1. Who we are
The Bible Explained (the “Service”) is run by Synergy Tecnologia Ltda. (CNPJ 51.033.169/0001-89), a company organized under the laws of Brazil (“The Bible Explained,” “we,” “us,” or “our”). We decide how and why your personal information is used, which makes us its controller.
This Privacy Policy explains what we collect when you use thebibleexplained.app and its members area, how we use it, who helps us, and the choices you have. It’s part of our Terms of Service.
2. Information we collect
Information you give us
- Account. Your name, email address, and password, or the account you sign in with (such as Google). Sign-in is handled by Clerk, so we never see your password.
- Membership and billing. Payments are handled by Stripe, and your card details go straight to Stripe, never to our servers. From Stripe we keep your customer ID, your plan, and your membership’s status and renewal or end dates. Stripe also gives us your billing country and the last four digits and brand of your card, for receipts and disputes.
- Your goals. If you set a daily goal, we save how many videos a day you chose, the time of day you prefer to watch, and your time zone, so that “today” and your streak follow your own calendar.
- Morning reminder. If you turn it on for a device, we save the address your browser’s push service gives us for it, the keys that encrypt messages to it, and its time zone, so the reminder arrives around 7am your time. Turn it off under your daily goal and we delete them.
- Messages. What you write to us, for example for support or a refund.
Information collected as you use the Service
- Your progress. Which videos you’ve finished and on which day, to show your progress, count your daily goal, and suggest what to watch next.
- Usage and device data. Pages you visit, links and buttons you click, how far you scroll, when you start a video and how much of it you watch, where you came from (such as the referring site or campaign), and your browser, device, operating system, and IP address, from which we estimate your country and city.
- Session recordings. Our analytics tool can record how pages are used (mouse movements, clicks, scrolling, and what was on screen) so we can find and fix problems. Text typed into form fields is masked, and we don’t see payment details, which are entered on Stripe’s pages.
- Country. We check the country your connection comes from to know whether memberships can be sold there.
3. How we use it
- To create and secure your account, and to keep you signed in.
- To sell, renew, and manage your membership, and to check that it’s active before a video plays.
- To remember your progress and goals, and to pick up where you left off.
- To understand how the Service is used, so we can fix problems and make it better.
- To measure our ads on Instagram and Facebook: whether people who saw or clicked one went on to create an account or become members, so we can show them to people likely to find the Service useful.
- To prevent fraud, abuse, and unauthorized access.
- To answer your messages, and to tell you about your account, your membership, and important changes.
- To meet our legal, tax, and accounting obligations, and to enforce our Terms.
We use your information because we need it to provide the Service you signed up for, because we have a legitimate interest in keeping the Service secure and improving it, because the law requires it (as with billing records), or, where the law requires it, because you agreed.
We don’t sell your personal information. We share a limited part of it with Meta to measure our own ads (see “Who helps us”), and you can opt out of that. We’ll send you newsletters or product news only if you’ve agreed to get them, and every one will have a link to unsubscribe.
4. Who helps us
We share personal information only with service providers that help us run the Service. They may use it only on our behalf and under contract, except where noted:
- Clerk, for accounts and sign-in.
- Stripe, for payments, receipts, and the page where you manage your membership. Stripe also uses payment data under its own privacy policy, for example to prevent fraud.
- Cloudflare, which stores the videos and streams them to you.
- Vercel, which hosts the website, and a managed database provider, which stores your goals, progress, and membership status.
- PostHog, for product analytics and session recordings.
- Your browser’s push service (Apple’s, Google’s or Mozilla’s), which delivers the morning reminder if you turn it on. The reminder reaches it encrypted.
- Meta (Instagram and Facebook), to measure our ads. Meta’s pixel on our pages tells Meta which pages you visit and whether you create an account or start checkout. When you become a member, we send Meta your email address and account ID in hashed (scrambled) form, along with your country, IP address, browser, and what you paid, so it can tell which ad, if any, brought you. Meta also uses this information under its own privacy policy, including to improve its ads. If your browser sends Global Privacy Control, none of it goes to Meta.
