Privacy Policy

This Privacy Policy applies to personal data collected through the Services, including when you open the app before signing in, create an account, sign in using Apple, Google, or email, use AI chat or voice features, participate in Live Prayers, contact support, subscribe to paid features, receive notifications, or otherwise interact with the Services. It does not apply to third-party services, websites, or apps that Viva Dios does not own or control, even if they are linked to or integrated with the Services.

The Services are intended for users who are at least 13 years old in the United States. In the European Union and United Kingdom, the Services are not intended for users under 16 unless applicable law permits use with any required parental or guardian consent.

We do not knowingly collect personal data from children under 13 in the United States without any consent required by law. If we become aware that a child has provided personal data in violation of this Policy, we may delete the information and disable the account.

We may collect the following categories of personal data, including categories we have collected in the prior 12 months where applicable:

Depending on your device and settings, the Services may request or use the following permissions:

• Microphone access, to support voice calls or voice interactions.
• Push-notification permission, to send quiet-time reminders, Live Prayer reminders, lifecycle nudges, and related notifications.
• Photo library access, only when you choose to save verse images, and without browsing or reading your existing photos.
• Tracking permission on iOS, through Apple's App Tracking Transparency framework, to support advertising and attribution when you allow tracking.

We may collect personal data:

• Directly from you, such as when you create an account, sign in, complete onboarding, chat with the AI, use voice features, post to Live Prayers, report content, contact support, or use paid features.
• Automatically from your device or browser when you open or use the Services, including before sign-in.
• From identity providers, such as Apple or Google, when you choose to sign in using those services, subject to the permissions and information they provide.
• From service providers and vendors that help provide authentication, cloud hosting, analytics, notifications, email or SMS delivery, attribution, payments, moderation, scripture delivery, voice infrastructure, and AI functionality.

We may use personal data for the following business and commercial purposes:

• To create, authenticate, and manage accounts.
• To provide, operate, maintain, and improve the Services.
• To deliver AI-powered chat, voice interactions, scripture audio, guided meditations, and related features.
• To display chat history and maintain continuity of your conversations.
• To build and use long-term memory and other personalization features.
• To personalize user experiences, companion settings, and reminder timing.
• To provide customer support and respond to inquiries.
• To monitor, debug, secure, and protect the Services.
• To detect, investigate, prevent, and respond to fraud, abuse, harassment, self-harm risks, illegal activity, or violations of policies.
• To operate and moderate Live Prayers, including blocking, reporting, moderation locks, and staff review.
• To send service-related, account-related, billing, reminder, lifecycle, and feature-related emails, SMS, and push notifications.
• To process subscriptions and related transactions.
• To measure product performance, analytics, attribution, and advertising effectiveness.
• To create aggregated, de-identified, or anonymized insights.
• To comply with law, enforce agreements, and protect rights, safety, and property.

If you use AI-powered features, your prompts, chat messages, voice-call content, AI responses, and related metadata may be processed to provide the Services, improve quality, personalize experiences, enforce policies, support safety, and prevent misuse. Viva Dios may also use prompts, outputs, and related interaction data to improve internal systems, train proprietary systems, or fine-tune third-party AI models where permitted by law and contract.

OpenAI and Gemini may also be used to generate speech or narration for voice features, Bible audio, guided meditations, and related experiences. Scripture passages and related Bible content may be provided through API.Bible, and displaying that content on the web may load API.Bible's fair-use management script from cdn.scripture.api.bible as required by that provider.

Posts to Live Prayers may be screened automatically, including with OpenAI moderation or similar systems, and may also be reviewed by staff for support, trust and safety, fraud investigation, abuse investigation, policy enforcement, crisis-related review, or billing support. Staff and internal tools may also see account and report data for support, safety, and billing purposes, including staff inboxes and Slack alerts used to process billing alerts and reports.

Because users may disclose sensitive or urgent issues, the Services may use automated tools and human review to detect language relating to self-harm, suicide, abuse, or other safety concerns. Viva Dios may use related content and metadata to provide warnings, show crisis resources, investigate misuse, restrict access to certain features, remove public content, lock Live Prayers after repeated violations, or take other safety-related actions.

Viva Dios is not a medical provider, mental health provider, or emergency responder, and users should not rely on the Services in an emergency. This Privacy Policy governs data practices only and does not create any promise of active monitoring or guaranteed intervention in every case.

The website uses cookies and similar technologies for core functionality, sign-in support, remembering settings, analytics, attribution, and advertising-related measurement.

Shalom uses a cookie banner and cookie-management approach for the website. Depending on your location, you may be able to manage cookie preferences through the cookie settings or banner presented on the website. Some cookies may still be necessary for the Services to function properly.

You may also be able to control cookies through your browser settings. Services using cookies may not honor browser "Do Not Track" signals, and some site functionality may be affected if cookies are disabled.

The native iOS and Android apps also use mobile SDKs and similar technologies for analytics, attribution, and advertising. This may include Meta App Events, with advertiser-ID collection and automatic event logging enabled, and the TikTok SDK, which may receive an app user ID and events such as registration, login, tutorial completion, checkout, and purchase, including plan and price. If tracking is allowed, these SDKs may collect or receive the advertising identifier, such as IDFA on iOS or the advertising ID on Android.

On iOS, app users can decline tracking through Apple's App Tracking Transparency prompt. If tracking permission is denied, certain advertising identifiers or related attribution capabilities may be limited.

