Privacy Policy · O Conselheiro

Last updated November 4, 2026

The summary, in three sentences

The principle of the day, the paths and the Advice tab work without internet. What leaves your device: your account; the audio or text of your conversation with the Counselor while it is open, with the name you asked to be called by and the area that weighs on you most, if you chose them, the voice and tone you chose for the Counselor, and the region set on your device; the app’s language, at the moments explained below; your email, if you ask for a code to create a new password; an ENCRYPTED copy of your notebook and of your profile photo, which we cannot open; and the request to YouTube for the video of an Education lesson, when you open it.

If you join a table, what it needs to work also leaves your device: see "What data the app processes", below.

With an account on this iPhone, the device’s notification address also leaves it, for the Community’s alerts and your table’s: see "Notifications", below.

What you write in the Advice tab is used only to search for principles on your own device. It is not saved and it is not sent to anyone.

The lessons in Education play in a YouTube player. The player only loads when you open a lesson; from then on, YouTube receives your device’s network address and the identifiers it uses itself, as it would if you opened the video in a browser. YouTube is a separate company with its own rules: we do not send it anything of yours and we receive no information back. All we know is what you yourself mark here as watched, and what that is for is explained below.

We do not use third-party trackers or advertising. We do not build a profile of your behavior, and we do not sell or share your data with anyone for marketing purposes.

To learn what works, the app counts its own use, with events sent only to our server: which notices were seen, when the subscription screen opened and closed, the start of a trial or subscription, a path opened or completed, a medal earned, the saying of the day done and the tour of the app. Each event carries what happened, the type of plan, the version, the language, the system and a random number drawn on this device. It does not carry your account, your name or anything you write. They are kept for up to 13 months. You can turn this off in Profile, under "Measure app use", and turning it off deletes what has not been sent yet.

To use the app you need to sign in with an account. It exists for two reasons: to keep your encrypted notebook, so you don’t lose what you built when you change devices, and to know whose Counselor session it is, since each conversation has a cost.

Your account

We keep your email, the name you give when you sign up and your password in encrypted form, which cannot be turned back into the original text. If you sign in with Apple, we also keep the identifier Apple gives your account, which is how we recognize you when you come back.

Your date of birth, asked for at sign-up to confirm the minimum age, stays only on your device. It is not sent to us, because we don’t need it after that check.

At sign-up you can also choose a profile photo, and in your Profile you can change, whenever you like, the photo and the name you want to be called by. That name goes in your notebook and the photo in a separate copy, both ENCRYPTED with the same key as the notebook: we cannot see the photo, and we do not keep in readable form the name you change there. They come back when you sign in on another device with your password. The photo is chosen from your phone’s photo library, and only the photo you choose reaches the app.

We also keep, linked to your account, the date you finished the app’s introduction, which ends with the health notice, the date and version of your starting point, and what you answered to the app tour (seen, skipped or don’t show again), with the date. Only that: your starting point answers do not reach us in readable form (see below). This is what makes the introduction and the starting point appear once per account, and not again on every device or at every sign-in. If you skip the tour, the invitation comes back after seven days; if you choose don’t show again, it no longer does.

You can sign out of your account or delete it permanently at any time, from inside the app: from your Profile or, while you are not subscribed, from the subscription screen. Deleting means deleting: the account and everything linked to it leave our server.

The Counselor by voice

When you tap the orb and talk to the Counselor, the audio from your microphone is streamed live to OpenAI, which generates the spoken answer. The audio, together with the name you asked to be called by and the area that weighs on you most today (if you chose them, in your Profile, in your starting point or, for the name, in the conversation itself), the voice and tone you chose in the Counselor’s settings, if you did, the app’s language code and the code of the region set on your device (the country, such as BR), is what leaves your device during the conversation, and only while it is open: the microphone opens when you tap the orb and closes when you end the conversation or leave the Counselor’s screen. On iPhone, an open conversation continues with the screen locked or with another app in front: the device shows the microphone in use, and the Lock Screen and the Dynamic Island show that it is open, whose turn it is and a button to end it, with nothing of what is said. It pauses when a call, another audio app or disconnected headphones take over the sound. On any device, it ends on its own after five minutes with no one speaking. The name and the area let it know what to call you and where you are starting from; the language lets the conversation happen in that language; and the region makes the support numbers it gives you in a hard moment the ones for your device’s country. Your age and how you are doing never go to it.

