Privacy Notice

Jesus AI Chat · Last updated: October 5, 2026

This Privacy Notice describes how Kevaina Interactive LLC («the Company», «we»), as data controller, collects, uses, retains and transfers the personal data of those who use the Jesus AI Chat application («the App»). It is issued in compliance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and Panama's Personal Data Protection Law (Law 81).

The App works with anonymous accounts: we do not ask for your name, email or phone number to use it.

1. Data Controller

2. Personal Data We Process

To provide the service, we process the following categories of data:

DataDetail
Anonymous identifierThe account is anonymous: no name, email or phone is requested.
VoiceSent to a transcription provider and converted into text. The audio is not stored.
Conversation textWhat you say and what the avatar replies.
Relationship summaryAI-generated text so the avatar remembers you between calls.
Country and platformDevice region (iOS/Android), for language and notification timing.
Notification tokenOnly if you enable notifications.
Technical metricsDuration, latencies, cost per call and your plan status. No conversation content.
Minutes balanceCredit movements.
Subscription and purchase dataPlan (weekly/annual), status (trial, active, cancelled…), store (App Store/Google Play), store transaction identifier and period dates; and the amount charged, the currency and the country, for accounting. We do not receive or store your card details: the payment is processed by Apple or Google.
Crisis eventsIf the safety system detects a possible risk: only the risk level, date and country; never what you said.
Content reportsIf you report a response: what the avatar said and the reason for the report.

3. Processing of Sensitive Personal Data

Due to the nature of the App, your conversations may reveal sensitive personal data —for example about your health, your personal life or your religious beliefs—. We process this information for the sole purpose of generating the avatar's responses and sustaining your reflection experience.

Before your first call, the App explains what data is sent to third-party artificial intelligence services and to which ones (see section 7), and asks you to check an express consent box —«I have read the disclaimer and accept the Terms of use and the processing of my data, including sensitive data, as described in the Privacy notice»— without which you cannot continue. Until you check it, none of your conversation data is sent to those services. We record that consent with date, time and language. If this Notice changes substantially, we will ask for it again.

4. What we do not do

For your peace of mind, and because it is true:

5. Purposes of Processing

Necessary purposes (without which the App cannot function):

Secondary purposes (optional; you may decline them without losing the service):

Measurement and attribution. From the App's first launch we process technical and usage data —without the content of your conversations— to measure its stability and performance (Firebase / Google Analytics) and to attribute installs and measure our campaigns (AppsFlyer). This data does not identify you personally.

You can limit the use or disclosure of your data: the account is anonymous by design, you can decline the secondary purposes, delete your data at any time (see section 6) and exercise your ARCO rights (section 8).

6. Retention and Deletion

We keep each type of data only for as long as necessary:

DataRetention period
Conversation text30 days; automatic daily deletion.
Relationship summaryWhile you use the App; deleted after 365 days of inactivity.
Crisis eventsOnly risk level, date and country (not your words).
Content reportsWhat the avatar said and the reason for the report.
Metrics and balanceKept (they contain no conversation).
Purchase and revenue recordsKept as accounting and tax records, even after account deletion.

Deletion on request: from Settings → Delete account data you can delete your data immediately and without giving any explanation. This deletes your conversations, the relationship summary and the crisis events. We keep, on purpose, your minutes balance (so as not to penalize what you have already paid for), the content-free metrics and the purchase and revenue records, the latter due to accounting and tax obligations.

7. Third-Party AI Services and International Transfers

To function, the App shares strictly necessary data with technology providers that operate outside your country; the data controller is based in the United States. Your conversation data is processed mainly in the United States and Singapore. By granting your express consent you accept these international transfers.

ProviderData it receivesPurposeCountry
Deepgram (AI)The audio of your voice during the callTranscribe your voice into textUSA
Alibaba Cloud — Qwen model (AI)The text of what you say, the conversation history and the summary of your previous callsGenerate the avatar's responses and the relationship summary, and detect risk situationsSingapore
ElevenLabs (AI)The text of the avatar's responsesTurn the response into voiceUSA
Simli (AI)The avatar's synthesized voice (not your voice)Generate the avatar's animated videoUSA
SupabaseAnonymous identifier, conversations (30 days), relationship summary, balance and purchase recordsDatabase and authenticationUSA (Oregon)
DigitalOceanThe call data that passes through our serverApplication serverUSA (New York)
Firebase (Google)Notification token, crash reports and usage events, with no conversation contentPush notifications, stability and usage analyticsGlobal
RevenueCatAnonymous identifier and subscription and purchase dataSubscription and purchase management and validationUSA
AppsFlyerInstall and device identifiers, and install and purchase events, with no conversation contentInstall attribution and campaign measurementUSA
Meta (Facebook/Instagram)Neutral install and purchase events, forwarded by AppsFlyer (no Meta SDK); no conversation contentAdvertising campaign measurement and optimizationUSA

Your permission before sharing. The four artificial intelligence services marked «AI» only receive data after you check the consent box in the App, which first shows you this same information: what is sent and to whom. If you do not check it, nothing is sent to them. We do not send them your name, email or phone number (the account is anonymous), and your camera image never leaves your phone.

Equal protection. We only share with these providers the data that is essential to provide the service, and we require them to protect it with the same level of protection described in this Notice: to process it solely on our behalf and to provide the service to us, to keep it confidential and to apply appropriate security measures to it.

