Privacy Policy
Effective September 30, 2026.
This policy explains which personal data Uníssono collects, why it collects it, who it is shared with, how long it is kept and what you can do about it. It covers the mobile app (iOS and Android), the site https://unissonoapp.com and the web app at https://app.unissonoapp.com.
The data controller is EVERTON DE OLIVEIRA MUNIZ LTDA (CNPJ nº 61.350.987/0001-69), located at Rua Guanabara, 194, Lote 07, Quadra 10, São Jorge, Pinheiral/RJ, CEP 27197-000. Talk to us at contato@unissonoapp.com, the same channel reaches the person in charge of personal data processing (Brazilian data protection law, LGPD, art. 41).
By using Uníssono you also accept the Terms of Use.
In short
| Question | Short answer |
|---|---|
| Do you sell my data? | No. We never sell, rent or trade personal data. |
| Are there ads in the app? | No. We show no ads and use no advertising identifiers. |
| Do you read my chat? | No. Access to content is restricted and logged, and only happens under a legal duty or to answer a takedown request. |
| Do you track my location? | No. We collect no GPS or sensor data. |
| Can I delete everything? | Yes. Account deletion lives inside the product and becomes irreversible after 7 days. |
| Who decides who sees my schedule? | The ministry you belong to. |
1. Who is responsible for what
Uníssono holds two kinds of information, and our role differs for each:
- Your account data: name, email, password, photo, preferences and devices. Here we are the controller: what to collect and why is our decision, described in this document.
- Ministry content: schedules, repertoire, announcements, messages, roles and the list of who takes part. What exists there is decided by the ministry and whoever administers it; we handle that content as a processor, following the administrator's instructions and the product's technical rules.
This has a practical consequence: if you want to know why your phone number is in a ministry's records, or ask for it to be removed, the shortest path is the person who administers that ministry. If you prefer, write to contato@unissonoapp.com and we will forward it.
2. What we collect
2.1 What you give us
| Data | When | Required |
|---|---|---|
| Name and email | At sign-up | Yes |
| Password | When signing up with email | Yes, unless you use social login |
| Profile photo | When you upload it | No |
| Date of birth | When you fill it in | No, used only for the ministry's birthday block |
| Phone (WhatsApp) | When you enable WhatsApp messages | No |
| Language and time zone | Automatically, from your device; you can change it | Yes |
Passwords are stored as a hash, a value the original password cannot be recovered from. Not even we can read your password.
Your phone only starts receiving messages after you confirm a code sent to it. That verification step is what lets us recognise you when you reply to a reminder over WhatsApp.
2.2 What the ministry records about you
When you join a ministry, whoever administers it can record your role (vocals, guitar, media, whatever it is), schedule you for events and see your answer (confirmed, can't make it, no answer yet). Other people in the same ministry see your name, photo, role and answer on the schedules where you appear together.
2.3 The content you create
Repertoire (titles, artists, key, tempo, links, lyrics, chord charts, notes and attachments), schedules and their notes, announcements and comments, chat messages with their attachments, image, audio and document, and the people you mention.
That content is visible to the ministry it belongs to, according to each screen's rules. It is not public and is not indexed by search engines.
2.4 What the system collects on its own
| Data | What for |
|---|---|
| Platform, model, OS version, app version and build | Support, compatibility and the "update the app" notice |
| Session token per device | Keeping you signed in and letting you sign a single device out |
| Push notification token | Delivering notifications to the right device |
| Last access date | Showing your connected devices and detecting misuse |
| IP address and access logs | Security, login rate limiting and art. 15 of the Brazilian Internet Civil Framework |
| Change log (who changed what, and when) | Audit: answering "who deleted this schedule?" |
| Error and performance reports | Fixing defects |
| Song suggestions you request and what you accept or dismiss | Measuring and improving suggestion quality |
We collect no location, contact list, advertising identifier or device sensor data.
2.5 What comes from third parties
If you sign in with Google, Apple or Meta, we receive the account identifier, your name and your email from the provider. We never receive your password or access to anything beyond that. Apple's "Hide My Email" is handled normally, the relay address counts as the account email.
