Privacy

What we collect

Email: to sign in to the account and send the magic link.

Display name: what your village neighbors see.

Your device's time zone: so the app and the server agree on which day it is.

Your language (Portuguese or English): so notifications and emails reach you in the language of the app.

Your habits, the days they count, the reminder time and whether you marked them as public.

Your progress: check-offs, XP, coins, level, streak, shields, items bought and where they sit on the lot.

Village: which villages you belong to, your place on the map and the nudges sent and received.

Your device's push notification token, when you allow notifications.

Profile photo, if you choose one: it is shrunk on the device before upload and kept at a public address that only the app knows, so it can show up for your village neighbors.

Reports and blocks you make: who, for what reason and when.

We don't ask for your phone number, address, ID or location.

Why we keep it

For the app to work: without habits and check-offs there is no progress, and without an email there is no account.

For the village to work: your neighbors see your name, photo, level, streak and the habits you marked as public. They never see your email, your reminder time or your XP per habit.

To keep the community safe: from a resident's card you can report a photo, a name or a village name, and block the person. Reports are only read by the Vilume team, and the reported person doesn't learn who reported them. Blocked people get no notice and can no longer nudge you.

Who processes it

Supabase: database, authentication and server functions.

Expo: delivery of push notifications.

RevenueCat and your device's store: the Pro subscription and coin purchases.

PostHog: app usage events, with no automatic screen capture and no session recording. Only the events the app explicitly declares.

Sentry: error reports. We never identify you in Sentry.

These services process data on our behalf. We don't sell, rent or trade your data with anyone.

What we never record

Email, password, session token, push token, purchase receipt and what you type into forms never go into logs or error reports.

Data on your device

The app keeps what it has already loaded — habits, level, lot and village — on the device so it can open offline. This cache is erased when you sign out or delete your account.

Your appearance and language choices are kept on the device only.

Habit reminders are scheduled locally and don't go through any server.

Deleting your account

Profile, Settings, Delete account. Deletion erases the user and, with it, the profile photo, habits, check-offs, inventory, lot, villages, nudges, blocks and push tokens.

Reports made by you or against you are kept with no link to the account, for the Vilume team to review: the reason, the date and, for the reported person, the name, photo and village name at the time of the report. Every report is deleted 180 days after it was made.

Deletion is immediate and cannot be undone.

Your rights and contact

You can ask for access to, correction of or deletion of your data at any time.

Write to caiolacerdamt@gmail.com.

This website

This section is about this website. The rest of the page is about the app.

The Vilume website has no form, asks for no sign-up and uses no cookie or browser local storage. That is why it shows no cookie notice.

To know whether the page works, we count anonymous events with PostHog: the page visit, taps on the store buttons (which store and in which part of the page), the check-offs in "Try it here" and the QR code being shown. Your browser stores none of it: PostHog's state stays in the tab's memory and is gone when the tab closes. The events themselves are sent to PostHog and kept there by the service, with no link to your name or an account, no screen recording, no automatic capture and no IP address.

The website is hosted on Vercel, which keeps technical access logs (such as IP address, date and page requested) for a few days to serve the site and protect it from abuse.

The invite pages (/vila and /amigo) read the code only in your browser, to build the button that opens the app. Nothing about the village or the person is fetched or sent.

We use no ad pixel and no social network tool on this website.