This policy explains, in plain words, what data Parcero uses, why, for how long and who we share it with. It covers the Parcero app (iPhone and Android) and the parcero.tech website, including the trip and follower pages. We follow Brazil’s General Data Protection Law (LGPD, Law 13,709/2018), Argentina’s Law 25,326 and, for people in the European Union, the GDPR.
1. Who looks after your data
- Controller: A.M FROTA NEGÓCIOS DIGITAIS LTDA, CNPJ 31.206.583/0001-35, Av. José Wilker (Ator), 605, Bloco 1B, Sala 337, Jacarepaguá, Rio de Janeiro – RJ, CEP 22775-024. Parcero is a product of this company.
- Data protection officer (DPO): the controller itself, A.M FROTA NEGÓCIOS DIGITAIS LTDA. Reach the DPO at privacidade@parcero.tech.
- General contact: privacidade@parcero.tech.
2. The short version
- We don’t sell your data. We don’t use app data for advertising.
- The app works without signing up: we create an anonymous session. Email is optional.
- We don’t store the text of your chat conversations.
- Your position is only kept on our server when you share a trip or tap “I need help”, and it’s deleted within 24 hours.
- Your lodging’s coordinates stay on your phone.
- Delete everything whenever you like in Account → Erase my data, or on the Delete your account and data page.
3. What we collect and why
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Account identifier (anonymous or email) | Keep your pass, crew and trips; use your pass on another phone | Performance of a contract (LGPD art. 7, V; GDPR art. 6(1)(b)) | Until you delete the account |
| Email (if you sign in with email or buy on the website) | Send your access code, link the purchase to the app and answer questions about it | Performance of a contract | Until you delete the account; on the purchase record, 5 years |
| Phone location, while the app is in use | Alerts near you, routes, weather, area prices, nearby places and chat answers | Performance of a contract | Not stored: used on the spot and discarded |
| Positions on a shared trip | Show the people you chose where you are until you arrive | Performance of a contract, at your request | Deleted 24 h after the trip ends, with the route |
| “I need help” position | Show your crew and followers where you are | Protection of life (LGPD art. 7, VII; GDPR art. 6(1)(d)) | Deleted after 24 h |
| Crew and night mode: the name and emoji you choose, status (out, heading back, arrived, no reply, help), agreed time, the ride link you paste and your follower’s nickname | Let your crew and followers know you got back safely | Performance of a contract | Deleted 7 days after the trip ends; stalled statuses disappear after 12 h |
| Lodging shared with the crew (name and Google identifier, no coordinates) | Show your crew where you’re staying | Performance of a contract, at your request | Until 7 days after the trip ends |
| Day card (places visited and km walked, no coordinates) | Build your daily summary | Performance of a contract | Until you delete the account |
| Chat messages | Generate the answer | Performance of a contract | We don’t store the text; we only count questions per day (30 days) |
| Purchase: pass, dates, store and transaction number; on the website also amount, currency, partner code, language and campaign (UTM) | Unlock the pass, refunds, accounting and partner commissions | Performance of a contract, legal obligation (art. 7, II) and legitimate interest (art. 7, IX) | 5 years (tax period) |
| Referrals and waitlist (code, who used it, email and city) | Give the discount or credit; tell you when we open another city | Performance of a contract; consent for the waitlist | Until you delete the account or ask to leave |
These stay only on your phone: language, country, trip dates, lodging, travel insurance details, favorites, itinerary and stamps.
4. Location, in detail
- While the app is in use. We ask for “while using the app” permission. Your position goes to our server only to answer that request and isn’t stored. The server passes the coordinates to Google (and, as a backup router, to OSRM) without your name or email. In the chat, the position is rounded (about 100 m).
- With the screen locked, during a trip. When you tap “Start” on a trip or “Start the way back”, Parcero keeps using your location with the screen locked until you arrive or stop. On Android a persistent notification shows; on iPhone, the blue indicator. It’s used to warn you about a stretch to avoid or a route deviation by car, to ask “Did you get back OK?” and, if you shared the trip, to update your position for your followers (every 30 seconds or 100 meters).
- No background location outside a trip. Parcero doesn’t ask for “Always” location and doesn’t use your position while the app is closed or not in use. The only exception is a trip you start yourself, described above, always with the system indicator: the persistent notification on Android and the blue indicator on iPhone. It stops when you arrive or end it.
- Lodging. Coordinates stay on your phone. If you share it with your crew, only the name and Google identifier are sent. A shared way back, whose route ends near your lodging, stays on the server until 24 h after it ends.
- You can deny or remove the permission in your phone settings. The app keeps working, with fewer features.
5. Who we share data with
- Supabase: database, sign-in and access email. Servers in São Paulo; U.S. company.
- Vercel: website hosting.
