App privacy policy

About this policy

This policy applies to the GuiAmigo app (iOS, Android and web version). It describes the data the app actually collects, why, who it is shared with and how to exercise your rights (LGPD, Brazilian Law No. 13,709/2018). The website and waitlists have their own policy, on the website’s privacy page.

GuiAmigo is still being prepared: this text is a draft written from what the app does today and will be reviewed by a lawyer before launch.

Who we are

GuiAmigo (company name and CNPJ: to be filled in) is the controller of the data processed by the app. Data protection officer (DPO): to be appointed. Contact: contato@guiamigo.com.

What data we collect

Account and profile: e-mail (used to sign in, with a code sent by e-mail), first name, app language, colour preference and, if you want, a profile photo.

Answers from the app introduction: what you are looking for, languages you speak, trip type and approximate dates, and how you heard about GuiAmigo. They are optional and used to suggest guides and experiences.

Guides, interpreters and translators: name, date of birth and identity document, a selfie and profile photo for verification; criminal-record certificates (the file is deleted after the team’s decision and we only keep the masked control number and validity dates); services, prices, languages, availability, approximate neighbourhood or working zone and, if you provide it, a Cadastur number.

Partner venues: company name, CNPJ, the manager’s name, date of birth and identity document, and a contact e-mail.

Use of the app: requests and bookings (date, time, public meeting place and the message sent with the request), messages exchanged in the app (phone numbers, e-mails and messaging links are hidden before confirmation), reviews, reports, reliability records (late cancellations, no-shows, price mismatches), answers to the “Are you OK?” check-in, meeting codes, “share my trip” links, call history (who called, when and for how long; audio and video are not recorded) and notifications.

Location: only an approximate position, requested when you sort guides by distance, used right away to compute the distance and not saved. Distances shown are always rounded; nobody’s exact position is shown.

Technical data: an error log without personal data and, if you turn on alerts on your device, your browser or device notification identifier.

What we do not do: no ads, no tracking across apps or websites, no third-party analytics tools, and no health or payment data (the app does not process payments).

Device permissions

Location: only when you choose to sort by distance. Camera and photos: only to take or pick your profile photo and, for professionals, verification documents. Microphone and speech recognition: only while you tap “Dictate” in the translator; recognition runs on the device and your voice is not sent out. Notifications: only if you turn them on. You can deny or revoke any permission in your device settings.

What we use it for, and the legal basis

Creating and keeping your account, showing profiles, sending and answering requests, enabling messages and calls between the people in a booking: performance of the service you asked for (LGPD, art. 7, V).

Verifying professionals and partners, moderating the platform, handling reports and preventing fraud and risks to the safety of meetings: legitimate interest and protection of life and physical safety (art. 7, IX and VII).

Keeping what the law requires and defending rights: legal obligation and regular exercise of rights (art. 7, II and VI).

Approximate location, profile photo, alerts and optional introduction answers: your consent (art. 7, I), which you can withdraw at any time.

Who sees your data

Travellers see a professional’s public profile (name, photo, services, languages, reviews, approximate zone), never the documents. A professional sees your first name, your language and the message of the request; a traveller’s reliability record is only seen by whoever receives the request.

Identity documents, selfies and certificates are kept in private storage, with no public link, and only the verification team consults them.

The GuiAmigo team only reads messages and reports when needed to handle a report or a safety issue.

Who we share it with

We do not sell your data. We use providers that process data on our behalf, with only what is needed: hosting and database (Supabase); sending the sign-in code e-mail (provider to be chosen); the call support server (STUN/TURN, our own); the browser notification service, if you turn alerts on; and, only if the translator is turned on, the translation provider, which receives the text you type to translate.

We may also share data with authorities when the law requires it or to protect someone’s life and safety.

International transfers

Servers may be outside Brazil, depending on the hosting region chosen (to be decided). If so, we will apply the safeguards in art. 33 of the LGPD and state the country and safeguards here.

How long we keep it

As long as your account exists. You can ask for deletion in Profile › Delete my account: the account and personal data are deleted automatically 30 days later (or earlier by the team), and until then you can cancel the request. We delete preferences, sent messages, documents and certificates, availability, languages, alerts and sharing links, and the files (photo and documents) are removed from storage.

We keep, without your name (shown as “Deleted account”), the meetings and reviews you wrote, the reports filed, the check-ins and the administration history, because the other person needs them and they serve safety (LGPD, art. 16). An open report against the account postpones deletion until it is handled.

Your rights

You can ask for confirmation of processing, access, correction, anonymisation or deletion, portability, information about who we share data with, and withdrawal of a consent, by writing to contato@guiamigo.com. We will answer within 15 days. Account deletion can also be requested in the app.

You can also complain to the Brazilian data protection authority (ANPD).

Minimum age

GuiAmigo is meant for people aged 18 or over (minimum age to be confirmed before launch). If we learn that an account belongs to a minor, it will be closed.

Security

Connections use HTTPS. Access to data is restricted by database rules: each person can only read what concerns them. Documents are kept in private storage and the team’s accesses are logged.

Changes

If this policy changes in an important way, we will tell you in the app first. The version date is at the top of this page.