Privacy Policy
Last updated: October 23, 2026 · Ver en español
At 3CORD your privacy is a priority. This policy explains what data we process, on what legal basis, who we share it with, how we protect it, and what rights you have. The data controller is Oscar Manuel Acevedo Pinilla, an individual who operates 3CORD, domiciled in Bucaramanga, Santander, Colombia (email: care@3cord.co). This policy complies with, among others, Colombian Law 1581 of 2012 and Decree 1377 of 2013.
1. Data We Collect
We collect: (a) data you give us directly: your name, your partner’s name, anniversary date, email, gender, relationship status, language, and preferred Bible version; (b) content you generate in the app: devotional progress and streak, prayers, gratitudes, goals, board messages, progress in crisis modules, and vouchers; (c) technical data: device type, operating system, app version, identifiers for push notifications, and error and usage reports.
2. Sensitive Data (Religious Beliefs)
As a Christian devotional app, some of your content (prayers, reflections, devotional participation) may reveal your religious beliefs, considered sensitive or special-category data under laws such as the GDPR. We process this data only with your prior, express and informed consent, which you give by checking the acceptance box when creating your account, and solely for the purposes described in this policy. Authorizing the processing of sensitive data is optional: you are not required to do so, and you can use the app without writing personal prayers or reflections. You may withdraw your consent at any time by ceasing to use those features or by deleting your account.
3. Legal Bases for Processing
We process your data on the following bases: performance of the contract (providing the service and syncing with your partner), your consent (sensitive data, notifications, and optional analytics), our legitimate interest (security, fraud prevention, and service improvement), and compliance with legal obligations.
4. How We Use Your Data
We use your data to: provide and personalize your devotional experience, sync content with your linked partner, send the notifications you enable, process premium subscriptions and gift plans, provide support, maintain the security of the service, and improve it through aggregated analytics. We do not use your private content to show you advertising.
5. Who We Share Your Data With
We do not sell your data. We share it only with: (a) your linked partner, when you choose to share content; (b) providers that process data on our behalf (processors) under contract and a duty of confidentiality: Supabase (database, authentication, and storage), Firebase Cloud Messaging (push notifications), RevenueCat and the Apple and Google stores (subscriptions and payments), Sentry (error diagnostics), PostHog (analytics), Resend (transactional email), and Expo (app delivery); (c) authorities, when legally required.
6. International Transfers
Some of our providers process data in countries other than yours, including the United States. When we transfer data outside your region, we do so with recognized safeguards, such as Standard Contractual Clauses or adequacy decisions, to protect it at a level equivalent to that of your jurisdiction.
7. Storage and Security
Your data is encrypted in transit (TLS 1.3) and at rest (AES-256), and protected with access controls, authentication, and row-level security rules that restrict access to you and your linked partner. We perform regular backups. No system is 100% foolproof; if a breach affecting your data occurs, we will notify you and the competent authorities within the timeframes required by law.
8. Asynchronous Mode and Private Profile
With Asynchronous Mode enabled, each spouse progresses at their own pace. With Private Profile enabled, only your linked partner can see your activity. Both settings are enabled by default (privacy by design). Answers to Connection questions stay hidden until both partners respond.
9. Your Rights
Depending on your jurisdiction, you have the right to access, correct, delete, and export your data in a portable format, to restrict or object to certain processing, and to withdraw your consent. California residents may also know, delete, and correct their data and opt out of sharing, without being discriminated against for exercising these rights (we do not sell data). To exercise them, contact us through Support; we respond within a maximum of 30 days. If you are in Colombia, as the data subject you have the rights under Article 8 of Law 1581 of 2012 (to know, update, rectify and delete your data, request proof of authorization, be informed of how your data is used, and revoke authorization); we answer inquiries within 10 business days and claims within 15 business days, and you may go to the Superintendence of Industry and Commerce (SIC). Elsewhere, you may lodge a complaint with your data protection authority.
10. Data Retention
We keep your data while your account is active. Upon account deletion, your personal data is erased or anonymized within 30 days, except for data we must retain for legal, accounting, or security obligations for the time strictly necessary.
11. Automated Decisions and Artificial Intelligence
We do not make automated decisions that produce legal or similarly significant effects on you, nor do we profile you for that purpose. We do not use your private content (prayers, gratitudes, goals, or answers) to train artificial intelligence models.
12. Notifications and Device Identifiers
The mobile app does not use web cookies. We use device identifiers to authenticate you and, if you enable them, to send you push notifications through Firebase Cloud Messaging. You can disable notifications at any time from your system or app settings. We do not track your activity across other apps or websites.
13. Children’s Privacy
3CORD is intended exclusively for people 18 and older. We do not knowingly collect data from anyone under 18; if we discover that an account belongs to a minor, we will delete it along with its data. If you believe a child has provided us data, contact us through Support.
14. Changes to this Policy
We may update this policy. When changes are significant, we will notify you within the app and indicate the effective date. We recommend reviewing it periodically.
15. Contact
For privacy inquiries or to exercise your rights, contact us through the Support section in your profile or at care@3cord.co. Data controller: Oscar Manuel Acevedo Pinilla, an individual who operates 3CORD, domiciled in Bucaramanga, Santander, Colombia (email: care@3cord.co).