Privacy Policy
Effective September 27, 2026
Umverso is built to keep what is yours on your phone. This policy explains what stays with you, what is sent, to whom and why. It follows Brazil's General Data Protection Law (LGPD); the Portuguese version prevails in case of conflict.
1. Who is responsible
The controller is Edilando Saturnino, who runs Umverso. Questions and requests about personal data: privacidade@umverso.com.br.
2. Summary
| Stays only on your phone | On your phone and in a copy in your iCloud or Google account | Is sent |
|---|---|---|
| Faith answer, feelings from the app's first screens, history and theme photos. | Name, interests, favorites, collections, My verses texts, streak and settings. | Anonymous app identifier, usage events, non-sensitive answers from the first screens, purchase data, crash reports and technical device data. |
3. What stays on your phone and the backup in your account
Stays only on your phone: your faith answer, the feelings you pick when you start the app, your history and the photos you use as themes. Age range and how you found the app are also left out of the backup (see item 5 about usage statistics).
On your phone and in a copy in your own account: name, interests, favorites, collections, My verses texts, day streak and settings. On iPhone, the copy goes to the iCloud of your Apple ID; on Android, to Google's automatic backup, if it is on. That is what brings your data back when you switch phones or reinstall the app. The copy is kept by Apple or Google in your account: we have no access to it.
Umverso account (optional): if you choose to sign in with Google in Settings > Account, we keep your email, your Google account identifier and an encrypted copy of the same data above (name, interests, favorites, collections, My verses, streak and settings) on our server to sync between devices, including between Android and iPhone. Without signing in, none of it goes to our servers. Your faith answer, feelings, age range and photos never go to the server, not even with an account.
On iPhone, you can turn the copy off in Settings > Backup and sync. On Android, backup is controlled in the system settings.
4. Faith data
Religious belief is sensitive personal data. That is why your faith answer and the feelings you pick never leave your device, not even for the backup in your account: they are only used on the phone to choose the verses shown to you. After reinstalling, you can set your faith again in Settings > Personalization > Faith tradition (optional).
5. What is sent
- Anonymous app identifier: a random code created on the device, not linked to your name, email or phone number.
- Usage events: screens opened, verses viewed, favorites, reminders turned on, purchases started and completed. Never the text you wrote.
- Non-sensitive answers from the first screens: how you found Umverso, age range, topics of interest and day goal.
- Purchases: the App Store or Google Play receipt and subscription status. Payment is handled by the store; we never receive card details.
- Crash reports: when the app crashes, the technical error and app context.
- Technical data: device model, OS, app version, language and region.
- Support: if you email us, we receive your email address and what you send.
6. Why we use it
- To unlock Premium and restore purchases (performance of a contract).
- To understand how the app is used and improve it (legitimate interest).
- To find and fix crashes (legitimate interest).
- To answer support requests (contract and legitimate interest).
Umverso does not show ads and does not track you for advertising. If ads are ever turned on, this policy will be updated first, and any tracking will only happen with your consent.
7. Who we share it with
- Apple and Google: payments, app distribution and, in your own account, the backup copy described in item 3.
- RevenueCat: subscription management.
- PostHog: anonymous usage statistics.
- Sentry: crash reports.
- Vercel: hosting for this website and the account server.
- MongoDB Atlas: account database (with the encrypted synced copy).
- Google: sign-in with Google, when you choose to sign in.
- Cloudflare: website address (DNS) and email forwarding.
These providers may process data outside your country (for example, in the United States or the European Union), under contractual clauses and the safeguards they offer. We do not sell data.
8. How long we keep it
- Usage events: up to 12 months.
- Crash reports: up to 90 days.
- Purchase data: as long as the stores and the law require.
- Support emails: up to 2 years after the last contact.
- Account and synced copy: while the account exists. When you delete the account, we delete everything right away; database backups are gone within 30 days. Unused sessions expire after 90 days.
9. Your rights
You can ask for confirmation of processing, access, correction, anonymization or deletion, portability, information about who we share data with, and withdrawal of consent. Email privacidade@umverso.com.br; we reply within 15 days.
10. How to delete your data
- On your phone: open Umverso and tap Settings > Privacy > Delete my data. Everything on the device is erased.
- The copy in your account: on iPhone, the same option deletes the iCloud copy (without internet at that moment, it is deleted the next time the app opens). Other devices with the same Apple ID keep their data and may send it back; to delete everything, delete on each device. On Android, the copy in Google's backup is replaced by an empty one on the next backup, which usually happens within a day. You can also delete backups in your Google or iCloud account settings.
- Data already sent: on the same screen, after deleting, tap Write an email. The message already includes the device identifier, and we delete the usage events and crash reports linked to it. You can also email privacidade@umverso.com.br with the identifier.
Deleting data does not cancel your subscription. To cancel, use your App Store or Google Play subscription settings (see Support).
To delete your Umverso account and the synced copy on our server, see How to delete your account.
11. Children and teens
People under 18 may use Umverso with a parent or guardian's supervision. For users who say they are under 18, the app never asks for tracking permission.
12. Security
Data sent is encrypted in transit (HTTPS). What stays on your phone is protected by the device's own system. In the account, the synced copy is stored encrypted (AES-256), sign-in has no password (Google handles it) and app access is kept in the phone's secure storage.
13. Cookies on this website
This website does not use tracking or advertising cookies. Signing in with Google uses a technical cookie that lasts up to 10 minutes, only to protect the sign-in itself.
14. Changes
If this policy changes, the date at the top will be updated and, for important changes, we will let you know in the app.