Privacy Policy

Version 2026-10-30 · identifier 2026-10-30/6b4ad7d2ea5b. Subject to legal review.

History: 2026-10-14 — initial version, under the name Namongaru. 2026-10-25 — the service was renamed Meu Gasto and the document now identifies the controller and the privacy contact. 2026-10-30 — added customer support (Help Center and conversations with support), the paid plans and Stripe, the providers we use and international transfers with the mechanism for each one, and detailed data export, deletion and retention. The other clauses did not change and the party responsible for processing your data remains the same.

Meu Gasto (formerly Namongaru; "we") is a personal and family money organization service. This policy explains what data we process, why, and your rights under the Brazilian General Data Protection Law (Law 13,709/2018 — LGPD).

1. Data we process

• Account: name, email, password (stored only as an Argon2id hash, never in plain text), language, time zone and preferences.
• Financial data you record: accounts, cards, transactions, bills, budgets and categories; in Net worth, assets, debts, investments and crypto wallets with the transactions and prices you enter (we never ask for private keys or recovery phrases); and your country of tax residence, if you provide it. They belong to your family and are visible only to its members; an asset marked as private is visible only to you.
• Technical security data: sessions per device (device type and browser, access dates), audit records of important changes and abuse limits. We do not permanently store IP addresses.
• Customer support: when you write to support, we keep your name, email, subject, language, the messages exchanged (yours and support's), dates and the request status, with a ticket number. If you are signed in, the request is linked to your account and appears in "My support requests". We do not store the IP address of the submission. We never ask for passwords or card details; card numbers sent by mistake are masked.
• Subscription (only if you subscribe to a paid plan): the plan, the subscription status and dates and who pays; the version of the Terms accepted and when; withdrawal requests and the amounts refunded; the customer identifier at Stripe; and technical records of the notices received from Stripe (identifier, type, date and result), without the notice content. Card details are entered directly at Stripe and never reach Meu Gasto. Meu Gasto currently does not collect the subscriber's CPF. If we ever need it, for example to issue a tax document, this Policy will be updated first, stating the data, the purpose and the legal basis, and you will be notified.

2. Purposes and legal bases

• Provide the service you requested (performance of a contract — art. 7, V).
• Security, fraud prevention and auditing (legitimate interest and compliance with obligations — art. 7, II and IX).
• Essential emails (verification, password recovery, invitations) and bill reminders that you can turn off at any time.
• Answer and resolve your support requests (performance of a contract and preliminary procedures — art. 7, V) and, when necessary, exercise rights in judicial, administrative or arbitration proceedings (art. 7, VI).
• Charge and manage the subscription, honor the right of withdrawal and send the subscription emails (purchase, plan change, cancellation, termination and withdrawal): performance of a contract (art. 7, V).
• Keep payment records for the period required by tax law (section 6): compliance with a legal obligation (art. 7, II).

3. What we never do

• We do not sell data.
• Family financial data is never used for targeted advertising nor shared with ad networks.
• There are no ads inside the app's financial area.
• The platform team sees only aggregated metrics (e.g., number of users), not your transactions. The exception is the messages you send to support yourself: only authorized administrators, with two-step verification, read them to reply, and every reply is recorded. To handle billing requests, the team also sees the family's subscription status (plan, dates and amounts), never card details.
• Support conversations are not used for advertising or to train artificial intelligence.

4. Sharing and providers

We use strictly necessary providers, under contract and only to run the service:

• App and database hosting: Hostinger, on a server in Brazil.
• Email (delivery of verification, password recovery, invitations, reminders, support messages including the conversation text, and subscription emails; the support mailbox, with messages sent to suporte@meugasto.com and new request notices): Hostinger, with the email servers in data centers in the European Union (France and Germany, according to Hostinger). Delivering these messages may involve Hostinger sub-processors outside the European Union.
• Off-site backup: Cloudflare R2, stored in the European Union since 10/30/2026. Earlier copies remain stored in North America. The copy is encrypted before it leaves our server, and only we hold the key.
• Payments for paid plans: Stripe, a payments company that processes the card and the recurring charge. Stripe receives your name and email, the card details you enter at payment, and the plan and amount purchased. Stripe acts as a processor when it processes the payment on our behalf and as a controller for its own purposes, such as fraud prevention and legal and regulatory obligations; in that role, Stripe's privacy policy also applies (stripe.com/privacy).

We may disclose data under court order or legal obligation.

4.1 International transfers

Therefore, personal data is transferred internationally. For each provider outside Brazil, we state the destination, purpose, data and LGPD mechanism (art. 33):

• Stripe (Stripe, LLC), United States: subscription billing, fraud prevention and Stripe's obligations; name, email, card details, plan and amount. Mechanism: standard contractual clauses approved by the ANPD (art. 33, II, "b"; Resolution CD/ANPD No. 19/2024), adopted by Stripe in its data processing agreement.
• Hostinger (email), European Union: delivery of service, subscription and support emails, and the support mailbox; name, email and message content. Mechanism: country with an adequate level of protection recognized by the ANPD (art. 33, I; Resolution CD/ANPD No. 32/2026). Hostinger sub-processors outside the European Union, if involved, are subject to the safeguards of the European data protection regulation set out in Hostinger's data processing agreement.
• Cloudflare R2, European Union: off-site backup since 10/30/2026; all service data, encrypted before it leaves our server (only we hold the key). Mechanism: country with an adequate level of protection recognized by the ANPD (art. 33, I; Resolution CD/ANPD No. 32/2026).
• Cloudflare R2, North America: backups written up to 10/30/2026, encrypted the same way (only we hold the key). Mechanism: we have not demonstrated an LGPD mechanism (art. 33) for these copies. For that reason, on 10/30/2026 we began writing new copies only in the European Union. The earlier copies remain stored in North America because each one is protected against change and deletion for 30 days after it is written; the last one was written on 10/30/2026. We will delete them when that protection allows, from 11/29/2026, and record the date in this Policy.

You can ask, at privacidade@meugasto.com, for information about these transfers and a copy of the clauses used, free of charge.

5. Ads on the public website

The public website (institutional pages and articles) may show Google AdSense ads in the future, only after explicit activation and with notice and consent where required. Those ads never receive balances, debts, transactions, descriptions or account identifiers. The Plus and Pro plans never show ads.

6. Retention

• Financial data: while the family exists or until you delete it.
• Ended sessions, tokens and technical keys: up to 7 days after expiry.
• Sent email logs: up to 30 days. Job runs: up to 90 days.
• Customer support: resolved or closed conversations are deleted 12 months after the last message. Open requests are kept until resolved.
• Subscription data kept in Meu Gasto (plan, dates, acceptance of the Terms, withdrawals): while the family exists, even after cancellation; deleted together with the family or the account.
• Payment records for tax purposes (charges, refunds and any invoices): kept at Stripe and in the monthly accounting reports until the related taxes become time-barred (Brazilian National Tax Code, art. 195, sole paragraph), generally 5 years. Stripe keeps its own records under its policy.
• Encrypted backups: on the server, up to 30 days. An encrypted off-site copy is kept with a storage provider (section 4.1) and currently has no automatic deletion. Data you delete may remain in these copies until they are discarded; they are used only to restore the service after a failure.
• We may keep data longer when required by law, regulation or court order, or when needed to exercise rights in proceedings (for example, a support request about a disputed charge).

7. Your rights

At any time, inside the app (Settings), you can access and export your data (JSON file, including your support requests and the messages exchanged), correct information, revoke sessions on other devices and delete your account. Deletion removes your personal data, including your support requests; families where you are the only member are deleted too. If you pay for a subscription, it is ended at Stripe before the deletion. We only keep a support request after that when there is a legal obligation or a need to exercise rights in proceedings, and only for as long as necessary; the same applies to the payment records required by tax law. You can also ask, at any time, for only your support conversations to be deleted. For this and other requests, use the Help Center or write to privacidade@meugasto.com.

8. Security

HTTPS connections, Argon2id passwords, protected session cookies (HttpOnly, Secure, SameSite), per-family data isolation in the server and database, login attempt limits, administrative access with two-step verification and logs without financial data.

9. Children

The service is intended for adults (18+). Minors may join a family only with a guardian's permission and supervision.

10. Controller, contact and changes

The controller of the personal data processed in Meu Gasto is Geovane Santos Freitas (individual; full identification in section 10 of the Terms of Use). To exercise your data subject rights or ask about privacy, write to privacidade@meugasto.com. Other matters: Help Center (meugasto.com/en/help) or suporte@meugasto.com. As a small-scale processing agent (Resolution CD/ANPD No. 2/2022), we do not appoint a data protection officer; the communication channel for data subjects is privacidade@meugasto.com. We will notify relevant changes inside the app.