Privacy policy

Data controller

The controller responsible for processing your personal data is the developer of the Sonequinha app.

To exercise your rights, ask questions, or contact the Data Protection Officer (DPO), use the support channel available in the app.

Information we collect

2.1 Account information

When you create an account with Apple or Google, we collect basic information such as your name and email, used only to authenticate and identify you.

2.2 Sleep and routine data

We collect information you choose to log in the app, such as:

• Naps
• Sleep and wake times
• Wake-ups
• Sleep history and patterns

These data may be considered health data under the LGPD (Art. 11) and receive enhanced protection. They are used exclusively to display analyses, predictions, and history within the app.

2.3 Technical and usage information

We may collect basic device and app usage data, such as device type, operating system, and usage events, to improve the app's performance and user experience.

Legal basis for processing

3.1 Brazil: LGPD (Law No. 13,709/2018)

Your data is processed under the following legal bases:

• Consent: for collecting usage data and analytics
• Performance of a contract: to provide the app's features
• Legitimate interest: to improve the app's stability and security

You may withdraw your consent at any time, without affecting processing already carried out.

3.2 European Union: GDPR

For users in the European Economic Area (EEA), the same legal bases apply under the General Data Protection Regulation (GDPR, EU Regulation 2016/679):

• Consent (Art. 6(1)(a))
• Performance of a contract (Art. 6(1)(b))
• Legitimate interests (Art. 6(1)(f))

How we use data

We use collected data to:

• Provide the app's features
• Display sleep history, analyses, and predictions
• Improve the user experience and app performance
• Fix errors and improve existing features

Sonequinha does not use data for advertising and does not make fully automated decisions that produce legal or similarly significant effects on you (GDPR Art. 22 / LGPD Art. 20).

Data sharing

Sonequinha does not sell, rent, or otherwise monetize your personal data.

Data may be processed by essential third-party providers, including:

• Authentication services (Apple, Google)
• Cloud storage services
• Analytics and error-monitoring tools
• Payment processing managed by the Apple App Store or Google Play Store

All providers are bound by confidentiality obligations and follow appropriate security practices.

International data transfers

Some third-party providers may process data on servers outside Brazil or the European Union.

For users in Brazil, we ensure transfers comply with the LGPD (Art. 33) and adopt appropriate safeguards.

For EEA users, transfers to countries outside the EEA rely on appropriate GDPR mechanisms, such as standard contractual clauses approved by the European Commission (GDPR Art. 46).

Data retention

Your data is kept while your account is active. You may request deletion of your account and associated data at any time.

After deletion:

• Account data and sleep logs: removed within 30 days
• Payment data: retained for the period required by applicable tax law
• Anonymized technical logs: may be retained for up to 12 months for security purposes

Information security

We use technical and organizational measures to protect your data against unauthorized access, loss, or misuse. Even so, no system is 100% secure.

If a security incident may affect your data, we will notify you and the competent authorities (ANPD in Brazil; the national supervisory authority in the EEA) as required by the LGPD and GDPR.

Your rights

9.1 All users (LGPD, Art. 18)

At any time, you may:

• Access your personal data
• Correct incomplete, inaccurate, or outdated data
• Request anonymization, blocking, or deletion of unnecessary data
• Request portability of your data
• Obtain information about entities with whom we share your data
• Request deletion of your account and all associated data
• Withdraw consent for processing based on it
• Object to processing that violates the LGPD

9.2 Users in the European Union (GDPR)

In addition, you have the right to:

• Erasure (the "right to be forgotten") (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interests (Art. 21)
• Not be subject to solely automated decisions with significant effects (Art. 22)
• Lodge a complaint with the data protection supervisory authority in your member state (Art. 77)

To exercise any of these rights, contact us through the app's support channel.

Children's privacy

Sonequinha is intended for parents and guardians. We do not knowingly collect data directly from children. All baby-related information is entered by the responsible adult, who consents on the child's behalf. This data is used only to operate the app.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, the updated version will be made available in the app with a new effective date. We will prominently notify you of material changes.

Contact and complaints

If you have questions about this Privacy Policy, the use of your data, or exercising your rights, contact us through the support channel available in the app.

Users in Brazil may file a complaint with the Brazilian Data Protection Authority (ANPD) at: gov.br/anpd.