Privacy

Who is responsible

Carlos Adriano Sales Fernandes, Brazilian taxpayer number (CPF) 00963797158, in Palmas/TO. For any request about your data — to see it, correct it, take it, erase it — write to suporte@mercadosynesis.com.br. There is no data protection officer under contract: it is the same person.

What is kept

Your email address and your sign-in password (the password is stored encrypted, and not even the author sees it).

The language you chose to read in.

Your subscription: its state, the plan, since when and until when, and the payment reference that whoever charges gave us.

Your course: which module you are on and since when, and which meditations you have already read.

Your calendar: the events you created and the reminders you set; and, if you connected Google Calendar, the authorization to read it.

The parish you follow.

How many times you consulted Anamnesis in the month — the number, not what you asked.

Your device's registration for receiving reminders, if you turned reminders on.

Your internal forum — but encrypted. See the next section.

The internal forum, and why the author does not read it

What you write in the forum is encrypted on your own device, with a password only you hold, BEFORE it leaves the device. What reaches the server is a sealed envelope.

It is not a promise not to read: it is having no way to. Neither the author, nor whoever hosts the database, nor whoever might receive a court order can open that without your password.

The price of this is that losing the password means losing the text. There is no recovery, and there cannot be.

The exception, and it is a large one: Anamnesis

When you press “Take to Anamnesis”, the text of the period you chose is decrypted on your device and sent, in plain text, to the server — and from there to Gemini, from Google, which is what writes the answer.

That is: at that moment, and only at that moment, what you wrote leaves here and passes through a Google service. The server does not store that text, does not write it to a log and does not return it; but it passed through.

The key in use is a free-tier key, and Google's free-tier conditions are not the same as the paid ones regarding the use of what passes through it. Read Google's conditions before taking to Anamnesis anything you do not want leaving here.

Anamnesis is optional. Nothing in the app triggers it by itself: only your click.

What is NOT kept

No card data, at any moment. The app does not receive it, does not ask for it, and would have nowhere to put it.

The word you look up in the dictionary while reading. It says a great deal about the reader, and for that reason the lookup is not recorded anywhere.

There is no Google Analytics, no advertising network, and the app is neither sold nor handed over to anyone. On the measurement of who arrives through the subscription page, read the next section: it changed on 17 August 2026, and it changed towards less silence, not more.

Access measurement, and where it does NOT reach

This changed on 17 August 2026, and this paragraph exists so that you know what changed without having to hunt for it.

On the public subscription page — and only there — there is a Meta (Facebook) pixel. It records two things: that the page was opened, and that someone clicked to subscribe. Nothing else.

And when a subscription is paid, the server tells Meta that a subscription happened and for how much, together with your e-mail turned into an irreversible code — Meta can recognise someone who is already theirs, and cannot read the address back from the code.

Where this does NOT reach: anything behind your password. The itinerary, the reading, the inner forum, the examination, the agenda, the conversation and the dictionary lookup remain without measurement of any kind. No word you write, read or look up leaves here because of this.

Why it exists: to know which advertisement brought someone who subscribes. Without it, the advertisement is paid for in the dark, and money spent in the dark comes out of what sustains this app.

If you would rather not be measured there either, your browser's ad blocker is enough for the pixel part — and the app works the same, from the first day to the last.

Who else sees it

Supabase — holds the database and handles sign-in.

Vercel — hosts the app and serves the pages.

Mercado Pago — charges the subscription of whoever pays in reais, and is who holds your payment data. This app receives from it your email address and the state of the payment, and nothing else.

Hotmart — the same, for whoever pays in dollars. Only one of the two sees your purchase: the one that charged it. The other never learns you exist.

Google — Gemini, when you use Anamnesis (above). And, in spoken Conversation, the transcription of your voice and the reading aloud are done by the browser; in Chrome, the audio goes to Google's servers. The Conversation screen says so before you speak.

Cookies

Two, and neither is for advertising: the session one, which is what keeps you signed in, and the language one, which remembers the language you chose.

Your reading preference and the mark of where you stopped stay on the device, and never go up to the server.

Your rights (Brazilian data protection law, LGPD, art. 18)

TAKE IT ALL WITH YOU: in your account there is a button that downloads, in a single file, everything this app keeps about you. The forum goes out as it is stored — encrypted — because that is how it exists here.

ERASE EVERYTHING: on the same screen. It erases the account, the course, the calendar, the subscription, the forum and the sign-in. It is immediate and cannot be undone.

Careful, and the screen says so before the click: the sign-in for this app is the same one as ANIMA's. Erasing here erases your access there as well.

CORRECT: write to suporte@mercadosynesis.com.br. The email address cannot be changed from the screen, and that is on purpose — it is what ties your payment to your account.

What remains even after erasure, and why

The record of payment notices. Every notice that arrives from whoever charges enters a list that is never rewritten and never erased — the guarantee comes from the database itself, and not from the good will of whoever writes the code.

That record holds the email address the payment was made with, the amount and the date. It exists for one thing only: to prove, in a money dispute, what happened and when. A record that can be edited afterward proves nothing.

It is retention under legal and tax obligation, which the LGPD permits (art. 16). It is used for nothing else, and it never becomes a contact list.

How long it is kept

As long as your account exists. Erase the account and everything is erased, except the payment record described above.

An account with no subscription and no use is not erased on its own: what you wrote stays yours until you order it erased.