WE do not record, transcribe or keep anything from that conversation. The audio goes straight from your device to OpenAI: our server is not in its path. Our server authorizes the start of the call and, when the Counselor looks up principles in the middle of the conversation, receives only the terms of that search (two or three words about the subject) to run it, without keeping them. There is no conversation history in the app or in our database.

The Counselor’s MEMORY (since October 19, 2026). To remember you in the next conversation, the Counselor writes, during the conversation, a short memory of it: what you shared that matters, the principles you talked about and what you agreed to do, without sensitive data, age, documents or numbers. It stays only on your device, tied to your account (another account on this device cannot see it), and goes inside your ENCRYPTED notebook, which we cannot open. In the next conversation, by voice or in writing, it goes to OpenAI along with your name and area. You can read it and delete it whenever you want, in your Profile, under Privacy, and it goes away with your data when you delete it.

The NAME said in the conversation. If it does not yet know what to call you, the Counselor asks at the start of the conversation, and you can answer, leave it unanswered or ask for another name at any time, by voice or in writing. The name you say goes to the same place as the name in your Profile: it stays on your device, goes inside your ENCRYPTED notebook and comes back in the next conversations. You can change or delete it whenever you want, in your Profile. OpenAI, which heard or read your answer, is what hands it to the app: directly by voice; in writing, through our server, which passes it on without keeping it.

OpenAI, however, is a separate company with its own rules. Under the default policy of the interface we use, it may retain the content for up to 30 days to monitor for abuse, and then discards it. We are being explicit about this instead of just saying "we keep nothing": we don’t keep it, OpenAI may keep it for that period, and you have the right to know the difference before you speak.

What you say may contain sensitive personal data under article 11 of Brazil’s General Data Protection Law (LGPD): your emotional state, your health. That is why using the Counselor is always optional and never automatic: before your first conversation, by voice or in writing, the app asks for your permission to send what you say or write to OpenAI, and without it the conversation does not start; you can withdraw it whenever you like, in your Profile, under Privacy. The rest of the app works in full without you ever talking to it, and the microphone only opens when you tap the orb.

The Counselor is an artificial intelligence, not a person. It gives advice drawn from the book of Proverbs about everyday situations, and its answers may be wrong or may not fit your case. It is not therapy, diagnosis, professional guidance or an emergency service.

If it says something offensive, dangerous or wrong, use "Report an answer" on the Counselor screen itself. What you write there is saved on our server and read by a person. Since the conversation is not recorded, that report is the only way for us to know what happened.

The Counselor in writing

In the written conversation, what you write goes from your device to our server, which passes it to OpenAI and returns the answer. Because the model does not remember on its own, the latest messages of the conversation go along with each new message, with the name you asked to be called by and the area that weighs on you most, if you chose them, with the tone you chose in the Counselor’s settings, with the app’s language code, so the answer comes back in that language, and with your device’s region code, so the support numbers are the ones for its country. The permission asked for before your first conversation covers both ways of talking, by voice and in writing.

We do not keep the text: it passes through the server and is gone with the answer, and the app does not save the conversation when you leave the screen. OpenAI may retain the content for up to 30 days to monitor for abuse, under the same rule as the voice conversation.

When you leave the written conversation, the messages go to our server one last time, which asks OpenAI for the updated memory (the same one as in the voice conversation) and returns it to the app without keeping anything.

What data the app processes

The first time you use your account, the app’s introduction shows what it does and asks at what time the principle of the day should arrive. The tour can be skipped, and the reminder can stay off.

Right after the introduction, the app opens your starting point once per account, in this order: what you want to be called, the area that weighs on you most today, how things are going for you right now and your age range. You have to go through the screen once, but no answer is required: every multiple-choice question offers "I’d rather not answer", and the name can be left blank. You can redo it whenever you like, in your Profile.

The area you choose goes into your list of saved paths and the time becomes the daily notification; both are stored on your device.

Your starting point answers are stored on your device and travel with your account, so you don’t have to answer them again when you change phones. They travel inside your notebook, ENCRYPTED: what reaches our servers is a scrambled block that we cannot open. No one but you sees them, and no other user of the app has access to them.

What changes because of them: the name appears in the greeting and on your profile, the area goes into your paths, and the Counselor receives the name and the area at the start of each conversation, to know what to call you and where you are starting from, without keeping them. How you are doing and your age do not leave your notebook: neither our server nor the Counselor receives them.

You can delete these answers at any time, by your own decision: "Delete my data", in your Profile, removes the profile from this device, and "Delete my account" also deletes the encrypted copy kept with us.

