This policy explains what data Minha Obra ("we", "the app", "the service") collects
from you, what we use it for, who we share it with and what rights you have over it,
in accordance with Brazil's General Data Protection Law
(LGPD — Lei nº 13.709/2018).
1. Who controls the data
Minha Obra is operated independently. For any request about your personal data,
contact us at
contact-us@app-minhaobra.com.br.
2. What data we collect
Account data: name, email and password (stored encrypted, never in plain text).
Project data: the project name, stages, budgets, expenses, cash boxes and diary notes you enter.
Site location (optional): the point you mark on the map or, if you allow it, the device's location at the moment you mark it — used only for the site's weather forecast.
Photos and files (optional): site diary photos, documents, supplier quote PDFs and spreadsheets you upload. Receipt photos sent for automatic reading are not kept.
WhatsApp (optional): if you connect WhatsApp, we keep the number and the messages exchanged with the Minha Obra assistant (texts, voice notes, photos and files you send it).
Payment data: the subscription is made in the app and paid directly to Google Play or the App Store (see section 4) — we never receive or store card numbers or sensitive financial data. From the subscription we only receive the plan, its dates and its status.
Technical data: IP address and session identifiers, used only for security and for the service to work (never for advertising); and, if you allow notifications, the device's push identifier, used only to deliver them.
Diagnostic data: when the app or the server runs into an error, we record what failed — the error message, the screen, the app version, the device's system and model and your account's numeric identifier — to fix the problem. It doesn't include your name, email or your project's content.
3. What we use your data for
Providing and maintaining the app's features (projects, stages, expenses, site diary);
Working out the site's location and sending continuous-rain forecast alerts;
Automatically reading and organizing expense receipts, PDF quotes and import spreadsheets, with the help of artificial intelligence;
Assisting, through WhatsApp, whoever connects their number: understanding messages and voice notes, recording what you ask and sending project alerts (which can be turned off in the app);
Processing subscriptions and payments;
Sending operational emails (account confirmation, password recovery, important notices about your account);
Keeping the service secure and preventing misuse.
We don't use your data for advertising, we don't sell data to third parties and we don't show ads in the app.
4. Who we share data with
We use the following third-party services, each receiving only the data strictly needed for what it does:
Google Play and App Store — processing the subscriptions made in the app, under each store's terms.
RevenueCat — subscription management; it only receives a random identifier for your account and the purchase data reported by the store, never your name or email.
Amazon Web Services — the app's servers and database, and private storage (S3) of the photos and files you upload.
OpenAI — automatic reading of receipts, PDF quotes and spreadsheets, and understanding messages, voice notes and photos sent to the WhatsApp assistant (only when you use those features). The data is not used to train models.
WhatsApp (Meta) — carrying the messages between you and the assistant, only if you connect your number.
Firebase Cloud Messaging (Google) — delivering push notifications to your device, if you allow them; it receives the device's push identifier and the notice's text.
Sentry — recording errors and crashes in the app and on the server (the diagnostic data in section 2), so the team can find and fix them.
OpenStreetMap / Nominatim — turning the site's address into geographic coordinates.
Open-Meteo — the weather forecast for the site's area.
None of these services is allowed to use your data for its own purposes beyond providing the service we contracted.
5. How long we keep your data
We keep your data while your account is active. If you delete your account, your
data and your projects' data are permanently removed from our production database.
Backups that already contain this information are kept for up to 7 days before being
discarded automatically. Messages exchanged through WhatsApp may remain for up to
30 days in the service that delivers them. See the details in
Account and Data Deletion.
6. Your rights
Under the LGPD, you can at any time:
Confirm whether your data is being processed;
Access, correct or request the deletion of your data;
Request the portability of your data to another provider;
Withdraw consent given earlier;
File a complaint with Brazil's National Data Protection Authority (ANPD).
You can edit your account data and delete your account yourself, directly in the app,
at any time, without having to ask first. For any other request related to this
section, write to
contact-us@app-minhaobra.com.br.
7. Security
Passwords are stored with a cryptographic hash, never in plain text. Photos are stored
in a private bucket, never public on the internet — each file is accessed through
short-lived temporary links. All communication between the app and our servers goes
over HTTPS.
8. Children and teenagers
Minha Obra is not directed at anyone under 18 and we don't knowingly collect data from children or teenagers.
9. Changes to this policy
We may update this policy from time to time. Significant changes will be announced by
email or by a notice in the app before they take effect.