Privacy policy

Concordância is maintained by Hiperplano, which decides how your personal data is processed (the controller).

Contact and data protection officer (LGPD, art. 41): the Hiperplano team — concordancia@hiperplano.com. Use this channel to exercise your data subject rights and to reach the data protection officer.

Company registration number (CNPJ) and registered address: will be shown here once published.

• Account: name, email and password (stored encrypted). If you sign in with Google, Apple or Microsoft, we receive your name, email and the account identifier at that service.
• What you create and do in the app: highlights, notes, reading plans, groups, chapters read and reading time (for the Stats page), and your preferences (language, appearance, translation).
• AI conversations: the question, the answer, the reference and translation of the passage, the model used and the credits spent.
• Subscription: plan, status, currency and dates. Card data is handled by Stripe or Mercado Pago and never reaches us.
• Technical data: as with any internet service, our servers log access data, such as IP address, browser type and date and time, for security and operation.
• Diagnostic data when you report a problem: if you use "Report a problem", we send along the page you were on (without address parameters), the app version, language, theme, screen size, browser, the Bible translation and the book and chapter open, the screenshot you attach and the email for a reply, if you choose to give one. We show all of this before you send. We do not send cookies, passwords or your notes. Reports can be made without an account and are read only by our team.
• Reading history: the chapters you open in the app and on the site while signed in (book, chapter, translation, day and time, how far you scrolled, time spent and where it came from, such as a plan). Only you can see it; it powers the Reading history page, and you can remove items, clear it all or turn recording off in Settings.
• Optional profile: full name, city, state, country, month and year of birth, photo and, if you wish, details about your church (see the section on sensitive data).
• Notification reminders: if you turn on browser alerts, we keep your browser's notification subscription (the push service address and encryption keys) and your alert preferences. It is deleted if you turn alerts off, if the browser cancels it or if the account is deleted.

• Providing the service, keeping your account, syncing your devices and charging the subscription: performance of a contract.
• Protecting the service against fraud and abuse, and fixing faults: legitimate interest.
• Meeting tax and accounting obligations: legal obligation.
• Sensitive data: notes, highlights, AI questions and groups may, by their nature, reveal religious belief. We process this content only to provide the service you asked for, with your specific consent when you use these features (LGPD, art. 11, I). You can withdraw it at any time by deleting the content or the account. We do not use this data for advertising or commercial profiling.
• When we need your consent for something, we will ask for it separately, and you can withdraw it at any time.

We do not sell your data and there are no ads in Concordância.

We share data only with those who help us provide the service (processors), to the extent necessary:

• Cloudflare, Inc. (United States): hosting of the site (Workers) and storage (R2) of public files, such as Bible texts, commentaries and maps;
• Supabase (servers in São Paulo, Brazil): database and accounts;
• Resend (United States): sending service emails (account confirmation, password recovery, alerts you turn on);
• OpenRouter and AI providers (United States): AI answers, when you use the AI. They receive the question, the passage in focus and the AI instructions, without your name, email or account identifier, so avoid including personal data in questions. We do not use your questions to train models, but each provider follows its own policy and we do not control what it allows;
• Google, Apple or Microsoft, if you choose to sign in with their account;
• Stripe and Mercado Pago: only when Premium billing opens. There are no payments today.

If you turn on notification reminders, your browser's push service (Google, Apple, Mozilla or Microsoft) delivers the alert and sees the address of your subscription.

Maps are loaded directly from OpenFreeMap by your browser, which tells them your IP address, as on any website.

Other people only see what you decide to share, in a group or by link. We may also disclose data to authorities when the law requires it.

Transfer outside Brazil: some of these services are in the United States, so your data may leave Brazil. This happens only to provide the service, under contracts requiring protection equivalent to the LGPD (art. 33, II) and, for the AI, because you choose to use the feature (art. 33, VIII). You can ask for more information through the contact channel.

We use cookies and the browser's local storage only for what the service needs: keeping you signed in and remembering your language and appearance. The details are on the Cookies page.

