Sonequinha
Data controller
The controller responsible for processing your personal data is the developer of the Sonequinha app.
To exercise your rights, ask questions, or contact the Data Protection Officer (DPO), use the support channel available in the app.
Information we collect
2.1 Account information
When you create an account with Apple or Google, we collect basic information such as your name and email, used only to authenticate and identify you.
2.2 Sleep and routine data
We collect information you choose to log in the app, such as:
- Naps
- Sleep and wake times
- Wake-ups
- Sleep history and patterns
These data may be considered health data under the LGPD (Art. 11) and receive enhanced protection. They are used exclusively to display analyses, predictions, and history within the app.
2.3 Technical and usage information
We may collect basic device and app usage data, such as device type, operating system, and usage events, to improve the app's performance and user experience.
Legal basis for processing
3.1 Brazil: LGPD (Law No. 13,709/2018)
Your data is processed under the following legal bases:
- Consent: for collecting usage data and analytics
- Performance of a contract: to provide the app's features
- Legitimate interest: to improve the app's stability and security
You may withdraw your consent at any time, without affecting processing already carried out.
3.2 European Union: GDPR
For users in the European Economic Area (EEA), the same legal bases apply under the General Data Protection Regulation (GDPR, EU Regulation 2016/679):
- Consent (Art. 6(1)(a))
- Performance of a contract (Art. 6(1)(b))
- Legitimate interests (Art. 6(1)(f))
How we use data
We use collected data to:
- Provide the app's features
- Display sleep history, analyses, and predictions
- Improve the user experience and app performance
- Fix errors and improve existing features
Sonequinha does not make fully automated decisions that have legal or similarly significant effects on you (GDPR Art. 22 / LGPD Art. 20).
Analytics and campaign attribution
We use PostHog for product analytics, RevenueCat for subscriptions, and Paywallo to measure our own acquisition campaigns, subject to applicable consent. Attribution may process the account's pseudonymous UUID, device advertising identifiers when authorized, installation, onboarding, paywall and conversion events, and technical app, operating system and IP address metadata.
Babies' names and dates of birth, sleep and health records, photos and mood content are used for app features, not as advertising data.
Tracking is optional and is not required to use the app or your subscription. You can disable analytics in the app's Settings and manage App Tracking Transparency (ATT) permission in iOS Settings. Without ATT authorization, mobile Paywallo tracking is blocked on iOS. For questions or to withdraw consent, write to suporte@sonequinha.app.
RevenueCat also sends purchase, renewal and refund webhooks to Paywallo for subscription management and financial analytics. Denying ATT on the device does not stop this server-to-server flow. Using transaction and conversion data for attribution of our own campaigns or sharing it with advertising networks requires applicable consent.
Data sharing
Sonequinha does not sell, rent, or otherwise monetize your personal data.
Data may be processed by essential third-party providers, including:
- Authentication services (Apple, Google)
- Cloud storage services
- Analytics and error-monitoring tools
- Payment processing managed by the Apple App Store or Google Play Store
- Subscription management by RevenueCat
All providers are bound by confidentiality obligations and follow appropriate security practices.
Subscription management and refund review
RevenueCat manages Sonequinha subscriptions, while Apple reviews App Store refund requests. When necessary and where applicable consent has been given, we may provide Apple, through RevenueCat, with data relevant to evaluating the request.
Depending on the integration actually enabled and the data available, this may include a transaction reference or identifier, information about making the purchased content and features available, an indication of a sample or trial period, a record of consent, and Sonequinha's preference regarding the request. We do not share sleep logs, your baby's name, or health information for this purpose. This flow does not include consumption percentages or individual usage events.
For questions or to withdraw consent for future sharing, write to suporte@sonequinha.app. Withdrawal does not affect processing already carried out, does not prevent you from requesting a refund, and may prevent future sharing of consumption data with Apple.
RevenueCat and Apple may process this data outside your country. Sonequinha does not set a single timeframe for data held directly by these providers. Retention follows the period necessary to provide the service and review the request, as well as any period required by legal obligations and provider policies. See also the section on international transfers and the official RevenueCat policy at https://www.revenuecat.com/privacy and Apple's policy at https://www.apple.com/legal/privacy/.
International data transfers
Some third-party providers may process data on servers outside Brazil or the European Union.
For users in Brazil, we ensure transfers comply with the LGPD (Art. 33) and adopt appropriate safeguards.
For EEA users, transfers to countries outside the EEA rely on appropriate GDPR mechanisms, such as standard contractual clauses approved by the European Commission (GDPR Art. 46).
Data retention
Your data is kept while your account is active. You may request deletion of your account and associated data at any time.
After deletion:
- Account data and sleep logs: removed within 30 days
- Payment data: retained for the period required by applicable tax law
- Anonymized technical logs: may be retained for up to 12 months for security purposes
Information security
We use technical and organizational measures to protect your data against unauthorized access, loss, or misuse. Even so, no system is 100% secure.
If a security incident may affect your data, we will notify you and the competent authorities (ANPD in Brazil; the national supervisory authority in the EEA) as required by the LGPD and GDPR.
Your rights
9.1 All users (LGPD, Art. 18)
At any time, you may:
- Access your personal data
- Correct incomplete, inaccurate, or outdated data
- Request anonymization, blocking, or deletion of unnecessary data
- Request portability of your data
- Obtain information about entities with whom we share your data
- Request deletion of your account and all associated data
- Withdraw consent for processing based on it
- Object to processing that violates the LGPD
9.2 Users in the European Union (GDPR)
In addition, you have the right to:
- Erasure (the "right to be forgotten") (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interests (Art. 21)
- Not be subject to solely automated decisions with significant effects (Art. 22)
- Lodge a complaint with the data protection supervisory authority in your member state (Art. 77)
To exercise any of these rights, contact us through the app's support channel.
Children's privacy
Sonequinha is intended for parents and guardians. We do not knowingly collect data directly from children. All baby-related information is entered by the responsible adult, who consents on the child's behalf. This data is used only to operate the app.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, the updated version will be made available in the app with a new effective date. We will prominently notify you of material changes.
Contact and complaints
If you have questions about this Privacy Policy, the use of your data, or exercising your rights, contact us through the support channel available in the app.
Users in Brazil may file a complaint with the Brazilian Data Protection Authority (ANPD) at: gov.br/anpd.