Privacy Policy

PactClub is operated by Viva Freedow LLC, a company registered in the United States, at 5728 Major Blvd #609, Orlando, FL 32819, United States. You can reach us at contact@pactclub.io or +1 (858) 531-9800.

This policy covers the pactclub.io website and the PactClub app for iPhone and iPad. It explains what we collect, why, who we share it with, how long we keep it, and how you get it deleted. We follow the LGPD (Brazil), the GDPR (European Union and United Kingdom, where applicable) and the CCPA/CPRA (California).

Account data

• Full name and email address
• Password, stored only as a hash by our authentication provider. We never see it.
• Phone or WhatsApp number, when you choose to receive notifications there
• Profile picture (optional)
• Social handle, such as Instagram (optional)

Purchase data, handled by our payment processors

• Name, email and phone used at checkout
• Tax ID (CPF or CNPJ) when the payment processor requires it to charge in Brazil
• Billing, subscription and refund history
• Card numbers never reach our servers and are never stored by us. They go straight to Stripe or Asaas.

Content you submit

• Photos, videos, text and links you send as proof in a challenge
• Posts, comments and reactions in a community
• Messages you send inside a club

Usage data

• Check-ins, streaks, XP, badges
• Challenges you joined and their results
• Who you follow and who follows you

Technical data

• IP address, browser, operating system and device type
• Essential cookies that keep you signed in
• In the iOS app, if you allow notifications, a push token issued by Apple. It identifies the device, not you, and it is deleted when you turn notifications off or delete your account.

We do not collect health, location, biometric, contacts or advertising identifiers, and we do not track you across other companies’ apps or websites.

• Run the service: sign you in, process payments, record proof, calculate rankings
• Send what you asked for: reminders, proof approved, ranking updates and billing notices, by email, WhatsApp or push
• Improve the product: aggregate analysis that does not identify you
• Keep it safe: detect fraud, abuse and duplicate proof
• Show the community: your name, picture and progress, as you choose in your profile

We never use your data for advertising, and we never feed it to an advertising network.

• Performing our contract with you: everything needed to run your account and your challenges
• Your consent: notifications on WhatsApp and push, which you can withdraw at any time
• Our legitimate interest: security, fraud prevention and product improvement
• Legal obligation: payment and tax records we are required to keep

We share data only with the providers that make the service work, and only what each one needs:

• Supabase — database, authentication and file storage (United States)
• Vercel — application hosting (United States)
• Stripe — international card payments
• Asaas — payments in Brazil (card, Pix, boleto)
• Brevo — transactional email
• Meta (WhatsApp Business Platform) and Z-API — WhatsApp notifications you opted into
• Apple (APNs) — delivery of push notifications to the iOS app
• Google Cloud (Vertex AI) — AI features inside a club, processing only the content needed to answer

We require each provider to protect your data to at least the same standard we do, and to use it only to deliver their service to us. We do not sell or rent your personal data to advertisers or data brokers, and we do not share it for cross-context behavioral advertising.

• Email: use the unsubscribe link at the bottom of any message, or your notification settings
• WhatsApp: turn it off in your notification settings
• Push (iOS): turn it off in iOS Settings, under Notifications, or in your notification settings

All of them live under Profile, then Notifications, inside your account. Messages that are strictly about your account, such as a receipt or a password reset, are not optional.

You can delete your account at any time. Write to privacidade@pactclub.io from the email address on the account. We confirm it is you and complete the deletion within 30 days.

What gets deleted

• Your profile, name, email, phone and profile picture
• The photos, videos and links you submitted as proof
• Your posts, comments and reactions
• Your check-ins, streaks, XP and challenge history
• Your push tokens and notification preferences

What we keep, and why

• Payment and tax records, for as long as the law requires, which can be up to five years
• Aggregate statistics that no longer identify you

Wherever you live, you can ask us to:

• Access the personal data we hold about you
• Correct anything wrong or out of date
• Delete your account and your data
• Export your data in a readable format
• Withdraw a consent you gave us
• Object to a particular use of your data

If you are in California, you also have the right to know what we collect, to delete it, to correct it, and to opt out of the sale or sharing of personal information. We do not sell or share it, so there is nothing to opt out of.

Write to privacidade@pactclub.io and we answer within 30 days. You can also complain to your data protection authority, which in Brazil is the ANPD.

We use essential cookies to keep you signed in and to run the service, plus one cookie that remembers the language you picked. We do not use advertising cookies or third-party tracking.

Your data travels over HTTPS and is encrypted at rest. Access to it is restricted at the database level, row by row, so one account cannot read another. We audit this internally. No system is perfectly secure, so if a breach ever affects you we will notify you and the relevant authority within 72 hours.

We keep your data while your account is active. After deletion, it is removed within 30 days, except for records we are legally required to keep, such as payment and tax records.

Our infrastructure runs in the United States, so your data is processed there. For transfers out of the European Economic Area, the United Kingdom or Brazil, we rely on Standard Contractual Clauses and, where it applies, the EU-US Data Privacy Framework.

PactClub is for people aged 18 and over. The service is not directed to children and we do not knowingly collect their data. If you are a parent or guardian and believe a minor created an account, write to privacidade@pactclub.io and we will delete it immediately.

We may update this policy. If a change is material we will tell you by email or inside the app, and the date at the top always reflects the current version.

Viva Freedow LLC
5728 Major Blvd #609, Orlando, FL 32819, United States
+1 (858) 531-9800

General: contact@pactclub.io
Privacy and data protection: privacidade@pactclub.io