Privacy
We treat your spiritual and personal data with reverence. This policy explains what we collect, why, and what you can ask us to do about it.
What we collect
Account details (name, email or phone), the content you create, and technical records needed to keep the service running and secure. We never sell your data.
How we use it
To operate the platform, secure your account, and — only with your explicit consent — power the Pastoral AI. Journals, prayers and gratitude entries are private to you; we do not read them to build advertising or recommendations.
Cookies
We set two cookies without asking, because the site cannot work without them: one keeps you signed in, one remembers your language. Nothing else is set until you choose. Session analytics and performance tracing are off unless you accept them, and you can change your mind at any time from the link in the footer. We also record application errors — stack traces with no personal data and no session recording — under our legitimate interest in keeping the platform working and secure.
Who can see your data
Staff access is limited by role and recorded in an audit log: who looked, when, and at which record — never a copy of what it contained. Your own security events (sign-ins, password changes, sessions ended) are recorded too, and you can see them in your settings.
Your rights
You can ask us to give you a copy of your data, correct it, or delete it. Write to hi@andorinha.ao and we will act within 30 days. In the EU/EEA you have the full set of GDPR rights, including the right to complain to your supervisory authority; in Angola, Brazil and Mozambique the equivalent local rights apply.
Security
Data is encrypted in transit and at rest. Two-factor authentication is available to every member from Settings and is required for staff and administrator accounts. Passwords are stored hashed, and one-time codes are stored hashed and compared in constant time.
Retention
We keep your data while your account is active. When an account is deleted, personal data is removed within 90 days, except records we are required to keep — payment and invoice records for tax purposes, and audit entries, which exist precisely so that a deletion can be accounted for.