Privacy policy

Who is responsible

Porfirio Solutions LTDA, CNPJ 52.467.604/0001-46, Brazil. For anything about privacy and personal data, write to support@porfiriosolutions.com.br.

No account, no sign-up

Bright Qi works without an account or login. We do not ask for your email, phone number, password, address or any ID, and the app does not access your location, contacts, photos or camera.

Data that stays only on your device

To build your plan and keep track of it, the app saves the following in your device’s own storage:

• Your quiz answers: name or nickname, age, goal, how you usually wake up, qi gong experience, whether you prefer to practice standing or with a chair beside you, how much you move these days, what part of the morning you practice and how much time you have each morning.
• Your health answers, if you pick any: the parts of your body that need extra care (neck, shoulders, back, hips, knees, wrists and hands) and situations such as dizziness or a recent fall, heart or blood pressure under treatment, recent surgery or injury, and strong pain that won’t go away.
• Your progress: the date and time of each completed session, from which the app works out your program day and streak.
• Your access status: whether the subscription is active, per the store’s latest answer, and whether you have completed the quiz.
• Your preferences, such as the language you chose.

The health check is used on the device itself to show the notice to talk to a doctor before you start, when you pick any situation. None of these answers is a diagnosis.

This data is not sent to us or to third parties. We have no access to it: we cannot see, copy or recover what is on your device.

It stays there until you clear the app’s data or uninstall the app, and it does not follow you to a new device. If your system backup is turned on (for example, Google backup on Android), the system itself may include the app’s data in the backup of your personal account. That backup is controlled by you and by the maker of the system, not by us.

Purchases and subscription

The subscription is sold by your device’s app store: Apple’s App Store or Google Play. The store is the one that charges you, using the account and payment method you already have with it. We do not receive or store your card details.

To know whether there is an active subscription and unlock paid content, the app uses RevenueCat, a subscription management service run by RevenueCat, Inc. (United States). Every time the app opens, even if you never buy anything, and when you buy or restore a purchase, RevenueCat receives:

• an anonymous identifier created by the app for this installation, which is not your name, email or phone number;
• the purchase data reported by the store: the product, the dates, the subscription status (active, canceled, refunded) and the transaction receipt;
• technical data: the device’s operating system and its version, the app version, the language, the store country and currency, and the IP address, which comes with any internet connection.

We look at these records in the RevenueCat dashboard and in the stores’ reports to unlock access, handle support and do our accounting. They are tied to the anonymous identifier, not to your name.

Each company handles the data it receives under its own policy: Apple, Google and RevenueCat.

App updates

The app receives fixes through Expo’s update service (EAS Update, by 650 Industries, Inc., United States), without waiting for a new version in the store. When it opens, it asks Expo’s servers whether there is an update and sends: the device’s operating system, the app version, a random identifier for this installation (generated on the device, not tied to the hardware or to an account) and, if an earlier update failed, technical information about that failure. The IP address comes with the connection. See Expo’s privacy policy.

Usage measurement and error reports

As of the date of this policy, the app does not send usage data or error reports, to us or to third parties. The only communications the app makes are the ones described in the sections on purchases and on updates.

We may start using tools for usage measurement, ad campaign measurement and crash diagnostics. If that happens, this policy will be updated first, saying which tool is added, what data it receives and why, and the app will ask for your permission whenever the law or the store requires it.

Reminders

If you turn on “Daily reminder”, the app asks for the system’s notification permission. The reminder is scheduled on the device itself and does not go through any server of ours. You can turn it off in the app or in your device settings.

Ads and sale of data

The app shows no third-party ads. We do not sell or rent personal data.

When you write to us

If you email support, we receive your email address and whatever you tell us in the message. We use it only to reply and resolve your request, and we keep the conversation for up to 2 years.

Who the data is shared with

Only with those who need the data for the app to work, and only as described above:

• Apple and Google, which own the stores and process the purchase and the charge.
• RevenueCat, which keeps track of the subscription status.
• Expo, which delivers app updates.
• Public authorities, when there is a legal obligation or a court order.

These companies are in the United States and other countries. This means technical and purchase data may be processed outside the country where you live, with the safeguards the applicable law requires.

What we use the data for, and on what legal basis

• Unlocking and maintaining paid access and restoring purchases: performance of our contract with you.
• Delivering updates and keeping the app working and secure: legitimate interest.
• Replying to support: handling your request.
• Accounting and tax obligations: compliance with a legal obligation.
• Usage and campaign measurement, if it ever exists: consent, where the law requires it.

How long the data is kept

• Data on the device: until you clear the app’s data or uninstall the app.
• Purchase records: for as long as the subscription exists and, after that, for the period required by tax and legal obligations.
• Support messages: up to 2 years.

Your rights and how to delete your data

You can ask for confirmation that we process data about you, for access, correction, deletion, portability and information about who it is shared with, and you can withdraw a consent you have given. These rights come from the LGPD (Brazil), the GDPR (European Union and United Kingdom) and equivalent laws in other countries.

• Data on the device: since we have no access to it, you are the one who deletes it. Uninstall the app or clear its data in your device settings. “Retake the quiz”, under Profile, erases your quiz answers.
• Purchase record: write to support@porfiriosolutions.com.br with the order number shown on the receipt the store sent you. That is how we find the record, since we do not have your name. Deleting the record does not stop the charge: if the subscription is active, cancel it in the store first.
• Your Apple or Google account data: the request goes directly to them.

We reply within 15 days. We may ask for confirmation that the request is yours, such as the store order number, before acting on it.

If you believe your data has been handled improperly, you can complain to the data protection authority in your country. In Brazil, that is the ANPD.

Children and teenagers

Bright Qi is intended for people aged 18 and over and is not directed at children. We do not knowingly collect data from minors. If you believe a minor has sent us data, for example in an email to support, let us know and we will delete it.

Security

The app’s data is kept in the space reserved for it on your device, protected by the operating system. Communication with the stores, RevenueCat and Expo is encrypted. No system is immune to failure: if there is an incident that poses a significant risk to you, we will post a notice on this page and notify the competent authority, as the law requires.

This website

This website uses no cookies and no measurement tools. The hosting provider logs technical access data, such as IP address and browser, to keep the site working and secure.

Changes to this policy

When this policy changes, the date at the top changes with it. Significant changes, such as adding a measurement tool, are published here before they take effect.

Contact

Porfirio Solutions LTDA, CNPJ 52.467.604/0001-46
support@porfiriosolutions.com.br
See also the Terms of use and the Help and support page.