Privacy Notice
Jesus AI Chat · Last updated: October 5, 2026
This Privacy Notice describes how Kevaina Interactive LLC («the Company», «we»), as data controller, collects, uses, retains and transfers the personal data of those who use the Jesus AI Chat application («the App»). It is issued in compliance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and Panama's Personal Data Protection Law (Law 81).
The App works with anonymous accounts: we do not ask for your name, email or phone number to use it.
1. Data Controller
- Controller: Kevaina Interactive LLC
- Address: 30 N Gould St Ste N, Sheridan, WY 82801, United States
- Contact (privacy and rights): info@jesuschatapp.com
2. Personal Data We Process
To provide the service, we process the following categories of data:
| Data | Detail |
|---|---|
| Anonymous identifier | The account is anonymous: no name, email or phone is requested. |
| Voice | Sent to a transcription provider and converted into text. The audio is not stored. |
| Conversation text | What you say and what the avatar replies. |
| Relationship summary | AI-generated text so the avatar remembers you between calls. |
| Country and platform | Device region (iOS/Android), for language and notification timing. |
| Notification token | Only if you enable notifications. |
| Technical metrics | Duration, latencies, cost per call and your plan status. No conversation content. |
| Minutes balance | Credit movements. |
| Subscription and purchase data | Plan (weekly/annual), status (trial, active, cancelled…), store (App Store/Google Play), store transaction identifier and period dates; and the amount charged, the currency and the country, for accounting. We do not receive or store your card details: the payment is processed by Apple or Google. |
| Crisis events | If the safety system detects a possible risk: only the risk level, date and country; never what you said. |
| Content reports | If you report a response: what the avatar said and the reason for the report. |
3. Processing of Sensitive Personal Data
Due to the nature of the App, your conversations may reveal sensitive personal data —for example about your health, your personal life or your religious beliefs—. We process this information for the sole purpose of generating the avatar's responses and sustaining your reflection experience.
Before your first call, the App explains what data is sent to third-party artificial intelligence services and to which ones (see section 7), and asks you to check an express consent box —«I have read the disclaimer and accept the Terms of use and the processing of my data, including sensitive data, as described in the Privacy notice»— without which you cannot continue. Until you check it, none of your conversation data is sent to those services. We record that consent with date, time and language. If this Notice changes substantially, we will ask for it again.
4. What we do not do
For your peace of mind, and because it is true:
- We do not record audio. Your voice is transcribed to text and the audio is discarded.
- We do not record video. Your front camera image is shown in a corner of the screen as a visual video-call effect, but it never leaves your device: it is not transmitted or stored anywhere.
- We do not ask for identifying data, nor do we cross-reference your information with social networks.
- We do not sell or rent your personal data.
5. Purposes of Processing
Necessary purposes (without which the App cannot function):
- Transcribe your voice, generate the avatar's responses and synthesize them into speech.
- Display the avatar's video during the call.
- Maintain the relationship summary to provide continuity between calls.
- Manage your minutes balance, your subscriptions and your purchases (validated through our payments provider, RevenueCat).
- Protect the security of the service, prevent abuse and detect situations of risk.
Secondary purposes (optional; you may decline them without losing the service):
- Send you notifications (reminders and alerts). They are only enabled if you authorize them, and you can turn them off at any time from your device settings.
Measurement and attribution. From the App's first launch we process technical and usage data —without the content of your conversations— to measure its stability and performance (Firebase / Google Analytics) and to attribute installs and measure our campaigns (AppsFlyer). This data does not identify you personally.
You can limit the use or disclosure of your data: the account is anonymous by design, you can decline the secondary purposes, delete your data at any time (see section 6) and exercise your ARCO rights (section 8).
6. Retention and Deletion
We keep each type of data only for as long as necessary:
| Data | Retention period |
|---|---|
| Conversation text | 30 days; automatic daily deletion. |
| Relationship summary | While you use the App; deleted after 365 days of inactivity. |
| Crisis events | Only risk level, date and country (not your words). |
| Content reports | What the avatar said and the reason for the report. |
| Metrics and balance | Kept (they contain no conversation). |
| Purchase and revenue records | Kept as accounting and tax records, even after account deletion. |
Deletion on request: from Settings → Delete account data you can delete your data immediately and without giving any explanation. This deletes your conversations, the relationship summary and the crisis events. We keep, on purpose, your minutes balance (so as not to penalize what you have already paid for), the content-free metrics and the purchase and revenue records, the latter due to accounting and tax obligations.
