Privacy Policy

Your personal data is processed for the following purposes: creating and maintaining your account; generating personalized financial diagnoses, including calculation of free cash, monthly pressure and urgency level; creating and maintaining the debt payoff plan; sending relevant notifications about due dates, alerts and plan progress; performing weekly check-ins and recalculating the plan; support, customer service and administration of your account, which includes, where necessary, our team accessing your data to investigate a problem you reported, correcting a piece of data at your request, sending service messages inside the application and announcements about the service; prevention of fraud, abuse and misuse of the application; enforcement of our Terms of Use, including the suspension of accounts in case of breach; continuous improvement of the application and user experience; compliance with legal and regulatory obligations. All access by our team to your data is restricted to authorized personnel and is logged. We do not sell, rent or share your personal data with third parties for commercial or advertising purposes.

The processing of your personal data is based on the following legal bases provided by the General Data Protection Law (Law No. 13,709/18):

Performance of contract (Art. 7, V): registration data, financial data, your debt data, and the non-sensitive risk signals. Without them it is not possible to generate your diagnosis or your repayment plan.

Specific and highlighted consent (Art. 11, I): exclusively for the health information described in section 1, with the sole purpose of prioritizing your debts and revocable at any time. We are implementing this consent request in the app; until then, those questions remain optional and you may simply leave them unanswered.

Compliance with a legal obligation (Art. 7, II): age verification, the record of your acceptance of our documents, and incident reporting.

Legitimate interest of the controller (Art. 7, IX): app usage measurement, crash reporting, and protection against abuse, always respecting your fundamental rights and within the limits of Art. 10 of the LGPD. You may object to this processing through the channels in the Contact section.

Regular exercise of rights (Art. 7, VI): retention of the administrative decision trail, described in the Retention section.

Consent of the data subject (Art. 7, I): used exclusively for non-essential communications (financial tips, product news), always with explicit opt-in and revocable at any time.

Your data is processed and stored on Google Cloud and Firebase infrastructure. The database and the processing functions run on servers located in São Paulo, Brazil (region southamerica-east1).

Protections include: encrypted communication between your device and our servers (TLS/SSL); encryption at rest in the database; passwords stored exclusively as a hash, never in readable text; access rules preventing one user from reading another user's data; restricted and logged access by our technical team; and infrastructure providers with market-recognized security standards. On your device, your session credentials are kept in the operating system's protected area (Keychain on iOS, Keystore on Android). The application also keeps a local copy of your financial data, your debts and your check-ins on your device, so that you can consult your situation without a connection. This copy sits in the application's internal database, protected by the operating system's isolation between apps, and it is erased when you sign out or delete your account. We recommend keeping your device's screen lock and encryption enabled.

No system is 100% secure. We work continuously to improve our protection measures. In the event of a security incident that may cause relevant risk or harm, we will notify you and the National Data Protection Authority (ANPD) within the legal deadline of 3 (three) business days, pursuant to ANPD CD Resolution No. 15/2024.

In accordance with the LGPD, you have the following rights: Confirmation of the existence of processing of your data; Access to your personal data; Correction of incomplete, inaccurate or outdated data; Anonymization, blocking or deletion of unnecessary data or data processed in non-compliance; Portability of data to another service provider, in a structured and machine-readable format; Deletion of data processed based on consent; Information about data sharing with third parties; Information about the possibility of not providing consent and its consequences; Revocation of consent at any time. To exercise any of these rights, contact us through the channels listed in the Contact section.

To provide the service, we share personal data with the following providers, who act as operators under our instructions:

Google Cloud and Firebase (servers in São Paulo, region southamerica-east1): authentication, database, processing functions, and crash reporting. Your main data remains in Brazilian territory.

Anthropic (United States): generates the texts that explain your diagnosis and your plan in plain language. It is our only artificial intelligence provider. We do not send your name, your email, or your user identifier. We do send the figures of your financial situation, the name you gave each income source and its type, and, for each debt, the name you gave it, the creditor, the amounts, the due day, the situation, the risk signals you flagged, the details specific to that debt type (for example the last four digits of the card or the type of service, including health insurance) and your free-text notes. We also send a summary of the last 90 days: payments made, extra income, unexpected expenses by category (one of them being health) and your check-in streak. All of this serves so that the text explains your situation accurately. Because this information may indirectly say something about you, we do not call it anonymous. The calculation itself runs on our servers using fixed formulas: if the artificial intelligence is unavailable, your diagnosis keeps working with standard texts.

Usage measurement and crash reporting (Google Analytics and Crashlytics, United States): record which screens you open and which actions you take, associated with your user identifier, so we can understand where the app crashes or confuses. We do not send financial figures or debt content in these events. This data also feeds aggregated reports for internal use.

Resend Inc. (United States): sending emails, including the notice of updates to these documents.

Supabase Inc. and Upstash Inc. (United States): used only on our website, for the waiting list and abuse protection. They receive no data from the app.

We require every provider to have minimum access and use restricted to the contracted purpose. We are formalizing with each of them the data processing agreements required by the LGPD and compliance with the Standard Contractual Clauses of ANPD CD Resolution No. 19/2024; until that process is complete, we maintain the technical measures described in section 4.

You have the right to request human review of any decision based on automated processing (LGPD Art. 20): just contact us through the Contact section channels.

We may also share data when required by legal obligation, court order, regulatory decision, or applicable legislation.

We use anonymized and aggregated data for service improvement, without the possibility of individual identification.

We do NOT sell, rent, or share your personal data with third parties for commercial or advertising purposes.

While your account exists, we keep your registration, financial, debt, and usage data, because they are what sustains your plan.

When you delete your account under Profile > Delete Account, we immediately erase your profile, your financial history, your debts, payments, check-ins, diagnoses, plan, notifications, acceptance records, and your login account. The local copy kept on your device is also erased, both when you delete your account and when you simply sign out. Deletion is irreversible.

What remains after deletion, and why:

Records of the decisions our team took about your account, such as a data correction or a block, kept for the defense of rights and compliance with legal obligations (Art. 7, II and VI). We replace your identifier with a shortened reference, so those records can no longer be searched by your name, your email or your account. The content of the decision, which may include the values changed, is preserved, because it is what gives the record meaning.

Technical processing-cost measurements, for up to 90 days.

Technical records of the operation and security of the service, kept for as long as necessary for the security of the system and for compliance with legal obligations.

A technical cache of the last diagnosis generated, which automatically expires within 1 hour after deletion and serves only to avoid duplicate processing.

If you joined the waiting list through our website, that record is separate from the app and is not reached by account deletion. To remove it, write to privacidade@planoquita.com.br.

You may request an export of your data before deleting your account.

Your main application data (account, financial profile, debts, payoff plan, check-ins, notifications) is stored and processed in Brazilian territory, on Google Cloud and Firebase servers located in São Paulo (region southamerica-east1). There is no international transfer in this case.

Google's authentication service, which stores your login email, the cryptographic hash of your password and your login records, runs on Google's global infrastructure, and not only in Brazil. That transfer is subject to the same contractual safeguards described in this section.

International transfer applies only to the cases described in section 6:

Generation of the diagnosis texts (Anthropic, United States): without your name, email, or user identifier, but with the debt data described in that section.

Usage measurement and crash reporting (Google, United States).

Transactional emails (Resend Inc., United States).

On our website only: waiting list (Supabase Inc.) and abuse protection (Upstash Inc.), both in the United States, including the IP address of whoever accesses it.

These transfers are in the process of compliance with the Standard Contractual Clauses set forth in ANPD CD Resolution No. 19/2024, in compliance with Arts. 33 to 36 of the LGPD. We adopt complementary technical measures (encryption in transit and at rest) to ensure a level of protection equivalent to that provided by Brazilian legislation.

PlanoQuita is not intended for children or adolescents and does not intentionally collect personal data from persons under 18 years of age. At registration, we verify the user's age through the date of birth provided. If we identify that a user is a minor, whether during the registration attempt or later, we block access and delete the personal data collected, except for data that must be retained by legal obligation. A minor may also appear inside a record of yours, for example when the overdue tuition is a child's, or when you report that there are children in the residence. In those cases we process the data in the best interest of the child or adolescent (Art. 14 of the LGPD), with the sole purpose of prioritizing your debt, without contacting them and without building any profile about them. This data is deleted along with the debt or the account. If you are a parent, mother, or legal guardian and have identified that a minor under your custody created an account at PlanoQuita by falsely declaring their age, please request immediate deletion via privacidade@planoquita.com.br. PlanoQuita adopts reasonable age verification measures, in accordance with Art. 14 of the LGPD and Law No. 15,211/2025 (ECA Digital), but is not liable for false declarations made at registration, without prejudice to taking appropriate measures once aware of the facts.

Pursuant to Article 18, V of the LGPD, you have the right to request the portability of your personal data to another service provider. Data will be provided in a structured, commonly used and machine-readable format (JSON or CSV). Requests can be made through the contact channels listed below and will be fulfilled within 15 (fifteen) days.

PlanoQuita uses automated calculations to generate your financial diagnosis (urgency classification: manageable, tight or critical) and to recommend payoff strategies.

These calculations are based on the data you provide (income, expenses, debts) and on transparent mathematical formulas (free cash, monthly pressure, total commitment).

Beyond the figures, the priority order also takes into account the risk signals you flagged when registering the debt, such as the risk of losing an asset, the cutoff of an essential service or judicial collection, and your answers to the more delicate questions described in section 1. That is why an electricity bill keeping a medical device running may rank ahead of a debt with higher interest. The calculation and the ordering are performed by fixed formulas on our servers; the artificial intelligence described in section 6 only writes the explanation in plain language, and does not change the outcome.

Pursuant to Article 20 of the LGPD, you have the right to: request information about the criteria and procedures used in automated decisions; request the review of any automated decision that affects your interests.

The review will be performed by a team member within 15 (fifteen) days.

To exercise these rights, contact us at privacidade@planoquita.com.br.

This Privacy Policy may be updated periodically to reflect changes in our practices or in legal requirements. We will notify you by in-app notification and by email as soon as a new version is published, and the date at the top of the document will always indicate the last modification. When the change is relevant to your data, we will ask for your acceptance before you continue using the application. If the change reduces your rights or expands the use of your data, it will take effect 15 (fifteen) days after the notice, and during that period you may delete your account at no cost. We recommend periodic review of this Policy.

Controller: Doppes Hub (sole proprietorship registered in Brazil), CNPJ 33.555.347/0001-50, based in Schroeder/SC, Brazil. App: PlanoQuita.

For privacy-related matters, exercise of rights, or questions about the processing of your personal data, contact:

Data Protection Officer (DPO): dpo@planoquita.com.br (pursuant to Article 41 of the LGPD and ANPD Resolution No. 18/2024)

General privacy: privacidade@planoquita.com.br

Help section in the app (Profile > Help)

Response deadline: up to 15 (fifteen) days, pursuant to Article 18, §3 of the LGPD.

If you believe that the processing of your personal data violates the LGPD, you may also file a complaint with the Brazilian National Data Protection Authority (ANPD) at www.gov.br/anpd.