This policy explains how MyDailyAlerts handles your personal data, in line with Brazil's General Data Protection Law (Law 13,709/2018, LGPD). The short version: we collect only what is needed to send your alerts on WhatsApp, we do not sell your data, we do not use it for advertising, and when you delete your account we delete everything.
1. Who we are
MyDailyAlerts (mydailyalerts.app) is operated by EDUARDO DE SOUZA, the controller of your personal data.
For any privacy matter, including reaching our data protection officer, write to [email protected].
2. Data we collect
- Account: name, email, password (stored only as a hash, never in plain text), language and time zone.
- WhatsApp: the phone number you enter and confirm with a code. That is where your alerts go.
- Your alerts: title, notes, links, times, lead times, recurrence and the preferences you set in the panel, such as the daily summary and nagging alerts.
- Google Calendar, if you connect it: the access tokens (stored encrypted), the list of your calendars and a copy of the events of the next 31 days from the calendars you pick: title, description, link, start, end and reminders. If you sign in with Google, we also receive your name and email.
- Sends: a record of each scheduled and sent message (time and status), so alerts are not repeated and the panel can show your history.
- Payments: your plan, amounts, invoice status and Stripe identifiers. Your card is entered on Stripe: we never see or store its number.
- Technical data: IP address and request data, used for security and rate limiting, and a log of the actions taken in the account.
- Site visits, if you accept: pages viewed, where the visit came from, device type, browser and approximate region, measured by Google Analytics. We do not link this data to your account.
3. What we use it for, and the legal basis
- Providing the service: scheduling and sending your alerts, the daily summary and nagging reminders, and showing it all in the panel. Basis: performance of a contract (art. 7, V).
- Verifying and protecting the account: confirming email and phone, preventing abuse and fraud, rate limiting. Basis: legitimate interest (art. 7, IX) and performance of a contract.
- Billing: processing subscriptions, issuing invoices and meeting tax obligations. Basis: performance of a contract and legal obligation (art. 7, II and V).
- Service emails: verification codes, end-of-trial and billing notices. We do not send marketing without your consent.
- Measuring site use: counting visits and understanding where they come from, with Google Analytics. Basis: consent (art. 7, I), which you can withdraw at any time.
We do not sell your data, use it for advertising or build profiles about you.
4. Google data
Access to your Google Calendar is read only (calendar.readonly scope). MyDailyAlerts never creates, edits or deletes anything in your calendar. The events it reads are used only to send the alerts and daily summary you set up.
MyDailyAlerts' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we do not transfer this data to third parties except to provide the service or as required by law; we do not use it for advertising; we do not use it to train artificial intelligence models; and no person reads it, except with your consent, for security or as required by law.
You can disconnect Google at any time in the panel or in your Google Account permissions. Once disconnected, we stop reading your calendar.
6. How long we keep it
We keep your data while your account exists. The account's action log is deleted automatically after 365 days.
When you delete your account in My account, confirmed with a code sent to your email, we immediately delete your alerts, the calendar copy, sends, codes, sessions, subscription history and action log, and revoke the Google access. Stripe may keep transaction records for as long as the law requires of it.
7. Your rights
Under the LGPD (art. 18), you may ask at any time for:
- confirmation that we process your data, and access to it;
- correction of incomplete or wrong data (most of which you edit yourself in the panel);
- deletion of your data, which you do yourself in My account;
- portability of your data to another provider;
- information about who we share it with;
- withdrawal of consent, such as disconnecting Google.
To exercise a right, write to [email protected]. We answer within 15 days. You may also complain to Brazil's National Data Protection Authority (ANPD).
8. Security
We use encrypted connections (HTTPS), passwords stored as hashes, encrypted Google tokens, verification codes that expire in minutes and restricted server access. No system is 100% secure: if an incident may put you at risk, we will tell you and the ANPD, as the law requires.
10. Minors
MyDailyAlerts is meant for people aged 18 or over. We do not knowingly collect data from minors; if it happens, we delete it as soon as we learn of it.
11. Changes to this policy
We may update this policy. The date at the top shows the version in force, and relevant changes are announced by email before they apply.