Português · English

Privacy Policy

Last updated: April 10, 2026

See also: Terms of Use

Courtesy translation: this English version is provided for convenience. In case of any conflict or ambiguity, the Portuguese version prevails, as the service is operated under Brazilian law (LGPD).

1. Introduction

This Privacy Policy describes how OverAir, operated by Hens Desenvolvimento ("we", "us", "our"), collects, uses, stores, and protects your personal data, in compliance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/18).

2. Data We Collect

We collect the following data when you use the Service:

2.1 Data you provide

  • Phone number: used for identification and communication via WhatsApp
  • Name: as registered in WhatsApp
  • Text messages: content sent to the Service via WhatsApp
  • Audio messages: transcribed by the AI and stored as text
  • Images: processed for data extraction (e.g., receipts), but not stored

2.2 Data generated by the Service

  • Categorized items (shopping, reminders, expenses, etc.)
  • Usage profile and preferences
  • Conversation history with the assistant
  • Subscription and payment data (without bank details)

2.3 Technical data

  • Device identifiers (when using the app)
  • Usage and navigation data within the application

3. How We Use Your Data

We use your data to:

  • Provide and operate the Service
  • Transcribe and categorize your messages
  • Send reminders and notifications
  • Personalize your experience
  • Manage subscriptions and payments
  • Improve the quality of the artificial intelligence
  • Communicate Service updates

4. Storage and Security

Your data is stored on Google Cloud Platform (Firebase) servers located in the United States. We use security measures including:

  • Encryption of data in transit (HTTPS/TLS)
  • Firestore security rules for access control
  • Secure authentication via Firebase Authentication
  • Restricted data access by authorized personnel only

Important: Images you send (such as photos of receipts) are processed in real time for data extraction and are not stored on our servers. Only the extracted structured data (values, items, dates) is saved.

5. Data Sharing

Your data may be shared with:

  • Google (Firebase/Gemini): for infrastructure, storage, and AI processing
  • Meta (WhatsApp Business API): for communication via WhatsApp, subject to the WhatsApp Privacy Policy
  • Stripe: for payment processing (we do not have access to your card data)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Your Rights (LGPD)

Under the LGPD, you have the right to:

  • Access: request what data we hold about you
  • Correction: correct incomplete or inaccurate data
  • Deletion: request deletion of your personal data
  • Portability: receive your data in a structured format
  • Revocation: withdraw your consent at any time
  • Information: know with whom your data is shared

To exercise any of these rights, contact us via WhatsApp: +55 12 99708-4305.

How to delete your account

You can delete your whole account yourself, at any time, without contacting us:

  • In the app: Profile → Privacy and data → Delete account
  • On WhatsApp: send /apagarconta and tap Apagar tudo

We immediately delete everything we keep about you: expenses, income, reminders, shopping lists, cards, installments, budgets, allowances, conversation history, audio and photos, profile, links and the app login. What you shared with someone else is removed for them too; what they shared with you stays with them.

If you have a subscription, it is cancelled at the end of the period already paid (no pro-rata refund) and you are not charged again. For tax purposes we keep only the Stripe customer ID and the deletion date, without your phone number.

This cannot be undone. If you want to come back later, just send a message and start over.

7. Data Retention

Your data is kept while you use the Service. After your account is closed:

  • Personal data is deleted within 30 days (immediately when you delete your account yourself)
  • For tax purposes, former subscribers leave only the Stripe customer ID and the deletion date, without a phone number
  • Anonymized data may be retained for statistical purposes
  • Backups are removed in the next cleanup cycle (up to 90 days)

8. Use by Minors

The Service is not intended for individuals under 18 years of age. We do not intentionally collect data from minors. If you become aware that a minor has used the Service, please contact us so we can remove the data.

9. Cookies and Technologies

The site overair.hens.com.br does not use tracking cookies. The mobile application may use anonymous identifiers for usage analysis and Service improvement.

10. WhatsApp (Meta) Integration

OverAir uses the WhatsApp Business API provided by Meta. When you interact with OverAir via WhatsApp, your messages are processed in accordance with:

To configure or manage the WhatsApp Business integration, access the Meta Business Suite.

11. Changes to this Policy

This Privacy Policy may be changed at any time, without prior notice. Changes take effect immediately upon publication on this page. Continued use of the Service after any change constitutes acceptance of the new policy.

We recommend that you review this page periodically.

12. Data Protection Officer (DPO) Contact

For questions related to privacy and data protection: