Legal

Privacy policy

Effective [publication date]

1. Who we are

teo is provided by VF Tech Consulting Ltda., registered in Brazil under CNPJ 34.663.079/0001-52, at Av. Amintas Barros, 3700, sala 708, bloco A, Lagoa Nova, Natal, RN, 59075-810, Brazil (“teo”, “we”). We are the controller of the data described in this policy. For any privacy question, write to privacy@useteo.app.

2. What stays on your iPhone

This data is read, processed and stored on the device. teo doesn’t send it to our servers or store it in iCloud:

• Apple Health data you allow: sleep and sleep stages, resting heart rate, heart rate variability and time in daylight, measured by Apple Watch.
• iPhone motion data, used to estimate sleep when you don’t wear an Apple Watch.
• Your mood check-ins. If you allow it, a copy goes to Apple Health as a state of mind.
• Your energy curve, sleep debt and forecasts.
• The record of your focus sessions (times, pauses and apps involved) and your block lists.

Apple Health data is never used for advertising or sold.

3. What we keep in the cloud

So your account and your sky come back on a new iPhone, we keep:

• Account: your email and the identifier of the sign-in you choose (Apple, Google or email code). With Sign in with Apple, you can hide your email.
• Profile: time zone, language, whether you use an Apple Watch and app preferences such as icon and palette.
• Game progress: stars (class, minutes and date of the session), constellations, planets, sky events, stardust and galaxy stage.
• Subscription: your subscription status, verified with the App Store. We never receive your card details: Apple handles payment.

4. How we use it

We use this data to create and maintain your account, sync your sky across devices, unlock Premium when you subscribe and reply when you contact us. We process it to perform our contract with you. Health data is processed on your device with the consent you give in the iOS permissions, which you can withdraw at any time in iPhone Settings.

5. Screen Time and app blocking

When you use Focus, teo asks for Screen Time access so it can block the apps and websites you choose during your focus sessions. Your selections are stored only on your device, as anonymous tokens provided by Apple. teo cannot see which apps you selected or how you use them, and never sends this information to our servers. You can end a session at any time and remove Screen Time access in Settings.

6. Who we share it with

We don’t sell your data or use it for ads. We work with providers that process data on our behalf, only to make teo work:

• Supabase: sign-in and the account database.
• Google Cloud (Firebase): the server that syncs your sky.
• RevenueCat: subscription verification.
• Apple and Google: sign-in, when you choose them. Apple also processes payments.

We may also disclose data when the law or a court order requires it.

7. International transfers

These providers may store data outside your country, for example in the United States. When that happens, we rely on the safeguards required by law, such as standard contractual clauses.

8. How long we keep it

We keep cloud data for as long as your account exists. When you delete your account in Settings › My account › Delete account, we delete the account and the data linked to it from our systems. On-device data goes away when you delete the app; anything in Apple Health stays there, under your control.

9. Your rights

Depending on where you live, including under the GDPR and Brazil’s LGPD, you can ask to access, correct, export or delete your data, object to or restrict how we use it, and withdraw consent. Write to privacy@useteo.app. You can also complain to your local data protection authority.

10. Children

teo is not intended for anyone under [minimum age].

11. Changes to this policy

If this policy changes in a meaningful way, we’ll let you know in the app before the change takes effect. The date at the top shows the version in force.

12. Contact

Questions about this policy: privacy@useteo.app.

Data protection officer (encarregado, under Brazil’s LGPD): [DPO name], at the same address.