Last updated: October 22, 2026 · Contact: contato@proday.com.br
This policy follows Brazil's General Data Protection Law (LGPD, Law 13.709/2018), which governs how ProDay handles personal data.
The data controller is FMM DIGITAL LTDA, a Brazilian company (CNPJ 69.492.427/0001-50) at Av. Pio XII, 786, Dos Vieiras, Capivari, São Paulo, Brazil, ZIP 13360-702, which runs ProDay. For any privacy question, contact contato@proday.com.br.
| Data | Where it comes from | What it's for |
|---|---|---|
| Email and name (if provided) | Sign-up, or the Google account used to sign in | Identify your account, enable login |
| Notes, categories, dates, photos | What you write and upload in the app | This is the service itself: storing and syncing your content |
| Total photo storage used | Calculated automatically | Show your usage and enforce your plan's limit |
| Minimal auth session data (session token) | Generated by Firebase Authentication on sign-in | Keep you securely signed in |
| Site and app usage: pages viewed and product events | Google Analytics, while you browse | Understand how people reach ProDay and where they drop off (section 3) |
| Account milestones, under a pseudonym | The app itself, when a milestone is reached | Measure how many new accounts reach each step and come back to ProDay (section 3) |
| Answers to the in-app survey, under a pseudonym (optional) | You, if you choose to answer | Understand who uses ProDay and for what, and improve the product (section 3) |
We don't collect precise location, contacts, or data from other apps on your device.
The public site and the app use Google Analytics 4 to measure how the product is used. The distinction that organises this whole section: we measure what people do in ProDay, never what they write in it.
What is sent to Google Analytics:
?, except campaign tags (utm_*, gclid and equivalents). The transaction identifier the payment processor returns in the URL is stripped before sending;What is never sent: the text of your notes, their titles, your categories, your dates, your photos, your name, your email, your password, your session token, and your payment transaction identifier. The list of events and fields above is not an editorial promise: it is declared in a single file of the app's source, and none of the declared fields has a shape capable of carrying your content.
IP address. Google Analytics 4 does not log or store the IP address. It is used to derive the approximate location and then discarded.
Cookies. Google Analytics writes first-party cookies on proday.com.br (_ga and _ga_<id>) to tell one visit from the next. We don't use advertising cookies, we don't do remarketing, and we don't cross this data with any ad profile.
Legal basis. Legitimate interest (LGPD, art. 7, IX) in measuring and improving the product itself, limited to the minimum described above. You can object to this processing at any time (section 7).
How to opt out. Any tracker blocker, or Google's official Analytics opt-out add-on, stops the data being sent, and ProDay keeps working exactly the same, because nothing in the product depends on this measurement. You can also write to contato@proday.com.br.
How long. Event data stays in Google Analytics for the retention period configured on the property, capped at 14 months by the service itself. Google's processing may involve servers outside Brazil, as described in section 4.
Account milestones. Besides Google Analytics, the app tells our own server when an account reaches a few milestones: opening the account, writing a first note, coming back on a new day, using the AI assistant for the first time, reaching a plan limit, viewing the plans, starting and completing a payment. The server also records each request to the AI assistant, with the kind of request (for example, chat or summary) and how many credits it used, and each request refused for lack of credits, without the text of the request or of the answer. Once a day the app also records which features the account used (for example, tables, formulas, photos, the calendar or the mind map) and the kind of device (phone or computer, in the browser or as an installed app), and it sends a presence signal every 5 minutes while it is open on screen, to count how many people are using ProDay at that moment. When a screen of the app crashes or an error goes unhandled, the app sends a short report (the kind of error, the message without e-mail addresses, long numbers or links, the screen and the app version), with no account attached, so we can fix it. The landing page also counts clicks on "Start free" and "Download", with no identification at all. Each record holds only the milestone's name, the date, the plan and the app's language. The account appears only as a pseudonym, a code computed from the account's internal identifier by a one-way function, which does not lead back to your email or name. Nothing you write is sent. No cookie is involved. Records are kept in Cloudflare Workers Analytics Engine for up to 3 months and deleted automatically after that. The legal basis is the same as for Google Analytics: legitimate interest in understanding where people drop off, and you can object by writing to contato@proday.com.br.
Accepting these terms. When you create your account, or the first time you open ProDay after this version, you accept the Terms of Use and this Policy in two separate boxes. We keep on your account the date, the version accepted and whether it was at sign-up or later, as the proof the LGPD requires (art. 8, § 2). This record cannot be changed afterwards. When these documents change in a relevant way, we will ask for your acceptance again.
In-app survey. After a few days of use, the Today screen may show a short, optional survey: what you do (for example, university or work), what you use ProDay for most, how likely you are to recommend it from 0 to 10 and, if you like, a comment. The answer is kept in our database linked only to the same pseudonym as the milestone measurement, never to your name or e-mail, and no account can read it, only our server. We use the answers, together with how many days each pseudonym used the app, to understand who ProDay is most useful for. So please do not write anything in the comment that identifies you. Answering is always optional, and you can ask for your answer to be removed at contato@proday.com.br.
Welcome e-mails. When you open an account, you get three e-mails with tips, on the first, third and seventh day. Each has a link that takes you off the list at once. The address used is your account's, kept only until the last one is sent, for ten days at most.
Comments. Comments on shared notes are stored with the note and seen by whoever can open it. When you mention someone with @, that person gets an e-mail with your name, the note's title and the comment.
Referrals. If you opened your account from someone's link, we keep that they referred you and on how many different days you used ProDay at first, only to count whether the referral earns them a month of Plus. They only see numbers (how many accounts, how many useful), never who you are.
Your data is stored on Firebase/Google Cloud, our infrastructure provider, acting as our data processor rather than as a controller. It doesn't decide what happens with your data, it just hosts it under our instructions. This may involve processing on servers outside Brazil. Google maintains international data-protection certifications for that kind of operation.
Each account can only read its own data. That rule is enforced on the server, not just in the app's UI.
We don't sell, rent, or trade your data to third parties for marketing. We share data only with:
At any time, you can:
To exercise any right not already available in the app, write to contato@proday.com.br. We respond within 15 days.
Each account only accesses its own data, enforced by server-side rules. The connection between your device and ProDay is encrypted (HTTPS/TLS). No system is infallible. If we identify an incident affecting your data, we'll notify you and Brazil's data protection authority (ANPD) as required by law.
ProDay is intended for people 13 and older. We don't knowingly collect data from children under 13. If you're a guardian of a child under 13 who created an account, write to contato@proday.com.br so we can remove it.
ProDay has an AI assistant that answers questions from your notes, summarizes, writes notes when you ask, reads photos and PDFs you attach and takes spoken questions. It only acts when you use it: until you ask a question or request one of those actions, nothing is sent to the AI.
When you use the assistant:
About OpenAI's use. ProDay uses the OpenAI API. Under OpenAI's API terms, the content sent is not used to train its models; it may be kept for up to 30 days to detect abuse and is then deleted, unless the law requires otherwise. This processing happens on servers in the United States.
When the assistant acts in the app. If you ask, the assistant creates or changes notes, adds expenses and income in Money, creates categories and starts focus sessions. It only proposes these actions: the app itself writes them to your account, with your sign-in, and each one shows under the answer with a way to undo it.
We may update this policy. Material changes will be announced in the app or by email before they take effect.
For any privacy or LGPD matter: contato@proday.com.br.