Privacy Policy — Christ Embassy Loveworld

Last updated: May 2, 2026

This Privacy Policy describes how the Christ Embassy Loveworld application ("App", "we", "our") collects, uses and protects your personal data. The App is operated by Christ Embassy Loveworld, headquartered at Rua Val Paraíso, 827, Santo Afonso, Novo Hamburgo/RS, Brazil ("Operator").

1. Data we collect

1.1 Provided by you

Account: name, email, password (hashed), phone (optional), bio (optional), profile photo (optional)
User-generated content: prayer requests, testimonies, community posts, comments, photos and videos uploaded to the community
Interactions: prayers for others, likes, video favorites

1.2 Generated by usage

Unique user ID assigned at registration
Push notification token (if you authorize notifications)
Preferred language, onboarding completion flag, view preferences

1.3 We do NOT collect

Geographic location
Contacts from your address book
Browsing history
Payment data (PIX/bank transfers happen outside the app)
Biometric data
Advertising identifiers

2. How we use your data

Purpose	Legal basis
Create and maintain your account	Contract performance
Display personalized content (devotionals, videos, live streams)	Contract performance
Enable community interaction (posts, prayers, comments)	Consent
Send notifications about answered prayers	Consent
Moderate content per our Terms of Use	Legitimate interest
Comply with legal obligations	Legal compliance

3. Where data is stored

Data is stored on Supabase servers.

Authentication data is encrypted. Passwords are stored using one-way hashing.

4. Data sharing

We do not sell your data.

We share data only with:

Supabase (database and authentication provider)
Apple (push notifications, when enabled)
YouTube/Google (only for public video playback — your data is not sent)
Public authorities when required by law or court order

5. Your rights

You have the right to, at any time:

Access your data
Correct incomplete or outdated data
Request deletion of your account and all associated data
Withdraw consent for notifications or community participation
Receive a copy of your data in a readable format
File a complaint with your local data protection authority

To exercise any right, email contato@christembassy.org with subject "Privacy - [your name]".

6. Account deletion

You may request deletion of your account at any time by emailing contato@christembassy.org. Deletion removes:

All profile data
Prayer requests and testimonies
Community posts and comments
Interaction history

Publicly shared content may remain archived for legal or moderation purposes for up to 30 days.

7. Children

This app is not intended for users under 13 years of age. We do not knowingly collect data from children. If we identify an account of a child under 13, it will be deleted.

8. Security

We adopt technical and organizational measures to protect your data:

HTTPS/TLS connections
Row-Level Security (RLS) at the database
Cryptographic password hashing
Administrative access restricted to authorized users

Despite this, no system is 100% secure. In the event of an incident affecting your data, you will be notified.

9. Cookies and similar technologies

This app does not use cookies. We store only local operational information via iOS UserDefaults (language, session, preferences).

10. Changes to this policy

We may update this policy periodically. We will notify you about relevant changes via email or in-app notice.

11. Contact

Email: contato@christembassy.org
Address: Rua Val Paraíso, 827, Santo Afonso, Novo Hamburgo/RS, Brazil