Last updated: September 18, 2026. This policy describes how FireSafe ITM collects, uses, shares and protects your data, in compliance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018) and the policies of the Apple App Store and Google Play. This is a translation of the Portuguese version; in case of conflict, the Portuguese version prevails.
1. Who we are (Controller)
FireSafe ITM is operated by Cleiton Tolentino de Almeida, Brazil, the developer responsible for the app, under the Jonel Incêndio brand, acting as the controller of personal data. For privacy questions and to exercise your rights, contact: suporte@firesafeitm.com.
2. Data we collect
| Category | Examples | Purpose |
|---|---|---|
| Account data | Name, email, password (stored securely by the authentication provider) | Create and authenticate your account |
| Company/team data | Company name, tax ID, address, contacts, team members | Multi-company management and collaboration |
| Client/site data | Name, address and phone of the inspected properties/sites | Planning and identifying inspections |
| Inspection data | Checklists, notes, signatures, person in charge, date/time | Generate technical ITM reports |
| Photos and attachments | Photos of equipment taken during the inspection | Document the condition of the equipment |
| Precise location | GPS coordinates of the inspection site | Record the site on the report (only at the time of inspection; never in the background) |
| Notifications | Push token, reminder preferences | Send reminders for scheduled inspections |
| Subscription and license | Transaction/receipt identifier provided by the store, plan, expiration date, corporate access key | Validate and unlock paid access |
Location is collected only in the foreground, while you are using the app, after you tap "Record location (GPS)" inside an inspection — never continuously or in the background.
3. How we use data
We use your data to: provide and operate the ITM service; generate and share PDF reports (when you choose to); send reminders; sync data across your devices; validate subscriptions and licenses; and comply with legal obligations. The legal bases (LGPD) are performance of the contract/service, your consent (e.g. location, notifications) and our legitimate interest in the security and improvement of the app.
4. Payments and subscriptions
When you purchase a subscription inside the app, payment is processed entirely by the Apple App Store or Google Play. We do not receive, see or store your credit card or bank details.
We receive from the store only what is needed to unlock access: the transaction identifier (receipt), the plan purchased and the expiration date. Apple and Google handle this data under their own privacy policies, over which we have no control.
5. Sharing with third parties
We do not sell your data. We share it only with the providers that make the service possible (processors):
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication and file storage | Brazil (São Paulo) |
| Expo | Push notification delivery | United States |
| Brevo | Transactional email (invitations, daily summaries, reminders) | European Union |
| Apple / Google | Payment processing and subscription validation, when you subscribe in the app | United States |
We do not use advertising SDKs, marketing analytics or third-party tracking. Your data may also be disclosed when required by law, court order or a request from a competent authority.
6. Where data is stored and international transfers
Inspection data, photos and accounts are stored on your device and, when you are signed in, synced to servers located in Brazil (São Paulo region).
Some ancillary services — push notifications, transactional email and payment processing — involve international transfers of data to the United States and the European Union, under articles 33 and following of the LGPD. These transfers are limited to the minimum needed for the purpose (for example, the email address of the recipient of an invitation) and are made to providers that offer contractual data protection safeguards.
7. Security
We apply: encryption in transit (HTTPS), per-user/per-company isolation through database access rules (Row Level Security), and private file storage reachable only through signed, time-limited URLs. No system is completely immune to incidents; in the event of a relevant security incident, we will notify you and the Brazilian Data Protection Authority (ANPD) as required by the LGPD.
8. Retention
We keep your data while your account is active or as needed for the purposes above and for legal obligations. You can delete it at any time (section 10).
9. Your rights
You may request: confirmation of and access to your data; correction; anonymization or deletion; portability; information about sharing; and withdrawal of consent. To exercise these rights, contact suporte@firesafeitm.com. We will respond within 15 days. You can also revoke location and notification permissions at any time in your device settings.
10. Account and data deletion
You can delete your account and personal data directly in the app, under Profile > Privacy and Terms > Delete Account, or request deletion through firesafeitm.com/excluir-conta or by email at suporte@firesafeitm.com. We complete the request within 30 days, except for data the law requires us to retain.
Deleting your account does not cancel subscriptions purchased through the App Store or Google Play — cancel them in your account settings in the respective store as well.
11. Children
FireSafe ITM is intended for professionals and is not directed at anyone under 18. We do not knowingly collect data from children or adolescents.
12. Changes
We may update this policy. Material changes will be communicated in the app or by email. The date at the top shows the version in force.