Privacy Policy — Estimate PDF
This Policy explains which personal data the Estimate PDF app (also published as "Orçamento PDF" and "Orçamento PDF Fácil", the "App") processes, for which purposes, on which legal basis, with whom it is shared, how long it is kept and how you can exercise your rights. It follows Brazil's General Data Protection Law (Law No. 13,709/2018, "LGPD") and also takes into account U.S. state privacy laws, Mexico's Federal Law on the Protection of Personal Data Held by Private Parties and the EU General Data Protection Regulation, where applicable.
1. Controller and contact
The controller of the personal data processed by the App is EDSoftware ("we").
For any matter related to this Policy, to data processing or to exercising your rights, write to edcode.developer@gmail.com. We will reply within a reasonable time and, where the law sets a deadline, within that deadline.
2. Summary
- Your estimates stay on your phone. Business profile, customers, products, services and estimates are stored only on your device. We do not receive them, do not keep a copy and cannot recover them.
- The App has no account or login. We do not ask for your name, email or ID to use the App.
- Crash reports and usage data are sent to Google so we can fix errors and improve the App. They never include the content of your estimates or your customers' data.
- Ads: the free version shows ads from Google AdMob and mediation partners (Liftoff Monetize, Pangle, InMobi and AppLovin). Personalized ads depend on your permission and, in U.S. states with their own law, you can opt out of the "sale" or "sharing" of your data.
- Subscription: payment is handled by the Apple App Store or Google Play. We never receive your card details.
- We do not sell personal data for money.
3. Data that stays only on your device
| Data | Purpose |
|---|---|
| Business profile: name, tax ID (for example CPF, CNPJ, EIN or RFC), phone, email, address, payment methods and logo | Identify your business on estimates |
| Customers: name, ID, phone, email and address you enter | Identify who each estimate is for |
| Products and services: name, description, price, unit and cost | Build the items of your estimates |
| Estimates: items, quantities, prices, discounts, validity, terms, notes and status (pending, approved or declined) | Create, keep and track estimates |
| Country and currency, PDF colors, theme and privacy choices | Remember your preferences |
This data is stored in the storage area reserved for the App and is not sent to us or to third parties by the App. Legal basis: performance of the service you requested (LGPD, art. 7, V).
Your customers' data. When you add customers, you, as a business or professional, decide which of their data to keep and how to use it, and you are responsible to them for that processing. The App only stores that data on your device, without sending it to us.
Camera and photos. The App asks for camera or photo library access only when you choose a logo. The image is copied into the App's area on the device and is not sent to us.
Important: if you uninstall the App, clear its data or lose your device without a backup, this data will be deleted and we cannot recover it. The system's automatic backup (Google on Android, iCloud on iPhone) may keep a copy according to your account settings; that backup is controlled by you and by Google or Apple.
3.1 PDF, sharing and printing
The estimate PDF is created on the device. When you send or print it, the file is handed to the app or printer you choose and follows the rules of that destination.
3.2 Backup file
In Settings › Data backup (a Pro subscription feature) you can export a file with the data in the table above to move it to another device. The file is not password protected and contains your business and customer data. Once you export it, the file is in your custody and under your responsibility, including who you send it to.
4. Data processed by third-party services
None of the services below receives the data in section 3: business profile, customers, products, estimates or any text you type in the App.
4.1 Crash reports — Firebase Crashlytics (Google)
- Data: technical details of the error (where in the code it happened), device model, operating system version, App version and technical installation and session identifiers generated by Firebase.
- Purpose: find and fix crashes and keep the App working.
- Legal basis: legitimate interest (LGPD, art. 7, IX), limited to what this purpose requires.
- Retention: 90 days.
- Objection: write to the contact in section 1.
4.2 Usage data — Firebase Analytics (Google)
- Data: features used (for example, "opened the subscription screen" or "watched an ad to unlock an estimate"), a technical installation identifier generated by Firebase, device information, approximate location (city or region) inferred by Google from the IP address and, only when the system allows it (on iPhone, if you allow tracking), the advertising identifier.
- Purpose: understand how the App is used in order to improve it.
- Legal basis: legitimate interest (LGPD, art. 7, IX).
- Retention: event-level data for the period set in Google Analytics (2 months by default); after that, only aggregated totals.
- Objection: write to the contact in section 1.
4.3 Ads — Google AdMob and mediation partners
Applies to the free version of the App; subscribers do not see ads.
- Data: the device advertising identifier (on iPhone, only if you allow tracking in the system prompt), IP address, device and system information, approximate location inferred from the IP address and interactions with ads (impressions and taps).
- Mediation partners: to fill ad spaces, Google AdMob may request ads from Liftoff Monetize (Liftoff Mobile, Inc.), Pangle (Bytedance Pte. Ltd.), InMobi and AppLovin. When one of them serves the ad, it receives the data above, within the permission you gave.
- Formats: banners, full-screen ads (when opening the App and after completing some tasks, with frequency limits) and rewarded ads, which you choose to watch to unlock an extra estimate.
- Purposes: show ads, limit repetition, measure ad performance and prevent fraud and abuse.
- Personalized ads (based on your interests) are shown only with your permission: on iPhone, through Apple's tracking prompt; and, where the law of your region requires it, through Google's privacy message shown in the App. Legal basis: consent (LGPD, art. 7, I).
