Privacy policy

This policy explains which personal data Balizar processes, what for, who it is shared with, how long it is kept and how you exercise your rights. It applies to the Balizar app (Android and iOS), to the desktop app at app.balizar.com.br and to the site www.balizar.com.br, and follows the Brazilian General Data Protection Law (Law 13.709/2018, LGPD) and the European Union General Data Protection Regulation (Regulation (EU) 2016/679, GDPR).

1. Who the controller is

The controller of your personal data is Antônio Marcos de Oliveira Souza, a natural person in Brazil who develops and runs Balizar. For any privacy matter, including exercising your rights, write to privacidade@balizar.com.br. This is also the channel of the data protection officer (DPO): as a small processing agent, the controller answers data subjects and the Brazilian Data Protection Authority (ANPD) directly.

2. Summary

• We use your data to make Balizar work: your account, your finances and what you choose to share.
• We do not sell your data and we do not show ads. The app uses no analytics or advertising tools, and the site and the desktop app use no tracking cookies.
• Your transactions are only visible to the people you choose, in the wallets, goals and budgets you share.
• You can download a copy of all your data and delete your account at any time, in the app itself.

3. Which data we process

• Account: name, user name, e-mail and, if you provide them, phone, date of birth and picture. When you sign in with Google, Apple or Facebook, we receive your name, e-mail and profile picture from them. Your password is kept by Firebase Authentication (Google) and never stored by Balizar.
• Financial data you record: wallets, credit cards, income, expenses, transfers, recurring bills, installments, categories, tags, budgets and goals.
• Statement import: when you import an OFX or CSV file, Balizar reads its transactions (date, description and amount) and keeps only the suggested transactions until you accept or dismiss them. The file itself is not kept.
• Bank notifications (Android only, if you turn it on): with your permission to access notifications, the app reads only the notifications of the bank apps it knows that carry an amount, takes the transaction out of them (amount, description, date and bank) and sends only that to suggest the transaction. Every other notification is ignored, and nothing is read while the feature is off.
• Attachments: the receipts you attach to a transaction stay only on your device and are not sent to Balizar.
• Sharing and followers: who you follow, who follows you, follow requests and whom each wallet, goal or budget is shared with.
• Device and session: device identifier (the app identifier on Android or iOS, or one generated by Balizar), brand, model, operating system and versions, memory, device name, push notification token, the sessions open on each device and when they were used.
• Subscription: if you subscribe to Balizar Plus, the subscription status (plan, store, expiry and renewal). Payment is made in the App Store or Google Play: Balizar does not receive your card details.
• Notifications and preferences: the notifications sent to you (such as follow requests and budget alerts) and your language, currency and theme preferences.
• Technical logs: when you reach our servers, the hosting records data such as IP address, date and time, the address requested and the type of browser or device, used for security and to fix errors.
• Contact: the messages you send us by e-mail.

Financial data says a lot about your life, so Balizar handles it with care, but it is not sensitive personal data under the LGPD (art. 5, II) nor a special category under the GDPR (art. 9). Please do not write sensitive information (such as health, religion or political opinions) in transaction descriptions.

4. What we use the data for, and on which legal basis

• Creating and keeping your account, storing and showing your finances, syncing your devices and the desktop app, and sharing what you choose: performance of the contract with you, the Terms of use (LGPD art. 7, V; GDPR art. 6(1)(b)).
• Managing the Plus subscription and the limits of the free plan: performance of the contract (LGPD art. 7, V; GDPR art. 6(1)(b)).
• Sending account e-mails (sign-up confirmation and password recovery) and push notifications about your account and your finances: performance of the contract. Push notifications depend on the permission you give on the device and can be turned off at any time in the system settings.
• Reading bank notifications on Android: your consent (LGPD art. 7, I; GDPR art. 6(1)(a)), which you give by turning the feature on and allowing notification access, and can withdraw by turning the feature off in the app or the permission off in the Android settings.
• Keeping the service secure, preventing fraud and abuse, and fixing errors: the legitimate interest of Balizar and its users in a secure, working service (LGPD art. 7, IX; GDPR art. 6(1)(f)).
• Complying with legal obligations and answering authorities: legal or regulatory obligation (LGPD art. 7, II; GDPR art. 6(1)(c)) and the regular exercise of rights (LGPD art. 7, VI).

Balizar does not use your data for advertising, does not build profiles for third parties and makes no automated decisions with legal effects on you. The category suggestions of the statement import are automatic, but you always review and decide before accepting them.