One of these questions involves sensitive personal data under article 11 of Brazil’s General Data Protection Law (LGPD): how things are going for you (health-related data). That is why it is optional like all the others, why the answer is ENCRYPTED on its way to us and why we cannot read it. A question about personal beliefs was removed from the starting point on October 25, 2026, and the answer of anyone who had already replied is erased from the device the next time the app opens and from the encrypted notebook at the next sync.

The app also stores on your device the preferences you set in your Profile, such as the time of the principle of the day.

The Community (the tab with the ranking, testimonies and your network) is part of the subscription. For those who join it, our servers keep the name you appear with (at first, your first name from sign-up and the initial of your last name, which you can change in your Profile), your choices (appearing in the ranking, posting and the automatic filter) and the date you joined. On the free plan, the Community is closed, while team notices, leaving the ranking and deleting your data stay open. If the date of birth on your device shows you are under 18, the Community does not open, and nothing leaves the device because of it.

You appear in your community’s ranking, and can leave it anytime in your Profile. With the subscription, the app sends our servers, for each point, only its type: the first action of the day, whether it was today’s action, the second or third action, a return to a principle, a finished study or saying of the day, or a new medal (its family and level, never its name). The principle, theme, path, situation and your sentence never go. People in your community (up to 100, gathered each month) see your name and your monthly points rounded down to tens, updated every hour from 7 a.m. to 11 p.m., with a small random delay, and your place when you are in the top five or near whoever is looking. If you leave the ranking, you don’t see anyone’s name. Points cannot be bought or traded; the month’s highest score across all communities wins the monthly prize, as the Terms say, and the winner’s name appears for everyone in the app. Delivery of the plaque is arranged by e-mail, to the account address: the name and delivery address you send in the reply are used only for that. Leaving the ranking deletes the points we keep.

If you choose to post, these leave your device: the testimonies, stories and comments you write, the principle you write about, the reactions you give (This sharpened me, Rooting for you, I’m with you), connection requests, the people you block and the reports you make. Other members see what you posted, your name and initials; only you see the reaction counts. What you share may reveal your private life and health, which is why it is asked separately. Before appearing, every text goes through our automatic filter and, if you ticked the box, a partner’s filter (OpenAI, in the United States), which receives only the text, without your name. Each person’s first three posts are read by someone on the team. There are no direct messages. Don’t name or identify other people. Leaving the Community deletes what you posted, your points and your connections; so does deleting your account.

When someone asks to join your network, comments on or reacts to what you shared, the alert is kept on our servers, in the Community’s bell list: who made the gesture, which one, about which post, when, and whether you have seen it. It is deleted when the post is deleted, when the person who made the gesture leaves the Community, and when you leave it or delete your account. So that these alerts arrive with the app closed, our servers also receive, from every account on this iPhone, the device’s notification address (a code Apple gives the app to deliver alerts), the app’s language and whether it is a test or App Store version.

If you join a table (the app’s community, of up to six people, by invitation), the following leave your device and are kept on our servers: the nickname you chose for the table, the day and the number of the principle of each action you marked as done, the person you asked to witness a mark, the "I saw it" you give on someone else’s mark, the "thought of you" nudges you send (who, to whom and the day), and, if you opened the table, the path it follows and the day and time of its weekly meeting. The sentence you write when you complete an action stays in your notebook and does not go to the table.

When you bring a topic to the table, what leaves your device is the situation you chose (one from the app’s list, never text of your own) and how long the table can advise. When you advise someone, the number of the principle you chose leaves your device, along with whether you marked "I’ve lived this"; when you say "I’m with you" on someone’s topic, that gesture leaves it too. And, from your own topic, so do the principle you choose as your step for the next 24 hours, the fact that you took that step (never the sentence you write in "I did it") and your answer to the question "Did the table’s counsel help?".

At the table, everyone sees each person’s nickname; the marks, with the day and the number of the principle (including those of each day of the path the table is following), who was asked to witness them and who saw them; the topics brought, with who brought them, the situation and the deadline; who advised with which principle and how many have lived it; who said "I’m with you"; the chosen step; whether it was taken; and the answer "It helped a lot" or "It helped a little". The answer "Not yet", however, is seen only by the person who brought the topic, and a "thought of you" only by the person who received it. No one outside the table sees anything. The meeting reminder is a local notification, scheduled on your device.

The Table also uses your device’s time zone, even before you join one. It is kept in your account for as long as the account exists, not at the table: it is how the table knows when your day starts and ends, and until what time a topic of yours stays open. The device’s notification address, described above under the Community, is also used to let you know about your table’s gestures.

