Privacy Policy
Version of 2026-10-13c
1. Who handles your data
FotoDiária is operated by Felipe Silva, an individual based in Brazil, who is the controller of the data described here. Contact for any privacy matter, including your legal rights: suportenuvetali@gmail.com.
2. What we keep
From your Google or Apple account, if you sign in: name, email and account identifier. What you add: albums, folders, entries, notes, comments, photos, videos and documents, and the messages and images you send to support through the app. From moderation: the reports you make (which content, the reason and any text you write) and the list of people you blocked; the person reported or blocked is not told who did it. From sharing: who takes part in each album, permissions and requests to join. From usage: storage used, plan and expiry date, language, device identifier for sending notifications, and technical logs needed for security and fixing errors, including the check, done by the device system, that requests come from the genuine app. From automatic import: the app reads from the device library the date and place where each chosen photo or video was taken, to build the entries by day. The place is turned into a city name, with the state abbreviation, by the address service of the device system (Apple or Google); we keep only that name in the entry, never the coordinates, and it is shown to every participant of the album. We do not track your location. We do not sell your data and do not use your content for advertising.
3. What stays on the device only
"On this device only" albums, reminders and the device lock setting (fingerprint, face or screen passcode) are kept only on your phone and are not sent to our servers. If you use the app without signing in, you have no account and no content on our servers; the app still makes technical connections, such as checking for updates. After you sign in, albums that were on the device stay on the device unless you send them to the cloud.
4. How we use it
To create and maintain your account, store and show your content to you and to those you authorize, manage storage and plans, send notifications about your albums, prevent abuse and fraud, answer support requests and meet legal obligations. The legal bases are performance of the contract with you, compliance with legal obligations, our legitimate interest in keeping the service secure and, where applicable, your consent.
5. Who can see your content
Only you and the people you accepted into each album. There is no public page, search or feed of albums. Files are kept in private storage and open only through temporary links generated for album participants. The FotoDiária team only accesses content when needed to handle a support request from you, investigate abuse or comply with a legal order.
6. Companies that provide services to us
To operate, FotoDiária uses third-party services that process data on our behalf: Google (Firebase) for sign-in, database and server; Cloudflare (R2) for file storage; Expo for sending notifications; Apple and Google for sign-in and subscriptions; and RevenueCat for subscription management. Some of these services keep data outside Brazil, including in the United States, which is an international data transfer.
7. Security and risks
We use private storage, encrypted connections, temporary links and permission checks on the server. Even so, no system is completely secure: there is a risk of unauthorized access, breach, loss or unavailability of data. Consider this before storing sensitive documents and images, and keep your own copies of anything important. If a security incident occurs that may cause significant risk or harm, we will notify affected users and the competent authority as the law requires.
8. How long we keep it
For as long as the account exists. What is deleted (files, entries, albums, folders or the account) leaves the app right away and stays in a safety copy for up to 30 days, in case of accidental deletion; it is then permanently erased. The same applies to cloud albums removed when a paid plan ends. Records required by law may be kept for the legal period.
9. Your rights
You may ask for confirmation of and access to your data, correction, portability, deletion, information about who we share it with, and withdrawal of consent. You can delete your account in Settings > Delete account and download your files in the app. For other requests, write to suportenuvetali@gmail.com. Depending on where you live, you may also complain to your data protection authority.
10. Images of other people and of children
The app is intended for adults. When you keep images or documents of other people, you are responsible for having permission to do so. When recording children, do so as their parent or guardian and invite only people you trust.
11. Changes to this policy
We may update this policy. When a change is significant, the app will notify you and ask you to accept again.