- Email and support tools, to talk with you.
We may also disclose information when the law, a court order, or a government request requires it; to protect the rights, property, or safety of our users, the public, or us; or as part of a merger, acquisition, or sale of the business, in which case we’ll tell you as the law requires.
5. Where your information is stored
Our service providers store and process your information mainly in the United States. We’re based in Brazil and may access it from there. Whenever your information is transferred between countries, we rely on our providers’ contractual commitments and the safeguards the law requires.
6. How long we keep it
- Account, goals, and progress: while your account is open, and for up to 24 months after it closes, unless you ask us to delete them sooner.
- Billing records: as long as tax and accounting law requires, typically seven years.
- Analytics and session recordings: kept only as long as they help us understand and improve the Service. Session recordings expire automatically.
- Server logs and security data: up to 12 months.
- Messages with us: as long as we need them to help you, and up to 24 months after.
8. Your choices and rights
You can update your name, email address, and password from your account, and change, update, or cancel your membership from “Manage membership” in your account menu. Wherever you live, you can also ask us to:
- Tell you what personal information we hold about you, and give you a copy.
- Correct information that’s wrong.
- Delete your account and personal information, except what the law requires us to keep.
- Stop using your information for analytics, or sharing it with Meta to measure our ads.
Email luis@synergytec.com.br from the address on your account. We may need to confirm it’s you before we act, and we’ll answer within the time the law requires. We won’t treat you differently for using any of these rights.
California residents
Under the California Consumer Privacy Act, as amended, you have the right to know what personal information we collect, use, and disclose, and to whom; to access, correct, and delete it; to limit the use of sensitive personal information; and to opt out of its sale or sharing. In the last 12 months we collected the categories described in Section 2: identifiers (such as name, email address, IP address, and account ID), commercial information (your membership and payments), internet activity (how you use the Service), and approximate location. We disclose them only to the service providers in Section 4, for the purposes in Section 3. We don’t sell personal information. Giving Meta identifiers and internet activity to measure our ads may count as “sharing” under the CCPA; you can opt out by turning on Global Privacy Control in your browser, which we honor, or by writing to us. We don’t use sensitive personal information beyond what’s needed to provide the Service. You may use an authorized agent to make a request, subject to verification.
Brazil
Under the General Data Protection Law (Lei Geral de Proteção de Dados, Law No. 13.709/2018), you may also ask us to confirm whether we process your information, to anonymize or block information that’s unnecessary or excessive, to move your information to another provider, and to tell you whom we share it with. Where we rely on your consent, you can withdraw it at any time. You can also complain to the National Data Protection Authority (ANPD).
9. Children
The Service isn’t directed to children under 13, and we don’t knowingly collect personal information from them. Children may watch alongside a parent or guardian, on that adult’s account. Teenagers between 13 and 18 need a parent’s or guardian’s permission to use the Service. If you believe a child under 13 has given us personal information, write to us and we’ll delete it.
10. Security
We protect your information with encryption in transit, encryption at rest where our providers support it, access controls, and logging. Card details are handled entirely by Stripe. No system is perfectly secure, so we can’t guarantee absolute security, but if a breach affects your information, we’ll tell you as the law requires.
11. Changes to this policy
We may update this Privacy Policy from time to time. If a change is material, we’ll tell you by email or on the Service before it takes effect. The dates at the top show when it last changed. This policy is written in English, and the English version is the binding one.
12. Contact
Questions about this policy or your information, and requests to use your rights, go to luis@synergytec.com.br.
Synergy Tecnologia Ltda.CNPJ 51.033.169/0001-89
Rua Vicente Oropallo, 70, São Paulo/SP, 05351-025, Brazil
luis@synergytec.com.br