Privacy Policy - MaoDesign

Last updated: June 19, 2025
Version: 1.0
Effective: From June 19, 2025

1. Company Identification

Company Name: Savio Macedo
Application: MaoDesign - Embroidery Viewer
Version: 11.2.0+
Platform: Android (Google Play Store)
Contact: saviom.cedo@hotmail.com

2. Purpose of this Policy

This Privacy Policy establishes how MaoDesign collects, uses, stores, shares and protects your personal information, in compliance with:

• General Data Protection Law (LGPD) - Law No. 13.709/2018 (Brazil)
• General Data Protection Regulation (GDPR) - Regulation (EU) 2016/679 (European Union)
• Internet Civil Rights Framework - Law No. 12.965/2014 (Brazil)

3. Data Collected

3.1 Data Provided Directly by User

3.1.1 Authentication Data (Auth0)

• Email: For account creation and access
• Username: For identification within the app
• Password: Stored encrypted by Auth0
• Profile picture: Optional, provided by user

3.1.2 Personalization Data

• Language preferences: Portuguese, English or Spanish
• App settings: Theme, notifications, etc.
• Bookmarks: Saved favorite embroideries (limit 5 for free users)

3.2 Automatically Collected Data

3.2.1 Usage and Navigation Data

• Access logs: Usage times, accessed features
• Navigation data: Pages visited, time spent
• Interactions: Clicks, taps, gestures within the app

3.2.2 Device Data

• Device information: Model, operating system, version
• Unique identifiers: Device ID (for analytics purposes)
• Network data: IP address, internet provider

3.2.3 File Data

• Embroidery files: PES, JEF, HUS, DST, XXX, PEC, BIN, EXP, EDR formats
• Metadata: Technical file information (size, creation date)
• File location: Only in device local storage

3.3 Third-party Data

3.3.1 Firebase Analytics

• Usage events: App opening, features used
• Performance data: Crashes, errors, response time
• Demographic data: Region, language, app version

3.3.2 IronSource (Advertising)

• Advertising data: Ad display, clicks, interactions
• Advertising profile: Based on usage behavior (free users only)

4. Processing Purposes

4.1 Legitimate Purposes

4.1.1 Contract Execution

• Authentication: Verify identity and allow access
• Features: Embroidery viewing, bookmarks, settings
• Support: Technical problem resolution

4.1.2 Legitimate Interests

• Product improvement: Usage analysis for development
• Security: Fraud and suspicious activity detection
• Performance: Feature optimization

4.1.3 Consent

• Advertising: Personalized ad display (free users)
• Analytics: Usage data collection for improvements
• Communication: Update notifications (optional)

4.2 We Do NOT Use Data For

• ❌ Sale or sharing with unauthorized third parties
• ❌ Spam or unsolicited communications
• ❌ Discrimination or harmful profiling
• ❌ Monitoring activities outside the app

5. Storage and Retention

5.1 Storage Locations

5.1.1 Local Storage (SQLite)

• Data: Bookmarks, settings, file cache
• Location: User’s device
• Encryption: Sensitive data encrypted

5.1.2 Cloud Storage

• Auth0: Authentication data (secure servers)
• Firebase: Analytics and performance data
• IronSource: Advertising data (free users only)

5.2 Retention Periods

6. Data Sharing

6.1 Authorized Partners

6.1.1 Auth0 (Authentication)

• Shared data: Email, name, login data
• Purpose: Secure authentication and account management
• Location: Certified secure servers

6.1.2 Firebase (Google)

• Shared data: Analytics, crashes, performance
• Purpose: Improve stability and features
• Location: Certified Google Cloud servers

6.1.3 IronSource (Advertising)

• Shared data: Advertising data (free users)
• Purpose: Display relevant ads
• Location: Certified advertising servers

6.2 Sharing Situations

6.2.1 Legal Obligation

• Court order, security warrant
• Request from competent authorities
• Compliance with applicable laws

6.2.2 Rights Protection

• Protection against fraud
• Legal defense
• User security protection

7. Data Subject Rights

7.1 Guaranteed Rights (LGPD/GDPR)

7.1.1 Access Rights

• ✅ Confirmation: Know if your data is processed
• ✅ Access: Obtain copy of your data
• ✅ Correction: Correct incomplete or incorrect data
• ✅ Portability: Receive data in structured format

7.1.2 Control Rights

• ✅ Deletion: Request data removal
• ✅ Opposition: Object to processing
• ✅ Limitation: Limit processing
• ✅ Revocation: Withdraw consent at any time

7.2 How to Exercise Your Rights

7.2.1 Within the App

• Settings: Access and correction of basic data
• Profile: Personal information changes
• Account deletion: Complete account removal

7.2.2 Direct Contact

• Email: saviom.cedo@hotmail.com
• Response time: Up to 15 business days
• Documentation: Identity verification may be required

8. Data Security

8.1 Technical Measures

8.1.1 Encryption

• Data in transit: HTTPS/TLS 1.3
• Data at rest: AES-256
• Passwords: bcrypt hashing

8.1.2 Access Controls

• Authentication: Multi-factor when available
• Authorization: Principle of least privilege
• Logs: Access auditing

8.2 Organizational Measures

8.2.1 Internal Policies

• Training: Privacy awareness
• Procedures: Incident response
• Audits: Periodic reviews

8.2.2 Suppliers

• Contracts: Data protection clauses
• Certifications: ISO 27001, SOC 2
• Monitoring: Continuous assessment

9. Contact and Support

9.1 Data Protection Officer (DPO)

Name: Savio Macedo
Role: Developer and Data Protection Officer
Email: saviom.cedo@hotmail.com
GitHub: https://github.com/SavioMacedo

9.2 Support Channels

9.2.1 Data Requests

• Email: saviom.cedo@hotmail.com
• Response time: 15 business days
• Format: Structured response

9.2.2 Complaints

• App: Support section
• Email: saviom.cedo@hotmail.com
• Authorities: ANPD (Brazil), local authorities (EU)

10. Commitment Statement

10.1 Company Commitments

We, at MaoDesign, commit to:

• ✅ Transparency: Clearly inform about data processing
• ✅ Security: Implement best protection practices
• ✅ Respect: Honor all data subject rights
• ✅ Compliance: Comply with all applicable laws
• ✅ Improvement: Continuously enhance our practices

10.2 Certification

This policy was prepared in compliance with:

• LGPD (Law No. 13.709/2018)
• GDPR (Regulation EU 2016/679)
• International privacy best practices

Valid from: June 19, 2025
Next review: June 19, 2026
Version: 1.0