Lux Mundi
Privacy Policy
Controller and Contact
Lux Mundi is operated by Iakov Zubekhin LTDA, CNPJ 66.795.280/0001-80, Rua Pais Leme, 215, Conj. 1713, Pinheiros, São Paulo - SP, CEP 05424-150, Brasil ("Lux Mundi", "we"). This policy complies with the General Personal Data Protection Law — LGPD (Law No. 13,709/2018). For questions, data subject requests, or privacy matters: iakovzubekhin@gmail.com.
Data We Process
We may process: email address, name, and protected credentials; session and device identifiers; language, Bible translation, tradition, and preferences; notes, bookmarks, and highlights; community participation; prayers, testimonies, comments, reactions, photos, and other user-submitted content; events and interactions; push notification token; and minimal technical security and operation logs. We do not store full card numbers or security codes.
Country, region, and currency
To show currency, price, and payment methods, we first estimate only the country from the IP address. If that estimate is unavailable, we use the country or region from device or browser settings. The user’s manual choice always takes precedence. We do not use GPS or obtain precise location. The IP address is sent to a country lookup provider but is not retained by us for this purpose; we retain the choice and transaction currency to perform contracts, payments, and accounting records.
Sensitive Personal Data
Prayers, testimonies, community participation, and other content may reveal religious beliefs and, depending on the text published by the user, health information or other sensitive data. We process this content solely to provide the selected features, under the applicable legal basis, access controls, and safeguards required by the LGPD. Avoid publishing sensitive data of third parties without authorization.
Purposes and Legal Bases
We use data to create and secure accounts; authenticate; synchronize content; operate the Bible, calendar, communities, prayers, testimonies, comments, and notifications; process subscriptions, offerings, and donations; provide support; prevent abuse and fraud; comply with legal obligations; and maintain stability and security. Legal bases may include contract performance, consent, legal obligation, regular exercise of rights, and legitimate interest, depending on the purpose and in respect of necessity and proportionality.
Visibility and Moderation
Content submitted to a community may be visible to members or administrators depending on the feature used. Public content may reach other people. Administrators may moderate content and manage the community, but they do not receive access to your password or full card details.
Payments
Card payments, PIX in Brazil, and SBP transfers in Russia may be processed by an independent payment provider, subject to their terms and privacy policy. Lux Mundi receives identifiers, amount, currency, status, and data necessary to recognize the purchase, subscription, offer, or donation. Additional billing details should only be requested for defined tax or legal purposes; we do not request a CPF without necessity.
Sharing and transfers
We do not sell personal data. We may use providers for hosting, image storage, email, notifications, authentication, fraud prevention, and payments, limited to what is necessary. Some providers may process data outside Brazil; in such cases, we adopt mechanisms compatible with the LGPD. We may also share data due to legal obligations or to protect rights and safety.
Retention and deletion
We retain data for as long as the account or purpose exists and for the period necessary for security, fraud prevention, and legal, accounting, or tax obligations. The user may delete available content and request account deletion in the settings. Afterwards, we delete or anonymize what does not need to be retained by law. Backup copies may remain for a limited technical period.
Security
We adopt access controls, protected credentials, HTTPS, and technical and administrative measures proportional to the risk. No system is completely immune. In the event of a relevant incident, we will comply with the communications required by the LGPD.
Children and adolescents
Accounts and content publishing by children must occur with the involvement and authorization of a legal guardian, in accordance with the best interests of the child and adolescent. If we identify incompatible processing, we may restrict the account and delete the data. The guardian may write to iakovzubekhin@gmail.com.
Your Rights
Under the LGPD, you may request confirmation and access, correction, information about data sharing, anonymization, blocking or deletion when applicable, data portability in accordance with applicable regulations, review of automated decisions, and revocation of consent. Send your request to iakovzubekhin@gmail.com from the email address associated with your account; we may verify your identity.
Changes
We may update this policy to reflect legal or service changes. We will notify you of material changes in an appropriate manner. The date at the top identifies the current version.