Privacy Policy

This policy explains how Egoapp handles your personal data. The data controller is Abraao Lincoln Alves de Alexandria, Brazilian business registration CNPJ 46.920.206/0001-30, Fortaleza, Ceará, Brazil (brand Atração Online), and the processing follows Brazil’s General Data Protection Law (LGPD, Law 13,709/2018). Privacy contact: privacidade@atracaoonline.com.

We do not sell your data and we do not use it for advertising.

1. Data we collect and why

• Account: email, name, date of birth and your confirmation that you are 18 or older. Used to sign you in, find your sign and make sure of the minimum age (to provide the service you asked for).
• Optional: birth time and city (for the birth chart) and your focus. You can remove them in your profile.
• Readings: questions, cards, interpretations, chats with the reader, journal and favorites, kept so you can see your history.
• Photos: the photos you send for a reading. We remove their metadata (such as location), store them privately and delete them automatically after 30 days.
• Subscription: plan, status and renewal dates of your subscription, which we receive from Hotmart. Card and payment details stay with Hotmart; we never receive them.
• Time zone: your browser’s time zone, so your card of the day, horoscope and reminders follow your local day.
• Security: IP address and browser of each session, used to limit abuse and protect accounts (legitimate interest).
• Notifications: if you turn them on, your browser’s technical address for sending reminders.

We do not ask for health data. If you write about it in a question, the text is only used to answer you and, if there are signs of crisis, to show you where to find help.

2. Who we share data with

Only with the providers needed to run the app, and only what each one needs:

• WaveSpeed (artificial intelligence): receives the question, the cards, the name you entered, your sign and focus, or the photo, to generate the interpretation. We never send your email.
• Hotmart (payments): sells and bills the subscription. When you check out, Hotmart collects your name, email and payment details under its own privacy policy, and tells us your subscription status. If you start a checkout and do not finish it, Hotmart may share your email with us; we then send at most one email with an offer and delete that record within 30 days.
• Resend (email): your email address, to send sign-in codes and account messages.
• Google: if you choose to sign in with Google, we receive your email and name. Our encrypted backups are stored on Google Drive.
• Your browser’s push service (Google, Apple or Mozilla), if you turn on reminders.

These providers may be located outside your country and outside Brazil, which means an international transfer of data. We only work with providers that adopt security measures, and only to deliver the service you asked for (LGPD, art. 33). We may also share data when required by law.

3. How long we keep data

• Account, readings and journal: while your account exists.
• Photos: 30 days.
• Sign-in codes: minutes. IP and browser of each session: while the session is active (up to 30 days).
• Unfinished checkout records: up to 30 days.
• Payment and AI cost records: for the period required by tax law (up to 5 years), no longer linked to you after your account is deleted.
• Encrypted backups: 7 daily and 4 weekly copies, so up to about 35 days.

4. Your rights

At any time, you can:

• see and correct your data in your profile;
• download a copy of all your data (Settings → Download my data);
• delete your account, which permanently erases your profile, readings, chats, journal and photos and cancels your subscription;
• turn off notifications and withdraw consents;
• ask how your data is used, or complain, by writing to privacidade@atracaoonline.com.

You can also complain to Brazil’s data protection authority (ANPD, gov.br/anpd) or to the authority where you live.

5. Security

We use encrypted connections, encrypted integration keys, abuse limits, two-factor administrative access and a log of every administrative action. Each person can only access their own data — and so can the artificial intelligence. If an incident puts you at risk, we will notify you and the authorities.

6. Cookies

We only use essential cookies: your session cookie and one that protects forms against fraud. No advertising or tracking cookies.

7. Minors

Egoapp is for adults 18 and over only. Accounts of minors are deleted as soon as we identify them.

8. Changes

If this policy changes in a meaningful way, we will let you know in the app before the change takes effect.