Privacy Policy

Who we are

Pílula Diária ("Pílula", "we") is a short-reading app with audio versions, available in Portuguese, English and Spanish, operated by AS TECNOLOGIA E INVENTARIOS LTDA (CNPJ 67.753.219/0001-32), based in Curitiba/PR, Brazil, the controller of the data handled in this app. To talk to us about privacy, write to ola@piluladiaria.app.

Account and sign-in data

You need an account to use Pílula. We handle:

• your email and, when the account has one, your name;
• if you sign in with email and password: we only keep an irreversible code of the password (Argon2id hash) — never the password itself;
• if you sign in with Apple or Google: your account identifier at that service and the email it confirmed. We never receive your Apple or Google password;
• sessions: when you sign in we create a session. We keep an irreversible code (hash) of the refresh token, an approximate description of the device (derived from the system and the app) and the dates of use. On your device the token is kept in the system's secure storage (Keychain on iPhone, Keystore on Android).

The access session lasts 15 minutes and is renewed automatically; renewal is valid for up to 60 days without use and at most 180 days after sign-in.

App usage, history and personalization

To show what matters to you and understand what works, we record:

• a random identifier generated on your device (it is neither the advertising identifier nor a hardware ID);
• usage actions: opening a pill, how much you read, how long you stayed, whether you reached the end, listening to the audio, saving, sharing, and the fact that you ran a search (without the text you typed). For questions to ConversarIA we record only the fact that you asked, without the text (see "Artificial intelligence");
• your initial preferences (themes and topics you chose; in earlier versions, also pills) and an interest profile calculated from them and from your use (it includes a numeric representation).

While you are signed in, this history is linked to your account through the device identifier. The choices you make at the start of the app, before creating the account, become linked to it when you create it or sign in. We use it to personalize your home screen and recommendations and to improve the product.

Pílula shows no ads, uses no advertising SDKs and does not track you across third-party apps and websites.

Saved items, sharing and photos

• Items you save are associated with your account.
• The public link to a pill shows only the pill's title and phrase; it contains none of your data.
• The app only writes to your album the image you ask it to save. The profile picture you choose stays only on your device. We do not read or upload your photos.

Notifications and technical identifiers (OneSignal)

OneSignal is the provider we use to send notifications. When you open the app, OneSignal's SDK (its software component inside the app) may create technical identifiers for the device and receive technical information about it — such as model, system version, language, time zone, app version, country, IP address and the delivery address provided by the system — before you decide about notifications. By itself, this does not turn on receiving them.

Receiving notifications is optional and depends on the permission you give the system (Apple or Google); you can turn them on in Profile. Declining them limits no feature of the app.

On our side, regarding OneSignal and notifications:

• when you sign in, we associate the device with your account identifier;
• we send OneSignal simple markers about your commercial activity (for example, that you closed the subscription screen and which period you looked at), used for reminders;
• we keep a record of notifications sent and, for 30 days, of sending decisions, to control frequency and measure results.

When you sign out, the device is disassociated from you.

Subscription and payments

Part of the pills are free; full access is by subscription. Purchases are made through the App Store (iPhone), Google Play (Android) or, outside the stores, Stripe. Premium access belongs to Pílula and works on any device where you sign in with your account, regardless of where you bought it.

• Card and billing data stay with Apple, Google or Stripe; we do not receive your card number;
• we keep the plan, the subscription status, the start, renewal and end dates and the provider's transaction identifiers, to recognize your access;
• Apple and Google notify us of renewals, cancellations and refunds;
• Stripe receives your email, your name (if any) and your account identifier;
• we also record events from the purchase process (for example, having seen the subscription screen) to understand and improve the offer.

Artificial intelligence (ConversarIA and search)

Two features use an artificial intelligence provider, OpenAI:

• ConversarIA: to answer, we send your question, the recent messages of the current conversation and the text of the pill you are on. In some cases we use the question, the answer and summaries of other pills to suggest a read. We also send the question, with the pill title and the list of topics in our catalog, to identify its topic (the anonymous statistics described below);
• search: the text you type is sent to generate a numeric representation that finds related pills.

