Your data deserves context, control and protection.
This policy explains processing in the app and Brazuk services linking to it, including accounts, community, media, recommendations, safety and purchases. It describes choices and rights in Brazil and the places served, including the UK. Acknowledgment is not blanket consent: each purpose requires a lawful basis and, where needed, a specific choice.
Updated on 10 October 2026 · privacy-2026-10-10Version history
1. Controller and contact
The controller is BRAZUK TECNOLOGIA E SERVICOS LTDA, Brazilian company registration CNPJ 68.473.612/0001-35, Avenida Paulista, 1636, Suite 1105, Bela Vista, São Paulo/SP, 01310-200, Brazil. Independent shops and providers may be controllers for their own purposes. For privacy questions or rights requests, contact privacy@brazuk.app.
2. Scope
This policy applies to the app, website and Brazuk features that link to it. External services reached through links or integrations have their own policies, which you should read before use.
3. Data we process
We process account and contact information, verified login identifiers, birth date, nationality, city and postcode; profile information, photos, display names, @usernames, introductions and declared preferences; posts, comments, poll options and votes, messages, images, video, added locations and submitted evidence; orders, payments, agreements and reviews; and support, device, access and security records. Some activities request documents or checks with their own explanation. Optional fields such as introductions, gender or languages are not general access requirements. Protected technical email or phone references help prevent duplicates and fraud. A supplied number may support verification and dependent features as described in the flow; supplying it is not permission for indiscriminate marketing. Full card information remains with the identified processor.
4. Location and device permissions
Precise location, camera, photos, microphone and notifications depend on the action and permission appropriate to the feature. You may deny or revoke system permission; this may limit that feature without making precise location a general posting requirement. We prefer city, neighbourhood or postcode where sufficient. When adding a place, review the point, precision and audience: it may be your current place or another selected point and is visible according to the content. A pin is not proof of another person’s actual position. System permission provides technical access; it does not replace a lawful basis or a marketing choice.
5. Purposes and lawful bases
We use necessary data to create and operate accounts, fulfil orders and provide requested features (contract); protect accounts and community, prevent fraud, moderate, investigate abuse and organise or improve the service with assessment of necessity, proportionality and rights (legitimate interests where applicable); retain records and respond to valid requirements (legal obligation); and carry out optional purposes with consent where that basis is required. Interests and preferences may organise content, recommendations and relevant campaign selection, including through authorised administrative controls. Promotional communications respect the basis and choices applicable to each channel. An incompatible new purpose requires its own information and lawful basis. Posting sensitive data does not imply consent; unnecessary disclosure should be avoided and processing these categories also requires the specific conditions provided by law.
6. Brazuk Score and profiling
The Score summarises internal signals such as checks, completed transactions, confirmed agreements and reviews linked to genuine relationships. A single negative report should not reduce the result without appropriate confirmation or review. Challenged events have no impact during review, and behavioural signals stop affecting the Score after the defined period.
7. Decisions and human review
We use automated checks, including artificial intelligence models when configured, for post safety. Assessment may consider text and poll options, images, extracted video frames and audio transcripts, producing labels, risk signals and decision records. It may release, reject or keep content unavailable for assessment; failures and uncertainty may prevent automatic approval. Systems are probabilistic and may produce false positives or miss violations. You may challenge a decision through support with the content reference and request explanations, correction and appropriate review, including human intervention where applicable. This moderation is distinct from Brazuk Score. Brazuk does not use Score, on its own and solely by automation, to decide employment, credit, housing or other matters with legal or similarly significant effects. Automated-decision rights depend on the circumstances and applicable law.
9. International transfers
Data may be processed in Brazil, the UK and countries where contracted providers operate. Where required, we apply mechanisms under the LGPD and ANPD rules, including relevant standard clauses, and mechanisms recognised by the UK GDPR with assessments and safeguards appropriate to the transfer. We do not claim all destinations have an adequacy decision. Ask privacy@brazuk.app for information about recipients, countries and a copy or description of relevant safeguards, subject to legitimate confidentiality and security.
10. Retention
Retention depends on the purpose, account use, contract fulfilment and evidence, legal requirements, claim periods, abuse prevention and legal rights. Behavioural Score signals and access logs may be kept for up to 24 months; closed codes for up to 90 days. Messages, posts, files, moderation results, reports, consents and evidence are kept according to their function and need, including temporary copies and backups subject to technical cycles. Agreements, disputes and legal or safety records may require longer restricted retention. Deleting content or an account does not authorise unjustified indefinite retention. Once the applicable need ends, data is erased or anonymised; ask the privacy channel about your particular case.
11. Security
We use access controls, database policies, private storage, infrastructure encryption, expiring codes, audit records and incident review. No system is infallible, so report suspected unauthorised access immediately and never share credentials.
12. Your LGPD and UK GDPR rights
Depending on law and circumstances, you may request confirmation and access, copies, correction, anonymisation, blocking, erasure, portability, sharing information, restriction, objection and review of automated decisions. Describe your request to privacy@brazuk.app; we verify identity proportionately and respond within the legal period, explaining permitted extensions or reasons for limitations. Never send passwords, authentication codes or more documents than requested through the official flow. In the UK, rights requests are normally answered within one month, subject to legal rules on verification, clarification and extensions. Exercising rights does not require closing your account.
13. Consent, objections and marketing
You may object to direct marketing at any time, including profiling related to that marketing. Where processing relies on consent, you can withdraw it without affecting prior lawful processing. You may also object to legitimate interests in some circumstances. Use preferences, available channel unsubscribe controls or privacy@brazuk.app. App push choices and system permission must be compatible for delivery; withdrawing technical permission does not automatically change every other channel. Necessary operational messages, including security, account verification and order updates, serve a different purpose from promotion.
14. Account deletion
You can request deletion through app controls or support. Deletion removes or disassociates data that no longer needs to be kept. Minimal records may remain restricted where law, security, fraud prevention or legal claims justify retention.
15. People under 18
Brazuk does not allow people under 18 to register. If we learn that an account was created contrary to this rule, we may block it and delete the data, retaining only what is needed for security or a legal obligation.
16. Storage, analytics and communications
We use essential storage for authentication, sessions, safety and preferences. Optional analytics, campaigns and non-essential technologies must respect applicable information, lawful bases and choices; advertising does not authorise indiscriminate tracking. Declared interests and relevant interactions may organise the experience for the stated purpose. Videos with autoplay enabled may begin muted while visible and consume data; accessing media involves delivery-infrastructure requests and technical logs. Communications and recommendations depend on features, region, configuration and connectivity and do not guarantee delivery.
17. Changes to this policy
A version and date identify this policy. We will explain material changes and incompatible new uses before applying them where the law requires, obtaining specific consent where necessary. Acknowledgment and consent records retain the version actually presented; historical acceptances are not rewritten. Technical details, contacts and providers may be transparently updated without removing requirements applicable to a change of purpose or risk.
18. Questions and complaints
Send requests to privacy@brazuk.app. In Brazil, you may petition the National Data Protection Authority (ANPD) after attempting to exercise your rights with the controller. Where the UK GDPR applies, you may also complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We encourage you to contact us first so we can investigate and respond.