Casaloop Privacy Policy

Summary

• The data you enter is used to run the app. Routines, shopping lists and your Home are used to build your plan and keep your progress. We do not sell data and do not use any of it for advertising.
• Your Home is backed up securely from the start. At the end of the initial setup, the app creates a provisional account, without asking you to sign up, and stores a copy of your Home on our server, in Brazil. This way nothing is lost if you change phones, and you can share your Home.
• Usage data and diagnostics leave your device only if you allow it. Both switches start off, and you can change them at any time. The app’s check for updates does not depend on them and carries nothing you enter in the app (section 4.12).
• The app does not request any of the following: location, contacts, camera, photos, microphone or advertising identifier. None of your data is sent to artificial intelligence models.
• You are in control of your data. You can export it, correct it and delete your account.

1. Who is responsible for your data

• Controller: Victor Hugo Pedroza, an individual based in Brazil.
• Privacy contact: support@casaloopapp.com.
• Data protection officer (Encarregado): not appointed. As a small-scale processing agent, the controller is exempt from appointing a data protection officer (Brazilian Data Protection Authority, Resolution CD/ANPD No. 2/2022, art. 11). The channel for questions about your data is the email above.

In this policy, “Casaloop”, “we” and “us” refer to the controller above. “You” means the person using the app or visiting the website.

2. Scope of this policy

This policy applies to:

• the Casaloop app for iPhone and Android;
• people invited to share a Home;
• household members added by someone else without an account;
• the casaloopapp.com website, including our account deletion request page;
• messages you send to our contact email.

3. Where your data is stored

On your device. Casaloop works on the device first: your Home, routines, shopping lists and history are kept in a database inside the app and work without an internet connection.

On our server.

• At the end of the initial setup, the app silently creates a provisional account, with no email or password.
• It then sends a copy of your Home to the server. From then on, changes made on the device are synchronized.
• Without an internet connection, the app keeps working and tries again later.

When you save your account. When you save your Home to an account, you can sign in with email, Apple (on iPhone) or Google. That sign-in method is linked to the same provisional account, and your Home stays where it is.

4. What data we process, for what purpose and on what legal basis

4.1 Your Home data

• What:
  • the Home’s name and time zone, and its rooms;
  • your answers in the initial setup: who lives with you, your rooms and what your week looks like;
  • routines and tasks: title, notes, frequency and estimated time;
  • shopping lists and items: name, quantity and category;
  • task logs: what was done, when and by whom, and the duration when you use the timer;
  • daily and weekly plan, available time for each day of the week, the day’s adjustments and the day’s energy level (low, normal or high);
  • Home progress: XP, streak, Boxes, coins, Collection pieces, furniture from the Shop, your property and where everything is placed.
• Purpose: to build and adjust your plan, record what has been done, store and synchronize your Home, share it with the people you live with and deliver Boxes and coins.
• Legal basis: performance of a contract (Brazilian General Data Protection Law, LGPD, art. 7, V).

4.2 Your profile in the Home

• What: name or nickname (optional: you can skip it), color, avatar (the appearance choices you make in the app) and role in the Home (owner or member).
• Purpose: to show the people you share your Home with who did what.
• Legal basis: performance of a contract (art. 7, V).

4.3 Account data

• What:
  • the account identifier, created by the authentication service, including for the provisional account;
  • the sign-in method: provisional account, email with a code or link, email with a password, Apple or Google;
  • your email address, when you save your account with it or when the sign-in provider shares it;
  • your password, if you create an account with email and password. It is handled by the authentication service and is not stored in the Home tables;
  • the 6-digit access codes sent by email.
• Apple: the app does not ask Apple for your name or email. Apple shares an identifier for your Apple account with our authentication service and may share an email address, which may be your own or a private relay address created by Apple.
• Google: signing in opens a Google page, which shares with our authentication service, according to Google’s consent screen, your email address, an identifier for your Google account and basic profile information, such as your name and photo.
• Purpose: to create and protect your account, recover your Home on another device and prevent two Homes from being mixed up.
• Legal basis: performance of a contract (art. 7, V).

4.4 Data about other people that you provide

• What: names or nicknames of household members who do not use the app, and the email address of anyone you invite (optional). The invitation email includes the Home’s name, the invited person’s name (if provided), a link and a code.
• Purpose: to organize how the household is shared and to send the invitation at your request.
• Legal basis: legitimate interest (art. 7, IX).
• Please note: only provide another person’s data if they agree. For children, use a nickname.

