Privacy Policy
Last Updated: April 21, 2026
Effective Date: April 21, 2026
This Privacy Policy describes how Prime Tecnologia LTDA, a Brazilian limited liability company (CNPJ 14.720.484/0001-58, NIRE 3120937742-4, registered with the Junta Comercial do Estado de Minas Gerais on December 1, 2011), headquartered at Av. do Contorno 6.594, Sala 1.601, Lourdes, Belo Horizonte, MG 30110-044, Brazil (“we,” “us,” or “our”), collects, uses, stores, and protects your information when you use the Ktaba Bible application (“App”). We are committed to protecting your privacy and handling your data with transparency and care.
By using Ktaba, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the App.
Table of Contents
- Information We Collect
- How We Use Your Information
- Data Storage and Sync
- Special Category Data — Religious Beliefs
- Third-Party Services
- Advertising and Tracking
- Data Retention
- Your Rights
- California Privacy Rights (CCPA/CPRA)
- EU/EEA Specific Rights (GDPR)
- International Data Transfers
- Data Security
- Children’s Privacy
- Changes to This Privacy Policy
- Contact Us
1. Information We Collect
1.1 Account Information
When you create an account using Sign in with Apple, we receive and store only the following information:
- Email address — provided by Apple (you may choose to use Apple’s private relay email address)
- Display name — provided by Apple (you may choose to share or hide your name)
- User ID — a unique, anonymous identifier generated by Apple for authentication
We do not collect passwords. Authentication is handled entirely by Apple’s Sign in with Apple service.
1.2 Data Stored Locally on Your Device
The following data is created by you and stored locally on your device:
- Bible reading progress (current book, chapter, scroll position)
- Annotations, including highlights, notes, and bookmarks
- Reading plan progress and selections
- App preferences (theme, font size, font family, reading settings)
This data remains on your device unless you explicitly opt in to cloud sync.
1.3 Data Collected Automatically
We collect limited technical data to maintain app stability and improve the user experience:
- Crash reports — collected via Firebase Crashlytics, including device model, OS version, and crash stack traces (no personal content is included)
- Usage analytics — collected via Firebase Analytics, including anonymized app usage patterns such as feature usage frequency and session duration (no personally identifiable information is included)
- Push notification tokens — collected via Firebase Cloud Messaging if you enable notifications
1.4 Data We Do NOT Collect
- Location data
- Contacts or address book information
- Photos, camera, or microphone data
- Health or fitness data
- Financial or payment information
- Browsing history outside the App
- Data from other apps on your device
2. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Data Used |
|---|---|
| Authenticate your account | Email, User ID |
| Display your profile | Display name |
| Sync your annotations across devices | Annotations, reading progress (with your consent) |
| Deliver push notifications | FCM token |
| Diagnose and fix crashes | Crash reports |
| Understand feature usage to improve the App | Anonymized analytics |
| Respond to support requests | Email address |
We do not use your data for advertising, profiling, or selling to third parties.
3. Data Storage and Sync
3.1 Local Storage
All user-generated content (highlights, notes, bookmarks, reading progress, and preferences) is stored locally on your device by default. The App functions fully offline with locally stored data.
3.2 Cloud Sync (Optional)
If you opt in to cloud sync, the following data is securely synced to our cloud infrastructure:
- Annotations (highlights, notes, bookmarks)
- Reading progress (current book, chapter, position)
- Reading plan state (selected plans, completion status)
Cloud sync requires your explicit consent. You may enable or disable cloud sync at any time in the App’s settings. Disabling cloud sync does not delete previously synced data from the cloud; you may request deletion separately.
4. Special Category Data — Religious Beliefs
4.1 GDPR Article 9 Compliance
We recognize that your Bible reading habits, highlights, notes, and bookmarks may reveal information about your religious beliefs. Under the EU General Data Protection Regulation (GDPR), religious beliefs constitute special category data (Article 9) that requires enhanced protection.
