Privacy Policy — TOGETTHERE

Last updated: July 1, 2026

This Privacy Policy explains how Guilherme Rizzo Carvalhal ("I", "me", "operator", "TOGETTHERE", or the "App"), an individual established at Rua Itacema 381, São Paulo, SP, Brazil, collects, uses, and shares information through the TOGETTHERE mobile application. By using the App, you agree to this Policy.

1. Data Controller

TOGETTHERE is operated by Guilherme Rizzo Carvalhal, an individual (pessoa física), located at Rua Itacema 381, São Paulo, SP, Brazil. For any privacy question, contact me at grc9978@gmail.com.

2. Information I Collect

Account information: name, email address, phone number, profile photo, birthday, Instagram handle.
Live location data (Radar): when you enable location sharing in a gathering, I collect your device location to show it to other members of that gathering. Location sharing is off by default and controlled per your settings; it can be paused or turned off at any time.
Trip & gathering content: items you add (flights, stays, rides, activities), dates, addresses, notes, expenses, tasks, and check-ins.
Preferences: food, place, activity, and dietary preferences you add.
Automatic data: device identifiers, app usage, and diagnostic/crash data.

3. How I Use Your Information

To create and manage your account and gatherings; show your live location to members you granted access to (Radar); generate AI-powered suggestions on where to eat and what to do; calculate shared expenses; coordinate group plans; maintain security; and improve the App.

4. Legal Basis (LGPD / GDPR)

I process your data based on: your consent (location sharing, preferences); performance of a contract (providing the App); and legitimate interests (security, improvement). Under Brazil's LGPD (Lei nº 13.709/2018) and the GDPR, you may withdraw consent at any time.

5. Third-Party Services

I share limited data with service providers that help operate the App:

Google Maps Platform / Google Places — location, place lookup, and photos.
Google Gemini — AI-generated suggestions.
Base44 — application hosting and backend infrastructure. These providers process data under their own privacy terms. I do not sell your personal information.

6. Location Sharing & Consent

Live location is shared only with members of a gathering you belong to and only with the friendship/visibility permissions you control. You can set precision, enable ghost mode, or disable sharing. When sharing is off, I stop collecting your location.

7. Data Retention

I keep your data while your account is active. You can delete your account and associated data by contacting grc9978@gmail.com. I will delete or anonymize your data within 30 days of a valid request, except where retention is legally required.

8. Your Rights

Under the LGPD, GDPR, and CCPA/CPRA, you have the right to access, correct, delete, restrict, or port your data, and to object to processing. Brazilian users may also request confirmation of processing and information about data sharing. California users may opt out of the "sale" or "sharing" of data (I do not sell data). To exercise these rights, contact grc9978@gmail.com.

9. Children

The App is not intended for anyone under 18. I do not knowingly collect data from children below that age.

10. Security

I use reasonable technical and organizational measures to protect your data. No method of transmission or storage is 100% secure.

11. International Transfers

Your data may be processed outside your country. I rely on appropriate safeguards for international transfers as required by the LGPD and GDPR.

12. Changes

I may update this Policy. Material changes will be notified in-app. Continued use after the effective date constitutes acceptance.

13. Contact

Guilherme Rizzo Carvalhal Rua Itacema 381, São Paulo, SP, Brazil grc9978@gmail.com