# Privacy > This policy explains what data Matilha collects, why, who we share it with and how you control all of it. Updated on October 22, 2026 Version 1.0 · effective date to be set Courtesy translation. The Portuguese version prevails. [Português](https://matilhaapp.com.br/privacidade/) **Draft under legal review.** This text is not yet a final document. This policy explains what data Matilha collects, why, who we share it with and how you control all of it. In short: we collect the minimum needed for the app to work and we do not sell your data. ## 1 What we collect **Data you provide.** Name, @handle, e-mail, photo, city, bike and what you post: routes, rides, posts, photos, comments, ratings, lists and groups. **Sign in with Apple or Google.** If you choose to sign in this way, we receive from the provider only your name, e-mail and an account identifier — never your password. With Apple, you can hide your real e-mail; in that case we receive a relay address from Apple. **Location.** Used **only while the app is open**, to center the map, sort by distance ("near me") and allow **check-in at the meeting point** (which checks that you are within 500 m of the spot, during the ride window). We do not track you in the background and we do not store a history of your movements. You can use the app with location turned off — you just lose these features. **Photos.** Gallery access only when you pick an image for a post or cover. We do not scan your camera roll. **Calendar.** When you tap "Add to calendar", we save the ride to your phone's calendar. We only write the event; we do not read your calendar. **Notifications.** If you allow it, we store your device's notification address to let you know about new rides in your groups, join requests for groups you approve, when someone tags you or comments on your post and, if you turn it on, posts from people you follow. We only notify you about content you can see. Ride reminders are scheduled on the phone itself. You can turn off each type in Settings → Notifications; when you sign out, the device stops receiving them. **Technical data.** Device model, system and app version, and error reports, to fix bugs. **App usage.** We count actions such as "ride created" or "summary sent to the group", with details like "had a route" or "how many rules", to learn what works. These counts arrive **without saying who you are**: they carry no name, account, device, text you wrote or location. ## 2 Where the data is stored Your account and what you post are stored on **servers contracted by us** (database and photo storage), so you can access them from any device and your group can see what is shared with it. Access is controlled by rules in the database itself: content from a closed group can only be read by its members. Some preferences (theme, language, recent searches) stay on your device only. Uninstalling the app deletes them. ## 3 Why we process it (legal bases) **Performance of contract** (LGPD art. 7, V): account, posting, groups, rides and lists. **Consent** (art. 7, I): location, photos and calendar — you authorize it in the system and can revoke it at any time. **Legitimate interest** (art. 7, IX): security, fraud and abuse prevention, bug fixing and anonymous usage counts. **Legal obligation** (art. 7, II): retention of access logs for 6 months (Brazilian Internet Act, art. 15). ## 4 What is public in the app Your profile, public posts, public routes and ratings can be seen by other users. Content posted inside a group as "group only" is visible only to its members. **A shared link opens the content to anyone who has the link.** Keep that in mind before sending it to a group. **We do not publish your exact location.** What shows up is what you choose: meeting point, stop or city. ## 5 Who we share it with We do not sell your data and we do not do targeted advertising. We share it only with: **Infrastructure** (Supabase) to store your account, content and photos. **Apple and Google**, only if you choose to sign in with them. When you delete your account, we revoke Matilha's access to your Apple account. **Subscription**: the purchase is made and charged by the **App Store or Google Play**; we never see your card. **RevenueCat** confirms the purchase with the store and tells us whether the subscription is active, which plan it is and until when it is valid, linked to your Matilha account. **Map providers** (Google Maps) to display the map and draw routes. **Navigation apps** (Google Maps, Waze, Apple Maps) when you tap "Start route" — from then on, their policy applies. **Error reporting tool**, with technical data and no personal content. **Authorities**, upon a court order or legal obligation. ## 6 Your rights (LGPD art. 18) You may request confirmation of processing, access, correction, anonymization, portability, deletion and withdrawal of consent. Contact our data protection officer: [privacidade@matilhaapp.com.br](mailto:privacidade@matilhaapp.com.br). We reply within 15 days. In the app itself: edit your profile in Settings → Profile, revoke permissions in your phone settings and delete your account in Settings → Delete account. Without the app: follow the steps at matilhaapp.com.br/excluir-conta. ## 7 How long we keep it For as long as your account exists. When you delete your account in the app, your personal data is deleted immediately; server backups expire within 30 days. We keep only what the law requires (access logs for 6 months). Routes, places and rides already shared with other people remain, without your name. ## 8 Security We use reasonable technical and administrative measures to protect your data. No system is 100% secure; in the event of a relevant incident, we will notify you and the ANPD (Brazilian Data Protection Authority) as required by law. ## 9 Children and teenagers Matilha is for people aged 18 and over. We do not knowingly collect data from minors. If you find an account belonging to a minor, write to [privacidade@matilhaapp.com.br](mailto:privacidade@matilhaapp.com.br) and we will delete it. ## 10 Changes to this policy We will announce relevant changes in the app before they take effect. The current version is always on this screen. ## 11 This website This website does not use cookies or third-party measurement or advertising tools. This website stores in your browser, without cookies, your language choice and, until you close the tab, the source of the campaign link you arrived through, if any. That source goes along in the Google Play link, so the store knows where the install came from; nothing else leaves your browser. Vercel, which hosts the website, receives technical access data, such as your IP address, to deliver the pages. Until Matilha reaches the App Store, iPhone users can leave their email on the waiting list. We keep the email and the language in our database (Supabase) only to tell you about the launch, and delete them after that notice. --- Source: https://matilhaapp.com.br/en/privacy/ · Matilha, the app for motorcycle riders. Routes and stops are hand-picked and can change: check the road, the weather and the opening hours of each stop before you ride.