Privacy Policy

1. Who is responsible

Zyonix is the controller of the personal data described here. You can reach us at support@zyonix.pro for anything related to your data.

If you use the church workspace and add other people's names and emails, you decide why and how that data is used; in that case you are the controller and we process it on your behalf.

2. Data we collect

• Account data: your name, email address and password (stored only as a secure hash), or your Google profile basics if you sign in with Google.
• Content you create and store: generated images, posts, devotional notes, message outlines, videos, prayer requests, Bible favorites and reading progress, quiz results, and badges.
• Images you upload for poster templates (a speaker photo or your church logo): they are sent to OpenAI to create your poster and are not kept by us. The finished poster, which may show the likeness of the person in a photo, is stored in your account. Only upload photos of people who have agreed to it, and logos you have the right to use.
• Spiritual chat: your conversations, and — when crisis-related language is detected — a safety flag linked to your account for human review. It is never used to penalize you.
• Subscription data: your plan, billing cycle, status and credit balance, and the identifiers Hotmart sends us for your purchase (transaction and subscriber codes, buyer name and email). We do not receive or store your card number.
• Church workspace data (if you use it): team members, contact names and emails, events, sent-message history and finance entries.
• Technical data: IP address, device and browser information and request logs generated by our hosting and security providers, and usage counters used for rate limiting and abuse prevention.
• Advertising measurement data (only if you accept optional cookies): which of our public pages you viewed, whether you clicked a checkout button and whether you created an account, together with a cookie identifier. This is collected by the Meta Pixel and is never taken from inside the app itself once you have a plan.

3. Why we use it and our legal bases

• To provide the Service you asked for — creating content, running your account, applying your plan and credits (performance of a contract).
• To process payments and manage subscriptions, and to keep records we are legally required to keep (contract and legal obligation).
• To send service emails: purchase confirmation, account and password emails, and — only if you keep the setting on — the daily devotional reminder (contract and legitimate interest; you can turn the reminder off in Settings).
• To keep the Service safe: fraud and abuse prevention, rate limiting, crisis-safety review (legitimate interest and, for safety flags, vital interests).
• For sensitive data such as religious beliefs, we process it only to provide the features you use, on the basis of your explicit consent when you choose to enter that content.
• To measure and improve our advertising through the Meta Pixel — only with your consent, which you can withdraw at any time from "Cookie preferences" in the site footer.
• To send you at most one reminder email if you create an account but haven't chosen a plan within a few days. It carries an unsubscribe link, and we stop as soon as you use it (legitimate interest; you can object at any time).

4. Who we share data with

We do not sell your personal data, and what you create or write in your account is never used for advertising. We share data only with service providers that help us run Zyonix, under contracts that limit how they may use it:

• Supabase — database, authentication and file storage.
• Netlify — website and application hosting.
• OpenAI — generating text, images and moderating chat messages. Content you submit for generation is sent to OpenAI's API; under OpenAI's API terms, data sent through the API is not used to train its models by default.
• Runway — generating videos from the prompts you provide.
• Resend — sending transactional and church emails.
• Hotmart — payment processing and subscription management.
• Cloudflare (Turnstile) — bot protection on sign-in and sign-up forms.
• Google — only if you choose to sign in with Google.
• Meta (Facebook and Instagram) — only if you accept optional cookies: the Meta Pixel tells Meta about your visit to our public pages so we can measure our ads and show them to relevant people. Meta handles that data under its own privacy policy.

5. International transfers

Our providers operate in several countries, including the United States. Where the law requires it, we rely on appropriate safeguards (such as standard contractual clauses) for those transfers.

6. Cookies

Essential cookies: the sign-in session cookie and a language-preference cookie. The bot-protection widget from Cloudflare may also set its own technical cookies to work. These do not need your consent.

Optional cookies: only if you click "Accept" in the cookie banner, we load the Meta Pixel on our public pages (home, terms, privacy, sign-up and welcome) and on the plan-selection page right after sign-up. It sets cookies such as _fbp and _fbc and sends Meta information about your visit and actions, like clicking a checkout button or creating an account. We do not load it inside the app once you have a plan, on sign-in or on password-reset pages. If you arrive from one of our ads, the ad's click identifier is kept in your browser for that visit and only passed to Meta if you accept.

You can decline, or change your mind at any time, with "Cookie preferences" in the site footer. Declining does not affect how Zyonix works.

7. How long we keep data

We keep your data while your account is active. When you delete your account in Settings, your profile, content, prayer journal, chat history and stored files are permanently deleted from our systems right away; residual copies in backups are overwritten in the normal backup cycle. Payment records held by Hotmart are kept by them as required by law.

8. Your rights

Depending on where you live (including under Brazil's LGPD and the EU/UK GDPR), you have the right to access, correct, delete and port your data, to object to or restrict certain processing, to withdraw consent, and to lodge a complaint with your data-protection authority (in Brazil, the ANPD).

In Settings you can download a copy of your data and delete your account yourself. For anything else, write to support@zyonix.pro and we will respond within a reasonable time, and in any case within the period required by law.

9. Security

We protect your data with encryption in transit, row-level access controls so users can only read their own data, bot and abuse protection, and restricted access to production systems. No system is perfectly secure; if a breach affecting your data occurs we will notify you and the authorities as the law requires.

Administrative access is limited and recorded. Our small authorized team can see account and subscription information (such as your email, plan and credit balance) to give you support and to handle your data requests. We do not read the content of your prayer journal, notes or spiritual chat. The only exception is a message that our system automatically flags as a possible crisis, which may be opened by an authorized person for safety review. Every administrative access or action is written to an audit log that cannot be altered, protected by two-factor authentication.

10. Children

Zyonix is not directed to children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy. We will post the new version here with a new date and, for material changes, notify you before they take effect.

12. Contact

Privacy questions or requests, and our data-protection contact under the LGPD: support@zyonix.pro.