Privacy at Pitanga

Who looks after the data

Pitanga is built and run by Rodrigo Barbosa, an individual, who is responsible for the data described here.

What the app keeps

Your account: username, the name you choose to show, your password (stored only as a hash, never readable), your language, a profile picture if you add one, and an email address if you add one to recover your password.

What you create: messages, photos, voice notes, dates, notes, letters, game answers, your picks on the menu and your own log of how you are.

What it needs to work: your device's notification address (if you turn notifications on) and the reports you send through Feedback, with a screenshot only if you attach one.

Numbers about accounts, never about the couple: when an account was created, when a partner joined, when a space was opened or closed. The app does not measure how often you go out, what you pick or how you react.

Waitlist (mypitanga.app)

If you joined the waitlist, we keep only your email address, the language you read the page in, and the dates you signed up and confirmed. Nothing else: no name, no account, no record of where you came from.

It is used for one thing: emailing you when Pitanga opens. The address is only added once you click the confirmation link; without that, it deletes itself within 8 days.

Every waitlist email has a link to leave, which deletes your address at once. You can also ask for deletion through the contact at the end of this page.

Who sees what

Your partner sees what you send or share. Your picks on the menu (yes, maybe, no), your private notes and your own log are never shown to the other person; the app only shows where you both agree.

Nobody outside your space sees anything. The app's administrator manages accounts but has no way to read anybody's content or act as anybody.

How it is protected

Messages, photos, voice notes, notes and date texts are stored encrypted (AES-256). This is not end-to-end encryption: the server can decrypt them to show them to you.

Every connection to the app uses HTTPS. The servers are on Google Cloud in the United States, and backups are kept for 30 days.

Who the data is shared with

Google Cloud, which hosts the server and the backups.

Resend, which delivers the app's emails (email confirmation, password recovery and the waitlist): it receives that email's address and text, nothing else.

Google Gemini, only when you use the AI helper to write a card: the short description you typed is sent, and nothing is kept afterwards.

Your device's notification service (Google or Apple) receives a discreet notice such as "New message", with no name, text or picture.

Nothing is sold or handed over for advertising.

How long

For as long as the account exists. When you delete your account, what is yours is deleted at once; backups stop holding it within 30 days.

Some things that belong to both of you stay with your partner: the date of an evening you shared (without your note or photo), the cards in your menu and the lists you share.

Your rights

You can download a copy of everything the app keeps about you (Settings → Download your data) and delete your account at any time (see the Delete account page).

In Brazil, the LGPD also gives you access, correction, portability, information on who your data is shared with, and the right to withdraw consent.

In Canada, PIPEDA (and, in Quebec, Law 25) gives you access to and correction of your data and the right to withdraw consent.

In the United States, state privacy laws (such as California's) give you the right to know what is collected, to ask for deletion, and not to have your data sold — and Pitanga sells nobody's data.

In Europe, the GDPR gives similar rights. For any request, use the contact at the end of this page; you will hear back within 30 days.

Age

Pitanga is for people 18 and over.

Changes

If this policy changes, the date at the top changes with it, and important changes are announced inside the app.

Contact

Use the Feedback tab on the right edge of any screen in the app.