Privacy Policy

Last updated: September 11, 2026

This Privacy Policy explains what personal data Bills42 ("we") collects, why we collect it, how we use it, and what your rights are, in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018 — "LGPD") and, where applicable, other data protection legislation.

1. Who we are

Bills42 is an app for families to track bills to pay together. The data controller is Bills42. For any privacy matter, reach us at contact@bills42.app.

2. Data we collect

Account data

• Name, email, and profile photo provided by your Apple or Google sign-in. You can change your display name in the app at any time. We never create or store passwords.
• Preferred language and app settings.

Home and bill data

• Homes you belong to (home name, members, and when each person joined).
• Bills you and your family add: title, amount, due date, type (one-time, monthly, or installments), who is responsible, and payment records (who paid, when, how much, and who recorded the payment).

Technical data

• Your device's notification token, used exclusively to deliver the app's reminders and alerts.
• Minimal technical logs generated by the infrastructure (for example, server function execution logs), used for security and bug fixing.

Bills42 does not collect banking data, does not access your bank account, does not process bill payments, and does not request photos or documents.

3. How we use the data

• Providing the service: syncing bills among home members in real time, sending email invites, and keeping the payment history.
• Reminders: sending due-date notifications to the responsible person and alerts to the home when a bill is about to fall due or is overdue.
• Bills42+ subscription: recognizing your subscription to remove ads, enable extra reminders, and unlock multiple homes.
• Ads (free plan): showing non-personalized ads — see section 5.
• Security and improvement: preventing misuse and fixing defects.

The legal bases we rely on are performance of a contract (providing the service you requested), legitimate interest (security and service improvement), and consent where required (for example, the notification permission on your device).

4. Who the data is shared with

• Members of your home: by product design, people in the same home see the home's bills, the payment records, and your name and profile photo.
• Processors we use to operate:
  • Google Firebase (authentication, database, server functions, and notification delivery) — data stored in the europe-west1 region (Belgium, European Union).
  • Google AdMob (ads on the free plan) — configured for non-personalized ads.
  • RevenueCat and the Apple App Store / Google Play stores (Bills42+ subscription management). We never have access to your card details.
  • Sentry (app crash reporting, hosted in the European Union). Receives only technical error data — device model, OS and app version, stack trace — never your name, email or bill contents.
  • A transactional email provider, used only to deliver the invites you send.

We do not sell your personal data and do not share it with third parties for their own marketing.

International transfer: because data is stored in the European Union, personal data collected in Brazil is transferred internationally. This transfer relies on the safeguards of the LGPD (Art. 33 et seq.) and on Google's data protection terms, which include standard contractual clauses. For users in the European Economic Area, processing also complies with the General Data Protection Regulation (GDPR).

5. Ads

On the free plan, the app shows Google AdMob ads configured as non-personalized: we request ads without interest profiling. Bills42+ subscribers see no ads. Should ad behavior change in the future (for example, personalized ads subject to consent), this policy will be updated first.

6. How long we keep the data

• Account and home data: for as long as your account exists.
• Bills and payment history: for as long as the home exists — this history belongs to the home and remains visible to the other members even if you leave it.
• Notification tokens: removed automatically when they stop being valid.

7. Your rights (LGPD and GDPR)

You may, at any time, request: confirmation of processing, access, correction, anonymization, portability, information about sharing, review of automated decisions, and deletion of your personal data. If you are in the European Economic Area, you have equivalent rights under the GDPR, including the right to lodge a complaint with a supervisory authority. To exercise any right, write to contact@bills42.app. We respond within the deadlines of the applicable legislation. You can also revoke the notification permission in your device settings and cancel the subscription through the store. To delete your account, use Profile → "Delete my account" in the app, or see how to delete your account.

8. Security

Data travels encrypted (TLS) and is stored on Google Firebase infrastructure, with access rules that ensure only members of a home can access that home's data. No system is 100% secure, but we apply industry practices and limit access to the minimum necessary.

9. Children and teenagers

Bills42 is intended for people aged 18 and over. We do not knowingly collect data from children.

10. Changes to this policy

If we make relevant changes to this policy, we will notify you through the app or by email before the change takes effect. The date of the last update appears at the top of this page.