Privacy Policy

1. Data controller

The controller is Costa Nova Associados em Assessoria Empresarial LTDA, CNPJ 61.988.928/0001-10, the company responsible for FamiZelo. For privacy matters, email suporte@famizelo.com.br.

2. Data we process

• Account and access: a protected Apple Account identifier and, when Apple provides it, an email hash; or a hash of the verified WhatsApp number; plus name, circle role, family relationship, invited members, and authentication records.
• Care and health: check-ins, medication schedules and confirmations, appointments, tasks, events, health readings, and information entered by the family.
• FamiZelo Listens: health entries typed or dictated by the person, the transcript they review, confirmed symptoms, and recurring signals derived from those entries. The full entry is private by default.
• Apple Health and Health Connect: only after permission on the person's device, compatible heart-rate and oxygen-saturation data, time, source, and device information. FamiZelo requests read-only Apple Health access and never writes Apple Health data.
• Documents and private requests: files the user chooses to store, plus the content, amount, and selected recipients of private requests. Sensitive details never appear in notification text.
• Protection and technical data: messages voluntarily submitted for scam-signal analysis, generated alerts, IP address, device type, session, notification subscription, security events, and failures required to operate and protect the service.

Families should record only information needed for care and should not include third-party data without authorization.

3. How we use data and our legal bases

We use data to authenticate users, create and protect family circles, organize routines, display information to authorized members, deliver alerts, provide support, prevent fraud, correct failures, and comply with legal duties.

Depending on the context, processing relies on providing the requested service, compliance with law, fraud prevention and security, and — for sensitive care and health data — the specific, prominent consent of the person receiving care or action by their legal representative.

4. Authorization and family access

The circle administrator must record whether the person receiving care authorized processing or whether a legal representative is acting for them. Authorization can be withdrawn. Only active, authorized circle members can access shared data, and the full FamiZelo Listens narrative remains private unless the person explicitly chooses to share summarized signals.

5. Service providers and international transfers

We may use providers for infrastructure, storage, authentication, communications, support, security, transcription, and artificial-intelligence processing. They receive only the data needed for the requested operation and act as processors under contractual and access controls. Some may process data outside Brazil, where we use appropriate safeguards.

We do not sell personal data. Health data is never used for advertising, marketing, employment, credit, or insurance decisions, and it is not transferred to data brokers.

6. FamiZelo Listens and automated organization

The microphone activates only after the person takes an action and grants device permission. Audio is transmitted temporarily for transcription and is not stored by FamiZelo. The person reviews and corrects the transcript before saving it and can delete an entry later.

Automated analysis organizes statements and can highlight recurring or explicit attention signals. It does not determine a disease, diagnose, recommend treatment, or replace human assessment.

7. Device health data and alerts

Health integration is optional and starts only after protected authorization on the person's device. FamiZelo imports only compatible, user-authorized readings, preserves their source, and avoids duplicates. A reading outside a family-configured range may prompt a well-being question, but this workflow is not continuous clinical monitoring and never declares a medical emergency.

8. Security and retention

Controls include Apple Account or one-time-code authentication, cryptographic credential verification, data isolation by circle, restricted document access, short-lived file links, audit events, and database-level authorization. We retain data while the account or circle is active and for any additional period required for security, legal duties, or the exercise of rights.

Deleting an account removes the access profile, private requests, personal notifications, and personal scam checks. Shared care records may remain pseudonymized for remaining circle members; a circle with no other member is deleted with its files.

9. Your rights

You may request confirmation, access, correction, information about sharing, portability where applicable, review of automated decisions, withdrawal of consent, and deletion or anonymization where provided by law. We may verify your identity before fulfilling a request.

You can delete your account inside the app or follow the public deletion instructions. For other requests, email suporte@famizelo.com.br.

10. Local storage and notifications

Essential browser storage may maintain a session and preferences. Authenticated screens, API responses, and circle data are not stored in the offline cache. With permission, we register a technical device subscription for alerts. Lock-screen text is deliberately generic and never reveals a medication name, dose, document, medical detail, amount, or private-request content.

11. Policy changes

We may update this Policy to reflect product or legal changes. Material changes will be highlighted in the website or app with a new update date.