Privacy policy

Quanto Fica? · Effective November 10, 2026. This is a summary of the full policy in Portuguese, which prevails if the two differ.

Ler a política completa em português

Who we are

Quanto Fica? is an Android app (package com.brazzastudio.quantofica) for building quotes and receipts as PDF files, made for self-employed workers in Brazil. It is published by Brazza Studio (brazzastudio.com), the data controller under Brazil's General Data Protection Law (LGPD). Contact, including our data protection officer channel: [email protected].

What the app handles

  • On the phone: everything you create stays in a database on the device: business profile (name, CPF or CNPJ tax ID, phone, email, address, city, logo, PDF color, Pix key), clients (name, WhatsApp number, email, address, optional tax ID, notes), catalog, saved quote models, quotes, receipts, a log of which document used each day's free PDF, and app settings. Without an account, none of this is sent to us.
  • Contacts and logo: picked through the Android system pickers. The app receives only the contact or image you choose. It does not request the contacts, photos or storage permissions.
  • PDFs: generated on the device and shared where you choose. We never receive a copy.
  • Optional account: sign-in with Google (email, name, profile photo link) or with email and password, through Firebase Authentication. With an account, a copy of the on-device data and a small version of the logo is stored in Cloud Firestore in the São Paulo region (southamerica-east1), readable only by your own account. Device settings and PDFs are not copied.
  • Paid plans: sold through Google Play Billing. We never see card details. Google Play shows us order data (order number, product, price, date, country, status) for refunds, support and tax duties.
  • Crash reports: if you allowed usage and diagnostics sharing on Android, Google Play may show us crash reports with the device model and Android version.
  • Support and deletion requests: the email address, the message and the outcome.

The app has no ads, no ad SDK, no advertising ID, no usage analytics and no notifications. It does not request location, contacts, photos, camera, microphone or file access. We do not sell personal data.

Your clients' data

For the clients you add, you are the controller. When you use the cloud copy, Brazza Studio processes that data on your behalf only to store it and return it to your account.

Legal bases

Performance of the contract with you (LGPD art. 7, V) for the account, cloud copy, paid plans and support; legitimate interest (art. 7, IX) for security and crash reports; legal obligation and exercise of rights (art. 7, II and VI) for purchase, refund and deletion records.

Services

Firebase Authentication and Cloud Firestore (Google), Google Play and Google Play Billing, Google Forms, Sheets and Apps Script (web deletion requests), Gmail (support email) and Cloudflare Pages (this website). This site sets no cookies and runs no analytics; Cloudflare keeps technical access logs. Some of these services may process data outside Brazil, under LGPD art. 33 and the providers' standard data protection clauses. See the Google Privacy Policy.

Retention

  • On-device data: until you delete it, clear the app's data or uninstall.
  • Account and cloud copy: until you delete the account; removed right away, with no database backups.
  • Order and refund data from Google Play and purchase-related support email: up to 5 years.
  • Deletion requests: one year.

Deleting your data

In the app: Configurações › Conta › Apagar conta (Settings › Account › Delete account). Without the app: see Delete your account. Deleting the account does not cancel a Google Play subscription.

Your rights

Under LGPD art. 18 you may confirm, access, correct, port, anonymize, block or delete your data, learn who we share it with and object to processing. Write to [email protected]; we reply within 15 days. You may also complain to Brazil's data protection authority (ANPD).

Age and security

The app is for adults (18+) and is not directed to children. Data travels over HTTPS; the cloud copy is readable only by its owner's account. We notify you and the ANPD of security incidents that may cause relevant risk, within the ANPD's deadline.