Privacy Policy

Last updated: September 29, 2026

This policy explains what Emaús collects, why, and what you can do about it. Emaús ("the app") is published by CloudArbitration LTDA ("we", "us"). You can reach us at info@getemaus.com.

1. The short version

We store what you create in the app — notes, highlights, reading progress, prayer intentions, your prayer routine — so it follows you to a new phone. Your conversations with the AI Chat are kept on your device; to answer you, each message passes through our server to our AI provider, and we do not keep it. Your spiritual profile is used only to personalize the app, and only because you chose to fill it in. We keep usage statistics under a random identifier that is not connected to your account. The app shows ads, and ads may use an advertising identifier only if you allow it. We do not sell your personal data.

2. Data we collect

2.1 Account information

To create an account we collect your email address and a display name. If you use Sign in with Apple, we receive whatever Apple sends us — which may be a private relay address rather than your real email, at your choice. Passwords are handled by our authentication provider and are never visible to us.

You may explore the app without an account. In that mode what you do stays on your device and is not synced.

2.2 Spiritual profile

During onboarding the app may ask about your faith life so it can personalize reflections, journeys and the Chat: your spiritual tradition and spiritualities, age range, state of life, whether you have children, your daily routine, the moment you are living, the struggles you want to pray about, how often you go to Mass and to Confession, and your reflection preferences.

This information reveals religious beliefs, which many laws (including the GDPR and Brazil's LGPD) treat as sensitive data. We collect it only with your explicit consent, recorded when you save it; every question is optional; and you can change or erase the profile at any time in the app. It is never used for advertising and never shared with advertisers.

2.3 Content you create

When you are signed in, the app syncs:

• Bible highlights, bookmarks, notes and collections, and your reading progress
• Your prayer log — which daily moments (Gospel, Rosary, Examen, Mass, reading…) you completed and when — and your streak
• Prayer intentions and thanksgivings you write
• Journeys you follow or create, and your progress in them
• Your settings: language, prayer routine, reminder preferences

Prayer intentions are private: they never appear in notifications and are never shown to other people.

2.4 AI Chat

The Chat is a conversation with an AI model. Your conversations are stored on your device. To generate a reply, the app sends the recent messages of the conversation — together with the relevant parts of your spiritual profile and the text you are reading, if you started the conversation from a reading — to our server, which forwards them to Anthropic, the provider of the AI model. We do not store the content of your messages on our servers. We do keep a count of how many messages you have sent, to apply the free sample and the subscription limits.

Anthropic processes these messages to produce the answer and, under its commercial terms, does not use them to train its models. Please do not share in the Chat information you would not want processed this way — for example, details that identify other people.

The same applies when the app creates a personal journey for you with AI: your answers from onboarding are sent to generate it, and the resulting journey is stored in your account.

2.5 Usage analytics

To understand which parts of the app are useful, the app records product events: which screen was opened, whether a prayer was started or finished, whether the Chat or the subscription screen was shown. Each event carries:

• a random identifier generated on your device at install time
• a session identifier that changes every time the app cold-starts
• the event name, app version, platform and the time it happened

This identifier is not linked to your account or your email, and events never carry text you wrote (intentions, notes, Chat messages). It resets if you delete and reinstall the app.

2.6 Advertising

Emaús is free and supported by ads served by Google AdMob. Depending on your choices and your region, AdMob may process your device's advertising identifier (IDFA), coarse device and network information, and ad interaction data. Ads are never targeted using your spiritual profile, your intentions or anything you write in the app.

On iOS, the advertising identifier is only available if you allow tracking when the system asks. If you decline, the app works identically and you still see ads — they are simply less relevant. In the European Economic Area, the United Kingdom and Switzerland, you are also asked for consent through Google's consent form, which you can review later in the app. Subscribers to Emaús Chat do not see ads.

Google's handling of this data is governed by its own policies. See How Google uses information from sites or apps that use our services.

2.7 Notifications

Prayer reminders are scheduled locally on your device. If you allow notifications, the app also registers your device with our server so we can send occasional messages: we store the push token Apple assigns, your language, time zone and app version, the last time you opened the app, whether you opted in to "News and campaigns", and — if you are signed in — your account. You can turn notifications off at any time.

2.8 Purchases

Subscriptions are sold and billed by Apple. We never receive your payment details; we only learn whether your subscription is active, so we can unlock the Chat.

2.9 What we do not collect

• We do not collect your precise location.
• We do not access your contacts, photos, microphone or camera.
• We do not collect health data.
• We do not collect payment card information.

3. Why we process it

4. Who we share it with

We do not sell personal data. We share it only with the providers that make the app run:

• Supabase — hosts our database, authentication and server functions. It processes your account and synced content on our instructions.
• Anthropic — provides the AI model behind the Chat and personal journeys, as described in section 2.4.
• Google AdMob — serves the ads, as described in section 2.6.
• Apple — provides Sign in with Apple, push notifications and in-app purchases. Apple receives only what is inherent to those services.

We may also disclose data where required by law, or to protect our rights and the safety of users.

5. International transfers

Our providers operate infrastructure that may be located outside your country, including in the United States. Where required, transfers rely on standard contractual clauses or an equivalent mechanism offered by the provider.

6. How long we keep it

Account data, the spiritual profile and synced content are kept while your account exists. When you delete your account, we delete it together with this data. Chat conversations live on your device and are erased when you delete them or uninstall the app. Anonymous usage events are retained in aggregate; because they are not linked to your identity, they cannot be isolated and removed per person.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, to object to processing, and to withdraw consent at any time. To exercise any of these, write to info@getemaus.com from the address associated with your account. We answer within 15 days.

Deleting your account. In the app, go to Profile › Delete account. This deletes your account and everything linked to it. You can also email us with the subject "Delete my account".

If you are in Brazil, you may also contact the Autoridade Nacional de Proteção de Dados (ANPD). If you are in the European Economic Area or the United Kingdom, you may lodge a complaint with your local data protection authority.

Practical controls — tracking, ad consent, notifications, the spiritual profile — are listed on Your Privacy Choices.

8. Security

Data in transit is encrypted with TLS. Access to the database is restricted by row-level security rules so that an account can only read its own records. The AI provider's key lives only on our server, never in the app. No system is perfect, and we do not claim otherwise.

9. Children

Emaús is not directed at children under 13 (or under the minimum age set by your country's law, where it is higher). We do not knowingly collect data from them. If you believe a child has given us data, write to us and we will delete it.

10. Changes to this policy

If we change this policy, we will update the date at the top and, for changes that matter, tell you in the app before they take effect.

11. Contact

CloudArbitration LTDA
info@getemaus.com
getemaus.com