PilotRoutine
Terms of Use Privacy Português

Back to home Version 2026-07-22

Privacy Policy — PilotRoutine

Version: 2026-07-22
Effective date: July 22, 2026

This Privacy Policy (“Policy”) describes how LEONE DE SOUZA - ME (“we”, “us”, or “Controller”), CNPJ 45.836.753/0001-70, based in Leme, São Paulo, Brazil, processes personal data in PilotRoutine, in accordance with Brazilian Law No. 13.709/2018 (LGPD) and other applicable rules.

By using the service, you acknowledge this Policy. Use of PilotRoutine is also subject to the Terms of Use.

1. Controller and contact

  • Controller: LEONE DE SOUZA - ME
  • CNPJ: 45.836.753/0001-70
  • Address: Leme/SP, Brazil
  • Contact / interim DPO: [email protected]
  • Phone: +55 19 99954-4396
  • Instagram: routinepilot.app

To exercise data-subject rights or ask privacy questions, use the email above.

2. Data we collect

Depending on how you use the service, we may process:

Category Examples
Identity and account name, email, password (hash), Google ID, signup date
Product usage tasks, sprints, meals, recipes, pantry, calendar events, preferences
Credits and payments credit balance, usage history, transaction data (via payment providers)
AI interactions prompts, responses, and metadata needed to deliver the feature
Technical and cookies IP address, device/browser type, access logs, session identifiers
Marketing (when applicable) communication preferences and consent

We do not deliberately request sensitive health data; if you enter health information in free-text fields or AI chat, it is treated as content you provided, subject to the AI disclaimer in the Terms.

3. Purposes and legal bases

We process data to:

  • create and authenticate your account (performance of contract / pre-contractual steps);
  • provide and improve PilotRoutine, including sync across devices (performance of contract);
  • operate AI credits and process purchases (performance of contract / legal obligation);
  • ensure security and prevent fraud/abuse (legitimate interest / legal obligation);
  • comply with legal duties and authority orders;
  • send essential operational communications;
  • send email marketing only with consent or another valid legal basis, with opt-out.

4. Cookies and similar technologies

We use cookies and similar technologies for:

  • authentication and session maintenance;
  • preferences and product functionality;
  • aggregated audience/performance metrics when enabled;
  • remembering consents (e.g., non-essential cookies).

You can manage cookies in your browser. Disabling essential cookies may prevent login or core features.

5. Sharing and international transfers

We may share data with:

  • infrastructure, cloud, email, authentication (e.g., Google), and payment providers;
  • AI and processing tools required for features;
  • authorities when legally required.

Servers and subprocessors may be located in Brazil and abroad. For international transfers, we will use LGPD-adequate safeguards (e.g., contractual clauses, adequacy decisions, or other legal grounds).

6. Retention

We keep data for as long as needed for the purposes in this Policy, to meet legal/regulatory duties, and to establish or defend legal claims. After account deletion, we may retain minimal records required by law or for security for applicable limitation periods.

7. Security

We apply reasonable technical and organizational measures (access control, encryption in transit where applicable, password hashing, monitoring). No system is 100% secure; please protect your credentials.

8. Your rights (LGPD)

You may request:

  • confirmation that processing exists;
  • access, correction, and anonymization/blocking/deletion of unnecessary data;
  • portability, where applicable;
  • information about sharing;
  • withdrawal of consent;
  • objection to legitimate-interest processing, within legal limits.

To exercise rights, email [email protected]. We may verify your identity. Legal exceptions may limit deletion or portability.

9. Children and adolescents

Minors may use the service with a guardian’s consent. Children’s data (under 12) will be processed with specific consent from at least one legal guardian, under LGPD Article 14, and in the child’s best interest.

10. Email marketing

Promotional messages are sent only with an appropriate legal basis. Every marketing email will include an unsubscribe option. Opting out does not affect operational emails (security, credits, material contract changes).

11. Changes to this Policy

We may update this Policy. The current version will show its date. For material changes, we will provide notice and, when required, request renewed acceptance.

12. Law and venue

Brazilian law applies. Disputes related to this Policy follow the venue in the Terms of Use (Leme/SP), without prejudice to data-subject/consumer rights.

13. Contact

LEONE DE SOUZA - ME — CNPJ 45.836.753/0001-70 — Leme/SP, Brazil

Language: available in Portuguese and English. In case of conflict, the Portuguese version prevails.

LEONE DE SOUZA - ME · CNPJ 45.836.753/0001-70 · Leme/SP, Brazil