Courtesy translation for review. The Portuguese version (Política de Privacidade) is the binding one.
Privacy Policy
Last updated: August 18, 2026 · In accordance with the Brazilian General Data Protection Law (LGPD, Law 13,709/2018)
This policy describes how the Chega app ("app", "we") handles your data. We are designed to collect as little as possible: the app requires no account and never asks for your CPF, e-mail or phone number. The one thing we do ask for is a first name, so the app can address you by name — it stays on the device and is not sent anywhere. You can leave it blank if you prefer.
1. Who the controller is
The data controller is BPM Systems. Data protection officer contact: [email protected].
2. Data that stays ONLY on your device
The most sensitive information you provide never leaves your phone:
- The first name you typed, if you typed one;
- Your onboarding quiz answers (how long you have been betting, weekly spend, motivation);
- Your quit date, streak and records;
- Your daily check-ins, mood and relapse logs;
- A flag recording that you completed self-exclusion on the government site (just a yes/no — we neither ask for nor store your CPF).
This data is stored locally on the device. We have no access to it and it is not sent to our servers. Tapping "Delete my data" in the app's Settings erases it immediately and permanently.
3. Data processed by third-party services
To work and improve, the app uses providers that process pseudonymized data (your name is never transmitted — identifiers are random device/installation codes):
| Service | Purpose | Data |
|---|---|---|
| Apple (App Store) | Payment and subscription processing | Payment data — handled by Apple; we never see your card |
| RevenueCat | Subscription state management | Anonymous installation identifier, purchase receipts, subscription status |
| Superwall | Displaying and optimizing the subscription screen | Anonymous identifier, paywall interaction events, and answers derived from the quiz (the motivation you picked and value ranges) used to personalise that screen — never your name |
| Mixpanel | Understanding app usage (analytics) | Anonymous identifier, usage events (e.g. "check-in completed"), device model, language |
These providers operate servers in the United States. International transfer happens under adequate contractual safeguards, per articles 33–36 of the LGPD.
4. Legal bases
- Contract performance (art. 7, V): processing your subscription and delivering the app's features;
- Legitimate interest (art. 7, IX): pseudonymized analytics to improve the product;
- Consent (art. 7, I): reminder notifications — you grant (or not) on the device and can revoke in Settings.
5. What we do NOT do
- We do not sell your data;
- We do not share data with betting operators, advertisers or data brokers;
- We do not use your recovery data for advertising;
- We do not collect location, contacts, photos or browsing history.
6. Retention
Local data: until you delete it or uninstall the app. Subscription data (RevenueCat): while the consumer relationship exists and for applicable tax/legal periods. Analytics: aggregated or deleted within 24 months.
7. Your rights (LGPD art. 18)
You may request confirmation of processing, access, correction, anonymization, portability, deletion and information about sharing. For local data, use "Delete my data" in the app. For data held by the services above, write to [email protected] — we reply within 15 days. You may also petition the ANPD (Brazil's data protection authority).
8. Children and teenagers
The app is intended for adults (18+) and is not directed at minors. Betting is illegal for under-18s in Brazil.
9. Security
We rely on iOS platform protections (sandboxing, system encryption at rest) and communicate exclusively over HTTPS/TLS with the services listed.
10. Changes
Relevant changes to this policy will be published on this page with a new update date.
11. A note about health
Chega is a habit-change support program. It does not replace diagnosis, medical or psychological treatment. In a crisis, call CVV 188 (24h, free, Brazil).