- Non-personalized ads use data only for serving, counting, frequency limits and fraud prevention. Legal basis: legitimate interest (LGPD, art. 7, IX), to keep the free version of the App available.
- How to control: on iPhone, in Settings › Privacy & Security › Tracking; on Android, in Settings › Google › Ads (reset or delete the advertising ID); and in the App under Settings › Ad privacy, when that option applies to your region. Subscribing removes ads.
- This data is also subject to each company's policy: Google, how Google uses data from partner apps, Liftoff, Pangle, InMobi and AppLovin.
4.4 Subscription — Apple App Store, Google Play and RevenueCat
- Payment: processed only by Apple or Google, depending on the store where you bought it. We do not receive or store card or payment details.
- Data: an anonymous customer identifier generated by the App, purchase history (product, price, currency, date, store transaction ID and subscription status), device platform and store country.
- Purposes: validate the purchase, grant and keep access to subscription features, restore purchases, handle requests and meet legal obligations.
- Campaign attribution (iPhone only): if the App was installed from an Apple Search Ads ad, the attribution token provided by Apple is sent to RevenueCat to measure the campaign. This token does not contain the advertising identifier.
- Processor: RevenueCat, Inc., which processes this data on our behalf (RevenueCat policy).
- Legal basis: performance of a contract (LGPD, art. 7, V), compliance with a legal obligation (art. 7, II) and regular exercise of rights (art. 7, VI).
- Retention: while the subscription exists and, after it ends, for as long as needed to meet legal obligations and to defend possible claims, within the applicable limitation periods.
4.5 Remote configuration — Firebase Remote Config (Google)
- Data: a technical installation identifier generated by Firebase, App version, operating system, device language and country.
- Purpose: adjust App settings without a new release, such as ad frequency limits.
- Legal basis: legitimate interest (LGPD, art. 7, IX).
4.6 App reminders — Firebase Cloud Messaging (Google)
- Data: a push token generated by Firebase for the device and the business country set in the App (Brazil, United States or Mexico), used to subscribe the device to that country's reminder group.
- Purpose: send daily reminders and announcements about the App in the language and at the time suited to your country.
- Legal basis: legitimate interest (LGPD, art. 7, IX).
- How to turn off: disable the App's notifications in the system settings.
4.7 Store review
The App may open Apple's or Google's review prompt. The review is sent directly to the store; we do not receive your name or its content before the store publishes it.
5. Sharing
We share data only with the processors and partners described in section 4 (Google, Liftoff, Pangle, InMobi, AppLovin and RevenueCat), to the extent needed for the stated purposes, and with public authorities when required by law or court order. We do not sell or rent personal data for money.
6. U.S. residents
Some U.S. state laws treat the use of personal data for personalized ads by the networks in section 4.3 as a "sale" or "sharing". If you are in one of those states, the App shows Google's privacy message, and you can opt out at any time in Settings › Ad privacy. That choice is passed on to Google AdMob and to the mediation networks, and ads become non-personalized. You can also request access, correction or deletion through the contact in section 1, and you will not be discriminated against for exercising these rights.
7. International transfers
Google, Liftoff, Pangle, InMobi, AppLovin and RevenueCat may process data on servers outside Brazil, including in the United States. These transfers happen to provide the services described in this Policy and rely on the contractual safeguards offered by these providers, under art. 33 of the LGPD.
8. Security
App data stays in the App's protected area on your device, accessible only to the App. Communication with the services in section 4 is encrypted. We recommend keeping your screen lock on and your system up to date. No system is fully immune to incidents; if a security incident may cause relevant risk or harm, we will notify Brazil's data protection authority (ANPD) and the affected data subjects, as required by the LGPD.
9. Your rights
Under art. 18 of the LGPD, you may request: confirmation that processing exists; access to your data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary data or data processed unlawfully; portability; deletion of data processed based on consent; information about sharing; information about the possibility of not giving consent and its consequences; and withdrawal of consent. You may also object to processing based on legitimate interest. In Mexico, you may exercise the rights of access, rectification, cancellation and opposition (ARCO rights); in the European Union, the equivalent rights under the General Data Protection Regulation.
- The data in section 3 is under your direct control: you change it in the App, export it in Data backup and delete it in the App or by uninstalling it.
- For ad choices, use the controls in section 4.3.
- For other requests, write to edcode.developer@gmail.com. Because the App does not collect your name or email, some third-party data cannot be linked to an identified person; in those cases we will tell you what we can do. Purchase requests may require the order number issued by the store.
You can also file a complaint with Brazil's National Data Protection Authority (ANPD) or with the authority of your country.
10. Children and teenagers
The App is intended for adults aged 18 or over who use it for professional activity and is not directed to children or teenagers. We do not knowingly collect data from anyone under 18. If you are a parent or guardian and know that a minor is using the App, contact us through section 1.
11. Changes to this Policy
We may update this Policy to reflect changes in the App, in the law or in third-party services. Material changes — such as a new type of data collected or a new purpose — will be announced in the App before they take effect and, where the law requires, will depend on new consent. The version and date at the top show the version in force.
12. Governing law and venue
This Policy is governed by Brazilian law, without prejudice to the rights granted by the law of the country where you live. The courts of the data subject's domicile have jurisdiction over any related matter.