2.6 App permissions
The app asks for camera and photos only when you are about to send an image or change your profile picture, for the microphone only when you record a voice message in the chat, and for notifications to alert you about schedules, announcements and messages. Declining any of them does not block the rest of the product.
2.7 If you only download something we publish
You do not need an account to download a guide or any other free material we publish. What we ask for then is different, and smaller:
| Data | When | Required |
|---|---|---|
| Name and email | On the material's form | Yes, it is where the material is sent |
| Phone (WhatsApp) | On the same form | No |
| Language, IP address and where the link came from | Automatic | Yes |
With your consent, we use the email to send the material you asked for and, every now and then, news about Uníssono and content about running a ministry. The phone is optional and has its own consent, separate from the email one: it is there to tell you when the app opens for testing, and accepting one does not count for the other.
We also store the consent text exactly as it stood on the day you accepted it, because this page changes over time and that text is the record of what you agreed to.
This list is separate from your account. If you later create an account with the same email, one does not become the other: leaving the list does not delete the account, and deleting the account does not remove you from the list.
You can leave whenever you want, through the link at the bottom of every email we send, or by writing to contato@unissonoapp.com. After that we erase your data from the list within 30 days.
3. Why we use this data
| Purpose | Legal basis (LGPD, art. 7) |
|---|---|
| Creating and keeping your account; delivering the product's features | Performance of a contract (V) |
| Notifying you about schedules, announcements and messages | Performance of a contract (V) |
| Sending WhatsApp messages | Consent (I), given when verifying your number and revocable at any time |
| Send the material you asked for and the list's news | Consent (item I), given on the form and revocable at any time |
| Send WhatsApp notices to people on the list who asked for them | Consent (item I), separate from the email consent |
| Security, fraud and abuse prevention; audit logging | Legitimate interest (IX) |
| Fixing defects and improving the product | Legitimate interest (IX) |
| Suggesting songs for schedules and the repertoire | Contract performance (V) |
| Keeping application access logs | Compliance with a legal obligation (II) |
| Answering you when you reach out | Contract and legitimate interest |
We do not use your data for advertising, behavioural profiling or automated decisions that affect you. The list's news is our own communication, sent to people who asked for it: we neither sell nor hand your contact to any advertiser.
4. Who we share with
We do not sell data. We share the minimum necessary with providers that operate part of the infrastructure, always under contract and for the purposes above:
| Who | What for | What they receive |
|---|---|---|
| Server provider (VPS) | Hosting the application and the database | Everything the product stores |
| Magalu Cloud | Storing uploaded files (photos, attachments, audio) | The files and their metadata |
| Resend | Sending system emails (verification, password reset) | Recipient's name and email |
| Expo | Delivering push notifications | The device token and the notification text |
| Sentry | Recording errors and failures | Technical error data, which may include account identifiers |
| Meta (WhatsApp Cloud API) | Sending and receiving WhatsApp messages, when you enable it | Your number and the message content |
| Google, Apple and Meta | Social login, when you use it | Only the confirmation of your identity |
| Anthropic (Claude) | Classifying repertoire songs by theme and building the suggested setlist | Title, artist, classification and lyrics of the songs; the theme or phrase of the request |
| TypeSafe (JEV model), through the reseller Jev AI | Understanding the requested theme and ranking the suggestions | The theme or phrase of the request and the list of candidate songs (title, artist and themes) |
We may also share data under a legal duty or court order, and to exercise or defend rights in proceedings. If Uníssono is ever sold or merged, the data follows the transaction and you will be told before this policy changes.
External music searches. When you search for music in external services, the term you type is sent to the service being queried (Deezer or YouTube, for example) to fetch title, cover art and duration. Nothing from your account goes with it.
Song suggestions. To suggest songs, Uníssono sends Anthropic and TypeSafe data from the ministry's repertoire: the title, artist, classification and lyrics of each song, and the theme or phrase you typed in the request. No data from your account goes along: no name, no email, no record of who asked. The lyrics are ministry content and are sent only to identify what each song is about; the result (themes, energy and a one-line summary) is stored with us. We also keep the text sent in each call and the provider's reply, to investigate a suggestion that went wrong and to check costs. Under the terms Anthropic applies to commercial use of its API, this data is not used to train its models. Songs suggested "to discover" come from Uníssono's own catalog, not from a web search.