5. Who we share it with

Your data is not sold. It is only shared in these cases:

• Other users, when you choose: the people you accept as followers and those you share a wallet, goal or budget with see what is in it. Any user who searches your name or user name to follow you only sees your public profile: name, user name and picture. Your e-mail, phone and date of birth are not shown to other users.
• Service providers (processors), who process the data only to run Balizar, following our instructions and their own data protection terms:

• Google LLC (Google Cloud and Firebase): hosting of the site, the desktop app, the Balizar servers and database, in São Paulo (Brazil); sign-in and passwords (Firebase Authentication) and push notification delivery on Android (Firebase Cloud Messaging); also the Google sign-in and the mailbox that receives contact messages.
• Apple Inc.: Apple sign-in and push notification delivery on iOS.
• Meta Platforms, Inc.: only if you choose to sign in with Facebook, to confirm your identity. The Facebook SDK only starts at that moment and sends no app usage events.
• 650 Industries, Inc. (Expo): push notification and app update delivery service.
• RevenueCat, Inc.: management of the App Store and Google Play subscriptions, identified only by your Balizar account identifier.
• Apple App Store and Google Play: billing of the subscriptions, under the privacy policies of those stores.
• Resend (Plus Five Five, Inc.): delivery of the account e-mails, from servers in Brazil.
• ImprovMX: forwarding of the e-mails sent to the @balizar.com.br addresses.

• Authorities, when there is a legal obligation, a court order or to defend the rights of Balizar and its users.

6. International transfers

The Balizar servers and database are in Brazil. Several of these providers store or process data outside Brazil, mainly in the United States. These transfers are necessary to perform the contract with you (LGPD art. 33, IX, together with art. 7, V) and are made with providers committed to data protection safeguards, such as standard contractual clauses (LGPD art. 33, II, and ANPD Resolution 19/2024). For those who use Balizar from the European Economic Area, data is transferred to Brazil and to the United States based on the standard contractual clauses approved by the European Commission, on the EU-US Data Privacy Framework when the provider is certified or, failing those, because it is necessary to perform the contract (GDPR art. 49(1)(b)).

7. How long we keep it

• Account, financial data, followers and preferences: while your account exists. When you delete the account, they are erased from our databases right away; automatic backups of the database provider are overwritten after a limited period.
• Import suggestions: until you accept or dismiss them.
• Bank notifications read on Android: they stay only on the device until they are sent as suggestions; what was kept is erased when you turn the feature off.
• Sessions and devices: while the account exists; an ended session (signing out or disconnecting a device) is erased 30 days later, and the records of devices disconnected by the limit of the free plan after 62 days.
• Subscription events received from RevenueCat: 90 days.
• Hosting technical logs: for the short period set by the hosting provider.
• Contact e-mails: for as long as needed to answer and to defend rights if needed.

8. Your rights

At any time and free of charge, you can (LGPD art. 18; GDPR arts. 15 to 22):

• confirm whether we process your data and access it;
• correct incomplete, inaccurate or outdated data;
• ask for the anonymization, blocking or erasure of unnecessary or excessive data or of data processed against the law, and object to a processing;
• receive your data in a structured, commonly used format (portability);
• delete your account and the data processed with your consent;
• know who we share your data with and what happens if you do not give your consent;
• withdraw your consent, without affecting what was done before;
• lodge a complaint with the ANPD (www.gov.br/anpd) or, in the European Economic Area, with the data protection authority of your country.

How to exercise them: in the app, open your Profile, tap the ⋮ menu and choose Export my data (a JSON file with everything Balizar keeps about you) or Delete account. In the desktop app, the same options are under Settings → Your data. Your profile data can be corrected in the Profile itself. For any other request, or if you can no longer sign in to your account, write to privacidade@balizar.com.br from the account e-mail. We answer within 15 days and, under the GDPR, within one month at most.

Deleting the account also deletes the wallets, goals and budgets you created and shared, for your followers too, and you leave what others shared with you. Deleting the account does not cancel the Plus subscription: cancel it first in the App Store or Google Play. More details in Delete your account.

9. Security

Data always travels encrypted (HTTPS). Passwords are kept by Firebase Authentication, sessions are renewed with tokens we only keep as a hash, the desktop app keeps the session in cookies the page JavaScript cannot read and each user only reaches their own data and what was shared with them. No system is fully immune to failures: if a security incident that may cause relevant risk or harm happens, we will notify you and the ANPD (and, where applicable, the competent European authority) within the legal deadlines.

10. Cookies and storage on the device

The site uses no cookies. The desktop app only uses cookies needed for it to work: the session ones (up to 7 days), the browser identifier as a device (up to 2 years) and your language, currency, theme and menu preferences (up to 1 year). There are no analytics or advertising cookies, so we do not ask for cookie consent. The app keeps your session (in secure storage), your preferences and the transaction attachments on the device.

11. Children and teenagers

Balizar is meant for people aged 16 and over and is not directed at children. People under 16 should not create an account; if you are the guardian of someone under 16 who created an account, write to privacidade@balizar.com.br to delete it.

12. Links to other sites

Balizar may link to third-party sites and services, such as the app stores. They have their own privacy policies, which we recommend reading.

13. Changes to this policy

We may update this policy when Balizar changes or the law requires it. The date of the last change is at the top of this page and, when the change is relevant, we will let you know in the app or by e-mail before it takes effect.

14. Contact

Questions, requests or complaints about privacy: privacidade@balizar.com.br.