Privacy policy

1. Who is responsible for your data

Prattia is operated by WELBTH FERNANDO ORNELES ALVES, CNPJ 48.146.579/0001-21, Rua 2300, nº 1203, Centro, Balneário Camboriú/SC, CEP 88330-432, Brasil (the "controller").

Contact for any privacy matter: contato@prattia.com.

2. What data we use

• Account: name, e-mail, language and password (stored encrypted by our login provider; we never see it).
• Purchases: what Hotmart sends us when you buy — name, e-mail, product, transaction number and payment status. We do not receive your card details.
• What you create: recipes, photos, tags, meal plan and shopping list.
• Technical use: days you signed in, device type, whether you use the installed app and, if you turn them on, the technical address for notifications (push).
• Communication: the notices we send you and your e-mail preference.
• AI import: the text, screenshot or link you send to organise a recipe. The screenshot is not stored; the result is saved only if you save the recipe.

3. Why we use it and on what legal basis

• Providing the service you bought (account, e-books, library, your recipes, meal plan and list): performance of the contract (GDPR art. 6(1)(b)).
• Granting and keeping access according to your purchases and subscriptions on Hotmart, and e-mailing you about the account (access, password, billing): performance of the contract.
• In-app notices and e-mails about Prattia products for existing customers: legitimate interest (art. 6(1)(f)) and art. 13(2) of the ePrivacy Directive. You can object at any time through the link in every e-mail or in My account.
• Push notifications: your consent, given on the device. You withdraw it in the device or browser settings.
• Security and abuse prevention (access and admin-action logs, usage limits): legitimate interest.
• Keeping purchase records for the legal period: legal obligation (art. 6(1)(c)).

4. Artificial intelligence

Recipe import and the translation of official recipes use Anthropic's API (Claude model). The content is sent only to produce the draft and comes back to you; under Anthropic's commercial terms it is not used to train models.

We make no automated decisions that produce legal effects concerning you.

5. Who we share it with

Only with providers that help us run Prattia, under contract and only for that purpose. We do not sell or rent data.

• Supabase: database, login and files, on servers in the European Union (Frankfurt).
• Vercel: website hosting, in the European Union region.
• Hotmart: payments. Hotmart is responsible for payment data under its own privacy policy.
• Resend: e-mail delivery.
• Anthropic: the artificial intelligence described above.
• Browser push services (Google, Apple, Mozilla): only the device's technical address, if you turn on notifications.

6. Transfers outside the European Union

Some providers are in the United States and the Prattia team works from Brazil. In those cases we rely on GDPR safeguards: European Commission adequacy decisions, the EU-US Data Privacy Framework or standard contractual clauses.

7. How long we keep it

• Account and everything you created: while the account exists. When you delete the account, the data is removed straight away; backups are replaced within 30 days.
• Purchase records: for the period required by tax and accounting law.
• Security and admin-action logs: for as long as needed to protect the service and defend legal claims.

8. Your rights

You can ask for access, rectification, erasure, portability and restriction of your data, object to its use for offers, and withdraw consent at any time.

In My account you download a copy of your data, turn off offer e-mails and delete the account without asking anyone. For anything else, write to contato@prattia.com: we reply within one month.

You can also complain to the data protection authority in your country.

9. Cookies and on-device storage

We use only what the service strictly needs to work, which is why we do not ask for cookie consent:

• Login session cookie (to keep you signed in).
• "prattia_idioma": the language you chose.
• "tema": light or dark.
• Local device storage: the copy of the shopping list for offline use, the queue of ticks not yet sent and display preferences (dismissed notices, collapsed menu). The list copy is deleted when you sign out.
• The installed app's service worker, which stores only website files (never pages with your data).

10. Age

Prattia is meant for people aged 16 and over. If you learn that someone younger has created an account, write to contato@prattia.com.

11. Security

Always-encrypted connections, access rules in the database (each person sees only their own data), restricted and logged team access, and passwords that never pass through us in plain text.

12. Changes to this policy

If the policy changes in a meaningful way, we tell you in the app or by e-mail before it applies. The version and date are at the top of the page.