Privacy Policy

1. Who is responsible for your data

The data controller is The Chosen One Naturais Ltda, a Brazilian company that develops and operates the Belzo app. For anything related to privacy, including exercising your rights, write to contato@belzoapp.com.

2. What we collect

We collect only what the product needs in order to work:

3. Your photos: the most important part of this policy

We treat the image of your face as sensitive personal data, with the care that requires. In practice, that means:

• We collect your photos only with your specific, clearly presented consent, requested inside the app before your first reading. You can withdraw that consent at any time.
• To generate the reading, the photo you choose is sent to Anthropic (Claude), which analyses it and returns the scores per region. This only happens after you accept, on the screen the app shows before your first reading. If you decline, the reading is computed on the device itself, with less detail — the app keeps working.
• Your photos are stored only on your device, in the app's storage, for as long as you want — because comparison over time is precisely what the app delivers. You can delete any individual photo, or all of your data, whenever you want; deleting the app also removes all of them.
• We do not use your face to identify you biometrically, and we do not run facial recognition to link your image to any other database or person.
• We do not sell, rent or license your photos. They never appear in advertising, in marketing material or on any public surface without a separate, explicit request for that specific use.
• We do not use your photos to train artificial intelligence models.
• Your photos leave the device in exactly two cases, both started by you: the face reading (sent to Anthropic) and the Try-On, when you ask for a new image (sent to OpenAI). In neither case is the photo retained by us or by the provider after the result is returned, used for biometric identification, or used to train models. Outside those two, no photo of yours leaves here.

4. Who we share it with

We do not sell your data. We share the minimum necessary with service providers who operate under contract and may only process the data on our instructions:

• Anthropic (Claude) — receives your face photo to generate the reading, and the text you write to Zo to answer in chat. It receives it only at the moment of the request, only with your consent, and under a contract that forbids it from retaining that content after answering, from using it to train models, and from processing it for any other purpose. Its contractual protections are equivalent to the ones we apply here.
• OpenAI — receives a photo ONLY when you use the Try-On or ask to enhance your photo, and solely to generate the result; it does not retain it afterwards and does not use it to train models. Its contractual protections are equivalent to the ones we apply here. If you never use those features, no photo of yours is ever sent to it.
• A cloud infrastructure provider — hosts your account (email) and subscription data, and runs the relay that forwards the reading and image requests. No photo of yours is STORED in the cloud: it passes through to produce the result and is discarded right after.
• Apple and Google — process the subscription payment, tell us whether it is active and, at install time, whether you arrived through one of our store ads. That install signal carries no advertising identifier and cannot identify you.
• An analytics provider (PostHog) — receives anonymous in-app navigation events (which screen, which error) and the install source, under a random identifier. No name, no email and no photos.
• A subscription management provider (RevenueCat) — confirms whether your subscription is active and records which source the install came from, so we can measure the return on our advertising.
• A transactional email provider — sends operational messages, such as access recovery.
• Public authorities, where there is a legal obligation or a court order.

Some of these providers operate outside Brazil. In those cases, the international transfer is made with the safeguards required by Brazil's data protection law (LGPD), including contractual clauses providing equivalent protection.

5. Why we are allowed to process your data (legal basis)

• Consent — for your photos and for data about your habits.
• Performance of a contract — to keep your account and your subscription working.
• Compliance with a legal obligation — where the law requires us to keep or report something.
• Legitimate interests — for security, fraud prevention and fixing bugs, always within the limits of what you would reasonably expect.
• Legitimate interests — to measure, in aggregate, which of our ads bring people to the app. We do not build an individual profile, we do not track you across apps and we do not sell this data. You can object at any time at contato@belzoapp.com.

6. How long we keep it

• Photos: they live on your device and are erased when you remove them in the app or delete the app. We keep no copy of them in the cloud.
• Account, routine and history: for as long as your account exists. After you delete your account, we erase the associated data within 30 days, backup copies included, unless the law requires otherwise.
• Usage data and install source: up to 24 months, in aggregate form and under a random identifier.
• Tax and transaction records: for the period Brazilian law requires.

7. Your rights

Brazil's data protection law (LGPD) gives you rights over your data, and we honor them free of charge and without asking you to justify yourself. If you are in the United Kingdom or the European Union, you have equivalent rights under the GDPR, and we handle those requests the same way:

• Know whether we process your data, and access what we hold.
• Correct data that is incomplete or out of date.
• Request deletion of data processed on the basis of your consent.
• Withdraw your consent — including consent for your photos — at any time.
• Request portability of your data.
• Object to a given processing activity, and ask who we share your data with.

To exercise any of them, write to contato@belzoapp.com. We respond within 15 days. You can also delete your entire account yourself, right in the app, without talking to anyone.

8. Security

Photos and account data are encrypted in transit and at rest. Internal access is restricted to the fewest people needed to operate the service, and it is logged. No system is infallible — if an incident occurs that could put you at meaningful risk, we will notify you and the Brazilian data protection authority (ANPD), as the law requires.

9. Minors

Belzo is for adults 18 and over only. We do not knowingly collect data from minors. If we discover that an account belongs to a minor, it will be closed and the data erased.

10. This website

This site uses no advertising cookies and does no cross-site tracking. We use only aggregate, anonymous traffic measurement — no individual profiling, and nothing sold to third parties.

11. Changes to this policy

If we change something material, we tell you inside the app before the change takes effect. The effective date at the top of this page is always the one for the current version.