Privacy Policy

Who we are

Paguemo is an app for splitting a group's expenses and working out who owes whom. It is provided by Mazer Dev Ltda, a Brazilian company registered under CNPJ no. 48.275.188/0001-07, which is the controller of the data handled under this policy.

This policy covers the Paguemo app (Android and iOS), the paguemo.com website and the API used by the app.

Summary

• Paguemo does not ask for an account, email address, phone number or password.
• Groups, people, expenses and PIX keys stay on your phone. We have no access to them.
• Only two features send data to our servers, and both depend on your permission: usage counts and publishing a statement.
• Paguemo shows no ads, does not sell data and uses no third-party advertising or tracking tools.
• Paguemo does not receive, hold or move money. Payments go straight from one person to another through their own banks.

Data that stays only on your device

The app keeps what you type in the phone's internal storage:

• groups, with name, currency and status;
• the names of the people in each group;
• expenses, with description, amount, date, who paid and how each one was split, and their edit history;
• payments marked as made;
• the PIX keys you enter, yours and those of the people who get paid;
• your profile name and your language and currency preferences.

This data is not sent to us. The operating system's automatic backup is turned off for Paguemo on Android, so the data is not copied to the device's cloud either. Uninstalling the app or losing the phone therefore erases everything; your backup is the export file you create yourself.

Usage counts (optional)

After you create your first group, the app asks whether it may send usage counts to help improve the product. Nothing is sent unless you accept. Declining does not remove any feature.

If you accept, the app sends:

• a random installation identifier, created on the device, that contains none of your data;
• the app version and the platform (Android or iOS);
• a record that an action happened and when: group created, expense recorded or edited, settlement viewed or completed, payment marked as made, result shared, group closed, export created, import restored;
• numbers tied to those actions: how many people, expenses and transfers, the split method used, the sharing format and the number of days between events;
• a scrambled reference for each group, computed with a secret that never leaves the device, used to count actions of the same group without identifying it.

Names, amounts, descriptions and PIX keys are never sent. Actions recorded on the device before you decide are only sent if you accept.

This data is pseudonymous: it does not carry your name, but it is linked to the installation identifier. It is processed on the basis of your consent.

You can turn it off at any time in Settings, under Privacy. When you do, the app discards the identifier and asks the server to delete every event from that installation. If the phone is offline, the request is sent on the next connection.

Published statement (optional)

You can publish a group's statement to share it by link. Before the first publication, the app shows what will be published and asks you to confirm.

When you publish, the app sends to our server:

• the group name and currency;
• people's names, shortened to the first name whenever that does not make two people look the same;
• each person's balance;
• expenses, with description, who paid, amount and date;
• payments already made and payments still pending, with who pays, who receives and the amount;
• for each pending payment whose recipient has a registered key, the PIX copy-and-paste code, which contains the recipient's PIX key and name.

Anyone who has the link can see the statement, with no app and no login. The address is long and random, appears in no listing, and the page asks search engines not to index it. Even so, treat the link as public: whoever receives it can pass it on.

The statement stays online for 90 days from publication or from the last update and is then deleted. You can remove it sooner in Manage group; removal deletes the statement from the server.

A statement contains data about other people in the group. By publishing, you state that they agree to it. Anyone named in a statement who wants it removed can write to us using the contact at the end of this policy.

Along with the statement we keep the version of the text you accepted and the date you accepted it. We do not keep your IP address or the installation identifier with the statement.

Technical access data

When the app talks to our API or someone opens the website, the connection's IP address is used for about one minute to limit the number of requests and prevent abuse. It is not stored with your data.

As with any internet service, the server and the network provider may record for a limited time, for security and troubleshooting, the IP address, the date and time, the address requested and the browser or app identification.

The public pages of the website use no cookies, have no audience analytics and load no third-party fonts or scripts. The page language follows your browser and is not stored.

Who we share data with

We do not sell or rent data and do not share it for advertising. Data sent to our servers passes through the following types of service providers, which act on our behalf:

• a hosting provider, where the server and the database run;
• Cloudflare, which protects and delivers the website and API traffic and stores the database backups;
• an error monitoring tool, which receives technical records of server failures and is configured not to include personal data.

These providers may process data outside Brazil. We may also disclose data when required by law or by order of a competent authority.

The app stores (Google Play and the App Store) handle download and installation data under their own policies.

Sharing done by you

Some features take data off the device at your request, without going through our servers:

• the settlement image and text, which show the group name and who pays whom and how much, and go to the app you choose when sharing;
• the export file, which contains all your groups, expenses, PIX keys and preferences, unencrypted, and is saved wherever you choose;
• the PIX copy-and-paste code and the statement link, copied to the clipboard.

From then on, whoever receives that content and the apps used to send it follow their own rules. Keep the export file somewhere safe.

App permissions

On Android, the app uses internet and network state access, for usage counts and statements, plus vibration and flashlight, which are declared by the platform it is built on. Paguemo does not access the camera, microphone, location, contacts, photos or files on the device, except the file you pick yourself when importing.

How long we keep data

• Data on the device: until you uninstall the app or clear its data.
• Usage counts: 12 months from each event, or until you turn them off, whichever comes first.
• The record that you accepted and later withdrew consent for usage counts: 5 years after processing ends, as proof of consent.
• Published statement: 90 days from publication or from the last update, or until you remove it.
• Server backups: up to 30 days. Deleted data may remain in those copies until that period ends.

Your rights and how to delete your data

Most of the control is in the app itself:

• to delete the data on the device, uninstall the app or clear its data in the system settings;
• to delete usage counts, turn them off in Settings, under Privacy;
• to delete a published statement, use Remove statement in Manage group;
• to move your data to another device, use export and import.

Brazil's General Data Protection Law (Law no. 13,709/2018, LGPD) gives you, among others, the rights to confirm that processing exists, to access, correct and delete data, to withdraw consent, to learn who data is shared with and to request portability. To exercise them, or if you no longer have the app or the device, write to the contact at the end of this policy.

Because there are no accounts, we may ask for information that lets us locate the data, such as the statement link. You may also lodge a complaint with Brazil's National Data Protection Authority (ANPD) or with the data protection authority where you live.

Children

Paguemo is not directed to children under 13 and does not knowingly collect data from them. If you believe a child has sent us data, write to the contact below so it can be deleted.

Security

All communication between the app, the website and our servers is encrypted in transit (HTTPS). On the device, data sits in the app's private area, protected by the operating system. No system is completely secure; if an incident that may cause significant risk occurs, we will give notice as the law requires.

Changes to this policy

We may update this policy when the app changes. The date at the top shows the latest change. If a change expands what is sent to our servers, the app will ask for your consent again before sending.

Contact

Questions and requests about privacy and data protection can be sent to Mazer Dev Ltda by email:

Show email contato (at) paguemo.com