Privacy Policy

1. Who we are

Relatorio (“the App”) is a group photo challenge app available at https://relatorio.eugeniosm.com. The data controller is Eugenio Sainte Marie. Contact: contacto@eugeniosm.com.

2. What data we collect

• Your Google account data (sign-in only): name, email address, and profile picture. We obtain it via Supabase Auth with the standard scopes openid, email y profile.
• Content you create in the app: photos (selfies) you upload to challenges, groups you belong to, participations, and streaks
• Technical data required to operate: push notification subscriptions (browser endpoint), session identifiers, and basic error logs

We do not collect your Google password, your contacts, your precise location, or data from other apps

3. How we use your data

• To authenticate you and keep you signed in
• To show your name and photo to members of your groups and in challenge collages
• To operate challenges: rounds, photos, streaks, and app push notifications
• To prevent abuse, debug errors, and improve the service

4. Google data use (Limited Use disclosure)

Relatorio's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request the basic sign-in scopes (openid, email, profile)
• We use this data only to identify your account and provide the app's visible features
• We do not transfer, sell, or share your Google data with third parties for advertising or marketing purposes
• We do not use your Google data to train AI models or to build advertising profiles
• We only allow access to this data by our staff and providers strictly necessary to operate the service (see section 5)

5. Who we share your data with

• Supabase (authentication, database, and photo storage)
• Vercel (app hosting)
• Members of your groups: your name, profile photo, and photos you upload to a challenge are visible to members of that group

We do not sell your personal data. We will only disclose it if required by law

6. Retention and deletion

We keep your data while you maintain your account. Round photos automatically expire 24 hours after the round starts. You can request full deletion of your account and data (profile, photos, and push subscriptions) by writing to contacto@eugeniosm.com from the email you registered with, with the subject “Delete my Relatorio account”. We process requests within a maximum of 30 days

7. Security

We use HTTPS connections, role-based access control (RLS in the database), and session tokens. No system is 100% secure, but we apply reasonable measures to protect your information

8. Your rights

You can access, correct, or delete your personal data and withdraw your consent at any time by writing to the contact email. If you withdraw consent, you will no longer be able to use the app because sign-in is required for it to work

9. Children

Relatorio is not directed at children under 13. If you are a parent or guardian and believe a child provided us with data, write to us to delete it

10. Changes to this policy

We will publish any changes on this same page (https://relatorio.eugeniosm.com/privacy) and update the “Last updated” date

11. Contact

For privacy questions or data requests: contacto@eugeniosm.com.