5. International transfers
Some of the providers above operate outside Brazil. In those cases the transfer relies on art. 33 of the LGPD, is necessary to perform our contract with you, and is limited to what is needed. The files you upload are stored in a datacenter in Brazil.
6. How long we keep it
| Data | Retention |
|---|---|
| Active account | For as long as the account exists |
| Deleted account | 7 days of grace, then permanent anonymisation |
| Chat attachments | 90 days from upload; the message stays, the file goes |
| Application access logs | 6 months (Internet Civil Framework, art. 15) |
| Audit records (who changed what) | For as long as the ministry exists |
| Technical sync keys | 30 days |
| Ministry content | For as long as the ministry exists, or until an administrator deletes it |
| Suggestion requests and what was accepted or dismissed | For as long as the ministry exists |
| Text sent to AI providers and the reply to each call | For as long as needed to investigate suggestion quality and cost |
The ministry's history is not erased when you leave. Whoever played on a Sunday played: the schedule keeps recording what happened. What disappears is your identification, after anonymisation, that participation becomes a row with no name.
7. Your rights
The LGPD (art. 18) grants you: confirmation that we process your data, access to it, correction of anything incomplete or wrong, anonymisation or deletion of what is unnecessary or excessive, portability, information about who we share with, and withdrawal of consent where consent is the basis.
Much of that you can do yourself:
- View and correct: More → Profile in the app; Profile in the browser.
- Change language, time zone and theme: More → Preferences.
- Turn off WhatsApp messages: More → WhatsApp.
- Disconnect a device: signing out on that device also stops notifications to it.
- Leave the news list: the link at the bottom of any email we send.
- Delete your account: More → Profile → Delete account, and the same option in the browser. See how to delete your account.
For anything not in the product, including portability, which is handled manually today, write to contato@unissonoapp.com. We answer within 15 days.
8. Account deletion
Deletion happens in two stages, and the second is irreversible by design:
- Immediately: the account is deactivated, every session ends, notifications stop and you leave the ministries you belonged to.
- After 7 days: name, email, password, phone, date of birth, photo and social login links are permanently erased. We keep no copy, "we deleted it but kept a backup" is not deleting.
The 7-day window exists because deleting an account is the decision most often made in anger and most often regretted the next morning. Within it, get in touch and we undo it.
What remains, without identifying you: the ministry's schedule history, the content you created inside a ministry (which belongs to it) and the records the law requires us to keep.
9. Security
TLS end to end, passwords stored as hashes, file access through short-lived signed links, sessions revocable per device and an audit trail of who changed what. Administrative access to the database is restricted and goes through the same records.
No system is immune. If an incident with relevant risk to your data occurs, we will notify you and the Brazilian data protection authority (ANPD), as art. 48 of the LGPD requires.
10. Cookies
In the browser we use only the essentials: the session cookie (to keep you signed in and protect forms) and preference cookies (theme and language). We use no advertising or third-party tracking cookies, which is why there is no banner asking you to accept something that does not exist.
11. Minors
Uníssono is for people aged 18 and over. Under-18s may only use the product assisted or represented by a parent or legal guardian, who is responsible for that use and accepts this policy on their behalf. We do not knowingly collect children's data. If we find an irregular account it will be closed, write to contato@unissonoapp.com if you know of a case.
12. Changes to this policy
When this policy changes materially, we will tell you inside the product at least 15 days in advance. The effective date at the top is always that of the version in force.
13. Contact
EVERTON DE OLIVEIRA MUNIZ LTDA · contato@unissonoapp.com · Rua Guanabara, 194, Lote 07, Quadra 10, São Jorge, Pinheiral/RJ, CEP 27197-000.
You may also complain to the Brazilian National Data Protection Authority (ANPD), https://www.gov.br/anpd.