Privacy & Security Policy

1. Who is responsible for the data

NOI is the controller of personal data processed to operate the application. For questions, requests or to exercise your rights, contact us at faleconosco@noi.app.br.

This Policy applies to the NOI app, the institutional website and associated support channels.

2. Data we may collect

Account and contact data: name, nickname, identification document, email, phone number, date of birth, sign-in method, state, city, postal code and neighborhood.

Family data: name, date of birth, sex and information or conditions entered by the guardian for each family profile.

Content and activity: favorites, saved or consumed content, podcast progress, event registrations, benefits used, place recommendations, photos, comments and reviews.

Location: device location, when authorized, to show nearby places and events or open map features. NOI does not rely on continuous background tracking for these functions.

Subscriptions and payments: plan, method, status, dates, amount, transaction identifier and, where applicable, card brand and last digits. Complete card details are processed by the payment provider.

Technical data: IP address, app version, device type and error or security logs when needed to keep the service stable and secure.

3. How we use data

We use data to create and authenticate accounts; personalize the experience; present relevant content, places and events; enable reviews, favorites, registrations and benefits; process subscriptions; provide support; prevent fraud and incidents; meet legal obligations; and improve NOI.

Processing may rely on performance of a contract, compliance with a legal obligation, consent where required and legitimate interests that are compatible with users' rights.

NOI does not sell personal data or use it for third-party behavioral advertising.

4. Sharing and service providers

We may share only the information required with providers of hosting and infrastructure, communications, maps, authentication, payments, technical analytics and support.

When you use Apple or Google sign-in, map resources or payments, those providers also process data under their own policies. Event and benefit partners receive only the information required to confirm a registration or benefit you requested.

Data may also be disclosed when required by law, ordered by a competent authority or necessary to protect rights, safety and service integrity.

5. Children and teenagers

NOI is intended for parents and guardians. Children's profiles should not be created or administered directly by children.

The guardian confirms that they have authority to enter family data and should provide only the information necessary to use the features. We apply enhanced care, specific purposes and data minimization when processing this information.

6. Retention and deletion

We keep data for as long as necessary to provide the service and fulfill the purposes described. After an account is closed, data is deleted or anonymized unless retention is required for legal or tax obligations, fraud prevention or the exercise of rights.

To request deletion of your account and related data, visit the account deletion page or email us from the registered address. We may confirm your identity before completing the request.

7. Your rights

Under applicable data protection laws, including Brazil's General Data Protection Law (LGPD), you may request confirmation of processing, access, correction, information about sharing, anonymization, restriction, deletion, portability and review of automated decisions where applicable.

You may also withdraw consent and object to specific processing. We will respond within applicable legal time frames after validating the requester's identity.

8. Security

We use technical and administrative measures appropriate to risk, including protected communications, passwords stored with hash and salt, access controls, security records and permission reviews.

No system is completely immune. If a relevant incident occurs, we will take containment measures and notify users and authorities where required by law.

9. International transfers

Some providers may process data outside Brazil. In these cases, we seek to use mechanisms and safeguards compatible with applicable law and limit sharing to what is necessary.

10. This website and cookies

This institutional website does not use advertising cookies. Essential infrastructure may record basic technical data for security and operation.

Links to external services lead to environments governed by each provider's own policies.

11. Updates and contact

We may update this Policy to reflect product improvements or legal changes. The current version will remain available on this page with its last-updated date.

For privacy or security questions, email faleconosco@noi.app.br.