ValeMais Privacy Policy
Version 1.0 — Last updated: August 1, 2026
This policy explains what data the ValeMais mobile app collects, what it uses that data for, who it shares it with, how long it keeps it, and how you can exercise your rights under Brazil's General Data Protection Law (Law 13.709/2018, the LGPD).
1. Who is responsible for your data
ValeMais is a product built and operated by LW Forge, which acts as the data controller under Art. 5, VI of the LGPD — meaning we decide what data is collected and why. This policy covers the ValeMais mobile app only; the lwforge.com website has its own privacy policy.
Our data protection contact, as required by Art. 41 of the LGPD, is contato@lwforge.com.
2. Data we collect
| Data | When it is collected | What for |
|---|---|---|
| Email address | At sign-up — typed by you, or provided by Google or Apple if you use social login | Identifying your account and letting you sign in |
| User identifier | Generated automatically when the account is created | Linking your saved history to your account |
| Comparison history | When you save a comparison — product, brand, price, quantity and date | Letting you look up previous comparisons |
| Crash diagnostics | Automatically, when the app hits an error | Diagnosing and fixing stability problems — with no personal identification |
3. What we do not collect
ValeMais does not collect any of the following:
- Full name, national ID or any identification document
- Geographic location
- Biometric data
- Payment data
- Sensitive data as defined in Art. 11 of the LGPD — health, religion, racial or ethnic origin, political opinion, union membership, sex life
- Your contacts, calendar or device files
The app shows no advertising, and we do not sell, rent or trade your data with third parties.
4. Purposes and legal bases
Every processing of personal data in Brazil needs a legal basis. Ours are:
| Activity | Legal basis (LGPD) |
|---|---|
| Account creation, authentication and session | Art. 7, V — performance of a contract |
| Storing your comparison history | Art. 7, V — performance of a contract; it is the core feature of the app |
| Processing photos of price tags | Art. 7, IX — legitimate interest |
| Error and stability reports | Art. 7, IX — legitimate interest in the security and quality of the service |
5. Photos of price tags
When you photograph a price tag, the image is sent to an artificial intelligence service that extracts the price and quantity written on it. About those images:
- They are not stored. They travel only during processing and are discarded as soon as the reading is returned to the app.
- They are photos of products and price tags, not of people.
- They are not linked to your profile nor used for any other purpose.
We recommend framing the price tag only. If a photo accidentally captures personal data, it is processed for the duration of the reading and discarded immediately after.
6. Who we share data with
We share data only with the service providers the app needs in order to work, which act as processors under Art. 5, VII of the LGPD:
| Company | Service | What it receives |
|---|---|---|
| Google LLC | Firebase Authentication, Firestore and Cloud Functions | Email, user identifier and comparison history |
| Google LLC | Gemini API — reading price tags | The price tag image, temporarily |
| OpenAI, Inc. | Vision API — used as a fallback when the primary service is unavailable | The price tag image, temporarily |
We may also disclose data where required by law, court order or a request from a competent authority.
7. International data transfers
The infrastructure we use is located in the United States. This means your email address and comparison history are stored outside Brazil, which constitutes an international transfer of non-sensitive personal data under Art. 33, II of the LGPD.
The transfer is covered by data processing agreements (DPAs) signed with those providers, which include contractual protection clauses equivalent to those required by Brazilian law.
8. How long we keep data
| Data | Retention |
|---|---|
| Email address and user identifier | For as long as your account exists |
| Comparison history | For as long as your account exists, capped at the 100 most recent records — older ones are discarded automatically |
| Price tag photos | Not stored |
| Crash reports | 90 days |
| Record of your acceptance of the terms | For as long as your account exists, plus 30 days after deletion, as evidence of legal compliance |
9. Your rights
Art. 18 of the LGPD grants you the rights below. To exercise any of them, write to contato@lwforge.com — we respond within 15 calendar days.
- Confirmation and access: knowing whether we process your data and obtaining a copy of it.
- Correction: fixing incomplete, inaccurate or outdated data.
- Erasure: deleting your account and everything linked to it — available directly in the app.
- Portability: receiving your history in a structured, machine-readable format.
- Information on sharing: knowing who we share your data with — described in section 6.
- Withdrawal of consent: deleting your account withdraws consent and erases the data.
- Objection: objecting to processing based on legitimate interest.
You may also file a complaint with Brazil's National Data Protection Authority (ANPD) at gov.br/anpd.
10. Deleting your account
Deletion erases your authentication account and all stored history. It is permanent and cannot be undone.
11. Security
- All communication with our servers uses HTTPS/TLS.
- Authentication tokens are kept in the operating system's secure storage — Keychain on iOS, EncryptedSharedPreferences on Android — never in ordinary storage.
- Database rules let each user access only their own documents.
- Access keys for the AI services stay on the server and are never bundled into the app.
If a security incident occurs with relevant risk to data subjects, we will notify the ANPD and the affected users within the deadlines of Art. 48 of the LGPD.
12. Minors
ValeMais is intended for people aged 13 or over. Users under 18 should use the app with the knowledge and consent of their parents or legal guardians.
Parents or guardians who identify an account created by a child under 13 may request immediate deletion of the data by writing to contato@lwforge.com.
13. Changes to this policy
We may update this policy to reflect changes in the app or in the law. The version and date at the top of the page indicate the current revision. Material changes will be communicated inside the app, and we may ask you to accept them again before continuing to use it.
14. Contact
Data protection contact: contato@lwforge.com. Response within 15 calendar days, as set out in Art. 19 of the LGPD.