This is an English translation of the original Portuguese-language document, provided for the convenience of
international users. Reefora is operated from Brazil and this policy is drafted primarily to comply with
Brazil's General Data Protection Law (Lei Geral de Proteção de Dados — LGPD, Law No. 13,709/2018). In case of
any conflict or discrepancy between this translation and the Portuguese version,
the Portuguese version is the legally binding text. If you have questions about how the laws of your own
country apply to your use of Reefora, we recommend consulting a local attorney.
This Privacy Policy describes how Reefora ("we", "the app") collects, uses, stores and
protects the personal data of its users ("you").
1. Who we are
Reefora is a social app for aquarium hobbyists that lets you document aquariums, share posts and interact
with other users. The app is operated from Brazil and is available to users worldwide, with an initial focus
on South America.
2. What data we collect
Registration data: name, email, username, profile photo and bio (when provided).
Content you create: posts, photos, comments, and aquarium/inhabitant data you register.
Usage and diagnostic data: technical device information, crash reports and app usage
events, collected via Firebase Analytics and Firebase Crashlytics.
Notification token: a device identifier (Firebase Cloud Messaging), used only to enable
app notifications.
Social sign-in data: when you sign in with Google or Apple, we receive only the name,
email and photo associated with your account on those services.
We do not collect precise geolocation or credit card data — subscription payments (when available) are
processed directly by Google Play or the App Store.
3. How we use your data
Create and maintain your account and public or private profile;
Display your content to other users, according to your privacy settings;
Send notifications about likes, comments, followers and news (configurable under Settings → Notifications);
Detect and prevent abuse, fraud and violations of our Terms of Use;
Improve app stability and performance based on error reports.
4. Sharing data with third parties
We do not sell your personal data. We use the following service providers (data processors) to operate the app:
Google Firebase (Authentication, Firestore, Storage, Analytics, Crashlytics, Cloud
Messaging) — backend infrastructure, database and analytics;
RevenueCat — subscription management, once the Pro plan feature is available.
These providers process data on our behalf and under our instructions, with contractual guarantees of
security and confidentiality.
5. International data transfer
Google Firebase maintains servers in data centers located in different countries, which may include
processing and storing your data outside your country of residence (for example, in the United States or
Brazil). This transfer relies on the contractual data-protection safeguards offered by Google. If you are
located in a country with its own data protection framework (for example, a South American country with LGPD-
equivalent legislation), those safeguards are intended to offer a comparable level of protection, though we
make no representation of formal compliance with every foreign data protection regime.
6. Your rights as a data subject
Regardless of where you are located, you may at any time request:
Confirmation of whether we process your data;
Access to and a copy of your data (export);
Correction of incomplete, inaccurate or outdated data (available under Edit Profile, inside the app);
Anonymization, blocking or deletion of unnecessary data;
Portability of your data to another service provider;
Deletion of data processed with your consent;
Withdrawal of consent.
How to exercise these rights today: while automatic in-app account deletion is not yet
available, please send your request to app.reefora@gmail.com.
We process deletion and data export requests within 15 business days.
7. Data retention
We keep your data while your account is active. When you request account deletion, your personal data and
content are permanently removed from our systems, except where retention is required by law.
8. Data security
We adopt technical measures to protect your data, including database access rules (Firestore Security
Rules) that prevent one user from accessing or modifying another user's data without authorization, and
encryption in transit (HTTPS/TLS) across all communications with our servers.
9. Children
Reefora is not directed at children under 14 and does not knowingly collect data from children. If we
identify an account belonging to a child under 14, it will be removed.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated inside the app.
The date at the top of this page indicates the most recent version.
11. Contact
Questions about this policy or about how your data is processed can be sent to
app.reefora@gmail.com.