Skip to content
HolyLight Español

HolyLight Privacy Policy

This is an English translation of the original Spanish text.

Last updated: October 19, 2026

1. Data controller

NovAltura S.R.L., legal ID 3-102-946878, domiciled in San José, Costa Rica, is the controller of the personal data collected through the HolyLight application, in its mobile (Android and iOS) and web versions.

2. Information we collect

Depending on how you use the application, we may collect:

  • Account data: name, email and, if you sign in with Google, Apple, or Facebook, the identifier and profile photo that service shares with us. We do not receive or store the passwords for those services.
  • Profile photo: if you decide to upload one, the image you choose. We store it without the file's metadata (for example, location), only you and the service administrators can see it, you can change or remove it whenever you want, and it is deleted with your account. If you sign in with Google or Facebook, we also store the address of the photo that provider shares, to show it as long as you have not uploaded your own.
  • Profile data: usage profile (believer, cell group leader, teacher, pastor, "getting to know the faith," or "none of the above"), language and, if you decide to indicate it, your preferred Christian tradition.
  • Content you create: notes, highlights, bookmarks, reading plans, prayer journal, devotionals, Bible studies, lessons, and sermons you prepare in the application.
  • Conversations with the artificial intelligence assistant: the questions you type or dictate and the responses generated.
  • Subscription data: the plan you have contracted and its status. Payments are processed by Apple, Google or, for church plans, our web payment processor; HolyLight does not receive or store your card details.
  • Technical data: device type, application version, error logs, and usage data necessary for the operation and security of the service.

Sensitive data. Your profile, your Christian tradition, your prayer journal, and your content may reveal your religious beliefs, which Law No. 8968 considers sensitive data. We only process them with your express consent, which we request when you create your account and which you can withdraw at any time. The Christian tradition and the prayer journal are optional.

Retention periods:

  • Account data and content you create: while your account is active. If you delete your account, they are erased within a maximum of 30 days.
  • Conversations with the AI assistant: while your account is active or until you delete them.
  • Technical logs: 30 days.
  • Backup copies: up to 30 days, after which deleted data also disappears from backups.
  • Purchase and billing records: the period required by applicable tax legislation.

3. How we use the information

We use the information to:

  • Create and manage your account and allow you to sign in.
  • Save and sync your content across your devices.
  • Personalize the experience according to your profile and language.
  • Answer your questions through the artificial intelligence assistant.
  • Manage your plan and your subscriptions.
  • Send you service notices, such as account verification or important changes.
  • Protect the application, prevent abuse, and fix errors.
  • Improve the service with aggregated and anonymous information.

We do not sell your personal data or use it for advertising. HolyLight does not show ads.

4. Artificial intelligence

HolyLight includes an artificial intelligence assistant that answers questions about the Bible, explains passages, and helps prepare studies, lessons, devotionals, and sermons. To respond, the assistant processes your question together with Bible texts and reference works.

  • Questions are sent to artificial intelligence providers under contracts that prohibit them from using your data to train their models.
  • NovAltura does not use your conversations to train general models without your specific authorization.
  • The assistant can make mistakes. Its responses do not replace the advice of your pastor, your church, or health, legal, or financial professionals.

5. External providers and platforms

To operate the service we work with providers that process data solely on behalf of NovAltura and only to the extent necessary:

  • Hosting and database: Microsoft Azure (United States, West US region).
  • Sign-in: Google Firebase Authentication, and Google, Apple, or Meta (Facebook) if you choose to sign in with them.
  • Application distribution and updates: Expo.
  • Payments: Apple App Store, Google Play and, for church plans, a web payment processor.
  • Artificial intelligence: language model providers, such as Microsoft Azure OpenAI, with the restrictions indicated in section 4.

Some of these providers process data outside Costa Rica. In those cases we require protection measures equivalent to those established by Costa Rican legislation.

6. Retention and security

We apply reasonable technical and organizational measures to protect your information:

  • Encryption of data in transit and at rest.
  • Role-restricted access.
  • Credential management in secure stores.
  • Logs without personal data.

No system is completely infallible; if an incident affects your data, we will inform you as required by law.

7. Minors

HolyLight is not directed at children under 13 and we do not knowingly collect their data. If you are between 13 and 18, use the application with the authorization of your mother, father, or guardian. Sunday school materials are intended for use by the teacher, not by children.

8. Individuals' rights

You may, at any time:

  • Access your data and obtain a copy (the application allows you to export it).
  • Correct inaccurate data.
  • Know what your data is used for.
  • Withdraw your consent to the processing of sensitive data.
  • Stop receiving communications that are not essential to the service.
  • Delete your account and your data.

We respond to requests within a maximum of 5 business days. If you believe we did not handle your request adequately, you may file a complaint with the Agency for the Protection of Individuals' Data (PRODHAB).

9. Data deletion

You can delete your account and your data directly from the application or by requesting it by email. The full procedure is on our data deletion page: https://holylight.life/en/delete-data

10. Applicable law

This policy is governed by the laws of Costa Rica, in particular Law No. 8968, the Law on the Protection of the Person against the Processing of their Personal Data, and its regulations, without prejudice to the mandatory rules of the country where you reside.

11. Changes to this policy

We may update this policy for legal, technical, or service reasons. The date of the last update appears at the top. If the changes are important, we will notify you in the application.

12. Contact