4.2 Our Commitments
- Explicit consent required. We will not sync any data that may reveal religious beliefs to our cloud servers without your explicit, informed, and freely given consent. This consent is separate from general account creation.
- Granular control. You may use the App entirely offline without any data leaving your device. Cloud sync is always optional.
- Purpose limitation. Any synced data revealing religious beliefs is used solely for the purpose of providing you with a synchronized reading experience across your devices. It is never used for profiling, analytics, marketing, or any other purpose.
- Right to withdraw consent. You may withdraw your consent for cloud sync at any time through the App’s settings. Upon withdrawal, we will cease syncing new data. You may also request deletion of previously synced data.
- Data minimization. We collect only the data necessary to provide the sync functionality you have requested.
5. Third-Party Services
We use the following third-party services to operate the App. Each service has its own privacy policy governing its data handling practices:
5.1 Firebase Authentication (Google LLC)
- Purpose: User authentication via Sign in with Apple
- Data shared: Apple user ID, email address (relayed through Apple)
- Privacy Policy: https://firebase.google.com/support/privacy
5.2 Firebase Analytics (Google LLC)
- Purpose: Anonymized usage analytics to improve the App
- Data shared: Anonymized usage events, device type, OS version
- Data NOT shared: Personal content (notes, highlights, reading history)
- Privacy Policy: https://firebase.google.com/support/privacy
5.3 Firebase Crashlytics (Google LLC)
- Purpose: Crash reporting and stability monitoring
- Data shared: Crash logs, device model, OS version, app state at time of crash
- Data NOT shared: Personal content (notes, highlights, reading history)
- Privacy Policy: https://firebase.google.com/support/privacy
5.4 Firebase Cloud Messaging (Google LLC)
- Purpose: Delivering push notifications (reading reminders, plan updates)
- Data shared: Device push token
- Privacy Policy: https://firebase.google.com/support/privacy
We do not share your personal data with any other third parties. We do not use any advertising SDKs or tracking frameworks.
6. Advertising and Tracking
- No advertising. Ktaba does not display ads of any kind.
- No data sales. We do not sell, rent, or trade your personal data to any third party.
- No cross-app tracking. We do not track your activity across other apps or websites.
- No ad identifiers. We do not collect or use the Apple Identifier for Advertisers (IDFA) or any equivalent tracking identifier.
7. Data Retention
- Active accounts. We retain your account data and synced content for as long as your account remains active.
- Account deletion. When you request account deletion (available in the App’s settings), we will delete all your personal data, including synced annotations and account information, within 30 days of the request. Anonymized analytics data that cannot be linked back to you may be retained.
- Crash reports. Crash report data is retained for up to 90 days for diagnostic purposes and then automatically purged.
- Local data. Data stored only on your device is under your control. Uninstalling the App removes all locally stored data.
8. Your Rights
Regardless of your location, we provide all users with the following rights:
| Right | Description |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Request correction of inaccurate personal data |
| Deletion | Request deletion of your personal data and account |
| Export | Request a portable copy of your data in a standard format (JSON) |
| Restrict Processing | Request that we limit how we process your data |
| Data Portability | Receive your data in a structured, machine-readable format |
| Withdraw Consent | Withdraw consent for cloud sync or other optional processing at any time |
| Object | Object to processing of your data for specific purposes |
To exercise any of these rights, contact us at privacy@ktaba.app. We will respond to your request within 30 days.
9. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
9.1 Right to Know
You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting the information, and the categories of third parties with whom we share the information.
9.2 Right to Delete
You have the right to request deletion of your personal information, subject to certain exceptions provided by law.
9.3 Right to Opt-Out of Sale or Sharing
We do not sell or share your personal information as defined under the CCPA/CPRA. No opt-out is necessary because no sale or sharing occurs.
9.4 Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not receive different pricing, quality, or service levels based on exercising your rights.
