Skip to content

LGPD

LGPD and your data

How we handle your information, what your rights are, and how to exercise them.

Binding Version Notice

This is a convenience translation. The Portuguese (pt-BR) version of this document is the only legally binding version. Your data protection rights arise from the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018) and are supervised by the ANPD (Autoridade Nacional de Proteção de Dados), regardless of the language in which you read this page.

Read the binding Portuguese version

01 · Your data, your rules

Your data, your rules

The Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018) guarantees that you decide what happens to your personal information. Every company that processes data in Brazil must follow these rules. PlanoQuita does.

This page summarizes, in direct language, what data we collect, why we collect it, what your rights are, and how to exercise them. For the full legal document, refer to our Privacy Policy.

02 · What we collect and what we don't

What we collect and what we don't

We collect only what is necessary for the service to work: name, date of birth, email, password (stored as a hash), income, fixed expenses, available balance, debt information, payment and check-in records, and technical device data (Art. 7, V and IX of the LGPD).

Date of birth is a contractual requirement: PlanoQuita is intended exclusively for users aged 18 or older, and the legal basis for processing this data is performance of contract combined with compliance with a legal obligation derived from the Brazilian Civil Code. The full details of purpose, legal basis, and retention for this data are in Section 1 of the Privacy Policy.

What we do not collect: CPF (Brazilian taxpayer ID), bank data, statements, credit score, location, phone contacts, social media data, or any third-party information. We do not sell, rent or share your data for commercial or advertising purposes.

03 · What we use each piece of data for

What we use each piece of data for

Each piece of data has a specific purpose and a corresponding legal basis (Art. 7 of the LGPD).

Registration data (name, email, password) is used to create and maintain your account (contract performance). Financial data (income, expenses, debts) is used to generate your diagnosis and payoff plan (contract performance). Usage data (check-ins, recorded payments) is used to recalculate your plan and send relevant alerts (legitimate interest). Technical data (device, app version) is used to keep the app secure and fix issues (legitimate interest).

04 · Automated decisions

Automated decisions

PlanoQuita uses automated calculations to generate your financial diagnosis (urgency classification: manageable, tight or critical) and to recommend payoff strategies. These calculations are based on the data you provide (income, expenses, debts) and on transparent mathematical formulas (free cash, monthly pressure, total commitment).

Beyond the figures, the priority order also takes into account the risk signals you flagged when registering the debt, such as the risk of losing an asset, the cutoff of an essential service or judicial collection, and your answers to the more delicate questions described in section 1. That is why an electricity bill keeping a medical device running may rank ahead of a debt with higher interest. The calculation and the ordering are performed by fixed formulas on our servers; the artificial intelligence described in section 6 only writes the explanation in plain language, and does not change the outcome.

Pursuant to Article 20 of the LGPD, you have the right to request information about the criteria used in these decisions and to ask for a review by a team member. To do so, contact us at privacidade@planoquita.com.br.

05 · Your nine rights as a data subject

Your nine rights as a data subject

The LGPD (Article 18) guarantees you nine rights over your personal data. You may: confirm whether we process your data; access all data we hold about you; correct incomplete or outdated data; request anonymization or blocking of unnecessary data; request the deletion of data processed based on consent; know with whom we share your data; be informed about the consequences of refusing consent; revoke your consent at any time; request the portability of your data in a readable format (JSON or CSV).

None of these rights require justification. Just ask.

06 · How to exercise your rights

How to exercise your rights

You can exercise any right through three channels: email to privacidade@planoquita.com.br with the subject "Exercise of LGPD rights"; Help section in the app (Profile > Help); or direct contact with the DPO at dpo@planoquita.com.br.

After receiving your request, we will respond within 15 (fifteen) days with one of the following: confirmation of fulfillment, request for identity verification (for your security), or justified response if there is a legal impossibility. Data portability and deletion are handled within 15 (fifteen) days after identity confirmation.

07 · Controller and Data Protection Officer (DPO)

Controller and Data Protection Officer (DPO)

Controller: Doppes Hub (sole proprietorship registered in Brazil), CNPJ 33.555.347/0001-50, based in Schroeder/SC, Brazil. App: PlanoQuita.

The Data Protection Officer (DPO) is responsible for ensuring that PlanoQuita processes your data in accordance with the LGPD (Article 41 and ANPD Resolution No. 18/2024). DPO contact: dpo@planoquita.com.br. General privacy: privacidade@planoquita.com.br. The DPO responds directly to data subjects and to the ANPD.

08 · Not resolved? Talk to the ANPD

Not resolved? Talk to the ANPD

If you believe that the processing of your data by PlanoQuita violates the LGPD, or if you are not satisfied with our response, you have the right to file a complaint with the Brazilian National Data Protection Authority (ANPD, Autoridade Nacional de Proteção de Dados).

The ANPD website is www.gov.br/anpd. This is a legal right, and we fully respect the role of the regulatory authority.

Binding Version Notice

This is a convenience translation. The Portuguese (pt-BR) version of this document is the only legally binding version. Your data protection rights arise from the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018) and are supervised by the ANPD (Autoridade Nacional de Proteção de Dados), regardless of the language in which you read this page.

Read the binding Portuguese version

Also read

Privacy Policy

How we handle your data: DPO, data subject rights, retention, portability and deletion.

Read now →