This policy explains what data the Fé Viva app collects, why, and what rights you have over it.
Fé Viva is developed and operated by OiAlfredTech. Questions about this policy or your data can be sent to tech@oialfred.com, the contact published on the operator's official website.
Account and identifiers. By default, the app creates an anonymous account tied to your device through random credentials. If you create a recoverable account, we store your name, email, public nickname, internal account identifier, and password — never in plain text, always as a bcrypt cryptographic hash. Your nickname may appear in the monthly ranking and in groups you join.
Your faith tradition. Christian tradition (e.g. Catholic or Evangelical) and your preferred Bible translation/canon. This is a sensitive data category under Brazil's LGPD (it reveals religious belief) and is only collected with your explicit consent, given during the app's initial setup.
Personal content and prayer care cycle. Spiritual journal entries and optional photos, prayer requests, updates, testimonies, notes and highlighted verses, reading plans and progress, quiz answers and scores. A request starts private and is shown to other people only according to your choice: group, group leaders, community, or community without your name. We also process the number of people who indicated they are praying and the request's follow-up state.
Health in free text. Requests, testimonies, journals, and materials are free-text fields and may contain health information or diagnoses if a user chooses to provide them. This is optional and is not required to use the app. Do not publish medical records, addresses, phone numbers, minors' data, or another person's sensitive information.
Groups and shared content. If you use study groups, we process the group name and description, participant list, materials, and community actions, including category, description, optional date, capacity, status, and participation. This data is shown only to authorized group participants. We also keep community-rules acceptance, blocks, reports, moderation decisions, and audit records needed to prevent abuse and enforce the Terms of Use.
Private on-device tools. Spiritual journeys, Bible memory cards, review schedules, reading preferences, and prayer-library progress stay only on this device and are not sent to the server in the normal operation of those features. Clearing app data may remove them.
Catholic leadership verification. If you request verification as a seminarian or priest, we process the declared role, parish or seminary name, contact phone number, optional message, and the status and history of the review. Requests are reviewed manually.
Subscriptions and purchases. When subscriptions are available, we keep the channel, product, subscription status, dates, customer identifiers, and purchase tokens needed to verify, restore, cancel, and prevent fraud. Fé Viva does not receive your full card number.
Optional usage data. PostHog is initialized only after you turn on “Help improve Fé Viva” in Profile. Events use an internal pseudonymous identifier and do not include your name, email, tradition, Bible translation, prayer requests, or text you read. The option starts off and can be revoked in the same place.
Technical diagnostics. When configured, Sentry receives failures and technical performance data needed to investigate errors. The SDK uses sendDefaultPii=false, so default personal data is not attached; the provider may still process technical metadata inherent to the connection and event under the project configuration.
Notifications. Devotional and Bible-memory reminder times are stored only on the device. When you attach a reminder to a synchronized prayer request, its date and time are part of that request on the server; the device operating system displays the notification locally.
We do not use your data for advertising and do not sell it. Group content is shared only with relevant participants; community requests and testimonies are shown according to the author's privacy choice; other necessary sharing is listed in section 4.
We don't share data with anyone else, and we don't sell it.
We process account, content, group, and purchase data to provide the requested service (LGPD Art. 7, V). Security, abuse prevention, reports, and audit data are processed under applicable obligations and legitimate interests in keeping the community safe, while preserving user rights. Religious preference and leadership requests may reveal religious belief and are treated as sensitive data based on the explicit choice made in the app. PostHog analytics uses separate consent: enabling it is optional, and revoking it stops new collection. Technical diagnostics are limited to what is needed for service security and reliability.
Main account data remains while the account exists. In-app deletion removes or anonymizes the account and associated application data on the server. Shared content may be removed or anonymized to preserve the integrity of conversations, reports, and moderation decisions. Minimum security, fraud, billing, and audit records may be retained as needed to meet legal duties, resolve disputes, and prevent recurring abuse.
If a subscription provider is linked, the app asks for confirmation, cancels the Stripe subscription immediately and/or stops renewal on Google Play before deleting the local account. The account is preserved if a provider does not confirm. By confirming, you also forfeit remaining Plus access; external management links remain available as an alternative.
Technical and usage events already received follow the retention configured in the Sentry and PostHog projects and are not automatically erased merely by deleting the account or revoking analytics. You may request your rights through the contact in section 1; whether an event can be located depends on its identifiers and storage form.
Under LGPD Art. 18, you may request confirmation of processing, access, correction, deletion, and portability of your data. Preference correction and account deletion are already available directly in the app (Profile screen). For other requests, write to tech@oialfred.com.
Passwords stored with bcrypt hashing (never in plain text), always-encrypted connection (HTTPS), and session token authentication.
This first version of Fé Viva is intended exclusively for people aged 18 or older and does not knowingly collect data from minors. Do not publish names, photos, diagnoses, location, or other identifying data about children or teenagers.
We may update this document from time to time. Material changes will be communicated within the app.