than keeping it and giving it back to you.

The legal bases are kept separate:

• email and password: providing the service you asked for when you created the account (LGPD, art. 7, V);
• written content and faith tradition: may reveal religious belief and, in prayer requests, even health and private life, which are sensitive personal data (LGPD, art. 5, II). That is why the basis is your specific and highlighted consent (art. 11, I), given in its own box at sign-up.

Your faith tradition

Religious belief is sensitive personal data (LGPD, art. 5, II). The tradition you choose goes into the cloud copy along with the rest, based on the consent you give at sign-up (see "Consent at sign-up").

If you prefer not to say, choose "Prefiro não dizer" (Prefer not to say): the app works without a tradition.

Consent at sign-up

To create the account, you tick two mandatory boxes:

• "Li e aceito os Termos de uso e a Política de privacidade" (I have read and accept the Terms of use and the Privacy policy).
• "Autorizo guardar na minha conta minha tradição de fé e o que escrevo no app (dados sensíveis)" (I authorize keeping my faith tradition and what I write in the app, in my account, as sensitive data).

The second box is a condition for having an account: the app's service is precisely to keep this content in your account and give it back on any phone (LGPD, art. 9, § 3).

If you do not tick both boxes, the account cannot be created. The law asks that you know the consequences of not consenting (LGPD, art. 18, VIII).

To withdraw this consent, delete the account: the content and the faith tradition leave the cloud right away. Before that, you can download everything under Export my data.

We keep the date each box was accepted and the version of the terms accepted, to prove consent (LGPD, art. 8, § 2). This record is erased together with the account.

Emails we send

We send two kinds of email.

Service emails, sent when needed, because they are part of the account: sign-in codes, password changes, security notices, confirmation of account deletion, and notices of important changes to the terms or to this policy. The legal basis is providing the service (LGPD, art. 7, V). They are not advertising.

News from Jesusinho itself, such as new features and reading plans, sent to people who have an account. The legal basis is legitimate interest (LGPD, art. 7, IX). In these news emails:

• we talk only about Jesusinho itself, never about third parties; your email is never sold or handed over;
• to stop receiving them, turn off "Receber novidades por e-mail" (Receive news by email) in Settings, or use the "não quero mais receber" (I no longer want to receive) link in any news email;
• you can object at any time (LGPD, art. 18, § 2).

At sign-up, the app tells you: "Você pode receber novidades do Jesusinho por e-mail. Cancele quando quiser em Configurações." (You can receive news from Jesusinho by email. Cancel whenever you like in Settings.)

Who helps us run

We use some third-party services, each only for its part:

• Database and sign-in: keeps the account, the consents and the cloud copy, on servers in São Paulo, Brazil.
• Hosting and content delivery: hosts this site and the app's server, and delivers the app's public content (prayers, reading plans).
• Email sending: sends sign-in codes, service emails, news and this site's emails.
• Google Play: distributes the app.

Some of these services may process data outside Brazil, under contracts with data protection clauses, as the LGPD requires (art. 33). If you want to know who they are, write to contato@jesusinho.app and we will answer.

The app has no ads, uses no analytics or tracking tools and uses no artificial intelligence.

The app's permissions

• Notifications: for the verse of the day and the prayer reminder, only if you accept, two a day at most.
• Display over other apps: for Jesusinho to stay on your screen, only if you turn it on.
• Start at boot: to set the reminders again and bring Jesusinho back after a restart.
• Gallery (Android 8 and 9 only): to save a verse card when you ask.

When you tap "Share", the app hands the card or the text to the app you choose. What happens next follows that app's policy.

This site

• Beta test: we keep the email you leave and the page's language, only after you confirm through the link we send. We use it to send the Google Play test invite and news about the test, and nothing else. Legal basis: your consent (LGPD, art. 7, I).
• Contact: the name, email and message reach our mailbox so we can answer.
• Visits: we count visits with a tool that uses no cookies and does not identify you.
• Cookies: the site uses no cookies. The candles you light in the site's chapel are kept only in your browser, for a day.
• Security: to prevent abuse of the forms, the sender's IP address stays in the server's memory for a few minutes.

Your rights and how to use them

At any time you can: know what data we hold, receive it (in the app, under Export my data), correct it, delete it, withdraw a consent and ask who it is shared with (LGPD, art. 18).

To withdraw the sign-up consent, delete the account (see "Consent at sign-up"). To stop the news emails, turn off the switch in Settings or use the "não quero mais receber" (I no longer want to receive) link (see "Emails we send").

To delete the account and the cloud copy, use the app (Settings → Account → Delete account) or the page jesusinho.app/en/delete-account. Deletion is immediate. To leave the beta list or for any other request, write to contato@jesusinho.app; we answer within 15 days.

You can also complain to Brazil's National Data Protection Authority (ANPD).

How long we keep it

The account and the cloud copy are kept while the account exists. Once it is deleted, the data leaves the database right away; the provider's technical backups are overwritten within a few days. The beta email is kept until the tests end or until you ask to leave. Contact messages are kept as long as the conversation needs them.

The consent record and your email preference are kept while the account exists, and leave with it. The phone data leaves when you sign out, use "Erase everything", or uninstall the app.

Children

Jesusinho is for all ages and has no content unsuitable for children. An email is needed to create the account. We don't ask for age. For children under 12, the LGPD (art. 14) requires the consent of at least one parent or legal guardian: in that case, the parent or guardian creates the account and ticks the consent boxes. We don't handle children's data beyond what the account needs to work. If you are a parent or guardian and want a child's data deleted, use account deletion or write to contato@jesusinho.app.

Changes to this policy

If this policy changes, the date at the top changes with it. Important changes are also shown in the app before they apply.