Privacy Policy
Last updated: April 20, 2026 — in compliance with Brazil’s LGPD (Law No. 13,709/2018)
This Privacy Policy applies to the Organizi app, developed by Diego Furtado, available on Google Play and the App Store.
TL;DR — in one sentence
Organizi collects the minimum data it needs to work, never sells your information, encrypts everything in transit and gives you full control — you can delete everything at any time right from the app.
1. Who the controller is
Diego Furtado, an independent developer, is the controller of the personal data processed by the Organizi app.
Contact: furtado.diegos@gmail.com
2. What data we collect
Identification
- First name
- Last name
- Sign-in provider ID (Google or Apple)
Creating and authenticating your account
Financial data
- Payments you add (name, amount, date, category)
- Bills and installments
- Recurring payments
- Custom categories
- Monthly income you enter
Running the app — storing and showing your finances
Shared images
- Images of boletos, receipts or bills that you choose to share with the app
Automatic data extraction via OCR (Google Vision) — images are not stored
Web3 wallets (optional)
- EVM or Solana wallet addresses added voluntarily
Displaying the DeFi portfolio (read-only lookup via Moralis)
Device and usage
- Device model, operating system, app version
- Push notification token
- Language and time zone
- Anonymized usage events (screens visited, actions taken)
- Error logs (stack traces, breadcrumbs)
Technical support, product improvement, sending notifications
3. Legal bases (LGPD Art. 7)
- Performance of a contract: data needed to provide the service (authentication, financial storage);
- Consent: push notifications, sending images for OCR, integration with Web3 wallets;
- Legitimate interest: anonymized analytics, fraud prevention, product improvement;
- Compliance with a legal obligation: tax retention of premium subscription transactions.
4. Who we share it with
We do not sell your data. We only share it with providers essential to running the app, under a data processing agreement (DPA):
| Processor | Purpose |
|---|---|
| Hasura Cloud | Storage of your financial data (PostgreSQL database) |
| Vercel | Hosting of this website and auxiliary endpoints |
| Apple / Google | Social sign-in (Sign in with Apple / Google) |
| OneSignal | Sending push notifications |
| OpenAI / Google Gemini | Smart expense categorization and data extraction from shared images |
| Google Vision | OCR of shared boletos/receipts |
| Sentry | Crash and error monitoring (no financial data) |
| Mixpanel / PostHog | Anonymized usage analytics (no financial amounts) |
| RevenueCat | Premium subscription management |
| Moralis | Read-only lookup of balances and tokens on public blockchains |
5. How we protect your data
- Encryption in transit (TLS 1.3) for all communications;
- Signed JWT tokens to authenticate every request;
- Sensitive credentials stored in the native Secure Store (Keychain/Keystore);
- Encrypted local cache in MMKV;
- Database access protected by granular permissions (Hasura Row-Level Security);
- Error logs automatically remove sensitive fields (PII scrubbing).
6. How long we keep it
We keep your data while your account is active. When you delete your account, all financial and personal data is permanently removed within 30 days. Tax records (premium subscriptions) may be kept for up to 5 years to comply with legal obligations.
7. Your rights (LGPD Art. 18)
Confirmation and access
Know whether we process your data and get a copy.
Correction
Update incomplete, inaccurate or outdated data.
Deletion
Permanently delete your account and all data from the app (Settings → Delete account).
Portability
Receive your data in a structured format (JSON/CSV).
Withdrawal of consent
Turn off notifications, OCR or specific integrations at any time.
Objection
Ask us to stop processing that you consider improper.
To exercise any right, write to furtado.diegos@gmail.com. We will reply within 15 calendar days.
9. Children and teenagers
Organizi is not intended for people under 18. We do not knowingly collect data from children. If we identify an account created by a minor without a guardian’s permission, the account will be deleted.
10. Changes to this Policy
This Policy may be updated to reflect changes in the Service or in the law. Relevant changes will be communicated by email or in-app notification at least 15 days in advance.