Privacy Policy

Last updated: October 23, 2026

1. Who we are

Gratia is maintained by PROSPER ASSESSORIA E TECNOLOGIA LTDA (trading as Prosper Solutions), Brazilian company registration (CNPJ) 55.873.470/0001-51, based in Osasco/SP, Brazil, the controller of the personal data processed in the app. Data protection officer (LGPD, art. 41): Kamila Dantas Takaki, at privacidade@appgratia.com. This Policy explains what data the app processes, why, where it is kept and what your rights are.

2. What stays only on your device

Never sent to our servers: the Spiritual Journal; the date of your last confession, the reminder of your next confession and your penitential notes; the name you enter at the start; the app preferences; the access PIN; the affirmation shown in the widget; and your progress in the Journeys (the days marked as prayed). This data is kept in the app's private storage, separated by account, and is deleted when you reset the app, delete the account or uninstall the app. If Android backup is turned on in your Google account, Android itself may include it in the backup, encrypted and under your control — we have no access to it. Reminders are scheduled on the device itself, and the notification text may appear on the lock screen, depending on your device settings.

3. What is kept on the server

Account: by default, an anonymous account, with no name or email; if you link an email, it is used to sign in. Kept on the server, linked to the account: the reflections you choose to save (including the text you typed to generate them); the history of verses already shown, to avoid repetition; the usage count of reflections, Discernment messages and voice narrations; the profile photo, if uploaded; the record of your consent (date, terms version, language, device system and app version), as proof of acceptance; the content you report through "Report content" (the AI-generated text and the reason, for review — what you wrote is not sent); and, for Gratia Pro subscribers, the subscription status (plan, store, expiration, trial period and renewal), received from RevenueCat. The profile photo is stored at a unique address that is not listed or shown to other users; anyone with that exact address can open the image. Payment data (card, billing name and address) stays with the App Store or Google Play and never goes through the app or our servers. Discernment conversations are not stored: each question is processed and discarded.

4. Purposes and legal bases

We process data to: generate reflections and answers and keep what you decide to save (specific consent for sensitive data — LGPD, art. 11, I); maintain your account and subscription (performance of contract — art. 7, V); comply with the legal obligation to keep access records (art. 7, II, and Brazilian Civil Rights Framework for the Internet, art. 15); and review reported content, prevent abuse and keep the app secure (legitimate interest — art. 7, IX). We never use your data for advertising and never sell it.

5. Artificial intelligence

To generate reflections and answers, the text you type in the Daily Encounter and in Discernment is sent to Anthropic (Claude model); for subscribers' voice narration, the reflection text is sent to Google (Gemini). We send only what each request needs, without name, email or other identifying data. These providers are engaged through their paid business services, under which the data sent is not used to train their models. Processing takes place outside Brazil, which constitutes an international data transfer (LGPD, art. 33), carried out based on your consent and with providers that adopt compatible security standards. The Journal and Confession are never sent to artificial intelligence.

6. Sensitive data: religious belief

Because it is a faith app, using Gratia may reveal your religious belief — sensitive personal data (LGPD, art. 5, II). This data is only processed with your specific and highlighted consent, requested the first time you open the app, and only for the purposes described here. You can withdraw your consent at any time by deleting the account in the app.

7. Access records (Brazilian Civil Rights Framework for the Internet)

In compliance with art. 15 of Law No. 12,965/2014, we keep records of access to the app — IP address, date and time of use, linked to the account — for 6 months, in a controlled, restricted-access environment, under confidentiality. They are only provided under a court order. Because this is a legal obligation, these records are kept until the period ends even if the account is deleted (LGPD, art. 16, I), and are then deleted automatically. Server technical logs keep only operational metadata (for example, date, response type and errors), never the content of what you write or of the generated answers.

8. Who we share data with

We use these providers, which process data on our behalf and under our instructions: Supabase (database, authentication and storage, with the database hosted in Brazil), Anthropic and Google (artificial intelligence, see item 5), App Store and Google Play (subscription payments) and RevenueCat (subscription management — receives the account's internal identifier, with no name or email, and the store purchase history, with processing outside Brazil). We do not sell personal data. Authorities only receive data under a court order or when required by law.

9. Security

All communication between the app and the servers is encrypted. On the server, database access rules ensure each person can only read their own records, and administrative access is restricted. The Journal and Confession stay only on your device and, with Gratia Pro, are protected by a PIN or biometrics. No measure eliminates all risk; if a relevant security incident occurs, we will notify you and the Brazilian National Data Protection Authority (ANPD), as required by law.

10. How long we keep data

Server data is kept while the account exists. When you delete the account, it is permanently deleted, except access records, kept for the legal period of 6 months (item 7), and anything the law requires otherwise.

11. Minors

Gratia is intended exclusively for people aged 18 or older and does not knowingly collect data from children or adolescents. If we learn that an account belongs to someone under 18, it may be closed and its data deleted.

12. Your rights

You can delete the account at any time in the app, in the Profile Menu — this permanently deletes the account and the data linked to it on the server (saved reflections, verse history, usage count, profile photo and subscription record, including the RevenueCat record) and deletes from this device the Journal, Confession, name, preferences, PIN, Journey progress, scheduled notifications and widget affirmation. Deleting the account does not cancel an active subscription: cancellation is done in the store. The other rights under art. 18 of the LGPD — such as confirmation and access, correction, portability, information about sharing and withdrawal of consent — can be exercised by email to privacidade@appgratia.com. You may also file a complaint with the ANPD or with the data protection authority of your country.

13. United States residents

If you use Gratia in the United States, this section supplements the rest of this Policy (California Online Privacy Protection Act and similar state laws). Personal information we collect: the categories in items 2 and 3 (account identifier, optional email and profile photo, saved reflections and the text used to generate them, usage counts, consent record, reported content, subscription status) and access records with the IP address (item 7). It comes from you, your device, the app stores and RevenueCat. We do not sell personal information, do not share it for cross-context behavioral advertising, do not show ads and do not allow third parties to collect, through Gratia, information about your activity on other apps or websites over time. Do Not Track signals: because Gratia does not track you across third-party services, the app does not change its behavior in response to them. To review, correct or delete your information, use account deletion in the app or write to privacidade@appgratia.com; you will not be treated differently for exercising these rights. The effective date of this Policy is the last-updated date shown at the top; material changes are communicated in the app before they take effect (item 14).

14. Changes

This Policy may be updated. Relevant changes will be communicated in the app and, when necessary, we will ask for new consent.

15. Contact

Privacy and data protection: privacidade@appgratia.com (data protection officer: Kamila Dantas Takaki). General support: support@appgratia.com. PROSPER ASSESSORIA E TECNOLOGIA LTDA, CNPJ 55.873.470/0001-51, Osasco/SP, Brazil.