4.5 Technical access and security data

• What:
  • IP address, date and time of connections and device or browser information, recorded by the server and by the authentication service;
  • attempt counters, such as the limits for creating provisional accounts and sending invitations.
• Purpose: to keep the service secure, prevent fraud and abuse, investigate failures and comply with the law.
• Legal basis:
  • legitimate interest (art. 7, IX);
  • compliance with a legal obligation (art. 7, II), including the retention of access logs required by the Brazilian Internet Civil Framework (Marco Civil da Internet, Law No. 12,965/2014, art. 15), when it applies.

4.6 Usage data (optional)

• What:
  • the screens and actions you use, always as categories, counts and durations. Examples: setup step viewed, task logged, category of a shopping item added, Box opened;
  • app version, platform (iOS or Android) and environment;
  • random identifiers created by the app: for measurement, installation and session;
  • a Home code generated by a hash function, used to count Homes without revealing their names.
• What is never sent: names, email addresses, task titles and notes, list contents, the Home’s name, invitation links and codes, passwords and tokens.
• Purpose: to understand how the app is used and improve the product.
• Legal basis: consent (art. 7, I). You can give and withdraw it in Settings (section 12).

4.7 Diagnostics (optional)

• What:
  • the error code, and the screen and operation where it happened;
  • the location in the app’s code (file, line and column);
  • the app version and environment.
• Performance measurement: with diagnostics on, the app may also measure how long some screens take to load, in a 10% sample.
• What is never sent: screenshots, session recordings, screen structure, attachments, error messages or your content.
• Purpose: to find and fix bugs.
• Legal basis: consent (art. 7, I).

4.8 Record of deletion requests

• What: the request number, a count of what was deleted and the date.
  • We do not keep your name, email address or the Home’s identifier.
  • To reject repeated or swapped requests, we keep a cryptographic fingerprint (hash) of the request together with the account.
• Purpose: to prove that the request was fulfilled.
• Legal basis: regular exercise of rights (art. 7, VI) and legitimate interest (art. 7, IX).

4.9 Paid plan

• Today, the app charges nothing and does not process payment data.
• We only store the Home’s plan (free or paid) and, if applicable, the dates of a free welcome period.
• If a paid plan is offered, payment will be made through the App Store or Google Play, which handle the payment data. We will only receive the subscription status, and this policy will be updated beforehand to say who handles it.
• Legal basis: performance of a contract (art. 7, V).

4.10 The website and contacting us

• Website visits. The casaloopapp.com website counts visits without cookies and without storing anything in your browser. For each page viewed, each tap on the main buttons (the store buttons, the guide buttons, the beta buttons and the language switch), each use of the demo and each step of the beta form (starting, sending, confirming and leaving the list, without your email or anything you type), it records:
  • the page, without the rest of the address (only campaign parameters, if they are in the link), and its language;
  • where you came from: only the site’s address (such as “google.com”) or, on Android, the name of the app that opened the link;
  • the browser and operating system, with their versions, the type of device (phone, tablet or computer), the browser language and the time zone.
• The daily code. Your IP address and your browser’s identification (the “user agent”) pass through our server to PostHog only to form a daily code, which counts visits without saying who visited. PostHog deletes both before storing the visit, and we do not store the IP address. If your browser sends the Global Privacy Control signal, the website measures nothing.
• Messages. When you write to our email, we process your email address and what you write, to reply and handle your request.
• Legal basis: legitimate interest (art. 7, IX) for visits; for messages, handling your request and, when it is a request about your data, compliance with a legal obligation (art. 7, II).

4.11 The website’s beta list

On the website’s beta page, you can join a list to get the beta invite and the Casaloop launch announcement.

• What we keep: your email address, the phone you chose (iPhone, Android or both), the page’s language, and the date and version of this policy when you gave your consent.
• What for: only to send you the beta invite and the launch announcement. No advertising and no other emails. The list is not linked to your use of the app or to the website’s measurement.
• Legal basis: your consent (art. 7, I), given by checking the box on the form and confirmed through the link in the email.
• Who handles it:
  • Cloudflare keeps the list in a database in the United States and runs the bot check (Turnstile). The check looks at browser signals when you send the form and does not go into the list;
  • Resend sends the emails from the Brazil (São Paulo) region. The company is based in the United States.
• How long it is kept:
  • without confirmation, the email address is deleted within 7 days;
  • once confirmed, it is kept until you leave the list or until 90 days after the launch email, whichever comes first.
• How to leave: the “Leave the list” link, in every email from the list, deletes your address right away. You can also ask through the contact in section 18.

