Privacy policy

1. Introduction

Welcome to Mistura Certa. This Privacy Policy describes what information is processed when you use our mobile app, why, and what choices you have.

Starting with version 2.0, Mistura Certa works without an account or sign-up, and your content is stored on your device. Section 11 explains what applies to people who used earlier versions.

By using Mistura Certa, you acknowledge that you are aware of this policy.

2. Information we process

2.1 Information that stays on your device

• User content: recipes, photos, ingredients and notes you add
• Organization: favorites, meal planning and shopping list
• Progress: streak, coins, achievements and items
• Preferences: language, theme, reminders and privacy choices

This information is not sent to us. We run no server of our own and do not receive this content.

2.2 Information collected automatically

• Ad data: device advertising ID, IP address, approximate location derived from the IP, device information and ad interactions, collected by Google to serve ads
• Usage data: screens and features used, in aggregate, only if you accept usage measurement
• Device information: model, operating system and app version
• Error and performance reports: technical data about the failure, such as device model, Android version, app version and the error log, sent to Sentry without your name, email, IP address or any other data that identifies you

The app does not collect your precise location and does not access your contacts.

2.3 Third-party services

We use the following services, which may collect information:

• Google AdMob: ads in the free plan
• Google Analytics for Firebase: usage measurement, only with your consent
• Google Play Billing: purchase and billing of the Premium subscription
• Sentry: error and performance reports, without data that identifies you
• Google Drive and Microsoft OneDrive: backup destination, only if you choose to use them

3. How we use your information

We use the information to:

• Provide and improve the app
• Show ads in the free plan
• Personalize ads, if you allow it
• Send the reminders you turn on
• Check whether the Premium subscription is active
• Analyze app usage for improvements, if you allow it
• Identify and fix app failures
• Detect and prevent fraud
• Comply with legal and regulatory obligations

4. Sharing of information

We do not sell your personal data. Sharing only happens:

• With service providers: Google (ads, usage measurement and subscription) and Sentry (error and performance reports)
• With the cloud service you choose: Google Drive or Microsoft OneDrive, when you back up
• By legal obligation: when required by law or court order
• With your consent: when you explicitly authorize it

5. Storage and security

5.1 Where data is kept

• Your content is stored on the device itself
• We do not keep a copy of your content on servers of ours
• Data processed by Google for ads and measurement is kept on Google servers, in Brazil and/or abroad
• Error and performance reports are kept on Sentry servers, outside Brazil

5.2 Backup

• Backup is optional and started by you
• You choose the destination: a file on the device, Google Drive or Microsoft OneDrive
• The file goes straight from the device to your own account on those services
• We do not receive or keep a copy of the backup
• Automatic backup, available in Premium, uses the same destination you chose

5.3 Security

• Communication with third-party services over an encrypted connection (HTTPS/TLS)
• Data protected by the app’s private storage on Android
• Protecting the device (screen lock and updates) is the user’s responsibility

5.4 Data retention

Your content stays on the device until you delete it or uninstall the app. Data processed by Google and by Sentry follows the retention periods of each provider.

6. Your rights

Under the LGPD and the GDPR, you have the right to:

• Access: see your data
• Correction: fix incorrect data
• Deletion: erase your data
• Portability: export your data
• Objection: object to processing
• Withdrawal: withdraw consent at any time

Since the content lives on your device, you exercise these rights yourself in the app:

• Settings > Your data > Export my data
• Settings > Your data > Delete my data from this device
• Settings > Privacy, for personalized ads and usage measurement

For other requests, use the contact in section 15.

7. Ads and consent

• The free plan shows ads served by Google AdMob
• On first use, the app asks whether you accept personalized ads and usage measurement
• If you decline personalized ads, you will still see ads, but generic ones
• No ad is loaded before you answer
• You can change your choices at any time in Settings > Privacy
• You can reset or delete the advertising ID in Android settings
• The Premium subscription removes ads

Learn how Google uses this data at policies.google.com/technologies/partner-sites.

8. Subscriptions and payments

8.1 Processing

• Payments processed through Google Play Billing
• We do not store credit card data
• Google processes and stores payment information
• The app asks Google Play whether the subscription is active and keeps that information on the device

8.2 Renewal and cancellation

• Subscriptions renew automatically
• Cancel at any time through Google Play
• Refunds follow the Google Play policy

9. Children’s privacy

Mistura Certa is not intended for children under 13. If we find data that was collected improperly, it will be deleted.

10. Local storage and similar technologies

The app does not use traditional cookies, but it does use:

• Local storage: to keep your content and preferences on the device
• Advertising ID: used by Google for ads, according to your choice
• Firebase Analytics identifiers: used for usage measurement, only with your consent

Reminders are notifications scheduled on the device itself, with no server. The app only asks for notification permission when you decide to turn reminders on.

11. Earlier versions of the app

Versions before 2.0 used a user account, sign-in and server storage (Firebase). For those versions:

• Sign-up data (name, email and encrypted password), profile and published content were processed
• Version 2.0 no longer uses an account or a server, and data from old accounts is not carried over to it
• Data from old accounts has already been deleted from the servers

For questions about this data, use the contact in section 15.

12. Changes to this policy

This Policy may be updated from time to time. Relevant changes will be announced in the app, with a notice on the home screen.

We recommend reviewing this page regularly.

13. International transfers

When the providers listed here transfer data internationally, standard contractual clauses and appropriate technical and organizational measures are adopted, as required by article 33 of the LGPD.

14. Links to external sites

The app and its ads may contain links to external sites. We are not responsible for the privacy practices of those sites. We recommend reading their policies.

15. Contact

For questions about this Privacy Policy:

• Email: privacidade@auracubicdigital.com.br
• Address: Rubinéia, SP, Brazil
• DPO (Data Protection Officer): privacidade@auracubicdigital.com.br

16. Legal basis for processing (LGPD)

Personal data processing by Mistura Certa follows the legal bases set out in the Brazilian General Data Protection Law (Law 13,709/2018), according to the specific purpose of each operation, including:

• Performance of a contract: to provide and maintain the app and the subscription
• Consent: for personalized ads and usage measurement
• Legitimate interest: to show non-personalized ads, identify failures and keep the app secure and performant
• Legal obligation: when processing is required by law or a competent authority

17. Compliance

This policy was written to comply with:

• Brazilian General Data Protection Law (LGPD, Brazil)
• General Data Protection Regulation (GDPR, Europe)
• California Consumer Privacy Act (CCPA, USA)
• Google Play Store policies

This Policy reflects the commitment of Mistura Certa to transparency, security and respect for user privacy.