9.5 Categories of Personal Information Collected
Under the CCPA/CPRA framework, we collect the following categories:
- Identifiers: Email address, display name, user ID
- Internet or network activity: Anonymized app usage analytics, crash reports
- Inferences: None — we do not create consumer profiles
9.6 How to Exercise Your Rights
Submit requests to privacy@ktaba.app. We will verify your identity before processing. You may also designate an authorized agent to submit requests on your behalf.
10. EU/EEA Specific Rights (GDPR)
If you are located in the European Union or European Economic Area, the following additional provisions apply:
10.1 Legal Basis for Processing
| Processing Activity | Legal Basis |
|---|---|
| Account authentication | Performance of contract (Article 6(1)(b)) |
| Cloud sync of annotations | Explicit consent (Article 6(1)(a) and Article 9(2)(a) for special category data) |
| Crash reporting | Legitimate interest (Article 6(1)(f)) — maintaining app stability |
| Usage analytics | Legitimate interest (Article 6(1)(f)) — improving the App |
| Push notifications | Consent (Article 6(1)(a)) |
10.2 Data Controller
Prime Tecnologia LTDA acts as the data controller for your personal data. Contact details are provided in Section 15.
10.3 Data Protection Officer
For data protection inquiries, contact us at privacy@ktaba.app.
10.4 Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority in the EU/EEA member state of your habitual residence, place of work, or place of the alleged infringement.
10.5 Automated Decision-Making
We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on you.
10.6 Brazil — Lei Geral de Proteção de Dados (LGPD)
Users in Brazil are protected under the Lei Geral de Proteção de Dados (LGPD, Law No. 13.709/2018).
11. International Data Transfers
Your data may be processed on servers located in the United States, operated by Google Cloud (Firebase). When data is transferred from the EU/EEA or other jurisdictions with data transfer restrictions, we rely on:
- Google’s compliance with applicable data transfer mechanisms, including Standard Contractual Clauses (SCCs)
- Firebase’s data processing terms and security commitments
For more information about Google’s data transfer practices, see Google Cloud’s Data Processing Terms.
12. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption in transit: All data transmitted between the App and our servers is encrypted using TLS 1.3
- Encryption at rest: Data stored on our cloud servers is encrypted at rest using industry-standard encryption
- Access controls: Access to user data is restricted to essential personnel and systems on a need-to-know basis
- Authentication security: We rely on Apple’s Sign in with Apple infrastructure, which provides industry-leading authentication security
- Regular review: We periodically review and update our security practices
While we strive to protect your data, no method of transmission or storage is 100% secure. If you become aware of a security vulnerability, please contact us immediately at privacy@ktaba.app.
13. Children’s Privacy
Ktaba is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13.
If we learn that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete that information. If you believe we may have collected information from a child under 13, please contact us at privacy@ktaba.app.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes:
- We will update the “Last Updated” date at the top of this document
- We will notify you through an in-app notification
- For material changes affecting special category data processing, we will request renewed consent where required
We encourage you to review this Privacy Policy periodically. Your continued use of the App after changes are posted constitutes your acknowledgment of the updated policy.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: privacy@ktaba.app
- General support: support@ktaba.app
- Legal matters: legal@ktaba.app
- Developer: Prime Tecnologia LTDA, a Brazilian limited liability company (CNPJ 14.720.484/0001-58, NIRE 3120937742-4, registered with the Junta Comercial do Estado de Minas Gerais on December 1, 2011)
- Headquarters: Av. do Contorno 6.594, Sala 1.601, Lourdes, Belo Horizonte, MG 30110-044, Brazil
- Phone: +55 31 3555-3410
We aim to respond to all inquiries within 30 days.
This Privacy Policy is provided in accordance with applicable privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Children’s Online Privacy Protection Act (COPPA), and Brazil’s Lei Geral de Proteção de Dados (LGPD, Law No. 13.709/2018).