Privacy Policy

1. Who we are

Petal is a mobile habit-tracking application for women, developed and operated by Bossa Ventures LLC, a Wyoming limited liability company, with a business address at 8200 NW 41st Street, 2nd Floor, Doral, FL 33166, United States.

This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our app and our services.

2. What data we collect

We collect the following types of information:

Data you provide

• Name
• Email address
• Age
• City
• Current weight and goal weight (optional)
• Profile photo (optional)
• Daily task photos (optional)
• Answers to plan-personalization questions

Data collected automatically

• Device identifier
• Operating system and version
• Device language
• IP address
• App usage logs
• Interaction events (buttons tapped, screens visited)
• Performance and crash data (via Sentry)

Health and fitness data (optional)

• Daily step count (if authorized via HealthKit)
• History of completed tasks

3. How we use your data

We use your information to:

• Personalize your challenge plan
• Generate your Petal Score
• Match you with a suitable partner
• Send task reminders via push notifications
• Verify and manage your subscription status
• Improve our services based on aggregated usage
• Detect and fix bugs in the app
• Communicate important product updates

4. Who we share your data with

We share data only with the service providers necessary to operate the app:

• Supabase (database and authentication)
• RevenueCat (subscription management)
• Sentry (crash and error monitoring)
• Apple App Store / Google Play (payment processing for in-app purchases)
• Other users of the app (only data you choose to share, such as your profile photo and progress visible to your partner)

We never sell your data to third parties.

5. Your photos and privacy

Photos you take for daily tasks belong to you. By default, they are visible only to you. If you choose to invite friends or have a partner, those specific people may see photos related to your challenge progress.

You can delete any photo at any time in the app's settings.

6. Cookies and similar technologies

Our mobile app does not use cookies. This website uses cookies that are strictly necessary for it to function, and optional analytics cookies, which you may decline.

7. Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding your personal data:

• Confirmation of whether we process your data
• Access to your data
• Correction of incomplete or outdated data
• Anonymization, restriction, or deletion of unnecessary data
• Data portability
• Deletion of data processed with your consent
• Withdrawal of consent

To exercise any of these rights, email legal@bossa-ventures.com. Depending on your location, you may also have the right to lodge a complaint with your local data protection authority (for example, the ANPD in Brazil, a data protection authority in the EU/EEA, or your state attorney general in the United States).

8. Data security

We use the following security practices:

• Encrypted communication via HTTPS/TLS
• Passwords stored using bcrypt hashing
• Authentication tokens stored in the iOS Keychain
• Data access restricted to authorized personnel only
• Regular, secure backups

9. Data retention

We keep your data for as long as your account is active. After account deletion, data is removed within 30 days, except where retention is required by law (e.g., tax records kept for 5 years).

10. Children's data

Petal is intended for women 18 years of age and older. We do not knowingly collect data from minors. If we identify data belonging to a minor, we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email and within the app. The date of the last update always appears at the top of this page.

12. Contact

For questions, requests, or complaints about privacy: