Privacy Policy

1. Data we collect

Data you give us

• Account data: name, email address, profile photo (when you sign in with Apple or Google, we receive the name and email — possibly a relay email — that you allow), preferred language, time zone, authentication identifiers. We never receive or store your Apple, Google or email password.
• Profiles: profile names, avatars, whether a profile is a Kids profile, language and playback settings.
• Requests and messages: radio requests ('play something about…'), search queries, the reason you give when deleting your account, support messages and any feedback.
• Purchase information: we receive from Apple, Google or Stripe the fact that you subscribed, the plan, status, renewal and trial dates, country and an anonymised transaction identifier. Card numbers and full payment details are handled by the payment provider and never reach us.

Data generated by your use of the Services

• Viewing and listening activity: which videos, series, episodes, radio programmes and short clips you open, how long you watch or listen, where you stopped (to resume later), completions, replays, and for Shorts the seconds watched and whether you skipped, liked, shared or opened the full video. This is stored per profile.
• Favourites, watch-later lists, likes, follows (pastors and channels), search history, category choices and download activity.
• Free-tier usage: the amount of viewing time used in free mode, used to apply limits.
• Notification interactions: whether a push notification was delivered or opened.

Technical and device data

• Device type, model, operating system and version, app version, language, screen size, time zone, IP address (from which we may infer approximate country/region), network type, crash reports and performance diagnostics.
• Push notification tokens (Firebase Cloud Messaging / APNs), unique installation identifiers and, on iOS, the App Tracking Transparency choice you make.
• Analytics events (screen views, feature usage, conversion events such as trial start or subscription) collected through Firebase Analytics and Superwall, and Meta SDK events when you have allowed tracking.
• Server logs: request time, endpoint, IP address, user agent, and error information, kept for security and debugging.

Data from third parties

Sign-in providers (Apple, Google) send us the data you authorise. App stores and Stripe send us subscription status. We do not buy data about you from data brokers.

Data we do not collect

We do not intentionally collect sensitive personal data (health, biometric, precise location, financial account numbers, political opinions). Your religious interest can be inferred from the nature of the Services and from what you watch; we treat viewing data with care, use it only for the purposes below and never sell it. If you contact us with information you consider sensitive, we use it only to answer you.

2. How we use data and legal bases

Where we rely on legitimate interests we have balanced them against your rights; you may object (section 13).

3. Personalisation, profiling and automated decisions

DivineTV personalises what you see. For each profile we build a taste model from recent activity: what you watched to the end, liked, skipped quickly or replayed, which pastors/channels you engage with, how much you prefer sermons versus Bible stories, and automated "mood" classifications of content (for example comforting, energetic, teaching-heavy). This model is stored with your profile and is used to order the Shorts feed, home sections and recommendations. It is not used to make decisions with legal or similarly significant effects on you, to set prices, or to infer sensitive characteristics for any other purpose.

Kids profiles only receive content flagged as suitable for children. Flags are produced automatically and may be wrong; they are not a decision about you.

Free-tier limits (for example a cap on free viewing time) are applied automatically based on your usage counters. If you believe a limit was applied in error, contact us and a person will review it.

You can reset personalisation by deleting a profile, and remove all of it by deleting your account.

4. Third parties that process your data

We use the following categories of service providers ("processors"), who may only use your data to provide their service to us:

We may replace or add providers; the current list is always available in this Policy.

5. YouTube, Google and other embedded services

DivineTV uses the YouTube API Services to list public videos from selected channels and the YouTube embedded player to play them. When a YouTube video is loaded, your device connects to YouTube/Google servers; Google may collect your IP address, device information, viewing data and, if you are signed into Google in your device's browser, associate the activity with your Google account, and may set cookies or use similar technologies. This is governed by the Google Privacy Policy (https://policies.google.com/privacy) and YouTube Terms of Service (https://www.youtube.com/t/terms). You can review and delete data Google holds about you through Google's security settings (https://security.google.com/settings/security/permissions) and YouTube history controls. We use privacy-enhanced embedding where available, we do not receive your Google account information, and we do not store any YouTube user data beyond what your device requests directly from YouTube.

We store, for catalogue purposes, public metadata about videos (title, description, thumbnail, duration, channel) obtained through the YouTube API Services, refreshed periodically and deleted when a video is removed from the catalogue, in line with the YouTube API Services Developer Policies.

Links to churches, ministries, social networks or other websites lead to services with their own privacy policies.

6. Artificial-intelligence processing

We use automated systems and third-party AI models to run the Services. What is sent to AI providers, and what is not:

• Sent: video titles, descriptions, transcripts and caption text; text of short clips; the text of your radio requests; your search queries when a full-text search returns few results; the free-text reason you give when deleting your account; radio scripts and their review.
• Never sent: your name, email address, identifiers, payment information, device data, or your viewing history. Requests are sent without linking them to your account, and providers are contractually limited to processing them for us.
• Purpose: classify content (mood, audience suitability, teaching depth, quality), choose clip boundaries and on-screen quotes, understand what you are looking for, route your request to matching content, produce radio programmes, and detect content that violates our editorial rules.

AI outputs are used to organise and rank content, not to make legally significant decisions about you. Transcripts of videos may be produced by fetching publicly available captions or by running speech-to-text software on our own servers; they are stored as content metadata, not as personal data about you.

7. Cookies, local storage and similar technologies

The apps store settings, session tokens, cached content and offline downloads on your device. The website uses strictly necessary cookies and local storage for sign-in, session, language and playback state, and may use analytics cookies where you consent. YouTube's embedded player and Google may set their own cookies as described in section 5. You can clear site data in your browser and uninstall the app to remove local data; some features will stop working.

We honour "Do Not Track" and Global Privacy Control signals by treating them as an opt-out of analytics cookies where technically possible.

8. Notifications and marketing

With your device permission we send push notifications about new content from pastors you follow, featured videos and reminders at times chosen for your time zone. You can disable them in Settings or in your device settings at any time. We send transactional emails (account, purchases, deletion confirmation, security) as part of the Services, and marketing emails only with your consent or where permitted by law; every marketing email includes an unsubscribe link and unsubscribing takes effect immediately.

9. Sharing and disclosure

We share personal data only: (a) with the processors listed in section 4, under contracts that restrict their use; (b) with Apple, Google or Stripe to complete and manage purchases; (c) when you ask us to (for example sharing a video link through your device's share sheet — the recipient app receives only the link and text you share); (d) with authorities, courts or third parties when required by law, to enforce our Terms, to protect the rights, property or safety of DivineTV, our users or the public, or in connection with rights-holder notices; (e) with professional advisers under confidentiality; and (f) with a buyer or successor in a merger, acquisition, financing or sale of assets, in which case this Policy continues to apply.

We do not sell personal data, and we do not share it with third parties for their own direct marketing. We do not share your viewing history with pastors, churches, channels or other users; a "follow" is not visible to the followed person.

10. International transfers

We are based in Brazil and our providers operate in the USA, the EU and other countries. Your data may therefore be transferred to and processed in countries whose laws differ from yours. Where required, we rely on adequacy decisions, standard contractual clauses, the safeguards in article 33 of the LGPD and the provider's own certifications (for example the EU-US Data Privacy Framework where the provider participates). You may ask us for details of the safeguards.

11. Retention

• Account, profiles and activity data: for as long as your account exists. When you delete your account, profiles, favourites, watch history, Shorts activity, follows, push tokens and personalisation data are deleted within 30 days from live systems and within 90 days from backups.
• Account-deletion reason: kept anonymised (category and text without any identifier) to improve the Services.
• Purchase and billing records: 5 years after the transaction, or longer if required by tax and accounting law.
• Server and security logs: up to 12 months.
• Analytics data: retained by the analytics provider under its own retention (Firebase: up to 14 months for user-level data), in aggregated or pseudonymised form.
• Email delivery records: 12 months.
• Rights-holder notices and legal correspondence: as long as necessary to handle the matter and defend claims.

12. Security

We protect data with encryption in transit (TLS), encryption at rest with our providers, row-level access controls in our database, signed and expiring playback tokens, secrets kept only on servers, access limited to the people who need it, and monitoring. No system is perfectly secure; if we learn of a breach that creates risk to you we will notify you and the competent authority (in Brazil, the ANPD) as the law requires.

13. Your rights

Depending on where you live you may have the right to: confirm whether we process your data; access it and receive a copy; correct incomplete or outdated data; anonymise, block or delete data that is unnecessary, excessive or processed unlawfully; port your data to another provider; know with whom we share it; know the consequences of refusing consent and withdraw consent; object to processing based on legitimate interests; request review of automated decisions; and lodge a complaint with a supervisory authority (in Brazil the ANPD; in the EU your national authority; in the UK the ICO).

How to exercise them: most things you can do yourself in the app — edit profiles, manage favourites and follows, disable notifications, and delete your account from Settings (which removes your data as described in section 11). For anything else, email yancds@gmail.com from the address linked to your account, or write to R DEP AT LIO DE ALMEIDA BARBOSA 354, Curitiba, PR 82560-460, Brazil. We answer within 15 days (LGPD) or one month (GDPR), extendable where the law allows, and we may need to verify your identity. We will not discriminate against you for exercising your rights.

14. Children and Kids profiles

Accounts may only be created by adults. Kids profiles are created by the adult account holder; the only data they generate is viewing activity (what was watched and for how long), which is stored under the adult's account and used to resume playback and to keep the profile's content appropriate. We do not use Kids profile activity for advertising or for personalisation outside that profile, and we do not knowingly collect personal data directly from children. If you believe a child provided us data directly, contact yancds@gmail.com and we will delete it.

15. Region-specific disclosures (Brazil, EU/UK, USA)

Brazil (LGPD)

Appsolutely LTDA is the controller. Our encarregado can be reached at yancds@gmail.com. You have the rights in article 18 of the LGPD as described in section 13. You may file complaints with the Autoridade Nacional de Proteção de Dados (ANPD). Processing of data revealing religious conviction is limited to what is inherent in offering a Christian streaming service and is based on the performance of the contract and, where applicable, your consent.

European Economic Area, United Kingdom and Switzerland (GDPR / UK GDPR)

Legal bases are listed in section 2. Data revealing religious beliefs (which may be inferred from your use of the Services) is processed on the basis of your explicit consent given when you create an account and use the Services, and as necessary to perform our contract with you; you may withdraw consent by deleting your account. Transfers outside the EEA/UK are described in section 10. You may complain to your local data protection authority.

California and other US states (CCPA/CPRA and similar laws)

In the last 12 months we collected the categories of personal information listed in section 1 (identifiers, commercial information, internet activity, geolocation inferred from IP, inferences for personalisation) for the purposes in section 2, and disclosed them to the service providers in section 4. We do not sell personal information and we do not "share" it for cross-context behavioural advertising, except that measurement SDKs (Meta) may be considered sharing where you have allowed tracking — you can prevent this by declining tracking on iOS or contacting us. We do not use or disclose sensitive personal information for purposes other than providing the Services. California residents have the rights to know, delete, correct, opt out and not be discriminated against; exercise them through yancds@gmail.com. Authorised agents may act for you with written permission. We do not knowingly sell or share the personal information of consumers under 16.

Other jurisdictions

If your local law grants additional rights, we will honour them upon request.

16. Changes to this Policy

We may update this Policy from time to time. We will post the new version at divinetv.app/privacy and update the "Last updated" date; for material changes we will notify you in the app or by email before they take effect. Your continued use after that date means you accept the updated Policy.

17. Contact

• Appsolutely LTDA (controller / encarregado)
• R DEP AT LIO DE ALMEIDA BARBOSA 354, Curitiba, PR 82560-460, Brazil
• Phone: +55 41 98780-5936
• Email: yancds@gmail.com