Privacy Policy

The App is provided by Danilo Gonçalves Furtado (“the Provider”), the developer of AgendaSharp on the Google Play Store and Apple App Store. For any privacy-related request, you can reach us at supportagendasharp@gmail.com.

AgendaSharp processes two different categories of personal data, with two different responsibilities:

• Account data. For data about you as a registered user (the business owner or a staff member), we act as the data controller.
• Business and customer data you enter. When you, as a business, add information about your own clients, staff, appointments, and sales, you are the controller of that data and we act as a data processor on your behalf. You are responsible for having a lawful basis to collect and store your clients’ information and for informing them as required by applicable law.

3.1 Account and profile information

• Your name and email address.
• Your password, which is handled and stored securely by Google Firebase Authentication — we never see or store your raw password.
• If you sign in with Google, basic profile information from your Google account (name, email, and profile photo) used to create or access your account.
• An optional profile photo you choose from your gallery or capture with your camera.
• Your role and permissions within a business, and an internal session identifier used to keep your account secure on a single active device.

3.2 Business and customer data you provide

To deliver the service, the App stores the business data you enter, which may include:

• Company information: business name, address, phone, working hours, and subscription plan.
• Staff information: name, email, role, and commission settings.
• Customer information: name, phone number, email, date of birth, address, and free-text notes.
• Operational records: appointments, services, prices, durations, product sales, commissions, and cancellation logs.
• Payment metadata: the payment method category selected at checkout (e.g. cash, Pix, credit, debit, voucher). We do not collect or store card numbers or bank account details.

3.3 Device and technical information

• A push notification token and the device platform (Android or iOS), used to deliver notifications.
• An app attestation token (Firebase App Check / Play Integrity) used to verify that requests come from a genuine, untampered installation.
• Technical data automatically collected by our infrastructure provider (such as IP address and timestamps) for security and reliability.

3.4 Usage and diagnostics

• Analytics events (e.g. app opens, sign-in, sign-up, appointment created/cancelled/paid) collected through Firebase Analytics to understand feature usage and improve the App.
• Crash and diagnostic reports collected through Firebase Crashlytics when the App encounters an error, to help us fix bugs and improve stability.
• A Firebase user identifier associated with analytics and crash reports for an authenticated session.

• To create and manage your account and authenticate your access.
• To provide the core features of the App: scheduling, customer management, services, sales, and earnings insights.
• To send push notifications related to your account and activity.
• To keep the service secure, prevent abuse, and enforce single-device session protection.
• To analyze usage and diagnose crashes so we can improve performance and reliability.
• To comply with legal obligations and respond to lawful requests.

Where required by law (such as the Brazilian LGPD or the EU/UK GDPR), we process personal data based on: performance of a contract (providing the App you signed up for), legitimate interests (security, fraud prevention, and product improvement), consent (e.g. push notifications and optional analytics, where applicable), and legal obligations.

We use Firebase Cloud Messaging to send notifications related to your account and business activity. You can disable notifications at any time in your device settings. Disabling notifications does not delete your account but may limit timely alerts.

We share data only with trusted service providers that help us operate the App:

• Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, Analytics, Crashlytics, App Check, Remote Config) — our core backend and infrastructure provider.
• Google Sign-In — when you choose to authenticate with your Google account.

These providers process data on our behalf under their own terms. For more information, see Google’s Privacy Policy and Firebase Privacy and Security. We may also disclose information if required by law or to protect our rights and the safety of users.

Your data is stored on Google Cloud / Firebase infrastructure. Some processing (such as our backend functions) runs in the South America (São Paulo) region, while certain Google services may process data in other regions. Where data is transferred internationally, it is protected by appropriate safeguards required under applicable law. The App also keeps a local offline cache on your device so it can work without a connection; this cache is cleared when you sign out.

We retain account and business data for as long as your account is active or as needed to provide the service. When you delete your account, or upon a verified deletion request, we delete or anonymize your personal data within a reasonable period, except where we must retain it to comply with legal, accounting, or security obligations.

We use industry-standard safeguards, including encryption in transit, authenticated access, app attestation (App Check / Play Integrity), and single-device session protection. No method of transmission or storage is 100% secure, but we work to protect your information using reasonable technical and organizational measures.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (see Account and data deletion).
• Object to or restrict certain processing.
• Request a portable copy of your data.
• Withdraw consent at any time, where processing is based on consent.

To exercise these rights, contact us at supportagendasharp@gmail.com. We will respond within the timeframe required by applicable law.

You can request deletion of your account and associated personal data in either of the following ways:

• In the App: open your profile / settings and follow the account deletion option, where available.
• By email: send a request from your registered email to supportagendasharp@gmail.com with the subject “Account deletion”.

Once verified, we will delete your account profile, authentication record, and the personal data associated with it. Some records may be retained for a limited period when required by law or for legitimate security and accounting purposes, after which they are deleted or anonymized.

AgendaSharp is a business tool intended for use by professionals and business owners. It is not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the App. Your continued use of the App after an update constitutes acceptance of the revised Policy.

If you have questions about this Privacy Policy or how we handle your data, contact us at: