What we don't keep

• Your answers. The questions are answered out loud, between the two of you. The app has no place to type an answer, and nothing that is said leaves the couch.
• Your card number. Payment happens within Stripe's environment (card) or Woovi's (Pix). We only receive confirmation that it was paid.
• Microphone, camera, contacts, precise location. The app neither asks for nor uses any of these.

What we keep

• Account: your e-mail. If you sign in with Google, also the name and photo Google sends us.
• Purchases: what was bought, amount, date, payment method and the record Stripe or Woovi returns to us (which may include the card brand and last digits, and for Pix, the name and CPF of the payer). If you subscribe by Pix Automático, also the CPF and mobile number the bank requires.
• Games: which deck was played, which cards came up, what was done with each one (played, skipped, favorited, lost the dare), how long was spent on each card and the final score. This is what tells us which cards work and which need to leave the deck.
• The names you type at the start of Questions & Dares, together with the game. They are nicknames; you don't need to use your real name.
• Favorites: the cards you saved.
• How you got here: the link or ad from your first visit, and the landing page.
• Usage and device: pages visited, device type, browser, language and IP address.

Before you log in, games are recorded with a random number created on your device, which does not identify you. If you later create an account, the game in progress becomes linked to it.

Why we use it

• To deliver what you bought — login, unlocking decks, processing payments and refunds. Legal basis: performance of a contract.
• To improve the game — knowing which cards are played, skipped and favorited, and where people get stuck in the app. Legal basis: legitimate interest.
• For security — preventing payment fraud and account misuse. Legal basis: legitimate interest.
• To talk to you about your purchase — access link, confirmation and support. Legal basis: performance of a contract.
• To comply with the law — keeping tax and access records. Legal basis: legal obligation.

We do not use the content of your games to target ads, and we never sell data.

Who we share it with

Only with those needed for the app to work, and only what is necessary:

• Stripe — payment. Receives your e-mail and the purchase data.
• Woovi — Pix. Receives your e-mail, the purchase data and, for Pix Automático, CPF and mobile number.
• Supabase — database and login. Stores your account, purchases and games.
• Cloudflare — app hosting.
• Google — only if you choose to sign in with your Google account.
• PostHog — in-app usage measurement, linked to your e-mail after login.
• Microsoft Clarity — measures usage and records on-screen navigation (taps and scrolling) to show where people get lost. Text shown on screen is masked in the recording.
• Meta (Facebook and Instagram) — receives notice that a purchase or a sign-up happened, with the amount, to measure ads.

These companies are located outside Brazil, mainly in the United States, so your data is transferred there. They are contractually bound to use the data only to provide their service to us, in accordance with article 33 of the LGPD. We may also share data if the law or a court order requires it.

Cookies and measurement

We use cookies and local storage for two purposes: keeping you logged in and resuming the game where you left off (without this the app doesn't work), and measuring usage with the tools listed above. You can block measurement cookies in your browser settings or with a blocking extension — the game keeps working.

How long we keep it

• Account and games: for as long as your account exists.
• Purchases: 5 years after the purchase, due to tax obligations and for our defense in case of a dispute — this period applies even if you delete your account.
• Access logs: 6 months, as required by the Marco Civil da Internet (Brazil's Internet Civil Rights Framework, Law 12,965/2014).

Your rights

The LGPD guarantees that you can request, at any time: confirmation that we process your data, access to it, correction of anything wrong, anonymization or deletion, a copy in a readable format to take to another service, information about who we share it with, and withdrawal of consent where consent is the basis.

Ask by e-mail, from your account's address. We reply within 15 days. If you want to delete everything, just say so — the account disappears and, with it, your games and favorites; only the purchase records we are required to keep remain.

If you believe we have handled your data improperly, you can also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD, Brazil's National Data Protection Authority).

Under 18

Love Cards is not for anyone under 18, and we do not knowingly collect data from children or teenagers. If we find an account belonging to a minor, we delete the data. If you are a parent or guardian and believe this has happened, write to us.

Security

Data travels encrypted and is stored in databases with restricted access. The text of paid cards only leaves the server for those who bought them. No system is perfect: if a breach happens that poses a risk to you, we will notify you and the ANPD.

Changes to this policy

When we change anything relevant, we will notify you in the app and by e-mail before it takes effect, and update the date at the top of this page.

Contact

EATABLES CO. LTDA · CNPJ 51.380.634/0001-58
sac@querolove.com