8. Your ARCO Rights

You have the right to Access your data, Rectify it if it is inaccurate, Cancel it (request its deletion) and Object to certain processing —the ARCO rights recognized by the LFPDPPP—. You may also withdraw your consent at any time.

To exercise them, write to us at info@jesuschatapp.com. Many of these actions you can carry out yourself immediately from Settings → Delete account data. We will respond to your request within the periods established by law.

9. Minors

The App is not directed at minors. It is directed at persons over 18 years of age, which is the minimum age to use it. We do not knowingly collect data from minors below that age; if we detect otherwise, we will delete the information. If you are a parent or guardian and believe a minor in your care has used the App, write to us at info@jesuschatapp.com.

10. Information for United States Residents

This section applies to those who use the App from the United States (including Puerto Rico) or reside there, and supplements the rest of the Notice.

We keep, on purpose and as compliance evidence, the record of your consent, the AI disclosures shown to you and the referrals to helplines; and, due to accounting obligations, the purchase records.

11. Country-Specific Information

This section supplements the rest of the Notice for those who use the App from the countries in the table. In all of them we recognize the same rights: to access your data, rectify it, cancel it (have it deleted), object to its processing and withdraw your consent, plus any others your country’s law adds, such as portability.

CountryLaw and supervisory authorityTime to reply
ArgentinaLaw 25,326 on Personal Data Protection.
Authority: Agency for Access to Public Information (AAIP).
Access: 10 calendar days. Rectification and deletion: 5 business days.
BoliviaNo general data protection law.
Remedy: «Acción de Protección de Privacidad» before the courts (Constitution, arts. 130 and 131).
10 business days.
ChileLaw 19,628 on the protection of private life. No supervisory authority for private companies: claims go to the civil courts.
Once Law 21,719 takes effect (scheduled for December 1, 2026): Personal Data Protection Agency.
Today: 2 business days. Under Law 21,719: 30 calendar days.
ColombiaLaw 1581 of 2012 and Decree 1377 of 2013.
Authority: Superintendence of Industry and Commerce (SIC).
Inquiries: 10 business days. Claims: 15 business days.
Costa RicaLaw 8968 on the Protection of Individuals with regard to the Processing of their Personal Data.
Authority: Agency for the Protection of Inhabitants’ Data (PRODHAB).
5 business days.
EcuadorOrganic Law on Personal Data Protection (2021) and its Regulations.
Authority: Superintendence of Personal Data Protection.
10 business days.
El SalvadorLaw for the Protection of Personal Data (Legislative Decree 144 of 2024).
Authority: State Cybersecurity Agency (ACE).
20 business days, extendable once.
GuatemalaNo general data protection law.
Remedy: «amparo» action before the courts (Constitution, art. 265).
10 business days.
HondurasNo general data protection law.
Remedy: habeas data before the Constitutional Chamber of the Supreme Court of Justice (Constitution, art. 182).
10 business days.
MexicoFederal Law on the Protection of Personal Data Held by Private Parties (Official Gazette of March 20, 2025).
Authority: Ministry of Anti-Corruption and Good Governance (SABG).
20 business days to reply and 15 more to carry it out.
NicaraguaLaw 787 on Personal Data Protection.
Authority: the Personal Data Protection Directorate of the Ministry of Finance and Public Credit provided for in the law; you may also go to the courts («amparo»).
Access: 10 business days. Rectification and cancellation: 5 business days.
PanamaLaw 81 of 2019 and Executive Decree 285 of 2021.
Authority: National Authority for Transparency and Access to Information (ANTAI), Personal Data Protection Directorate.
Access: 10 business days. Rectification and cancellation: 5 business days.
ParaguayToday, no general data protection law. Remedy: habeas data (Constitution, art. 135).
Once Law 7593 of 2025 takes effect (scheduled for November 2027): National Personal Data Protection Agency.
Today: 10 business days. Under Law 7593: 30 calendar days.
PeruLaw 29733 on Personal Data Protection and its Regulations (Supreme Decree 016-2024-JUS).
Authority: National Authority for Personal Data Protection (ANPD), Ministry of Justice and Human Rights.
Information: 8 business days. Access: 20 business days. Other rights: 10 business days.
Dominican RepublicLaw 172-13 on the comprehensive protection of personal data.
No supervisory authority: habeas data action before the courts (Constitution, art. 70).
Access: 5 business days. Rectification and deletion: 10 business days.
UruguayLaw 18,331 on Personal Data Protection.
Authority: Personal Data Regulatory and Control Unit (URCDP).
5 business days.

Sensitive data. The laws of these countries treat data about your health and your religious beliefs as sensitive, and several require your express consent to process it, in some cases in writing. You give it through the App’s consent checkbox (section 3), which we record with date, time and language as evidence, and you can withdraw it whenever you wish. Talking about your health or your faith with the avatar is always voluntary: you are not required to share sensitive data to use the App.

Argentina. The Agency for Access to Public Information (AAIP), as the supervisory body of Law No. 25,326, has the power to handle the complaints and claims filed by anyone whose rights are affected by a breach of the rules in force on personal data protection.

12. Changes to This Notice

We may update this Privacy Notice. We will publish the current version on this page with its date of last update and, when the change is substantial, we will notify you within the App and ask for your consent again before it takes effect.

See also: Terms of Use · Health data (US) · Crisis help