Privacy Policy

1. Who controls your information

The controller is RENAN PEIXOTO DA SILVA, Rua Doutor Joaquim Inacio de Moraes 260, Bloco 1, Apt 502, Vila Izabel, São Carlos, SP 13570-782, Brazil. Support is available at vidalog-support@renanpeixotox.com and privacy matters at vidalog-legal@renanpeixotox.com.

2. Who may use VidaLog

Account holders must be at least 18 years old and able to accept the Terms. An adult may create profiles for children, other dependents, or pets only when authorized to manage that information. VidaLog does not knowingly offer accounts to children.

3. Information you provide

• Account and profile information, including name, email address, profile photo, language, settings, and authentication details managed by Supabase.
• Health and self-care content you choose to add: medications, conditions, doses, instructions, skincare products and routines, water settings and intake, mood entries and notes, measurements, reminders, completion history, and related dates.
• Dependent and pet information, including names, photos, relationship or profile type, routines, medication and care records, and sharing permissions.
• Support communications and the information you include in an email or request.

4. Information generated by use

• Device and app information needed for operation, such as app version, operating system, locale, device identifiers used for notification delivery, Firebase Cloud Messaging tokens, and notification-delivery events.
• Website connection and preference data, such as IP address, browser or user agent, requested pages, timestamps, language, and privacy choice, as processed for hosting, security, and essential storage.
• Google Play purchase, entitlement, and installation-attribution information needed to provide subscriptions and understand an app-store campaign.
• Crash and performance diagnostics sent to Sentry when configured. Default personal information, screenshots, and view hierarchy capture are disabled.
• Optional, privacy-masked usage and session analytics through Microsoft Clarity only after you allow analytics. Advertising storage is not enabled.

5. Sensitive health data and legal bases

Health and self-care information may be sensitive personal data. VidaLog asks for explicit consent before processing the sensitive information you choose to add. Core account processing is also necessary to provide the service and comply with legal obligations. Security, fraud prevention, and strictly necessary operations may rely on legitimate interests or other lawful grounds where permitted. Optional analytics relies on consent and is off by default.

• You may withdraw health-data consent by deleting the account or contacting the privacy address above. VidaLog may then be unable to keep providing features that depend on that data.
• Withdrawing optional analytics does not affect core features.

6. How information is used

• Create and authenticate your account; store, sync, and restore the records you choose to keep.
• Schedule and deliver medication, skincare, water, mood, pet-care, and other reminders you configure.
• Keep profiles separate, apply sharing permissions, display reports, and maintain subscription access.
• Protect the service, diagnose failures, respond to support, comply with law, and improve the product when optional analytics is allowed.
• VidaLog does not sell personal or health information and does not use it for targeted advertising.

7. Processors and disclosures

Information is disclosed only as needed to operate the service, follow your sharing choices, complete a transaction, protect rights and safety, comply with lawful requests, or complete a business transfer subject to appropriate safeguards.

• Supabase: authentication, database, storage, and backend infrastructure.
• Google Firebase Cloud Messaging: Android push-notification delivery.
• Google Play and Google Play Billing: app distribution, purchases, subscriptions, and limited install attribution.
• Sentry: configured crash and performance diagnostics with personal-data capture minimized.
• Microsoft Clarity: optional usage/session analytics after consent, with app fields masked and advertising storage denied.
• Vercel: hosting and delivery of the public website.
• Other VidaLog users only when an adult deliberately shares a dependent profile and according to the permissions selected.

8. Storage, security, and international transfers

VidaLog uses HTTPS/TLS in transit, Supabase row-level access controls, authenticated API requests, least-necessary access, and Android secure storage for Supabase session and PKCE credentials. Some health records are also cached in the app's private local storage to support reminders and offline use; no system is completely secure and VidaLog does not claim universal device-level encryption for every cache.

Providers may process information outside Brazil or your country. Transfers use available contractual or other lawful safeguards, including the mechanisms required by Brazil's LGPD and ANPD rules where applicable.

9. Retention and deletion

Account and health records are kept while the account is active and as needed to provide the features you use. Diagnostic, analytics, billing, security, legal, and processor backup records follow their applicable purpose, legal duties, and provider retention schedules. VidaLog does not keep identifiable data longer than reasonably necessary for those purposes.

You can delete your account in the app or submit a verified request on the Delete Account page. Deletion covers the primary account and associated VidaLog data. Limited records may remain only where law, fraud prevention, dispute resolution, or processor backup cycles require it, after which they are deleted or de-identified.

10. Your rights and choices

• Ask whether VidaLog processes your data and request access, correction, information about recipients, portability where technically and legally applicable, anonymization, restriction, objection, deletion, or review of a decision where the law provides these rights.
• Withdraw consent for sensitive health data through account deletion or a privacy request. Privacy Choices on the website and Settings in the app separately control optional analytics.
• Complain to Brazil's National Data Protection Authority (ANPD) or another competent authority, and exercise additional rights that apply in the EEA, UK, California, or your place of residence.
• Requests are free where required by law. Identity verification, legal exceptions, and technically feasible formats may apply.

11. Notifications and device permissions

Android notification permission and a Firebase device token are used to deliver reminders and service notifications. Local reminders may continue from the device's local schedule. VidaLog does not request precise location, contacts, SMS, or emergency-service access for its current features. Device permissions can be changed in Android settings, although disabling notifications prevents reminders from appearing.

12. Incidents

VidaLog assesses security incidents and notifies affected people and regulators when required by applicable law. Timing depends on the governing rule—for example, notification to Brazil's ANPD and affected data subjects follows the applicable ANPD deadline, while GDPR regulator notification may require action within 72 hours where that rule applies. Not every technical event is a legally reportable breach.

13. Changes to this policy

Material changes will be presented through the app, website, email, or another appropriate channel. When law requires renewed consent, access to affected processing will not rely only on continued use; VidaLog will ask for a new choice. The date above identifies the current version.