Privacy Policy
Last updated: August 17, 2026
1. Introduction and Data Controller
This Privacy Policy describes how Tervior Technologies Ltda. (CNPJ 65.901.297/0001-01), the data controller for personal data processed by Veganiza na Panela ("we", "Tervior"), collects, uses, shares, and protects personal data, in accordance with Brazil's General Data Protection Law (Lei nº 13.709/2018 — LGPD). Our Data Protection Officer (DPO) can be reached at dpo@tervior.com.
2. Data We Collect
- Account data: name, email, account identifier, authentication method (Google or email/password via Firebase Authentication).
- Usage data: veganized recipes, messages exchanged in the Panela IA chat, dietary preferences, favorited recipes, generated shopping lists, challenge participation.
- Images: fridge/countertop photos submitted for ingredient identification.
- Subscription data: plan status (free/pro), transaction history processed by payment platforms (Apple, Google, Mercado Pago) — we do not store full credit card data.
- Referral data: if you arrived via a partner referral, we record the attribution (partner code, source, date) via Branch.io.
- Technical data: device model/operating system, push notification identifiers (Firebase Cloud Messaging), error and performance logs.
We do not intentionally request sensitive data (health, biometric, banking data). If you voluntarily share dietary restrictions or allergies in the chat, that data is used only to personalize the generated recipe.
3. How We Use Data (Purposes)
- operating and maintaining your account and the app's functionality;
- generating vegan recipes and identifying ingredients via AI;
- processing subscriptions and unlocking Pro access;
- calculating Partner Program commissions based on subscription events;
- sending notifications related to your use of the Service;
- responding to support requests;
- preventing fraud and abuse;
- complying with legal and regulatory obligations;
- improving security, performance, and recommendation quality.
4. Legal Bases (LGPD, Art. 7)
- performance of a contract (providing the Service you signed up for);
- consent (e.g., push notifications, where applicable);
- compliance with a legal or regulatory obligation (e.g., tax records);
- legitimate interest (e.g., fraud prevention, product improvement), always balanced against your fundamental rights and freedoms.
5. Artificial Intelligence and Image Processing
Recipes, fridge/countertop photos, and chat messages are processed through a Provider Gateway that lets us use different AI providers (e.g., Anthropic, Google Vertex AI) without exposing your information to them beyond what's necessary for the requested feature. Photos submitted for ingredient identification are not retained beyond what is necessary to process the request — we recommend you avoid submitting photos containing documents, faces, or unnecessary sensitive data. AI responses may contain errors — see Terms of Use, Section 4.
6. Sharing with Third Parties
We share data, to the extent necessary, with:
- Firebase / Google Cloud — authentication, database, file storage, push notifications, backend hosting;
- Artificial Intelligence providers (e.g., Anthropic, Google Vertex AI) — processing of recipes, photos, and chat;
- RevenueCat — subscription management via the Apple App Store / Google Play;
- Apple and Google — in-app subscription payment processing;
- Mercado Pago — website subscription payment processing;
- Stripe (Stripe Connect) — processing and payout of marketplace payments, where applicable;
- Branch.io — partner referral attribution (deferred deep linking);
- public authorities, when required by law or court order.
We never sell your personal data to third parties.
7. International Data Transfers
Some providers listed above may process or store data outside Brazil. In those cases, we adopt the safeguards required under the LGPD (e.g., contractual clauses, provider compliance verification).
8. Retention and Deletion
We retain your data for as long as necessary for the purposes described in this Policy and applicable legal obligations (e.g., transaction tax records, kept for the period required by tax law). After account closure, personal data is deleted or anonymized, except where retention is legally required — see our Account Deletion page.
9. Information Security
We implement technical and administrative controls, including default-deny access rules in Firestore and Storage, with per-user data isolation (each account can only access its own data). Despite these efforts, no system is completely immune to security incidents.
10. Your Rights (LGPD)
You may request, at any time, by contacting dpo@tervior.com:
- confirmation that processing occurs, and access to your data;
- correction of incomplete, inaccurate, or outdated data;
- anonymization, blocking, or deletion of unnecessary data;
- data portability, where applicable;
- deletion of data processed based on consent;
- information about who we share your data with;
- withdrawal of consent.
We will respond to requests within the timeframes set out under the LGPD.
11. Account Deletion
See our dedicated Account Deletion page for the full process, timelines, and what is retained due to legal obligations.
12. Children, Family, and Vegan Kids
Veganiza na Panela is not intended for children to create accounts — accounts are created and managed by an adult legal guardian. The Family and Vegan Kids sections offer curated content for family consumption under the account holder's supervision; we do not collect data directly from children through these sections. If we identify processing of a child's data without adequate guardian consent, deletion may be requested at dpo@tervior.com.
14. Changes to This Policy
We may update this Policy periodically. Material changes will be communicated via the app, website, or your registered email.
15. Contact / Data Protection Officer (DPO)
Tervior Technologies Ltda. — All rights reserved.