In the Education tab, we keep on our servers which lessons you watched and the date of each one. That is all, and it is not statistics: it is what makes a lesson show as watched when you come back to it. Lessons open by the calendar, one per week, on the same day and at the same time, and watching one or not does not change when the next one opens. No one but you sees this list. We do not keep how much of the video you watched, or the moment you paused it.

Where this data is kept

These stay on your device: the language and theme you chose, the time of the principle of the day, your acceptance of the health notice, your date of birth, the principles you saved to your Shelf, which pieces of advice you opened and read to the end in "Keep learning", which page you stopped at and what you answered at the end of each, which paths you opened, which notices, subscription invitations and news you have already seen, what you started writing and have not yet saved or sent (the draft of a note, an action’s sentence, a post or a comment, which does not leave your device), the points that have not yet reached the ranking and the day’s total, the name you want to be called by, your profile photo and a random number the app itself draws to identify itself without identifying you. That number is not your device’s identifier: it is created at installation, serves only to limit abuse of the Counselor and disappears when you uninstall the app.

The language is not stored in your account. It goes to our server only when something has to reach you in that language: the conversation with the Counselor (and from there to OpenAI, for the conversation itself), the app’s notices, your account emails and the titles of the Education lessons. It also goes in the link of an invitation of yours to a table, so the invitation page opens in that language for whoever receives it.

Your notebook (your Shelf, the principles you marked as done, the sentence you wrote about each one, your saved paths, your likes, your notes, your starting point answers, the name you want to be called by, the Counselor’s memory and what you mark in the book in Reading: highlights, notes, saved passages, chapters read, the proverbs you completed, the columns you raised in the house of the month and the days you did the saying of the day) stays on your device and is also copied to your account, ENCRYPTED. Your profile photo goes the same way, in a separate copy. What reaches us is a scrambled block we cannot open. That is how changing phones does not erase what you built.

Your password is checked on our servers when you sign in, and we do not keep it in readable form. As with any online service, there is no such thing as absolute security.

Signing out of your account does not erase what you built on this device: your Shelf, the principles you completed, the sentences you wrote and your starting point answers stay here, waiting for you to sign in again. The name you want to be called by and your photo are taken out of view, because they are the face of your account and should not appear to whoever uses this phone next: they are kept aside on this device (and, if you sign in with a password, also in the encrypted copy) and come back when you sign in again with the same account, even if you sign in only with Apple. If ANOTHER account signs in on this device, everything that is yours (your notebook, your starting point answers, your date of birth, your name, your photo, your acceptance of the health notice and your permission for the Counselor) is set aside before anything is sent: it stays on this device, out of reach of the account that signed in, is not sent anywhere and comes back when you sign in again. To delete, there are two explicit paths: "Delete my data" deletes everything on this device, including what other accounts left set aside on it, and "Delete my account" also deletes the encrypted copy kept with us.

What belongs to the table stays on the server while you are part of it, and is deleted when you leave it or delete your account. The only exception is a report about a person: the report stays with us even afterwards, because deleting an account cannot delete a report made against it.

The device’s notification address stays in your account and is deleted when you sign out on this device, when another account signs in on it or when you delete your account.

If you create an account, the token that keeps you signed in is stored in the operating system’s secure vault (the Keychain on iPhone), not in an ordinary preferences file. Alongside it are a copy of your account details (such as your email and name) and the latest status of your subscription confirmed by our server, so the app can open even without internet; all of this is removed when you sign out.

The path chosen when you first opened the app, the language and the time of the principle of the day stay on your device, with your other preferences, and are removed by "Delete my data".

On iPhone, the app shows the day’s action and its deadline as a Live Activity on the Lock Screen, along with the week’s marks and how far that action is from the achievement it moves forward; if you add the app’s widget to your screen, it shows the principle of the day, the action, the deadline and the week’s marks and, on the Lock Screen, once you mark the action as done, the sentence you wrote. The marks are only the days you marked an action as done. While the iPhone is locked, the sentence stays hidden and only appears after Face ID, Touch ID or your passcode. While you have an open step from your table, the action, the principle and the deadline shown are those of that step. This is visible to anyone holding the phone. It is all prepared on the device itself, in an area only the app and the widget can read, and nothing leaves it; when you sign out, both are cleared. To hide them, remove the widget from your screen or turn off the app’s Live Activities in your device’s Settings.

