Privacy Policy
Litoral na Palma app · Last updated: July 28, 2026
This Policy explains how the Litoral na Palma app ("app", "we") collects, uses, shares and protects personal data, in accordance with Brazil's General Data Protection Law (Law No. 13.709/2018 - LGPD) and equivalent principles. By using the app, you agree to the practices described here.
1. Data we collect
| Data | Purpose | Legal basis |
|---|---|---|
| Email or phone number | Sign-up and login via one-time code (OTP) | Performance of a contract |
| Approximate/precise location (only while the app is open) | Nearby beach and traffic alerts, placing reports and the map | Consent |
| Reports you create (type, description, location) | Share real-time information with the community | Consent / legitimate interest |
| Preferences (city, language, mode, avatar) | Personalize the experience | Performance of a contract |
| Device push notification token | Send alerts about new reports | Consent |
| Profile photo (optional) | Set your avatar - stored on your device only, never uploaded | Consent |
| Support attachment (optional) | Review your request - uploaded to our private Storage (Supabase) | Consent |
| Usage data (anonymous analytics) | Screens, taps and active city/mode/language - anonymous device id; can be turned off in Settings | Legitimate interest / Consent |
We do not collect sensitive data, we do not track your location in the background, and we do not sell personal data. Location is only accessed while the app is in use and with your permission.
2. Where data is stored
Session tokens are stored encrypted on your device. Preferences are kept locally. Your account and reports are stored in Supabase, with access rules (RLS) that restrict each user to their own account data.
3. Sharing with third parties
We use third-party services strictly to operate the app:
| Service | Used for |
|---|---|
| Supabase | Authentication and database |
| OpenWeatherMap | Weather data |
| Google (Maps / Routes) | Map and traffic estimates |
| CETESB | Beach water quality (public data) |
| Resend / Infobip | Delivery of the login code by email / SMS |
| Expo | Push notification delivery |
Reports you publish are visible to other app users (without identifying you by name).
4. Retention and deletion
We keep your data while your account exists. Reports expire automatically. You can delete your account at any time in Settings → Delete my account, which removes your associated personal data.
5. Your rights
You may request access, correction, portability, anonymization or deletion of your data, and withdraw consent. To exercise these rights, contact us at the email below.
6. Children
The app is not directed to children under 13, and we do not knowingly collect their data.
7. Changes
We may update this Policy. Material changes will be reflected by the "last updated" date above.
8. Contact
Data protection contact: litoralnapalma@gmail.com