- Google: Places, Routes and Weather receive coordinates and search text through our server, without your name or email. The Google map in the app and place photos load directly on your phone. See the Google Privacy Policy.
- Backup routers: OSRM (public server) and, if configured, GraphHopper receive only a route’s origin and destination.
- Chat: OpenRouter, which sends your question to an AI model (Anthropic Claude and, as backups, Google Gemini or OpenAI). They receive the latest messages of the conversation and your approximate position, with no name or email. Avoid typing personal details in the chat.
- Payments: Apple and Google (in-app purchases); RevenueCat (verifies those purchases; receives the account identifier and receipt); Stripe (website purchases: email and card, which we never see); Bloopi (pre-sale: email and order).
- Meta (Facebook and Instagram): only on the website and only if you accept cookies. See section 10.
- OpenStreetMap: the map on the shared-trip page (receives the IP address of whoever opens it).
- People you choose: your crew, followers with the link and whoever gets the trip link.
- Authorities, when required by law or a court.
We send nothing about you to Instituto Fogo Cruzado: we only download their public incident data. Analytics and error tools (PostHog and Sentry) are planned but switched off today; if we turn them on, they’ll only get the account identifier and technical data, never location or chat text, and we’ll update this policy first.
6. International transfers
Supabase, Vercel, Google, OpenRouter and the AI models, Stripe, RevenueCat, Apple and Meta may process data in the United States and other countries. We rely on contracts with data protection clauses (LGPD arts. 33–36; GDPR art. 46). For visitors from Argentina, data leaves the country with the safeguards required by Law 25,326.
7. How long we keep data
- Location while the app is in use: not kept.
- Shared trip and positions: 24 h after it ends. “I need help” position: 24 h.
- Crew, night mode and followers: 7 days after the trip ends.
- Chat usage count: 30 days.
- Account, pass, day cards and referrals: until you delete the account.
- Purchase records: 5 years, for tax reasons, even after you delete the account.
- Database backups: up to 7 days. Providers’ technical logs (IP, time): a few days.
8. Your rights
You can: confirm whether we process your data; access it; correct it; get a copy in a readable format (portability); anonymize or delete it; know who we share it with; withdraw consent; and object to processing (LGPD art. 18; Argentine Law 25,326 arts. 14–16; GDPR arts. 15–21).
How to ask: write to privacidade@parcero.tech from your account or purchase email. An anonymous account has no email; in that case, delete it directly in the app. We reply within 15 days (in Argentina, access within 10 calendar days and correction or deletion within 5 business days).
If you’re not satisfied, you can complain to ANPD (Brazil), AAIP (Argentina) or the data protection authority of your EU country. AAIP, as the supervisory body of Law 25,326, handles complaints from anyone whose data protection rights have been affected.
9. Deleting your account and data
In the app: Account → Erase my data (or Delete account, if you signed in with email) → confirm. Without the app: the Delete your account and data page, which explains what’s deleted, what must be kept, and why.
10. Website cookies and Meta ads
| Cookie | Purpose | When | Duration |
|---|---|---|---|
| parcero_consent | Store your answer to the cookie notice | When you answer | 180 days |
| parcero_ref | Remember the partner code that referred you (link with ?ref=) | When the link has a code | 30 days |
| parcero_utm | Remember which campaign brought you (utm_source, utm_campaign…) | When the link has UTMs | 30 days |
| _fbc | Meta ad click identifier (fbclid). Only sent to Meta if you accept | When you arrive from a Meta ad | 90 days |
| _fbp and Meta cookies | Meta pixel: measure visits and purchases coming from ads | Only after you accept | Set by Meta |
The Meta pixel only loads if you tap “Accept” (legal basis: consent, LGPD art. 7, I; GDPR art. 6(1)(a)). If you accepted, when your purchase is confirmed we send Meta, through the Conversions API, the purchase event with your email hashed (SHA-256, irreversible), the click and browser identifiers (_fbc/_fbp), the IP address and browser used at checkout, the amount and the pass. Without your consent, none of this goes to Meta. To change your mind, clear this site’s cookies in your browser. The app uses no cookies and no pixel.
11. Security
All traffic is encrypted (TLS). The database has row-level access rules, and third-party keys stay on the server. We don’t log exact location, email or chat text. Trip and follower links are long and random. No system is 100% secure: if an incident could put you at risk, we’ll tell you and the authorities, as the law requires.
12. Children
Parcero is for people 18 and over and is not directed at children or teenagers. We don’t knowingly collect data from minors. If you learn of a case, write to privacidade@parcero.tech and we’ll delete it.
13. Changes to this policy
We may update this policy. Important changes will be announced in the app or by email. The version date is at the top of this page.
14. Contact
Privacy and DPO: privacidade@parcero.tech. General contact: privacidade@parcero.tech.