Privacy Policy
Last updated: 08/25/2026
Smartizzy values your privacy. This policy describes what data we collect, why we collect it, who we share it with, how long we retain it, and what your rights are as a data subject, in accordance with Brazil's General Data Protection Law (LGPD — Law 13,709/18).
1. Who this policy applies to
This policy applies to the Smartizzy app for Android (package com.smartizzy.app) and iOS, and to the smartizzy.app website — together, "the platform". Smartizzy is a marketplace connecting clients who need a service to independent professionals in their area. There are two account types, client and professional, and some data is collected from only one of them, as indicated below. Use of the platform is restricted to people aged 18 or over.
2. Data you provide
To connect clients and professionals, we collect the following data at sign-up and during use: • Full name • Email • Phone number • Tax ID (professionals only) • Identity document (professionals only) • Address: postal code, street, number, unit, city and state • Approximate coordinates (latitude and longitude) derived from the postal code you provide, used to calculate the distance between client and professional • Profile photo • Portfolio photos (professionals only) • Photos attached to jobs (clients only) • The content of messages exchanged in the in-app chat The platform does not access your device's real-time location, does not read your contacts, and does not access your photo library unless you select an image.
3. Data collected automatically
When you use the platform, we collect technical data necessary for the service to work and stay secure: • Your account identifier and authentication records (date and time of access) • IP address and basic device data, recorded in server logs • Error and crash records, for diagnostics This data is not used for advertising. The platform shows no ads and performs no tracking for advertising purposes.
4. Purpose of processing
Data is used exclusively to: • Allow clients to post jobs and professionals to apply • Display the professional's public profile to interested clients • Enable direct communication between the parties through the in-app chat • Verify user identity and prevent fraud • Process the professional's connection fees through Stripe • Comply with legal obligations and respond to requests from authorities Smartizzy does not handle payment for the services themselves. The price of the service is agreed and paid directly between client and professional, outside the app.
5. Legal basis
Processing of your data is based on: • Performance of a contract (LGPD Art. 7, V) — to deliver the service you signed up for • Legitimate interest (LGPD Art. 7, IX) — for platform security, fraud prevention and continuous service improvement • Compliance with a legal obligation (LGPD Art. 7, II) — for record retention required by law
6. Sharing
Smartizzy does not sell your data and does not share it with third parties for commercial or advertising purposes. We share data only with those necessary to operate the service: • With the other party to the negotiation — name, photo and phone number become visible to the client or professional only after both have expressed interest and the chat is opened • Stripe — processes the professional's card and the connection fees. Full card details are entered directly in Stripe's environment and never pass through our servers; we receive only a payment method identifier • Google Cloud / Firebase — hosting for authentication, database and images Each of these providers operates under its own privacy policy and receives only the data strictly necessary for its function.
7. International transfer
Data is stored on Google Cloud servers located in the United States (us-central1 region), and Stripe also processes payments outside Brazil. This transfer is carried out under Art. 33 of the LGPD, with providers that adopt internationally recognized contractual clauses and security standards.
8. Retention period
Your data is kept while your account is active. After a deletion request, data is permanently removed after a 15-day grace period. Some records may be kept longer where the law requires — for example, tax records of connection fees and access logs required by Brazil's Internet Civil Framework. In those cases, the data is restricted to the legal purpose and is not used for anything else.
9. Account and data deletion
You can delete your account and your data at any time, without contacting us: 1. Open the Profile screen in the app or on the website 2. Tap "Delete my account" 3. Type DELETE to confirm Deletion removes your profile, your photos, your jobs or applications and your conversation history. Access is blocked immediately and data is removed after 15 days, except for the mandatory retention records described in the previous section. If you prefer, you can also request deletion through the contact email listed in this policy.
10. Your rights
Under Art. 18 of the LGPD, you have the right to: • Confirmation that processing exists • Access to your personal data • Correction of incomplete, inaccurate or outdated data • Anonymization, blocking or deletion of unnecessary or excessive data • Portability of your data to another provider • Information about who we share your data with • Withdrawal of consent These rights can be exercised through the "Delete my account" button on the Profile screen or through the contact email below. We respond within 15 days.
11. Security
All communication between the platform and our servers is encrypted with TLS. Data is stored in Firebase (Google Cloud) with restricted access rules: only you can read your own personal data, and sensitive operations are validated on the server. Third-party data shown on the platform — such as a professional's public profile — is kept in a separate collection, without sensitive personal information. No system is entirely immune to incidents. In the event of a breach that may pose significant risk to data subjects, we will notify those affected and the Brazilian data protection authority (ANPD) as required by Art. 48 of the LGPD.
12. Minors
The platform is intended exclusively for people aged 18 or over and is not directed at children or adolescents. We do not knowingly collect data from minors. If we identify an account created by a minor, it will be closed and the data deleted. If you are a legal guardian and believe a minor in your care has provided data to the platform, please contact us at the email below.
13. Local storage
The platform stores information on your device or browser to keep you signed in and remember preferences such as language and region. We do not use tracking, profiling or advertising cookies, nor third-party cookies for those purposes. Clearing the app or browser data removes this information and ends your session.
14. Data controller and contact
Smartizzy is the controller of the data processed on the platform. Questions, data subject requests and complaints about data processing should be sent to: contato@smartizzy.app A data protection officer (DPO) will be appointed and identified in this policy once defined. Until then, the email above is the official channel for exercising your rights.
15. Changes
This policy may be updated to reflect service improvements or regulatory changes. We recommend checking this page regularly. Material changes will be communicated on the platform before they take effect, and the last updated date at the top of the document will be revised.