Notifications

Notifications are local: your device itself schedules and displays them, without going through any messaging service, except for the Community’s alerts and your table’s, explained just below. Their text already comes inside the app when you install it, except for your table’s name, which appears in the meeting reminder.

The app schedules the principle of the day, at the time you choose, and a reminder with a principle when you go three days without opening it. When the day’s action hasn’t been done yet, it also reminds you two hours before its deadline, which is twenty-four hours from the first time you open the app that day (or from the time you chose a step at your table, while that step is open); this reminder has no switch of its own and goes away by itself when you tap "I did it". It also lets you know on the day the next Education lesson opens. If your table sets a weekly meeting, the app reminds you of it on the agreed day and time. They all follow the time zone set on your device and arrive between 7:00 AM and 9:30 PM.

On the free plan, if you say yes, the app schedules one notification a day about what the subscription opens. You can turn it off in your Profile, and it stops by itself when you subscribe.

Your table’s alerts are the exception: when someone at the table sees what you did, asks you to be a witness, brings a topic to the table, advises you, says they are with you, chooses your counsel, takes the step you advised, says your counsel helped, thinks of you or schedules the gathering, our server sends the alert through Apple’s notification service, which delivers it to your device. In the same way, the gestures you make alert the people at the table they concern; only people at a table receive these alerts. The alert carries only the nickname of the person who made the gesture and what they did (the one about a new topic also carries the name of the situation, in the recipient’s language), never the sentence anyone writes when completing an action. It does not arrive between 9:30 PM and 7:00 AM in your time zone, and it arrives at most a few times an hour. To stop receiving them, turn off the app’s notifications in your device’s Settings.

The Community’s alerts arrive the same way: when someone asks to join your network, comments on your testimony or your story, or reacts to them, our server sends the alert through Apple’s notification service, which delivers it to your device. In the same way, these gestures, when you make them, alert the person who posted or the person you asked to connect with. The alert carries only the Community name of the person who made the gesture, what they did and an internal code that takes the tap to the post or the profile, never the text of a post or a comment. It does not arrive between 9:30 PM and 7:00 AM in your time zone, it arrives at most a few times an hour, and a connection request only alerts people with the subscription, because accepting is part of it. They all also stay in the bell, at the top of the Community tab. To stop receiving them, turn off the app’s notifications in your device’s Settings.

Permission is only requested after you reach the main screen, never when the app opens. You can decline and keep using everything. In your Profile, you can turn off "Today’s principle" and "Lesson of the week" at any time; to receive none at all, turn off the app’s notifications in your device’s Settings.

If you delete your data or your account, all notifications already scheduled are canceled at the same time.

Sharing a principle

When you tap share, the app draws the image on your own device: the principle, the reference, the action with its deadline and the app’s brand. For the animated story, it puts together a short video of the same card right there. Neither one carries your name, your photo or anything you wrote.

The image or the video goes only where you choose in the system share sheet. If you choose an Instagram story, it stays on your device’s clipboard for up to five minutes, which is how Instagram receives it, and Instagram opens. None of this goes through us.

How you sign in to your account

You sign in with email and password or with Apple ("Continue with Apple"). This version does not offer sign-in with Google or any other social network.

With Apple, you decide what reaches us, on the system’s own sheet: an identifier for your Apple account, your email (or a forwarding address, if you choose to hide it) and, only the first time, your name. If your Apple account email is the same as the one on your account here, the two become one. Apple learns that you use this app, but not what you do in it.

As long as you sign in only with Apple on this device, your notebook, the name you want to be called by and your photo stay only here and are not uploaded to our server.

If you forget your password, you can ask for a code with "Forgot my password", on the sign-in screen. When you ask, your account email and the code go to an email delivery service that acts as our data processor, only to send that message. The code is short-lived and works only once. When you create the new password with it, all sessions of your account are ended, and the notebook and photo stored on our server, which were encrypted with the old password, are DELETED: without it, no one can open them, not even us. Whatever is on your device is uploaded again, encrypted with the new password.

If your device has Face ID, Touch ID or a fingerprint reader, you can turn on, in your Profile, the option to sign in with it instead of typing your password. The device itself checks the biometrics: the app only receives the answer "confirmed" or "not confirmed" and never has access to your face or your fingerprint, which do not leave your phone.

You can create your account, with email and password or with Apple, before subscribing. On the subscription screen, you choose between starting the free trial and continuing on the free plan, described under "Billing". If the free trial ends without payment, or the subscription ends, the account also moves to that plan. With or without a subscription, you can delete it at any time: from your Profile or, while you are not subscribed, on the subscription screen itself. The subscription is sold on the App Store: payment is made through Apple, with the payment method of your Apple account, and neither the app nor our server sees your card details.

