Privacy Policy – Equalize

Last updated: April 23, 2026

This Privacy Policy describes how Equalize collects, uses, stores, shares, and protects personal data and other information related to the use of its application, website, and related services (the “Platform”).

Equalize is provided by TECSEM Tecnologia em Sistemas Embarcados, a Brazilian legal entity registered under CNPJ No. 37.290.675/0001-22, headquartered in Porto Alegre, Rio Grande do Sul, Brazil (“TECSEM”, “Equalize”, “we”, “us”, or “our”).

By using Equalize, you acknowledge that you have read this Privacy Policy and understand how your data is processed.

1. What data we process

We may process the following categories of data, depending on the features you use:

1.1. Account and authentication data

When you create an account or use supported sign-in methods, we may process data such as:

• name;
• email address;
• profile picture;
• authentication identifiers provided by login providers.

This data is used for authentication, account creation and management, user identification, and basic personalization of the experience.

1.2. Financial data and data provided by you

We process data that you voluntarily enter, submit, import, or organize on the Platform, such as:

• transactions;
• categories;
• accounts;
• budgets;
• financial entries and history;
• data extracted from files imported by you, including OFX, PDF, CSV, and PNG files, when you use supported features.

This data is used to enable Equalize’s core features, including financial organization, reports, charts, automations, and synchronization across devices.

1.3. Voice-related data

If you use voice input features:

• audio is captured and processed by your device’s native operating system resources;
• Equalize does not store audio;
• Equalize does not retain voice recordings on its servers;
• after speech is converted into text by the device’s resources, the resulting text may be used to create or suggest transactions.

1.4. Android notification data

If you grant specific permission on Android for notification access, Equalize may process notifications issued by banking, card, or financial service apps in order to suggest automatic entries.

For this feature:

• access depends on your express authorization;
• raw notification content is processed locally on the device;
• raw notification content is not sent to our servers;
• only the transaction generated or confirmed by you may be saved and synchronized with your account.

1.5. Subscription and payment data

If you purchase a subscription, we may process data related to the subscription, plan status, purchase identifiers, receipts, renewal status, and technical information necessary to validate and manage your subscription.

The payment processing itself may be carried out by third parties, depending on the purchase channel.

1.6. Technical and security data

We may also process technical data necessary for the operation, security, and support of the Platform, such as:

• user identifiers;
• device or installation identifiers, where applicable;
• session and authentication technical information;
• technical logs necessary for fraud prevention, security, and operation of the service.

2. How we use data

We use processed data for the following purposes:

• to authenticate your account and provide access to the Platform;
• to store, organize, and display your financial and asset-related data;
• to synchronize data across devices and platforms;
• to process features requested by you, including imports, automations, and voice input;
• to generate transaction suggestions and facilitate use of the app;
• to enable subscription purchase, validation, renewal, management, and support;
• to provide technical support and user assistance;
• to protect the security of the Platform and prevent fraud and abuse;
• to comply with legal, regulatory, and contractual obligations;
• to improve Equalize’s performance, stability, and features.

3. Legal bases for processing

Where applicable under data protection laws, including the Brazilian General Data Protection Law (LGPD), we may process data under different legal bases, including:

• performance of a contract or pre-contractual procedures related to use of the Platform;
• compliance with legal or regulatory obligations;
• regular exercise of rights in judicial, administrative, or arbitration proceedings;
• legitimate interests, where applicable and subject to the rights of the data subject;
• consent, where required for specific situations.

4. Voice processing

When you use voice input:

• speech recognition is performed by native resources made available by the device operating system and may also be subject to the policies of the platform provider, such as Google or Apple;
• Equalize does not store audio on its servers;
• Equalize does not retain voice recordings;
• the text resulting from transcription may be sent to the Google Gemini API solely for interpretation and structuring of the information necessary to generate transactions;
• Equalize does not send audio to Gemini;
• Equalize does not retain that content beyond what is necessary to process the feature.