We keep your data while your account exists. You can delete your account whenever you want, inside the app: Settings → Account → Delete my account. Deletion is immediate and erases your notes, highlights, plans, AI conversations, settings, photo and your access; if you have an active subscription, it is cancelled.

If you cannot reach the app, request deletion at https://www.concordancia.com.br/site/excluir-conta or by email to concordancia@hiperplano.com from the account's email address. We handle it within 15 days.

We keep only an anonymous record that a deletion took place (no name, email or identifier) and what we must keep to meet legal obligations (such as tax and accounting ones, which stay with the payment provider) or to defend ourselves in proceedings, for the period the law sets.

If you lead a reading group, leadership passes to the longest-standing member; if nobody else is in the group, it is deleted. Your posts in groups are deleted along with the account.

You can delete your AI conversation history in Settings at any time. Alerts read more than 90 days ago, and any alerts older than 1 year, are deleted automatically. Anonymous metrics follow the periods in their own section.

Under the LGPD (art. 18), you can ask for:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
• data portability;
• deletion of data processed on the basis of your consent;
• information about who we share your data with;
• withdrawal of consent and objection to a processing activity.

To delete your account you do not need to write to anyone: use the “Delete my account” button in Settings → Account. To exercise the other rights, write to concordancia@hiperplano.com. We reply within the period set by law. If you are not satisfied, you can complain to Brazil's National Data Protection Authority (ANPD).

We adopt technical and organizational measures to protect your data: encrypted connections, encrypted password storage and database rules that restrict each account's access to its own data. No system is completely secure; if there is an incident that may pose a relevant risk to you, we will notify you and the ANPD, as the law requires.

Exceptional team access: personal content (notes, AI conversations and group posts) is not read day to day. Only in exceptional cases, to support a request from you or for security and abuse investigations, an authorized team member may view this content, and only after recording the reason. Every access is kept in a history that no one can change or delete.

Concordância is for people aged 13 or older. Children under 13 cannot create an account and we do not intentionally collect their data; if we learn of such an account, we will delete the account and the data.

From 13 to 17, use should be with the knowledge of the parents or legal guardian, and we process data in the best interest of the teenager (LGPD, art. 14). Parents and guardians can write to concordancia@hiperplano.com to ask for access, correction or deletion of data.

To know whether the app is fast and what breaks, we measure three things, with no third-party services and no cookies: technical errors, how long screens take to load, and a count of feature use (for example, how many plans were started per day).

• We do not send your email, name, notes, AI conversations, searches or the text you read. Page addresses lose everything after the “?”.
• From the browser we keep only the family (for example, Chrome on Android), the language, the theme and whether use was in the app or in a browser. There is no person identifier: a random code for each visit is mixed with a secret that changes every day and never links one day to the next.
• Raw data is kept for 30 days; aggregated totals for 13 months.
• The legal basis is legitimate interest (Brazilian LGPD, art. 7, IX), with anonymized data. You can turn it off in Settings → Privacy (“Help improve Concordância”). If your browser sends Do Not Track or Global Privacy Control, it starts off.

• The full profile is optional. You may enter your full name, city, state, country, month and year of birth and, if you like, your church: name, city, tradition or denomination and role.
• Church, tradition and role reveal religious belief and are sensitive data (Brazilian LGPD, art. 11). We only keep them with your specific consent, asked on the screen itself, and only to personalize suggestions for plans and groups.
• By default, only you see this data. For each item you can choose to show it to the members of your reading groups. The Concordância administrator does not see anyone's church, tradition or role individually.
• If you tick the separate option for anonymous statistics, we may count your tradition in aggregate totals, only when there are at least 10 people in the same group, and suggest your church's name to other people in the same city, without saying who entered it.
• You can download this data, delete it with one click in Settings, Profile, or withdraw your consent at any time. Deleting the account also deletes everything. We do not sell this data or use it for advertising.

We may update this policy. When a change is significant, we will notify you by email or inside the app. The effective date of the current version is at the top of the page.