Privacy Policy

The privacy and security of our users' data — especially children's and adolescents' data — are fundamental to Smart Allowance (Mesada Inteligente). This Privacy Policy describes how we collect, use, store, and protect your personal information, in full compliance with the Brazilian General Data Protection Law (LGPD — Lei Geral de Proteção de Dados, Law No. 13,709/2018).

1. Who We Are

Smart Allowance is a digital platform offered under the Software as a Service (SaaS) model, accessible via the web and mobile devices, designed for organizing family chores, gamification, points tracking, rewards, and allowance management, with an educational focus.

We help parents encourage household chores, studying, and responsibilities through a gamified points and rewards system.

Data Controller: MESADA INTELIGENTE EDUCACAO FINANCEIRA LTDA
CNPJ (Brazilian Company Registry Number): 64.501.665/0001-61
Address: Rua Cabo Antonio Pinton, 231 - Parque Novo Mundo - São Paulo - SP, Brazil
Privacy Email: contact@smartallowance.app

2. Information We Collect

2.1. Data of Parents/Guardians

• Registration Data: Full name, email address, and phone number (optional).
• Payment Data: Detailed in section 2.4 below.
• Usage Data: Access logs, IP address, device type, browser, and interactions with the platform.

2.2. Data of Children and Adolescents

IMPORTANT: Data of children and adolescents is collected ONLY with the specific and prominent consent of at least one parent or legal guardian.

• Basic Data: Name, date of birth, and profile photo (optional).
• Activity Data: Completed tasks, accumulated points, and evidence photos of completed tasks (submitted voluntarily).
• Access Data: Encrypted access code or login credentials (controlled by the parents).
• Technical Data: Access logs and type of device used.

2.3. Data Collected Automatically

• Cookies and Similar Technologies: We use essential cookies for the platform to function and analytics cookies (Google Analytics) to improve our services.
• Browsing Data: Pages visited, time spent, clicks, and interactions.
• Device Data: Model, operating system, browser version, and screen resolution.

2.4. Payment and Processing Data

To process subscription payments, we collect and share the following data with our payment processor (Asaas):

• CPF (Brazilian individual taxpayer number): CPF number (only for payments via PIX and Boleto Bancário)
• Full Name: As registered on the platform
• Email: For payment confirmation and billing communications

3. How We Use Your Data

We use the collected data exclusively for the following legitimate purposes:

• Service Delivery: Creating and managing accounts, enabling the creation and tracking of tasks, and calculating points and rewards.
• Personalization: Tailoring the family experience and offering tips and age-appropriate task suggestions.
• Communication: Sending notifications about tasks, approvals, and goals achieved, as well as important account notices.
• Customer Support: Answering questions, resolving technical issues, and providing assistance.
• Improvements and Analytics: Understanding how the platform is used to improve features and develop new ones.
• Security: Preventing fraud, abuse, and unauthorized access; ensuring the security of the platform.
• Legal Compliance: Responding to legal requests, protecting rights, and fulfilling legal obligations.

4. Data Sharing

Your data may be shared only in the following situations:

4.1. Service Providers

We share data with companies that help us operate the platform, always under confidentiality agreements and strict terms of use:

• Amazon Web Services (AWS): Hosting and server infrastructure (sa-east-1 region, São Paulo).
• Payment Processors (Asaas): To process subscription payments, we share: CPF (only for PIX/Boleto), full name, and email. Asaas processes this data in accordance with its own privacy policy.
• Analytics Tools (Google Analytics): Aggregated browsing data and access metadata (only on public pages: landing page and sign-up).

4.2. Legal Requirements

We may disclose data when:

• Required by law, court order, or a competent authority.
• Necessary to protect the rights, property, or safety of Smart Allowance, its users, or third parties.
• Necessary to prevent fraud or illegal activities.

4.3. Business Transactions

In the event of a merger, acquisition, or sale of assets, data may be transferred, but it will remain protected by this Privacy Policy.

5. Special Protection for Children and Adolescents (Article 14, LGPD)

5.1. Parental Consent

For the processing of data of minors under 18 years of age, we require the specific and prominent consent of at least one parent or legal guardian. This consent is requested during registration on the platform.

5.2. Best Interests of the Child

All decisions regarding the processing of children's and adolescents' data give priority to the best interests of the child, as required by the Brazilian General Data Protection Law (LGPD).

5.3. Appropriate Transparency

We strive to present privacy information in a clear, accessible way suited to the understanding of different age groups.

5.4. Data Minimization

We collect only the data strictly necessary for the platform to function. We do not require excessive information from children.

5.5. Parents' Rights

Parents/guardians have full control over their children's data and may:

• Access all data collected.
• Request the correction of information.
• Request the deletion of the account and of all data.
• Revoke consent at any time.
• Export the data in a structured format (portability).

6. Data Security

We implement robust technical, administrative, and physical measures to protect your data:

• Encryption: Data stored in an encrypted database; communications over HTTPS/TLS.
• Access Control: Data access restricted to authorized personnel only.
• Monitoring: Security logs and monitoring of suspicious access.
• Backups: Regular backups in a secure environment.
• Infrastructure: Servers on AWS with international security certifications (ISO 27001, SOC 2).
• Testing: Periodic security audits and tests.

Important: In the event of a security incident that may pose risks to users, we will promptly notify those affected and the ANPD (Autoridade Nacional de Proteção de Dados — the Brazilian National Data Protection Authority), as required by the LGPD.

7. Data Retention

We keep your data only for as long as necessary for:

• While your account is active: For as long as you keep your account active.
• Legal obligations: For the period required by law (e.g., tax data for 5 years).
• Dispute resolution: Until legal disputes are fully resolved.
• After cancellation: Data may be kept in anonymized form for statistical analysis.

You may request the complete deletion of your data at any time. Minors' data will be deleted immediately upon request by their parents/guardians.

8. Your Rights (LGPD — Law No. 13,709/2018)

You have the following rights guaranteed by the Brazilian General Data Protection Law (LGPD):

• Confirmation and Access: Confirm whether we process your data and access it.
• Correction: Correct incomplete, inaccurate, or outdated data.
• Anonymization, Blocking, or Deletion: Request the anonymization, blocking, or deletion of unnecessary or excessive data.
• Portability: Receive your data in a structured, interoperable format.