Privacy Policy

We collect only the data strictly necessary to provide our services:

Event organizers

• Name and email address (via direct registration, Google Sign-In or Apple Sign-In)
• Profile photo (when provided by the login provider)
• Event data: name, date, chosen settings

Guests

• Your name and session and guest identifiers linked to the event, for attribution and returning to it. An account is not required; if you join while signed in, your participation may be linked to your account

Content

• Photos, videos and messages sent during the event

Technical data (collected automatically)

• Device type, operating system and browser version
• IP address and approximate geolocation data
• Usage data: pages visited, time spent, interactions

We share data only with service providers essential to the operation of the service:

• Supabase (primary database in São Paulo, Brazil): database, authentication and file storage. Encryption at rest and in transit.
• Apple: iPhone app purchases through the App Store.
• Stripe: website payments. Receives the information needed to process and confirm purchases. We do not store full card numbers.
• Vercel and Resend: website hosting and service emails.
• RevenueCat: in-app purchase verification, using customer identifiers and purchase records.
• Google Analytics, when enabled on the website: measurement of visits and usage, including conversion events.

All providers are contractually obligated to protect your data in accordance with LGPD and international security standards.

We implement technical and organizational measures to protect your data:

• All communication via HTTPS/TLS (encryption in transit)
• Database protected by Row Level Security (RLS) on Supabase
• Session data kept in local app storage or browser cookies to preserve access
• Restricted data access: authorized personnel only
• Regular and redundant backups
• Continuous threat monitoring

In the event of a security incident that may cause significant risk, we will notify affected data subjects and the ANPD as provided by the LGPD.

• Free: storage for 30 days after the event ends. Starter, Essential, Premium and VIP: storage with no expiration date. If this policy changes, we will give advance notice and make a complete download available before ending storage. Existing purchases and complimentary access will be preserved.

• Account data: kept until the user requests deletion
• Guest data: automatically removed when the event is deleted
• Payment data: kept per tax obligations (5 years)
• Access logs: kept for 6 months (Marco Civil da Internet)

After a deletion request, all personal data is removed within 30 days.

Under LGPD Art. 18, you have the right to:

• Confirmation and access: know if we process your data and access a copy
• Correction: request correction of incomplete or inaccurate data
• Deletion: request deletion of unnecessary data or data processed without legal basis
• Portability: request transfer of your data to another provider
• Consent revocation: withdraw your consent at any time
• Opposition: oppose processing based on legitimate interest

To exercise your rights, contact us: privacidade@vowlens.app

For confirmation and access through a complete statement, the deadline is up to 15 days from the request, under LGPD Art. 19.

VowLens is intended for users over 13 years old. We do not intentionally collect data from children under 13.

Underage guests may use the event camera under the responsibility of the organizer. The organizer is responsible for ensuring parental consent when necessary.

If we identify that data from a child under 13 was collected without parental consent, we will delete it immediately.

VowLens’s primary database is in São Paulo, Brazil. Other providers described in this policy may process data in other countries. Transfers must follow applicable legal requirements and contractual data protection safeguards:

• Encryption in transit and at rest
• Standard contractual clauses for data protection
• Compliance with LGPD requirements for international transfer

We may update this Privacy Policy periodically. When we make significant changes, you will be notified through the app or by email.

The "last updated" date at the top of the page will always indicate the current version. Continued use of our services after the publication of changes constitutes your acceptance of the new Policy.

For privacy questions, to exercise your rights or report security incidents:

• Data Protection Officer (DPO): privacidade@vowlens.app
• General email: contato@vowlens.app

Initial response within 1 business day. Completion follows the legal deadlines applicable to each request.

If you believe that the processing of your data violates the LGPD, you may file a complaint with Brazil's National Data Protection Authority (ANPD).