We do not send OpenAI your name, email, account identifier, device identifier, profile, interests or reading history. OpenAI's handling follows its own terms and policies.

We do not store the conversation or the text of your questions. Two things remain from ConversarIA. First: a record that you opened the chat and asked a question on a pill, without the text, linked to your device and your account like other usage events (it helps personalize your home page). Second: anonymous statistics, so we know which topics people want to go deeper on. When the answer is produced, the topic of the question is identified automatically and we add 1 to a counter per week, language, pill, topic and type of doubt. That counter does not hold the text, your name, your account, your device or the exact time, and it is not linked to you. The text of the question is still processed by OpenAI, to answer and to identify the topic, as described above.

We also do not store the text of your searches: we only record that a search happened. The text you type is still processed by OpenAI to generate the numeric representation, as described above.

Questions asked before October 2, 2026 had their text removed and became counts; earlier backups may contain that text until they are discarded. Avoid including sensitive information in questions. Answers are AI-generated and may contain errors.

The audio of the pills is generated from the editorial text by a voice service (ElevenLabs); that text contains no personal data.

Who we share with

We use providers that handle data on our behalf, each only for its function:

• Amazon Web Services: hosting of servers and database;
• OneSignal: sending notifications;
• Apple and Google: sign-in (when you choose it), purchases and notification delivery;
• Stripe: payments made outside the stores;
• OpenAI: ConversarIA and search, as described above;
• ElevenLabs: voice for editorial audio (no personal data);
• Expo: delivery of app updates (receives the IP address and the app version);
• Supabase: storage of editorial images (no personal data).

Some of these services process data in other countries. We may also disclose data when the law requires it.

Security and where data is kept

• the app's communication with our servers uses HTTPS;
• passwords and refresh tokens are stored only as hashes;
• data is kept in a PostgreSQL database on cloud servers, with periodic backups;
• the servers' technical records (logs) keep, for a limited time and for security and diagnostics, the IP address, the date and time, the address accessed — without the parameters that come with it, such as the text of a search —, the result of the request and technical information about the app or browser; the sign-in attempt limit uses IP counters that expire in minutes.

No system is completely failure-proof, but we treat the security of your data as part of the product.

How long we keep it

We keep your account and usage data while the account exists, except the record of notification sending decisions, which we keep for 30 days. When you delete the account we apply what is described in "Deleting your account". Backups are discarded in regular cycles, and deleted data also stops existing in them once those backups are discarded.

Deleting your account

You can delete your account in the app, under Profile › Delete account, or on the page Delete account. When you confirm, you are signed out.

We delete: the sign-in methods (password, Apple, Google) and sessions, usage history and events (including the record that you ran searches and that you asked ConversarIA), the interest profile, saved items, the count of free pills used, referral codes and the notification link (and we ask OneSignal to remove it). If you used "Sign in with Apple", we also revoke that authorization. The account no longer gives access to the app.

We keep, as a record of our commercial relationship: your name and email, the date the account was created and the date you asked for deletion, and subscription and payment records (plans, dates, amounts and the payment provider's transaction identifiers). We use this to record that you were our customer and to meet applicable legal, accounting and tax obligations, for as long as needed for those purposes. These records give no access to the app and recover nothing that was deleted: if you come back with the same email, the new account starts from scratch.

Communication preferences are handled separately: deleting the account does not authorize us to send marketing. If you asked not to receive promotional messages, we keep that request together with your email only to honor it, including if you create a new account. You can ask for information or for these records to be erased at ola@piluladiaria.app; we will respond within the limits of the law, as some may need to be kept.

Deleting the account does not cancel subscriptions made on the App Store or Google Play. Cancel first, at App Store or Google Play.

Your rights

You can ask for access to your data, correction, deletion, portability, information about sharing and review of processing, under the applicable data protection law (such as the LGPD in Brazil). Write to ola@piluladiaria.app from your account's email.

Changes to this policy

When there is a relevant change, we will update the date at the top of this page and, if it is material, notify you in the app.