Privacy Policy — LiquidBrew

Last updated: August 31, 2025

Your privacy is important to us. This Privacy Policy explains how LiquidBrew, owned and operated by Felipe Mathies (individual), collects, uses, shares, and protects user information.

1. Information we collect

  • Account data: name, email, and password, used for authentication and account identification.

  • Optional location data: city provided when registering a water brand available in a given region (not directly linked to the user profile).

  • Technical and usage data: automatically collected via third-party services (e.g., Firebase Analytics and Crashlytics) — performance metrics, crash reports, and usage statistics.

  • Social login: optional authentication via Apple or Google.

2. Purpose of use

We use data to:

  • Enable login and manage user profiles;

  • Save and organize information related to water and coffee profiles;

  • Improve experience through performance and usability metrics;

  • Ensure stability and fix technical issues.

We do not use your data for marketing or behavioral advertising.

Legal bases

We process data on the basis of: (i) performance of a contract (account creation and management); (ii) legitimate interests (improving the app, metrics, stability, and fraud prevention), with safeguards and data minimization; and (iii) compliance with legal/regulatory obligations, where applicable.

3. Data sharing

  • We do not sell or share personal data with third parties for commercial purposes.

  • Data is processed by providers strictly necessary for app operation (e.g., Google Firebase) for authentication, analytics, and crash reporting, under their data processing terms.

4. Storage and security

  • Storage on Firebase/Google Cloud (US – NAM5 region).

  • Technical and organizational measures: encryption in transit and at rest, role-based access controls (RBAC), logging/auditing, and the principle of least privilege.

No method of transmission or storage is 100% secure.

International transfers

Your data may be processed in the United States (Firebase/Google Cloud – NAM5). We implement appropriate transfer safeguards, including the EU Standard Contractual Clauses (SCCs) and LGPD-equivalent safeguards. Google/Firebase acts as a processor.

Incident notification

If a security incident poses a material risk to data subjects, we will assess the impact and, where required, notify authorities and affected users in accordance with applicable law.

5. Data retention

  • We retain data while the account remains active.

  • Operational backups may persist for up to 90 days.

  • Technical/crash logs may be retained for up to 18 months for diagnostics and security.

  • When you delete your account in-app, we begin deletion; after backup periods, data becomes non-recoverable, except where longer retention is required by law.

6. Your rights

Subject to LGPD, GDPR, and applicable laws, you may:

  • Confirm whether your data is processed;

  • Access, correct, and update information;

  • Request deletion of your account and data;

  • Request data portability.
    Exercise your rights in-app (account deletion) or via felipe.mathies@gmail.com.

California (CCPA) rights

We do not sell or share personal information for behavioral advertising. If this changes, we will provide a “Do Not Sell or Share My Personal Information” mechanism and update this policy. California residents may exercise access, deletion, and non-discrimination rights via the email provided.

7. Cookies and similar technologies

We use Firebase authentication and analytics services, which may employ identifiers and cookie-like technologies required for proper operation (particularly metrics, performance, and stability).

8. Children and minors

LiquidBrew is not directed to children. We do not knowingly collect data from users under 16 in the EU/EEA/UK and under 13 elsewhere. If we become aware of improper collection, we will remove such data upon request.

9. Notifications

We may send push notifications in the future to share updates and features. You can manage permissions in your device settings. We will not send marketing communications without prior consent.

10. Policy updates

We may update this policy from time to time. Changes will be published on this page with the last-updated date and take effect immediately.

11. Contact

Questions or privacy requests: felipe.mathies@gmail.com