4.12 App updates

To deliver Casaloop fixes without waiting for a new store version, the app uses Expo’s EAS Update service (650 Industries, Inc.). Each time the app opens, it checks this service.

• What:
  • the device’s IP address;
  • a random installation identifier, created by the app and not linked to your name, email address or account;
  • the technical details of the request: the platform (iOS or Android), the app version, the update channel and the identifier of the update in use.
• What is never sent: anything from your Home, your profile or your account.
• Purpose: to deliver the right update to your device and for Expo’s delivery statistics.
• Consent: this does not depend on the usage data and diagnostics switches (section 12). It is what allows the app to receive fixes.
• Legal basis: performance of a contract (art. 7, V).
• Where it is kept: with Expo, in the United States. Expo’s privacy policy is at expo.dev/privacy.

5. What stays on your device only

The following data is not sent to our server:

• Reminders and notifications. They are created and scheduled on the device and may show the task name on the lock screen.
• What the app learns from what you check off (task times and durations). Only the changes you accept go to your Home, and you can tell the app to forget everything in Settings.
• Drafts and preferences: the initial setup draft (including the date you accepted the Terms of Use), and your theme, motion and language preferences.
• Session and invitations: your sign-in session, stored in the app’s storage, and invitation codes you receive, stored in the system’s secure storage.
• Local backups of your Home, created when you switch accounts or restore another Home.
• The local log of usage events.
  • Without your consent, it never leaves the device, not even later.
  • With your consent, events wait in a queue until they are sent. Less important events are discarded if they go 7 days without being sent.
  • The local log is cleared after 30 days.
• The export file, generated on the device when you request it (section 11).

Some Home preferences, such as the weekly progress goal, are synchronized with the server so they apply on every device.

6. What we do not collect

• Location. The app only stores the Home’s time zone.
• Device contacts. Invitations are sent through the system share sheet or to an email address you type in.
• Camera, photos, videos and microphone. The note-taking screen turns the text you type into items, within the app itself.
• Advertising identifier, cross-app tracking and data from other apps.
• Payment data.
• Artificial intelligence. No data is sent to third-party AI models.
  • The daily plan and the reading of what you note down are done by rules within the app.
  • Box draws use a secure random number generator on the server.

Be careful with sensitive information. The app does not ask for health, religious or other sensitive data. Avoid adding it to notes and lists, because the people you share your Home with can access them.

7. In a shared Home, who sees what

Anyone with an account in the same Home may access the following data in it:

• each member’s name or nickname, color and avatar;
• routines, tasks and notes, and shopping lists;
• task logs, including who did each task;
• plans, available time and the day’s energy level;
• Home progress.

Not everything appears on every screen, but the technical access of Home members covers all of this data.

In addition:

• An email address entered in an invitation appears in the Home’s invitation list for as long as the invitation exists.
• A provisional account cannot invite anyone: to share a Home, you need to save your account.

8. Who we share data with

We do not sell, rent or use your data for advertising.

Service providers that process data on our behalf (processors):

Other cases:

• Services you choose to use: Apple and Google, when you sign in with them. They follow their own policies.
• App stores: the App Store and Google Play distribute the app and, if there is a paid plan, will handle billing. They follow their own policies.
• The people you share your Home with (section 7).
• Authorities, when required by law or a court order.
• Reorganizations: if Casaloop passes to another person or company, the data may pass to the successor, which will be bound by this policy. We will let you know beforehand in the app.

9. International transfers

Some providers store or process data outside Brazil, or are companies based outside Brazil:

• PostHog: United States;
• Expo (app updates): United States;
• Sentry: European Union (Germany);
• Supabase and Resend: the data stays in Brazil, but the companies are based in the United States and may access it from there to keep the service running;
• Cloudflare: global network; the website’s beta list is kept in a database in the United States (section 4.11);
• Apple and Google: when you sign in with them, and Apple also for our contact email.

