Privacy and terms

meukanto is a planning app for people who are moving out or setting up their first home, maintained by Silas Silva Lima de Matos (an individual), who is the controller of your personal data under the Brazilian General Data Protection Law (Law No. 13,709/2018, the LGPD).

meukanto does not use third-party artificial intelligence services. The home list, the amounts, the summary and the next steps of your plan are calculated and written on your device, and none of it is sent to an AI service.

How it works. Whoever creates the list gets a public page with its own link. Anyone with the link sees the items, the prices (if the owner allows) and the status of each one. No account or app download is needed.

What the guest enters and who sees it.

• To reserve a gift, the guest enters name and WhatsApp. If they choose “I will have it delivered”, they also enter their email and confirm it with a 6-digit code we send them. Only the list owner sees this data. Other guests only see that the item is reserved.
• To report a Pix, they enter name, amount and, if they want, a message. The owner sees this data and confirms receipt.
• To leave a message, they enter name and text. If they check “Only the owner sees”, the message does not appear anywhere public.
• If the owner turns on “Surprise mode”, the app does not show them who gave what until the day of the party.

Pix. The Pix is made in the guest’s bank app, to the key the owner registered. meukanto takes no part in the transaction: it does not receive the money, charge a fee or see payments. The “I already made the Pix” button is the guest’s declaration; the owner confirms it, in their own bank. To generate the code, we show the owner’s Pix key to the guest on the payment screen.

Address. The delivery address is only sent to the guest the owner releases it to, and only after the owner releases it. It arrives by email, at the email address the guest confirmed, and does not appear on the public page. The confirmation code and the address email are sent through Resend.

Guest’s browser. The page uses no cookies or analytics tools. It stores, in the browser’s local storage, the name, WhatsApp and codes the guest has already used on that list. Clearing the site data in the browser removes them.

Abuse limits. To prevent abuse, the page limits how many reservations, Pix reports and messages fit in a few minutes per list. This limit does not use the IP address. As on any website, the server keeps technical access logs (which may include the IP) for security and to fix failures.

About third-party data. Guests enter their own data directly on the page. The list owner receives this data to organize the party and must use it only for that (for example, to talk about the gift).

• Performance of the service: using your answers to generate and store your plan.
• Legitimate interest: preventing abuse, fixing failures and understanding app usage anonymously (you can turn it off in Profile).
• Performance of the service (gift list): storing the list, showing the page to guests and recording reservations, reported Pix payments and messages.
• Consent: approximate location, access to the photo you choose for your profile and notifications. The reminders to save money, task deadlines and the end of the trial are scheduled on the device itself. If you create a gift list and allow notifications, we also send push notifications when a guest reserves a gift, reports a Pix or leaves a message. These notifications include the guest’s name (except in Surprise mode), the amount and the item name. You can turn them off in Profile › Notifications or in the device settings.

We do not sell your data. We only share it with providers that operate the app on our behalf:

• Supabase: authentication, server functions and storage of your plan, your profile and photo, in a private area that only your account can access. It also stores the gift list, reservations, reported Pix payments and messages.
• Expo (push notification service), Apple (APNs) and Google (FCM): delivery of the list notifications to your device. They receive the device token and the notification text.
• Guest page server: hosting of each list page (cha.meukanto.com), on a server operated by meukanto, with no analytics tools and with technical access logs.
• Resend: sending the email with the access code and, in the gift list, the confirmation code and the delivery address to the guest.
• RevenueCat: subscription management.
• PostHog: anonymous usage analytics, with servers in the United States.
• Apple and Google: sign-in and payments.
• Vercel: hosting of the meukanto.com website and anonymous visit counts (pages viewed and origin), with no cookies and without identifying you.

Each provider receives only what is needed for its service and gives your data protection equal or equivalent to this policy. Some store data outside Brazil; in those cases, we require protection guarantees compatible with the LGPD.

Your plan stays on the device and, if you have an account, also in your account, so it can come back on another device. You can delete the account at any time in Profile › Delete my account: we delete the account and the data linked to it (plan, name, date of birth and photo) on the server and on this device. Without an account, deleting the app deletes the plan.

The gift list data (items, reservations, reported Pix payments, messages and the address) is kept as long as your account exists. When you delete the account, we also delete the list and everything linked to it, including the guests’ data. Guests can ask for what they entered to be deleted by writing to contato@meukanto.com. Closing the list (or the party date passing) does not delete the data.

In the app (Android and iPhone). Open meukanto, go to Profile › Delete my account and confirm. You do not need to write to anyone.

What we delete. The account and everything linked to it: the plan, the profile (name, date of birth and photo), the milestones, the gift list with its items, the delivery address and the Pix key, and the list guests’ data (name, WhatsApp, email, reported Pix payments and messages). We also clear the data stored on this device and the notification token.

What we do not delete. The Premium subscription is billed by Google Play or Apple: deleting the account does not cancel it. Cancel first, in Google Play › Payments and subscriptions › Subscriptions (Android) or in Settings › your name › Subscriptions (iPhone). Technical server access logs may be kept for a short time, for security.

Without access to the app, or if you were a guest on a list. Write to contato@meukanto.com, from the account’s email (or, if you were a guest, tell us the name and the WhatsApp or email you used). We delete within 15 days.

Only part of the data. You can delete without closing the account: the address and the Pix key, directly in the list settings; the photo, in Profile; and the plan, by redoing it in Profile › My plan. If you want to delete something the app does not allow, ask by email.

Under the LGPD, you can ask at any time for: confirmation and access to your data; correction; anonymization, blocking or deletion; portability; information about who we share it with; and withdrawal of consent.

You delete the account and the data yourself, in the app, in Profile › Delete my account. For other requests, use the app or the email contato@meukanto.com. We reply within 15 days.

Guests who entered data in a list also have these rights and can exercise them through the contact email.

We use encrypted connections, per-user access control and restricted staff access to data. No system is 100% secure, but we will notify you and the ANPD (Brazil’s data protection authority) in case of a relevant incident.

meukanto is not directed at children or people under 18 and does not intentionally collect data from minors. The date of birth is optional and is used only for the birthday greeting and to check legal age. The gift list page is also not directed at people under 18.

If this policy changes, we will notify you in the app before the change takes effect. Data protection officer: Silas Silva Lima de Matos, contato@meukanto.com.