7. Third-Party AI Services and International Transfers
To function, the App shares strictly necessary data with technology providers that operate outside your country; the data controller is based in the United States. Your conversation data is processed mainly in the United States and Singapore. By granting your express consent you accept these international transfers.
| Provider | Data it receives | Purpose | Country |
|---|---|---|---|
| Deepgram (AI) | The audio of your voice during the call | Transcribe your voice into text | USA |
| Alibaba Cloud — Qwen model (AI) | The text of what you say, the conversation history and the summary of your previous calls | Generate the avatar's responses and the relationship summary, and detect risk situations | Singapore |
| ElevenLabs (AI) | The text of the avatar's responses | Turn the response into voice | USA |
| Simli (AI) | The avatar's synthesized voice (not your voice) | Generate the avatar's animated video | USA |
| Supabase | Anonymous identifier, conversations (30 days), relationship summary, balance and purchase records | Database and authentication | USA (Oregon) |
| DigitalOcean | The call data that passes through our server | Application server | USA (New York) |
| Firebase (Google) | Notification token, crash reports and usage events, with no conversation content | Push notifications, stability and usage analytics | Global |
| RevenueCat | Anonymous identifier and subscription and purchase data | Subscription and purchase management and validation | USA |
| AppsFlyer | Install and device identifiers, and install and purchase events, with no conversation content | Install attribution and campaign measurement | USA |
| Meta (Facebook/Instagram) | Neutral install and purchase events, forwarded by AppsFlyer (no Meta SDK); no conversation content | Advertising campaign measurement and optimization | USA |
Your permission before sharing. The four artificial intelligence services marked «AI» only receive data after you check the consent box in the App, which first shows you this same information: what is sent and to whom. If you do not check it, nothing is sent to them. We do not send them your name, email or phone number (the account is anonymous), and your camera image never leaves your phone.
Equal protection. We only share with these providers the data that is essential to provide the service, and we require them to protect it with the same level of protection described in this Notice: to process it solely on our behalf and to provide the service to us, to keep it confidential and to apply appropriate security measures to it.
8. Your ARCO Rights
You have the right to Access your data, Rectify it if it is inaccurate, Cancel it (request its deletion) and Object to certain processing —the ARCO rights recognized by the LFPDPPP—. You may also withdraw your consent at any time.
To exercise them, write to us at info@jesuschatapp.com. Many of these actions you can carry out yourself immediately from Settings → Delete account data. We will respond to your request within the periods established by law.
9. Minors
The App is not directed at minors. It is directed at persons over 18 years of age, which is the minimum age to use it. We do not knowingly collect data from minors below that age; if we detect otherwise, we will delete the information. If you are a parent or guardian and believe a minor in your care has used the App, write to us at info@jesuschatapp.com.
10. Information for United States Residents
This section applies to those who use the App from the United States (including Puerto Rico) or reside there, and supplements the rest of the Notice.
- We do not sell or «share» your personal data within the meaning of US privacy laws (including California's CCPA/CPRA): we do not disclose it for money or for cross-context behavioral advertising, and we never have.
- We do not track across sites. The App is not a website with third-party trackers; by design we do not carry out such tracking, so we honor «Do Not Track» and «Global Privacy Control» signals (CalOPPA).
- Sensitive data. Your conversations may reveal information about physical or mental health, sex life or religious beliefs. We use it only to provide the service, never to profile you for advertising. See also our Consumer Health Data Privacy Policy.
- Server logs. They are kept for at most 7 days and then deleted automatically. For calls made from the USA and Puerto Rico, those logs do not store the text of what you say, only its length.
- Reports and surveys. If you report a response or answer an optional in-app survey, we store that data. For US users, when you delete your account data we also delete content reports, survey responses and notification data.
- How to review, correct or delete. You can delete your data yourself and immediately from Settings → Delete account data, or write to info@jesuschatapp.com to access, correct or delete it. We will not discriminate against you for exercising your rights.
- Minors (COPPA). The App is directed at persons over 18 and is not directed at children under 13. We do not knowingly collect data from children under 13; if we detect that an account belongs to a child under 13, we delete it together with its data.
We keep, on purpose and as compliance evidence, the record of your consent, the AI disclosures shown to you and the referrals to helplines; and, due to accounting obligations, the purchase records.
11. Country-Specific Information
This section supplements the rest of the Notice for those who use the App from the countries in the table. In all of them we recognize the same rights: to access your data, rectify it, cancel it (have it deleted), object to its processing and withdraw your consent, plus any others your country’s law adds, such as portability.
- How to exercise them. From any country, write to us at info@jesuschatapp.com. It is free of charge. Many of these actions you can carry out yourself immediately from Settings → Delete account data.
