ProDay Privacy Policy

Last updated: August 13, 2026 · Contact: proday.ly@gmail.com

This policy follows Brazil's General Data Protection Law (LGPD, Law 13.709/2018), which governs how ProDay handles personal data.

1. Who processes your data

The data controller is Fernando Mattar Modenese, responsible for ProDay. For any privacy question, contact proday.ly@gmail.com.

2. What we collect

Data	Where it comes from	What it's for
Email and name (if provided)	Sign-up, or the Google account used to sign in	Identify your account, enable login
Notes, categories, dates, photos	What you write and upload in the app	This is the service itself: storing and syncing your content
Total photo storage used	Calculated automatically	Show your usage and enforce your plan's limit
Minimal auth session data (session token)	Generated by Firebase Authentication on sign-in	Keep you securely signed in

We don't collect location, contacts, or data from other apps on your device. ProDay doesn't currently use third-party tracking cookies or analytics tools.

3. Where your data lives

Your data is stored on Firebase/Google Cloud, our infrastructure provider, acting as our data processor rather than as a controller. It doesn't decide what happens with your data, it just hosts it under our instructions. This may involve processing on servers outside Brazil. Google maintains international data-protection certifications for that kind of operation.

Each account can only read its own data. That rule is enforced on the server, not just in the app's UI.

4. Who we share it with

We don't sell, rent, or trade your data to third parties for marketing. We share data only with:

Firebase/Google Cloud, as our infrastructure processor (section 3);
the payment processor, once paid plans are available. It receives only what's needed to bill you, such as your email and subscription id, and never your note content;
authorities, only when required by a valid court order.

5. How long we keep it

Deleted notes and photos go to trash and are permanently removed after 30 days.
When you delete your account, we remove your personal data and content within 30 days. The exception is anything the law requires us to keep longer, such as transaction records if you had a paid plan.

6. Your rights (LGPD, art. 18)

At any time, you can:

access what we hold about you. The app already shows it, and the built-in export gives you a full copy of your notes;
correct incomplete or outdated data, directly in the app;
delete your account and content (section 5);
request portability of your data to another service. The app's built-in export covers this;
withdraw consent and object to a specific use;
ask who we've shared your data with.

To exercise any right not already available in the app, write to proday.ly@gmail.com. We respond within 15 days.

7. Security

Each account only accesses its own data, enforced by server-side rules. The connection between your device and ProDay is encrypted (HTTPS/TLS). No system is infallible. If we identify an incident affecting your data, we'll notify you and Brazil's data protection authority (ANPD) as required by law.

8. Children

ProDay is intended for people 13 and older. We don't knowingly collect data from children under 13. If you're a guardian of a child under 13 who created an account, write to proday.ly@gmail.com so we can remove it.

9. AI features (when available)

If and when optional AI features ship, they'll be off by default. Turning one on sends only the text of that specific operation to an AI provider processing it on our behalf. An example is the text of a note you asked to summarize. The rest of your notes is never sent, and nothing is used to train any model. This section will be updated with the provider's name before the feature goes live.

10. Changes to this policy

We may update this policy. Material changes will be announced in the app or by email before they take effect.

11. Contact / data protection contact

For any privacy or LGPD matter: proday.ly@gmail.com.