Privacy Policy

Last updated: June 1, 2026

This Privacy Policy explains how the BibliaPlus platform collects, uses, shares, and protects personal data in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018 - LGPD). BibliaPlus is the controller of the personal data processed on the Platform.

1. Data we collect

Email registration: name, email, and password. The password is stored irreversibly in hashed form; we never have access to the password in plain text.
Social login (Google/Facebook/Microsoft): account identifier with the provider, name, email, and, when available, profile photo (avatar).
Content generated by you: notes and other study content that you create.
Technical and usage data: IP address, access date/time, and logs necessary for security, such as control of login and registration attempts.

2. How we collect data

We collect data (i) provided directly by you during registration and use; (ii) received from social providers when you choose that login method; and (iii) generated automatically through interaction with the Platform.

3. Purposes and legal bases

We process your data for the following purposes and legal bases (art. 7 of the LGPD):

create and authenticate your account and provide the service - performance of a contract;
verify your email and allow password recovery - performance of a contract;
ensure security and prevent abuse/fraud - legitimate interest;
communicate essential operational notices - performance of a contract;
comply with legal and regulatory obligations - legal obligation;
additional purposes when specifically informed - consent.

4. Sharing

We do not sell your data. Sharing occurs only with processors that enable the service, such as hosting/infrastructure providers, email sending services for verification and recovery, and the social login providers you choose to use. These third parties process data according to our instructions and applicable law, or we may share data to comply with a legal obligation or order from a competent authority.

5. Cookies and local storage

Authentication uses a session token stored in your browser (sessionStorage), which is necessary to keep you signed in. We may also store local preferences, such as theme choice (light/dark). We do not use advertising tracking cookies.

6. Security

We adopt technical and organizational measures to protect your data, such as password hashing, transmission through secure channels, and access and rate limiting controls. No system is entirely immune to risks, but we work continuously to mitigate them.

7. Retention

We keep data for as long as necessary for the purposes of this Policy or to comply with legal obligations. Once the account is closed, data is deleted or anonymized, except where mandatory retention is required by law.

8. Your rights as data subject

Under art. 18 of the LGPD, you may request:

confirmation of processing and access to data;
correction of incomplete, inaccurate, or outdated data;
anonymization, blocking, or deletion of unnecessary data;
portability and information about sharing;
deletion of data processed based on consent;
withdrawal of consent, when applicable.

To exercise your rights, use the contact indicated at the end.

9. International transfer

Some processors, such as social login and infrastructure providers, may process data outside Brazil. In such cases, we adopt safeguards compatible with the LGPD for international data transfers.

10. Children and adolescents

The Platform may be used by people of any age. The processing of data of children and adolescents is always carried out in their best interest, under art. 14 of the LGPD; when applicable, the registration of children must be made with the consent of a parent or legal guardian.

11. Changes to this Policy

This Policy may be updated periodically. Relevant changes will be communicated through available means, indicating the date of the latest update.

12. Contact

For questions, requests, or to exercise your rights, contact us at [email protected].