- Response time. We reply within the period set by your country’s law (column «Time to reply»). Where the law sets none, within 10 business days at most.
- Right to complain. If we do not reply on time or you disagree with our reply, you can file a complaint with your country’s data protection authority or, where there is none, go to the courts through the remedy shown in the table. In most countries the authority requires that you first made the request to us.
| Country | Law and supervisory authority | Time to reply |
|---|---|---|
| Argentina | Law 25,326 on Personal Data Protection. Authority: Agency for Access to Public Information (AAIP). | Access: 10 calendar days. Rectification and deletion: 5 business days. |
| Bolivia | No general data protection law. Remedy: «Acción de Protección de Privacidad» before the courts (Constitution, arts. 130 and 131). | 10 business days. |
| Chile | Law 19,628 on the protection of private life. No supervisory authority for private companies: claims go to the civil courts. Once Law 21,719 takes effect (scheduled for December 1, 2026): Personal Data Protection Agency. | Today: 2 business days. Under Law 21,719: 30 calendar days. |
| Colombia | Law 1581 of 2012 and Decree 1377 of 2013. Authority: Superintendence of Industry and Commerce (SIC). | Inquiries: 10 business days. Claims: 15 business days. |
| Costa Rica | Law 8968 on the Protection of Individuals with regard to the Processing of their Personal Data. Authority: Agency for the Protection of Inhabitants’ Data (PRODHAB). | 5 business days. |
| Ecuador | Organic Law on Personal Data Protection (2021) and its Regulations. Authority: Superintendence of Personal Data Protection. | 10 business days. |
| El Salvador | Law for the Protection of Personal Data (Legislative Decree 144 of 2024). Authority: State Cybersecurity Agency (ACE). | 20 business days, extendable once. |
| Guatemala | No general data protection law. Remedy: «amparo» action before the courts (Constitution, art. 265). | 10 business days. |
| Honduras | No general data protection law. Remedy: habeas data before the Constitutional Chamber of the Supreme Court of Justice (Constitution, art. 182). | 10 business days. |
| Mexico | Federal Law on the Protection of Personal Data Held by Private Parties (Official Gazette of March 20, 2025). Authority: Ministry of Anti-Corruption and Good Governance (SABG). | 20 business days to reply and 15 more to carry it out. |
| Nicaragua | Law 787 on Personal Data Protection. Authority: the Personal Data Protection Directorate of the Ministry of Finance and Public Credit provided for in the law; you may also go to the courts («amparo»). | Access: 10 business days. Rectification and cancellation: 5 business days. |
| Panama | Law 81 of 2019 and Executive Decree 285 of 2021. Authority: National Authority for Transparency and Access to Information (ANTAI), Personal Data Protection Directorate. | Access: 10 business days. Rectification and cancellation: 5 business days. |
| Paraguay | Today, no general data protection law. Remedy: habeas data (Constitution, art. 135). Once Law 7593 of 2025 takes effect (scheduled for November 2027): National Personal Data Protection Agency. | Today: 10 business days. Under Law 7593: 30 calendar days. |
| Peru | Law 29733 on Personal Data Protection and its Regulations (Supreme Decree 016-2024-JUS). Authority: National Authority for Personal Data Protection (ANPD), Ministry of Justice and Human Rights. | Information: 8 business days. Access: 20 business days. Other rights: 10 business days. |
| Dominican Republic | Law 172-13 on the comprehensive protection of personal data. No supervisory authority: habeas data action before the courts (Constitution, art. 70). | Access: 5 business days. Rectification and deletion: 10 business days. |
| Uruguay | Law 18,331 on Personal Data Protection. Authority: Personal Data Regulatory and Control Unit (URCDP). | 5 business days. |
Sensitive data. The laws of these countries treat data about your health and your religious beliefs as sensitive, and several require your express consent to process it, in some cases in writing. You give it through the App’s consent checkbox (section 3), which we record with date, time and language as evidence, and you can withdraw it whenever you wish. Talking about your health or your faith with the avatar is always voluntary: you are not required to share sensitive data to use the App.
Argentina. The Agency for Access to Public Information (AAIP), as the supervisory body of Law No. 25,326, has the power to handle the complaints and claims filed by anyone whose rights are affected by a breach of the rules in force on personal data protection.
12. Changes to This Notice
We may update this Privacy Notice. We will publish the current version on this page with its date of last update and, when the change is substantial, we will notify you within the App and ask for your consent again before it takes effect.
See also: Terms of Use · Health data (US) · Crisis help