Privacy Policy

One-line summary

Troca Figurinhas works 100% offline. We do not collect, store or transmit personal data to external servers. All your data stays only on your phone.

1. Who we are

The Troca Figurinhas app is developed and operated by CAIO IA INFORMATICA LTDA ("Controller").

Contact (DPO): suporte@caioia.com

2. Data we DO NOT collect

The app is privacy-by-design. We do not collect:

• Real name, personal email, phone number
• Address, location (GPS), zip code
• Contact list, photo gallery, calendar
• Browsing history or tracking cookies
• Payment or financial data
• Advertising identifiers (IDFA, GAID)
• Usage analytics, telemetry or remote metrics

3. Data stored locally on your device

The following data stays exclusively on your phone, using OS-level secure storage (SQLite + iOS Keychain / Android Keystore):

• Sticker collection: numbers and quantities of stickers you registered
• Trade history: date, anonymous partner identifier, stickers traded
• Reservations: names you associated with stickers to give/receive (optional)
• Preferences: visual theme, language, display name (optional)
• Anonymous device UUID: randomly-generated local identifier, used only during P2P trades via QR Code

This data never leaves your device. There is no cloud sync, no automatic backup to our servers, no upload at any moment.

4. Anonymous identifier (UUID)

The app generates a v4 UUID stored locally. This UUID:

• Is randomly generated on first use, with no personal data
• Is not linked to your real identity
• Is not transmitted to our servers
• Is shared only inside the QR Code during a P2P trade, to identify the trade partner
• Is deleted when the app is uninstalled
• Is device-scoped (not cross-app, not cross-device)

5. Camera

The app requests camera permission for two purposes:

1. Scanning QR Codes during trades with other users
2. Sticker OCR (optional) — number recognition via on-device Machine Learning

No image or camera frame is stored, saved or transmitted. Processing is 100% local: ML Kit (Apple/Google) processes the frame directly in device memory, returns recognized text, and the frame is discarded immediately.

6. In-App Purchases

In-app purchases (Lifetime Premium, R$ 9.90) are processed exclusively by Apple App Store or Google Play Store. Troca Figurinhas:

• Does not have access to credit card or bank account data
• Does not store receipts with personally identifiable data
• Receives only the anonymous confirmation that the purchase was made

7. Cookies and analytics

The mobile app does not use cookies. The website copa2026.caioia.com may use essential functional cookies (no tracking) for language preference. We do not use Google Analytics, Facebook Pixel or similar.

8. Your rights

Since the app does not collect personal data on our servers, most rights are exercised directly on your device:

• Access: all data is visible inside the app (Settings > Device, Collection, Trade History)
• Correction: editable directly in the app
• Deletion: use Settings > Erase all data (or uninstall the app — all local data is removed automatically)
• Portability: export your collection via PDF (Settings > Export)
• Sharing info: we do not share data with third parties, except during P2P trades explicitly initiated by you

For any privacy-related questions: suporte@caioia.com.

9. Children

The app is rated 4+ and does not collect data from minors or adults. Parents or guardians can allow use by children with peace of mind.

10. Changes to this policy

This policy may be updated as the app improves or new legal requirements arise. The "Last updated" date at the top indicates when the most recent change occurred.