We carry out these transfers on the basis of art. 33 of the LGPD:

• for the services the app and our support need, because the transfer is necessary to perform the contract with you (art. 33, IX, together with art. 7, V);
• for usage data and diagnostics, with the consent you give when you turn the switches on (section 12); for the website’s beta list, with the consent you give on the form (section 4.11);
• and, where the provider offers them, with the standard contractual clauses approved by the ANPD (Resolution CD/ANPD No. 19/2024) or other safeguards under art. 33.

10. How long we keep data

After these periods, we delete the data or make it anonymous, unless the law allows us to keep it longer (LGPD, art. 16).

11. Your rights

The LGPD (art. 18) gives you the right to:

• confirm whether we process your data and access it;
• correct incomplete, inaccurate or outdated data. Most of it can be corrected in the app itself;
• request anonymization, blocking or deletion of data that is unnecessary, excessive or processed unlawfully;
• portability. In Settings › Privacy and data › Export my data, the app generates a file with the Home data stored on the device, without passwords or tokens;
• delete data processed on the basis of your consent;
• know who we share your data with (section 8);
• know that you may refuse consent, and what happens if you do: nothing changes in how you use the app;
• withdraw your consent (section 12);
• object to processing carried out without consent, if it does not comply with the law;
• request a review of decisions made solely by automated processing that affect your interests (art. 20). The daily plan is a suggestion, and you can always adjust it.

How to make a request:

• Write to support@casaloopapp.com.
• We may ask you to confirm that the account is yours.
• We reply within 15 days.
• You may also file a petition with the Brazilian Data Protection Authority (ANPD).

12. Consent: how to change your choice

• Where to choose: during the initial setup, when Loopy asks whether it can log app usage and errors, or in Settings › Data collection.
• The two switches: “Usage data” and “Diagnostics” (in the initial setup, “App usage” and “Error reports”). They are independent, and neither is on by default.
• If you turn off “Usage data”:
  • the app stops sending it;
  • it discards anything still in the queue;
  • if you turn it on again, it uses a new measurement identifier.
• The installation identifier only changes if you clear the app’s data or reinstall it.
• Data already sent is kept until the end of the period in section 10.
  • This data does not include your name or email address.
  • To find it at your request, we may need data from your device, such as the installation identifier. If we cannot securely link the data to you, we will explain this in our reply.

13. Deleting your account

• In the app: Settings › Your account › Delete my account.
• Without the app: on the page casaloopapp.com/en/delete-account.
• A Home that is only yours: we delete the entire Home.
• A shared Home:
  • we delete your personal data, and your profile is renamed “Morador removido” (“removed member”);
  • the shared history stays with the people who remain in the Home;
  • if you were the owner, the Home passes to the longest-standing member.
• Details: the deletion page explains what is deleted, what is kept and how long it takes.

Only clearing this device: Settings › Privacy and data › Erase data on this phone. This does not delete your account on the server.

14. Security

Some of the measures we use:

• Encrypted connection: everything sent to the server and to providers uses HTTPS.
• Access by Home: each person can only access the Homes they belong to.
• Administrative keys are kept only on the server, never in the app.
• Filtered diagnostics: they go through a closed list of fields before leaving the device.
• Invitations: codes you receive are kept in the system’s secure storage.

No measure is foolproof. If a security incident occurs that may cause significant risk or harm, we will notify the ANPD and the people affected, as required by the LGPD (art. 48).

15. Children and teenagers

• Casaloop is not made for children. The minimum age is 13 (16 in the European Economic Area and the United Kingdom), as the app says on its first screen.
• If you are under 18, use the app with the permission of a parent or guardian.
• If we learn that someone under the minimum age has created an account, we will delete that account.
• If you add a child as a household member without an account, you are responsible for that information. Use a nickname.

16. Notifications

• Reminders are local: the app schedules them on the device itself.
• The app only asks the system for permission after explaining what it is for.
• To turn them off, use Settings › Notifications or your system settings.

17. Changes to this policy

• When this policy changes, we update the date at the top.
• If the change is significant, we will let you know in the app at least 30 days before it takes effect.
• If the change requires your consent, we will ask for it again.

18. Contact us

• Privacy and requests about your data: support@casaloopapp.com.
• Responsible person: Victor Hugo Pedroza.