Privacy Policy

1. Introduction

Via Divina ("we", "our" or "us") is committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, share and protect your personal information when you use our mobile application and website (collectively, the "Services").

By using our Services, you accept the collection and use of your information in accordance with this policy.

2. Data Collected

2.1 Data you provide us

• Account information: first name, last name, email address, password (encrypted)
• Profile information: profile picture, biography, spiritual preferences
• User content: forum messages, comments, spiritual fight logs
• Payment information: processed exclusively by our secure payment provider Stripe (we never store your banking data)

2.2 Automatically collected data

• Usage data: pages viewed, modules followed, time spent, training progress
• Technical data: device type, operating system, app version, language, time zone
• Connection data: IP address, date and time of connection
• Cookies and similar technologies: to improve your experience and ensure the operation of our Services

2.3 Third-party service data

When you log in via third-party services (such as Google), we receive the information you authorize these services to share (name, email address, profile picture).

3. Data Usage

We use your data to:

• Provide, maintain and improve our Services
• Personalize your experience (progress, recommendations)
• Send you important notifications about your account and our Services
• Ensure the security of our Services and prevent abuse
• Analyze the use of our Services to improve their quality
• Comply with our legal obligations
• Send you marketing communications (with your consent, you can unsubscribe at any time)

4. Data Sharing

We never sell your personal data. We may share your information with:

4.1 Service providers

• Hosting: Vercel (United States) for application hosting
• Database: Neon (Europe) for secure data storage
• Payments: Stripe (PCI-DSS certified) for payment processing
• Emails: Resend for sending transactional emails
• Analytics: PostHog for usage analysis (anonymized data)
• Real-time chat: Ably for messaging features

4.2 Other users

Some information is visible to other users according to your privacy settings:

• Your name, profile picture and biography
• Your messages and interactions on the forum (public by default)
• Your position in the leaderboard (if you have enabled this option)

4.3 Legal obligations

We may disclose your information if required by law or to protect our rights, your safety or that of others.

5. Data Retention

We retain your personal data as long as necessary to:

• Provide our Services
• Comply with our legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account, we delete or anonymize your personal data within 30 days, unless we must retain it for legal reasons.

6. Data Security

We implement appropriate technical and organizational security measures to protect your data:

• Password encryption with bcrypt
• Secure communications via HTTPS/TLS
• Data access limited to authorized employees
• Regular security monitoring and audits
• Regular data backups

However, no method of transmission over the Internet is completely secure. We cannot guarantee absolute security.

7. Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct your inaccurate or incomplete data
• Right to erasure: delete your data in certain circumstances
• Right to restriction: restrict the processing of your data
• Right to portability: receive your data in a structured and commonly used format
• Right to object: object to the processing of your data
• Right to withdraw your consent: at any time, without affecting the lawfulness of processing based on consent before withdrawal
• Right to lodge a complaint: with your local data protection authority

To exercise these rights, contact us at: contact@viadivina.com

8. Cookies and Similar Technologies

We use cookies and similar technologies to:

• Essential cookies: necessary for the operation of the application (authentication, security)
• Preference cookies: to remember your choices (language, theme)
• Analytics cookies: to understand how you use our Services (with your consent)

You can manage your cookie preferences in your browser or app settings.

9. International Data Transfers

Your data may be transferred and processed in countries outside the European Economic Area (EEA), including the United States. In this case, we ensure that appropriate safeguards are in place in accordance with GDPR (standard contractual clauses, Privacy Shield, etc.).

10. Protection of Minors

Our Services are intended for persons aged 16 and over. We do not knowingly collect personal information from persons under 16. If you are a parent and believe your child has provided us with personal information, please contact us.

11. Changes to this Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last update" date.

We encourage you to regularly review this page to stay informed about how we protect your information.

12. Contact Us

If you have any questions about this privacy policy or our data practices, you can contact us:

13. Data Controller

The controller of your personal data is: