Privacy policy

Operator and contact

Rolezeiros is the brand of a service operated by its developer, an individual in Brazil. Contact help@rolezeiros.app for privacy, rights or support.

This policy covers visitors, users and people mentioned in trips or invitations. Availability depends on country and store.

Data we use

Account: name, email, authentication identifiers, permissions and preferences; photo and payment identifier if provided. Firebase Authentication manages authentication. A payment identifier may contain a national identifier, email or phone number; use a random payment key where possible.

Trips: selected destinations and coordinates, dates, itineraries, instructions, notes, participants, roles and invitations. Expenses: description, amount, date, category, payer and participant shares. Client notes may be available to the authorized manager. These features do not continuously track the device's GPS location.

Purchases: customer identifiers, products, transactions, credit balance, reservations, consumption, bonuses and reversals linked to purchases and generations. Operations and support: messages, IP addresses, timestamps, errors and records needed for security and operation. Optional diagnostics may include usage events, crashes and performance according to your choice.

A participant may provide an email address for someone without an account to invite them. We use that contact and trip/sender information to deliver the invitation. People without accounts may also exercise their rights.

Purposes and legal grounds

We use necessary data to provide accounts, plan trips, share expenses, deliver invitations and verify purchases — performance of the requested service. Security, abuse prevention and protection of shared records may rely on legitimate interests where permitted, considering necessity and your rights. We process data to comply with legal obligations or defend rights where applicable.

Optional diagnostics and sharing data for AI generation involve separate choices. Accepting the terms does not enable them. You may withdraw a choice for future processing without making earlier processing unlawful. Applicable legal grounds and rights depend on your country's law.

Artificial intelligence

When you request an itinerary or changes, the in-app confirmation identifies recipients. The production configuration uses OpenRouter, Google (Gemini) and LangSmith. Destinations, dates, duration, language, instructions, existing itineraries and results may be processed to generate itineraries and observe the workflow. LangSmith may receive inputs, outputs and execution metadata.

You may decline and continue using other available features. Avoid sensitive or unnecessary third-party information. We do not promise that providers retain no data or make no secondary use: this depends on their terms and settings. No external search service is enabled in the AI configuration described here.

Sharing and international processing

Trip and expense information is visible to participants and managers according to their permissions. Providers include Google/Firebase (authentication, storage, App Check and optional diagnostics), Google Places (destinations), Railway (hosting and infrastructure), RevenueCat and the purchase store (purchases), email delivery services and the AI providers above. Each receives data needed for its role; stores also process data under their own policies.

These services may process data outside your country, including where laws differ. Contact us for information about recipients and applicable safeguards. Data may also be shared to meet a valid legal requirement or protect rights. We do not sell personal data or use the landing page for behavioral advertising.

Retention and deletion

Account data is kept to provide the service while the account is active. Other records depend on their purpose: ongoing collaboration, unresolved expenses or disputes, purchase verification, security and applicable legal obligations. There is no single period for all categories or promise that all history is automatically erased when a trip ends.

Under Profile → Account and personal data, you can export data available through that feature or request deletion, with fresh identity confirmation. Accepted deletion blocks access and starts asynchronous processing, with retries on failure. Profile, authentication, photo and private resources covered by the process are removed; acceptance does not mean every stage is complete.

Minimal participation records, shared expenses, other participants' text, billing history and security identifiers may remain when necessary. Replacing a name or identifier does not guarantee anonymization. You may request review of personal references remaining in those records.

Logs, backups, external providers and delivered emails require separate handling; the account deletion routine does not erase them all. The in-app export also excludes some external records. Request additional access or deletion by email. Copies you saved or shared outside the service are controlled by their recipients.

The wallet and credit history are included in the account export. Minimal records of transactions, grants, reservations, consumption and reversals may be retained after deletion when necessary for purchase verification, preventing duplicate grants, dispute resolution or applicable legal obligations. Retention depends on each record’s purpose and necessity; request information or review through the privacy contact. Before deleting an account with a remaining balance, contact help@rolezeiros.app for review of the balance and any refund rights; deletion does not automatically withdraw funds or request a refund.

Choices and rights

Optional diagnostics start disabled and can be changed under Privacy and data. Disabling limits future optional collection without automatically erasing remote history. Necessary operational logs are separate from this preference.

Depending on applicable law, you may request confirmation, access, correction, deletion, portability, sharing information, objection, restriction or consent withdrawal at help@rolezeiros.app. This also applies to invitees without accounts. Identity checks must be proportionate; never send passwords. We will explain applicable limits or exceptions while protecting other people's data. You may complain to the relevant authority, such as Brazil's ANPD or your local data protection authority.

Device, age and security

The app stores session data, preferences and caches on the device. The website handles language through the page URL, as described in the Cookie policy. App and website storage serve different purposes.

The service is intended for people aged 18 or older. Contact us if you learn that a minor provided data so the situation can be reviewed. Avoid unnecessary sensitive data, children's data or other people's data in notes, photos or instructions.

We use authentication and access permissions; no system offers absolute security. Policy updates will carry a revision date. Changes requiring a new choice will be presented as required by applicable law.