Billing

Full access to the app is by subscription, yearly or monthly, with automatic renewal, sold through the App Store. The price is the one the App Store shows on the subscription screen, in your country’s currency.

On your first subscription, the first seven days are free, and nothing is charged before they end. If you do not cancel at least 24 hours before they end, the first charge comes automatically after them.

The subscription renews automatically every year or month, depending on the plan, on your Apple account, unless you cancel it at least 24 hours before the end of the period. You manage and cancel it in iPhone Settings, under your name, in Subscriptions. Canceling stops the renewals; access continues until the end of the period already paid for. Refunds are decided by Apple, under its own rules.

You can choose the free plan on the subscription screen. If the free trial ends without payment, or the subscription ends, the account is not deleted either: it moves to that plan, and what you saved stays saved. It keeps the home screen, with the principle of the day, and the Reading of the book of Proverbs. Lessons, the paths, the Advice tab, the conversation with the Counselor, the saying of the day, medals, the Table, the whole Community (seeing, posting, commenting, reacting, connecting and earning points) and the monthly prize are part of the subscription. Choosing the free plan is kept on our server, linked to your account, with its status.

Deleting your account in the app does NOT cancel the subscription on the App Store: to stop the charges, cancel it in iPhone Settings.

When you subscribe, Apple gives the app a transaction signed by Apple, and the app sends it to our server, which verifies Apple’s signature and unlocks access. We keep, linked to your account, the subscription’s App Store identifier, the plan, its status (in trial, active, past due or expired) and the dates of the trial and of the paid period. Apple also notifies us of renewals, refunds and expirations, and those notices update the same fields. They pass through a subscription management service, which receives the transaction data, without your name or email. We do not receive or keep your card details.

Anyone who wants to can make a one-time donation to the project, in the Profile, under "Become a donor". You choose the amount in reais and the app creates a Pix code (the QR code and the "Pix copy and paste" code) for the company’s CNPJ. To create the code, the app sends the chosen amount to our server, and our server records the code created (amount, identifier, date and status) linked to your account. If you delete your account, this record stays, unlinked from you, as proof of the donation. The payment happens in your bank’s app, outside the App Store: we receive no data from your bank and no payment confirmation. If the donation is also offered as an in-app purchase, Apple charges it, and the app sends nothing about that purchase to our server. The donation does not unlock any feature, does not change your access and does not repeat on its own.

Your rights

The LGPD, Brazil’s data protection law, guarantees you confirmation, access, correction, portability, deletion and withdrawal of consent regarding your data.

Apart from the Community choices described above, the only separate consent the app asks for is the Counselor’s: your permission, asked for before your first conversation, by voice or in writing, to send what you say or write to OpenAI, along with the name you asked to be called by, the area that weighs on you most, the app’s language and your device’s region. Without it, the conversation does not start. The permission is stored on this device, with the date you gave it, and applies only to your account; you can withdraw it whenever you like, in your Profile, under Privacy, and the Counselor will ask again before the next conversation.

"Delete my data", in your Profile, erases what is stored on this device, cancels scheduled notifications and returns the app to its initial state.

If you have an account, "Delete my account", in your Profile (or on the subscription screen, while you are not subscribed), deletes the account and everything linked to it on our server, and cannot be undone. This is the right to deletion under article 18, and you exercise it from inside the app, without having to ask by email or wait for us.

One exception, stated openly: if you reported an answer from the Counselor, the text of the report remains after your account is deleted, but unlinked from you. The link to your identity is erased. A warning that the Counselor said something dangerous cannot disappear, and it stops being your data the moment it stops pointing to you.

This app is not health care

The content has an educational and reflective purpose. It is not diagnosis, therapy, psychological counseling or medical care, and it does not replace a health professional.

If you are in intense distress or at risk, reach out to a person for help. In Brazil, CVV (emotional support) answers 24 hours a day at 188, and SAMU (medical emergencies) at 192. The "Support channels" screen, in your Profile, brings these contacts together.

Children and teenagers

We do not knowingly collect data from children under 13.

Sign-up asks for your date of birth and refuses anyone under 13. It is your own statement, not documentary proof. If we learn that an account belongs to someone under 13, it is deleted.

Changes and contact

If this policy changes, the revision date, at the top of the text, changes with it, and the change appears before any new processing of data.

For privacy questions, use the support channel published on the app’s store page: that is where the data protection officer responds.