Viva Dios may use advertising, analytics, and attribution partners to measure and improve campaigns on platforms such as Meta, TikTok, Google, Apple Search Ads, and Android Search Ads. This may include the use of cookies, pixels, SDKs, device or browser signals, app user identifiers, advertising identifiers, hashed identifiers where permitted by law, and purchase or conversion events.

Viva Dios does not sell personal data. Viva Dios also does not share sensitive personal data for cross-context behavioral advertising. Service-related or feature-related emails and messages may be sent, and users may request to unsubscribe from non-essential email communications by contacting contact@vivadios.dev where applicable, though some transactional, legal, or account-related messages may still be sent.

The Services include a public feature called Live Prayers. Live Prayers are public and may be viewable by other users and, depending on how the Services are configured, may also be readable more broadly. Information visible in Live Prayers may include your display name, your request, an AI-written prayer, encouragement notes, and pray counts. Chat and voice features remain separate from Live Prayers and are intended to stay private unless you separately choose to post a prayer publicly.

Posts to Live Prayers may be screened automatically and reviewed by staff. Users may block other users and report content. Reports sent to the team may include the reporter's email address and user ID, the reported person's name and user ID, and the relevant prayer ID. We may remove content, restrict accounts, or lock a user's access to Live Prayers after repeated violations or reports.

Some Live Prayer slots may be filled with prayers written by Shalom when there are not enough member prayers. Those prayers are written by Shalom and are not submissions from other members.

We may disclose personal data to the following categories of recipients:

• Authentication, database, and storage providers, such as Supabase.
• Hosting and CDN providers, such as Vercel.
• Analytics providers, such as Amplitude.
• Email and SMS providers, such as Resend and Twilio.
• AI and model providers, such as Gemini and OpenAI.
• Voice infrastructure providers, such as Google Cloud, OpenAI, and Gemini, to support voice processing and related features.
• Scripture-content providers, such as API.Bible and related fair-use systems used with Bible content.
• Advertising and attribution partners, such as Meta, TikTok, Google, Apple Search Ads, and Android Search Ads.
• Payment processors and app-store billing providers, such as Stripe, Apple App Store, and Google Play.
• Internal tools and staff workflows, including inboxes, chat tools, and billing or support notifications used to process reports, support requests, safety issues, or billing alerts.
• Professional advisors and transaction counterparties, where reasonably necessary for financing, corporate transactions, legal advice, audits, or similar business purposes.
• Authorities or other parties where required by law or reasonably necessary to protect rights, safety, or property, investigate abuse, respond to legal process, or enforce agreements.

We may also disclose information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction.

Viva Dios retains personal data for as long as you maintain an active account or as otherwise reasonably necessary to provide the Services, maintain records, comply with legal obligations, resolve disputes, enforce agreements, and support safety, fraud, security, and abuse prevention.

Chats, voice-related conversation records, and long-term memory records may remain associated with your account until deleted, de-identified, your account is deleted, or they are no longer needed under our retention practices. Audio itself is not stored after processing unless retention is required for safety, abuse prevention, legal compliance, or similar legitimate purposes.

Install records created before sign-in may be retained even if no account is ever created, for a commercially reasonable period needed for analytics, attribution, security, fraud prevention, debugging, and campaign measurement, after which they may be deleted or de-identified. Because people who never create an account do not have an in-app deletion flow, requests about such data may be submitted to contact@vivadios.dev.

If an account is deleted or deactivated, Viva Dios may delete or de-identify relevant personal data within a commercially reasonable period, except where retention is needed for legal compliance, legitimate business needs, security, fraud prevention, abuse prevention, safety review, or dispute resolution.

Viva Dios uses reasonable administrative, technical, and organizational safeguards designed to protect personal data against accidental loss, unauthorized access, disclosure, misuse, destruction, or alteration. These safeguards may include access controls, encryption in transit, infrastructure security measures, and limited internal access based on job responsibilities.

No system can be guaranteed to be completely secure, and users use the Services at their own risk to the extent permitted by law.

Residents of certain U.S. states may have rights under applicable privacy laws, subject to exceptions and limitations, including rights to request access to personal data, correction of inaccurate personal data, deletion, and a portable copy of certain data. This includes residents of California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia, and other states as applicable.

Depending on applicable law, users may also have the right to opt out of targeted advertising, certain profiling, or processing of sensitive data where such rights apply. Viva Dios does not sell personal data, but some advertising-related disclosures may be treated as "sharing" or targeted advertising under certain state laws.

To exercise privacy rights, contact Viva Dios at contact@vivadios.dev. Requests should provide enough information for identity verification and allow Viva Dios to understand, evaluate, and respond. Viva Dios may request additional information reasonably necessary to verify identity and process the request.

If Viva Dios denies a request and applicable law gives you the right to appeal, you may submit an appeal to contact@vivadios.dev.

The Services are mainly intended for U.S. users. Viva Dios does not currently identify an EU or UK representative in this Policy. If Viva Dios later actively offers the Services in jurisdictions that require additional disclosures, lawful bases, representative designations, transfer disclosures, or local rights mechanisms, Viva Dios may update this Policy accordingly.

Translations of this Privacy Policy are provided for convenience. If a translation conflicts with the English version, the English version controls.

Viva Dios may update this Privacy Policy from time to time by posting a revised version through the Services. If changes are material, Viva Dios may provide additional notice as required by law.

If you have questions about this Privacy Policy or want to submit a privacy request, contact:

Viva Dios Labs, Inc.

131 Continental Dr Suite 305

Newark, DE 19713

United States

Email: contact@vivadios.dev