Privacy policy

1.Who is responsible

The controller of your personal data is the operator of CasaFolio, identified at the end of this page together with the contact for privacy questions.

This policy applies to the website, the app and the messages we send you. The rules for using the service are in the terms of use.

2.What data we process

We only process the data the service needs to work:

• Account: name, email, language, time zone, password (stored only as a hash) and, if you turn it on, your two-step verification set-up.
• Household and content: the households you belong to, your role, invitations and what you and your household record — deadlines, payments, chores, lists, subscriptions, notes and documents.
• Usage and security: sessions (IP address and browser), sign-in attempts, recovery requests, activity records and document access.
• Notifications: your preferences and, if you turn on device notifications, the delivery address provided by your browser.
• Billing: plan, subscription status and customer identifiers at Stripe. Card details are handled directly by Stripe and never reach us.
• Contact with us: the messages and requests you send us, including requests about your rights.
• Optional analytics: anonymous usage events, only if you accept them.
• Site visits: the public pages viewed, the site or campaign you came from, the type of device, the browser's language, the country and your IP address without its last part (for example 85.240.12.x), which identifies the network rather than the person. The country is looked up on our server and the full IP address is never stored; with your browser it forms an identifier that changes every day. No cookies are used for this.

3.Why we use data and on what basis

Each use has a legal basis:

• Performance of the contract: creating and maintaining your account, storing and sharing household content, sending reminders and service emails (confirmation, recovery, invitations) and managing your plan.
• Legitimate interest: protecting accounts and data (abuse detection, attempt limits, anti-bot checks, security logs), preventing fraud, keeping the service running and counting site visits in aggregate, to know which pages are useful and how many visits lead to creating an account or subscribing.
• Consent: analytics, marketing communications and device notifications. You can withdraw consent at any time, without affecting what was done before.
• Legal obligation: invoicing, accounting and responding to valid requests from authorities.

We do not make automated decisions with legal effects on you and we do not build advertising profiles.

4.Documents and household information

A household's information is visible only to its active members, according to each record's visibility: the whole household, selected people or "Only me". Isolation between households is also enforced in the database itself.

Documents are kept in private storage, scanned for malware when uploaded and only opened through temporary links valid for 5 minutes. Every access is recorded.

Our team only accesses a household's content when needed to solve a problem you asked us about, to protect the security of the service or to comply with the law.

5.Cookies and local storage

We only use the cookies and browser storage strictly needed to keep you signed in, protect your account and remember your privacy choice. We also store, on your device, choices you make such as language and appearance.

Counting site visits uses no cookies, stores nothing on your device and does not follow you from one day to the next; it keeps only the country and the IP address without its last part. If your browser sends the Global Privacy Control or Do Not Track signal, the visit is not counted. Analytics in the app are optional, anonymous and only turned on if you accept them. With the Global Privacy Control signal, analytics and marketing are turned off. We do not use advertising or social media cookies.

You can change your choice at any time in the cookie preferences.

6.Who we share data with

We do not sell or rent personal data. We only share it with providers that process it on our behalf, under contract and following our instructions:

• Hosting: all data — account, household content, documents and backups — is hosted on servers in the European Union.
• Bot protection at sign-up and access recovery.
• Email delivery: the provider we use for service messages.
• Payments: Stripe.
• Device notifications: your browser's push service (for example Google, Apple, Mozilla or Microsoft), which receives the notification content encrypted.

We may also disclose data where the law requires it or to respond to a valid order from an authority. In a merger or sale, data would pass to the successor, who remains bound by this policy.

7.Transfers outside the European Economic Area

All data is hosted on servers in the European Union. Some providers, such as Stripe for payments or the bot protection service, may process data outside the European Economic Area. In those cases, transfers rely on the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

8.How long we keep data

We only keep data for as long as it is needed:

• Account and content: while your account is active. After a deletion request, we erase them within one month.
• Backups: encrypted and replaced automatically; deleted data disappears from them within 6 months at most.
• Invitations and temporary links: invitations expire after 7 days and document links after 5 minutes.
• Security and administration records: for as long as needed to protect the service and show what was done.
• Billing data: for the period required by tax and accounting law.
• Site visits and analytics: 13 months; the daily identifier can no longer be recalculated after two days.

9.Security

We protect your data with appropriate technical and organisational measures, including:

• connections that are always encrypted (HTTPS) and encrypted backups;
• passwords stored with a strong hash, and two-step verification available to everyone and mandatory for administrators;
• household isolation in the database itself and permissions checked on every request;
• attempt limits, temporary account lockout and security records.

No system is infallible. If a data breach could affect you, we will inform you and the supervisory authority as the law requires.

10.Your rights

At any time, you can:

• access your data and receive a copy in an open format (portability);
• correct inaccurate or incomplete data;
• request deletion of your account and data;
• request restriction of processing or object to processing based on legitimate interest;
• withdraw any consent you have given.

You can download your data at any time in Settings → Privacy. To exercise your other rights, including account deletion, write to the contact at the end of this page. We reply within one month and may ask you to confirm your identity.

If you believe we have not handled your data properly, you can complain to the data protection authority in your country — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD).

11.If you live outside the European Union

We apply the same level of protection to everyone. In addition:

• United Kingdom: you have the rights under the UK GDPR and can complain to the ICO.
• Brazil: you have the rights under the LGPD and can complain to the ANPD.
• California: we do not sell or share personal data for cross-context behavioural advertising and we honour the Global Privacy Control signal. You have the right to know, correct and delete your data, without discrimination.
• Canada and Australia: we process your data in line with PIPEDA and the Privacy Act respectively, and you can complain to the OPC or the OAIC.

12.Children

CasaFolio is not intended for people under 16, who cannot create an account. If you record information about your children or other people in your household, you are responsible for that information: record only what is needed.

13.Changes to this policy

If we change this policy significantly, we will tell you by email or in the app before the change takes effect. The date at the top of this page shows the version in effect.