5. Local storage, synchronization, and retention

User data may be stored locally on the device and synchronized with the cloud infrastructure used by the Platform in order to enable continuity of use, operational backup, authentication, and synchronization across devices.

As a general rule:

• your data remains stored while your account is active or until you request deletion;
• deletion requests made directly in the app are processed immediately;
• requests made by email may be processed within up to 7 (seven) business days;
• once account deletion is confirmed, associated data will be erased, except where retention is required for legal or regulatory compliance, fraud prevention, security, or the regular exercise of rights.

Certain minimal technical records may be retained for the period necessary to comply with legal obligations, auditing, security, and operational integrity.

6. Data sharing and service providers

We may use third-party providers to enable Platform features. These providers process data only to the extent necessary to provide their respective services, subject to their own policies and applicable law.

Equalize does not sell personal data and does not share personal data for third-party advertising purposes.

6.1. Supabase

We use Supabase for authentication, database services, synchronization, and hosting of application data. Account data and financial data may be stored in this infrastructure to enable Equalize to function.

6.2. Google Play, Apple, and Stripe

When you purchase a subscription, payment processing may be handled by third parties depending on the purchase channel, including:

• Google Play, for purchases made on Android devices;
• Apple, for purchases made on iOS devices;
• Stripe, for purchases made on the web.

These providers may process payment data, purchase identifiers, receipts, subscription status, and information necessary for billing, renewal, cancellation, fraud prevention, and legal compliance.

6.3. RevenueCat

We use RevenueCat for technical subscription management, app store integration, receipt validation, synchronization of subscription status across platforms, and maintenance of the information necessary to identify active subscribers and the status of their subscriptions.

6.4. Google Gemini API

We use the Google Gemini API exclusively to process the text resulting from features used by you, such as text interpretation for transaction creation. Equalize does not send audio to Gemini.

7. International data transfers

Because we use infrastructure, authentication, payment, subscription, and technology processing providers, some data may be processed or stored outside Brazil.

In these situations, we take reasonable measures to engage reputable vendors and structure the processing in a manner compatible with applicable law.

8. Your rights

Under applicable law, including the Brazilian General Data Protection Law (LGPD), you may request, where applicable:

• confirmation of the existence of processing;
• access to your data;
• correction of incomplete, inaccurate, or outdated data;
• anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
• portability, where applicable;
• information about data sharing with third parties;
• information about the possibility of denying consent and the consequences of such denial;
• withdrawal of consent, where processing is based on consent;
• deletion of your account and associated data, subject to legal retention requirements.

9. Account and data deletion

You may request deletion of your account and data in two ways:

• directly through the app settings; or
• by sending a request to the email address provided in this Policy.

When deletion is performed through the app, processing will occur immediately. When the request is made by email, the response time may be up to 7 (seven) business days.

After deletion, data linked to the account will be erased, except where retention is necessary for legal or regulatory compliance, security, fraud prevention, or the regular exercise of rights.

10. Security

We adopt reasonable technical and administrative measures to protect data against unauthorized access, loss, alteration, disclosure, or improper destruction.

These measures include, where applicable:

• encryption in transit;
• authentication controls;
• logical data segregation by user;
• security mechanisms of the infrastructure used.

Despite these efforts, no environment is completely immune to risk. For this reason, users should also keep their credentials confidential and adopt good security practices on their devices.

11. Children and teenagers

The Platform is not directed to children or teenagers who do not have legal capacity or authorization from their legal guardians, in accordance with applicable law. If we identify improper processing of personal data in violation of applicable law, we may take measures to restrict, suspend, or delete the relevant account.

12. Changes to this Policy

This Privacy Policy may be updated from time to time to reflect legal, regulatory, operational, or functional changes to the Platform.

The current version will always indicate the date of the latest update. We recommend that you review this document periodically.

13. Contact

For questions, personal data requests, or account deletion requests, please contact:

TECSEM Tecnologia em Sistemas Embarcados
CNPJ: 37.290.675/0001-22
Porto Alegre - RS - Brazil
Email: tiago@tecsem.com.br