Privacy Policy

Data we collect

Depending on how you use the App, we may process:

• Account and authentication: Firebase user identifier (UID), email address, display name, profile photo (when provided), sign-in method (Google, Apple, or email/password), and email verification status.
• Devices and sessions: technical installation/session identifier, device model or name, platform, operating system version, access date and time, session status, and connection records when needed for security.
• AI content: questions, commands, image-generation prompts, speech transcripts, and photos/images that you upload or capture. Generated images, job identifiers, and moderation results may be associated with your UID.
• Financial records and history: expense/income entries and chat history, which may be stored locally on your device.
• Technical data: language, time zone, date/time, request identifiers, crash and performance information, and security signals.
• Advertising and subscriptions: advertising information subject to applicable permissions and rules, and purchase/subscription status for premium features.

The App does not need to receive your Google or Apple password. Email/password authentication is handled by Firebase Authentication. Raw audio used for speech transcription is not stored on our servers; the resulting text may be transmitted for processing.

Accounts, required sign-in and connected devices

AI image generation requires sign-in with an App account on the devices and versions where this feature is available. You can sign in with Google, Apple, or email and password. Other features may remain accessible without an account, depending on their configuration and availability.

We use Firebase Authentication to identify users and Firebase App Check to help confirm that protected requests originate from a genuine app instance. These checks involve technical tokens transmitted to the authentication and security services.

The Connected devices feature stores enough technical information to display devices associated with the account, identify your current device, show recent activity, and allow you to request that other sessions be disconnected. A removed device may detect the revocation when it reconnects to the service; locally stored data on that device is not necessarily erased remotely.

AI processing, image generation, moderation and consent

To handle requests, the App may send typed messages, speech transcripts, uploaded images, generation prompts and necessary technical identifiers to servers operated by the company. Primary processing uses our own infrastructure and AI models, including locally operated services such as Ollama and image-generation workflows.

Generated images may be stored temporarily on the server and/or downloaded onto your device. Prompts, images and results may undergo automated safety and content moderation checks to detect prohibited requests, prevent misuse, review reports and protect the platform. Image-generation availability may vary by operating system, app version or service maintenance.

If primary infrastructure is unavailable, certain text requests may be processed by an external AI provider such as Groq, where the fallback service is enabled. Data shared with such services is subject to applicable contractual protections and processing practices.

Purposes and service providers

We process information to provide App functions; authenticate accounts; register and secure sessions; generate and moderate AI content; offer support; prevent fraud or misuse; diagnose failures; and manage advertising and subscriptions where applicable.

Depending on which integrations are enabled, necessary information may be processed by:

• Google Firebase: Authentication, App Check, and enabled diagnostic or analytics services.
• Google and Apple: federated login, app-store operations and payment management where applicable.
• RevenueCat: subscription status and entitlement management.
• Google AdMob and mediation networks: advertising, measurement and ad-fraud prevention, subject to applicable permissions.
• Notification services: our own infrastructure and/or push notification providers configured in the App.
• Fallback AI services: when used to process a user's request.

We require our service providers to comply with their applicable data-protection obligations. We do not sell private chat content or image-generation prompts to advertisers.

Storage, retention and deletion

On your device: chat history, downloaded images, preferences and certain financial information may remain in local storage until you delete them using available controls or uninstall the App, depending on the operating system.

On our servers: we may retain account information, sessions, image-generation jobs, generated files and security records for as long as needed to provide the relevant features, prevent abuse and comply with applicable obligations. Retention periods differ by data category; information required by law or needed to investigate fraud may be kept for the applicable period.

Account deletion initiates removal of associated data managed by the App and deletion of the Firebase identity after security checks. Files and chat history already stored on other devices may need to be deleted on those devices. Backups and records subject to legal requirements may follow their applicable retention cycles.

Device permissions

• Microphone and speech recognition: capture speech, convert it to text and send the text to the assistant when requested.
• Camera: capture photos you choose to upload or analyze.
• Photos and files: choose images, import files, save or share content.
• Notifications: deliver alerts when authorized.
• Advertising tracking (ATT on iOS): when requested and allowed by you, where applicable.

You can review or revoke permissions in your device settings. Features that rely on those permissions may become unavailable.

Your rights, account deletion and subscriptions

In My Account → Delete my account, signed-in users can request deletion directly in the App. For security, we may require fresh authentication through Google, Apple or a password. You can also use My Account → Connected devices to disconnect other sessions.

If you cannot access your account, or wish to request access, correction, information, objection or deletion regarding your data, contact [email protected]. Include your account email and a description of your request. We may ask for appropriate evidence to confirm account ownership, but will never ask for your password.

Deleting your account does not automatically cancel subscriptions purchased through the App Store or Google Play. To stop renewals, cancel the subscription through the relevant store. Signing out does not delete your account.

Security and international data transfers

We use technical and organizational safeguards, including encrypted connections, authentication, app integrity checks, access controls and content moderation. No service can guarantee absolute security.

Some providers, including authentication, infrastructure, advertising and subscription services, may process data in other countries. When personal data is transferred internationally, we seek to apply safeguards required by relevant laws, including Brazil's General Data Protection Law (LGPD), as applicable.

Children and minors

The App is not directed to children under 13. Where local law requires a higher minimum age or parental permission, those requirements also apply. If a parent or guardian believes that a child has provided personal information improperly, they may contact us to request review and removal.

Changes and contact

We may update this Policy to reflect changes in the App, service providers or legal requirements. Material changes will be communicated within the App or on this page as appropriate.

Data controller: APPS STARS DESENVOLVEDORES LTDA
Privacy and support contact: [email protected]
Website: https://www.appstarsbiblia.com