Privacy policy

Last updated: 29 October 2026 · In force from the launch of the app.

This policy explains what information the Cordeo app and the cordeo.app website collect, what we use it for, and what you can do about it. It is written to be understood without a lawyer.

1. The short version

• You can use much of Cordeo without creating an account and without giving us your name or your email.
• We do not sell your data, or your children's. Not to anyone, for any reason.
• Children's profiles live on your phone. They are only stored on our servers if you create an account, so you don't lose them when you change devices.
• We do not show third-party advertising to children. The children's sections carry no ads.
• We never ask for or collect anyone's location without them allowing it at that moment.

2. What we collect and why

3. Children's content and protection of minors

Cordeo is made to be used as a family: an adult installs and manages it, and part of the content is made for children. In the app stores it is rated for a general audience (content suitable for all ages) and the account is always managed by an adult. Even so, when children are involved we apply these rules:

• We do not ask children for personal data. The account is always created by an adult.
• If you register a child in a profile, we only ask for a first name and, if you wish, their age and birthday (day and month). These are optional and serve only to show content suited to their age, update it automatically on their birthday, wish them a happy birthday in the app that day and, if you have an account, send you (the adult) a birthday email, as well as keeping their progress separate from their siblings'. You can delete that profile at any time from the app.
• Payments: gems and rewards in kids mode are only earned by listening, talking and playing; they are never sold. Subscriptions are paid on the Google Play or App Store payment sheet, never inside the games. With a child profile active, deleting the account asks for a check a young child cannot solve.
• No advertising in the children's sections, and no advertising personalised on a minor's behaviour.
• The app has no chat between users, no public wall, and no way for a stranger to contact your child.
• We do not build advertising profiles of minors and we do not share their information with advertisers.

Reminders about the children's story of the day on your family's phones (optional). If you have the Family plan and turn on “Notify my family's phones” in the kids mode settings, each phone in your household that also turns it on shares with the others, through our server, only three pieces of data per child: a pseudonymous identifier generated by the phone (it does not contain the child's name), how many days their little lamp has been lit, and the date of the last story they listened to. We use it only so that each phone's reminder knows whether a child is still missing today's story. We do not store names, ages, photos or what they listen to, we do not use it for advertising and we do not share it with third parties. You can turn it off at any time: when you do, we delete from our server what that phone uploaded; the rest is deleted automatically after 14 days without updates.

Badges and weekly summary. Badges, the weekly summary and the idea for a family conversation are calculated on your phone and are not sent to our server.

Children's path progress. To open a new story of the “100 days with Jesus” path each day, the app sends our server a random identifier for your phone (generated by the server; it does not contain your name or phone number), the internal ID of the child's profile in the app (not their name) and which story they are on. We do not store names, ages, photos or what they listen to, we do not use it for advertising and we do not share it with third parties. It is only used to allow listening to the stories that are already open.

Your children's profiles and progress in your account. If you sign in, we save in your account each child's profile (name or nickname, avatar and, if you provided them, age and birthday) and their progress in Kids (path lessons, gems, wardrobe, badges and minutes of use) so it is not lost when you sign out or change phones. On the Family plan, the adults in your household see and share those same profiles. If you did not agree to save your preferences, the name stays only on your phone. We do not use it for advertising and we do not share it with third parties. It is deleted when you delete your account; if you leave a household, you keep a copy.

If you believe a minor gave us information without an adult's permission, write to soporte@cordeo.app and we will delete it.

4. Subscriptions and in-app purchases

Cordeo has a free part and a paid subscription (Cordeo Premium) that unlocks the rest of the content.

• When you buy inside the app, the charge is processed by Google Play or the App Store. We only receive confirmation that the subscription is active and its renewal date.
• When payment is made by card outside the stores, it is processed by Stripe. Cordeo never sees or stores your card details; Stripe receives them directly.
• We store the status of your subscription (active, trial, cancelled) in order to know what content you have access to.

5. Advertising

The free version of the app is prepared to show advertising in the future, as a way of sustaining the free content. When that happens:

• Ads will never appear in the children's sections.
• They will be suitable for the whole family and, in areas aimed at minors, no interest-based advertising will be used.
• A Premium subscription removes advertising entirely.
• We will update this policy, naming the advertising provider, before the first third-party ad is shown.

6. Who we share information with

We do not sell or rent your information. We share it only with the providers needed to make the app work, and only with what each one needs:

• Google (Firebase Cloud Messaging): delivers notifications to your device.
• Google Play and the Apple App Store: process in-app purchases.
• Google and Apple (sign-in): if you choose “Continue with Google” or “Sign in with Apple”, they receive the sign-in request and return your name and email to us (Apple may give us a relay email instead of yours).
• Google Play (install referrer): on Android, if you arrived through an ambassador’s invitation, the app reads the Google Play install referrer to recognize that invitation. It does not include your name or contact details.
• Cloudflare: the network that protects and delivers the website, audio and videos; it processes your IP address to get them to your device.
• RevenueCat: validates subscriptions bought on Google Play or the App Store; it receives an identifier for your account, the purchase receipt and technical data about your device.
• Stripe: processes card payments made outside the stores.
• Brevo: sends your account emails (verification, password recovery, deletion confirmation) and the ones you asked for, such as the launch announcement.
• Our server providers, which host the content and your account. Some of them operate outside Mexico, so your information may be stored in another country with the same level of protection described here.

We may also hand over information if a competent authority legally requires it of us.

7. How long we keep your data

• Your account data, for as long as the account exists. If you delete it, we erase the data within 30 days at most.
• Anonymous usage data, for up to 24 months.
• Payment records, for as long as Mexican tax law requires.
• Anything that only lives on your device disappears when you uninstall the app.

8. Your rights

Under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, you have the right to access your data, to rectify it if it is wrong, to have it deleted and to object to certain uses. You may also withdraw your consent at any time.

To exercise any of these, write to soporte@cordeo.app from your account's email address, telling us what you need. We reply within 20 working days at most, and there is no charge.

The fastest way is inside the app itself: My account → Delete my account. Deletion is immediate and we confirm it by email. If you prefer, you can also request it in writing: To delete your account and all its data, write to soporte@cordeo.app from the address you registered with, with the subject "Delete my account". We erase it along with your family profiles, your progress and your notes within 30 days at most, and we confirm by email when it is done. We keep only the payment records that tax law obliges us to keep. The step by step is on the support page.

9. Security

All traffic between the app and our servers is encrypted. Passwords are stored using one-way encryption. Access to the database is limited to the staff who need it. No system is infallible; if an incident affecting your data occurred, we would tell you.

10. The cordeo.app website

This site uses no advertising or third-party tracking cookies. If you leave your email in the launch notification form, we store it in Brevo for one purpose only: to tell you when the app is published. Every email we send includes an unsubscribe link.

11. Changes to this policy

If we change something important, we will update the date at the top of this page and tell you inside the app. Changes that widen what we collect will be announced before they take effect.

12. Contact

Privacy questions: soporte@cordeo.app
Anything else: hola@cordeo.app