Privacy Policy

Last updated: 2026-02-12

1. Introduction

CasaFlow ("we", "us", "our") is a household task management application developed by InovGest. This Privacy Policy explains how we collect, use, and protect your personal data when you use CasaFlow.

By creating an account or using CasaFlow, you agree to the practices described in this policy.

2. Data We Collect

Category	Data	Purpose
Identity	Email, name, avatar URL	Account management
Authentication	Password hash (bcrypt), refresh tokens	Secure login
Device	Push token, timezone, locale	Notifications & localization
House/Group	House name, members, roles, invites	Group functionality
Tasks	Titles, descriptions, assignments, completions, proof photos	Task management
Gamification	Points, streaks, achievements	Engagement features
Payments	Transaction ID, subscription status, country, currency	Subscription management
Email	Email address (for password reset)	Account recovery
Errors	Stack traces (if Sentry enabled)	Bug fixing

We do NOT collect: GPS location, persistent IP addresses, device identifiers, advertising IDs, or behavioral analytics.

3. How We Use Your Data

• Account management: Create and maintain your account.
• Task assignments: Assign, track, and manage household tasks within your house.
• Notifications: Send push notifications about task assignments and reminders.
• Payments: Process and verify in-app subscriptions through Google Play or Apple App Store.
• Ads: Display non-personalized advertisements via Google AdMob (free tier only). No personal data is shared for ad targeting.
• Security: Detect and prevent unauthorized access or abuse.

4. Legal Basis for Processing

• Consent: You consent to data processing when creating your account.
• Contract performance: Processing necessary to provide the CasaFlow service you signed up for.
• Legitimate interest: Security measures, fraud prevention, and service improvement.

5. Data Sharing

We share data only with the following third-party services, strictly for operational purposes:

• Expo Push Service — Push notification delivery (push tokens only).
• Google Play / Apple App Store — Payment processing and subscription verification (transaction IDs only).
• Resend — Transactional emails for password reset (email address only).
• Google AdMob — Non-personalized ad display (no personal data shared).
• Sentry — Error tracking, if enabled (stack traces, no personal data).

We do not sell, rent, or trade your personal data to any third party.

6. Data Retention

• Account data is retained while your account is active.
• Refresh tokens expire automatically (7 days).
• Password reset tokens expire after 1 hour.
• You can delete your account at any time from the app (Profile > Delete Account). All personal data is permanently removed upon deletion.

7. Your Rights

Regardless of your location, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Delete your account and all associated data.
• Export your data (data portability).
• Withdraw consent at any time by deleting your account.

To exercise these rights, contact us at contato@inovgest.com.br or use the in-app account deletion feature.

8. Children's Privacy

CasaFlow is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly.

9. Data Security

We implement appropriate technical measures to protect your data:

• All communications encrypted via HTTPS/TLS.
• Passwords hashed with bcrypt (never stored in plain text).
• Authentication via JWT with automatic token rotation.
• Role-based access control within houses.
• Sensitive tokens stored in device secure storage (not plain storage).

10. International Data Transfers

Your data is processed on servers located in the United States (via Neon and Railway). We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. Continued use of CasaFlow after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or your data, contact us:

• Entity: InovGest
• Email: contato@inovgest.com.br