Privacy Policy

This Privacy Policy describes how Partiu Viajar collects, uses, stores, and protects your personal data, in accordance with Brazil's General Data Protection Law (Law No. 13,709/2018, LGPD). By using the app, you agree to the practices described here.

1. Data we collect

Data you provide

• Full name, email, phone number (optional), and password at signup;
• Profile photo, when uploaded by you or obtained via Google sign-in;
• Trip data: destinations, dates, itineraries, budgets, expenses, bookings, and notes;
• Documents and files you upload (tickets, vouchers, insurance, visas);
• Group trip participant data — name, phone, email, and, when applicable, national ID numbers, date of birth, and emergency contact — entered by the trip organizer or by the participant themselves;
• Payment data, processed directly by a specialized payments partner (we do not store card numbers);
• Push notification subscription identifier, when you enable this feature in your browser;
• Messages sent to the AI travel assistant (Travel AI).

Data collected automatically

• IP address, browser type, and device used;
• App usage data (pages visited, features used);
• Approximate location, when you authorize GPS use for map features;
• Essential cookies for authentication and app functionality.

Social login data

When you sign in with your Google account, we receive your name, email, and profile photo, as authorized by you on Google's consent screen. We do not have access to your Google password.

2. How we use your data

• Provide and maintain the app's features (itineraries, budget, checklist, etc.);
• Process payments and manage your subscription through a specialized payments partner;
• Send essential communications about your account (email confirmation, billing alerts);
• Generate personalized travel suggestions through artificial intelligence;
• Fetch destination images and exchange rate quotes through third-party services;
• Improve the app experience based on aggregated usage data;
• Comply with legal obligations and prevent fraud.

3. Who we share your data with

We do not sell your personal data. We share data only with service providers essential to the app's operation, in the following categories:

• Infrastructure and hosting: store our database, host the application, and send account confirmation and password reset emails;
• Payment processing: a specialized company that securely processes your subscriptions and charges;
• Artificial intelligence: the provider that processes requests made to the travel assistant;
• Authentication and maps: social login and geolocation/maps services;
• Fraud and bot protection: verifies, at login and signup, that whoever is filling out the form is a real person — usually without requiring any action from you;
• Push notifications: deliver, through your own browser, the notifications you enabled on your device;
• Visual content: an image library used to illustrate destinations, with no personal data sent;
• Flight search: looks up flight prices and availability based on the search criteria you provide.

These providers only have access to the data strictly necessary to deliver the contracted service and are subject to contractual confidentiality and information security obligations. The full list of providers is available upon request to our data protection officer.

4. Where your data is stored

Your data is stored primarily on servers located in South America. Some service providers may process data on servers located outside Brazil, always with adequate contractual protection guarantees, in accordance with the LGPD.

5. Your rights as a data subject

Under the LGPD, you have the right to:

• Confirm whether we process your data;
• Access the data we hold about you;
• Correct incomplete, inaccurate, or outdated data;
• Request the deletion of your personal data;
• Request that your data be ported to another provider;
• Revoke your consent at any time;
• Obtain information about who we share your data with.

You can exercise most of these rights directly from the app's Settings area (edit profile, delete account). For other requests, contact us at the email below.

6. Data retention and deletion

We keep your data for as long as your account is active. When you delete your account, your personal data and trip content are permanently removed within 30 days, except for information we must retain for legal or tax obligations (such as payment records, kept for the period required by Brazilian tax law).

7. Data security

We adopt technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), authentication-based access control, and row-level security (RLS) policies in the database, which ensure that each user can only access their own data.

8. Cookies

We use essential cookies for authentication and site functionality (such as keeping your session active and remembering your chosen language) and one non-essential cookie to understand where our signups come from. On your first visit, we ask for your preference on that non-essential cookie through an on-screen notice. We do not use third-party advertising tracking cookies. You can change your choice at any time:

9. Children's data

Partiu Viajar is not intended for anyone under 18, and we do not knowingly collect data from children or teenagers. If you believe a child has provided us with personal data, please contact us so we can remove it.

10. Changes to this policy

We may update this Privacy Policy periodically. Significant changes will be communicated by email or an in-app notice, at least 15 days in advance.

11. Data protection officer and contact

To exercise your rights, ask questions, or report privacy concerns, contact us at contato@partiuviajar.com. You may also file a complaint with Brazil's National Data Protection Authority (ANPD) if you believe your rights were not properly addressed.