Privacy policyPrivacy policy

The data controller is Marcos García, domiciled at Cayetano Rivas esq. Emilio Romero, Montevideo, Uruguay. For any question about your data write to hola@llegamos.uy.

From your Google account when you sign in: name, email address, profile photo and the identifier of your account. If you sign in with Facebook (Meta Platforms) we receive your name, your profile photo, the identifier of your Facebook account and, only if your account shares one, your email address: some accounts share none, and then reminders only arrive as push notifications. We never receive your password: Google or Facebook handle it. We also keep the language you use the app in: it decides which language we write to you in.

What you enter in the app: your groups, currencies, categories, payments, expenses, pockets and movements, incomes and any notes you write. If you invite someone by email, that email is kept with the invitation.

Technical data of each request to our servers: IP address, browser and time. They keep the service working, help detect abuse and help understand errors. They are not used to profile you. The counters that limit how many requests the API accepts from each IP address are kept for one minute. If the app fails, an error report (what failed, on which route and the browser type, without what you entered) is also sent to our error-monitoring service.

If you turn reminders on: at what time and how far ahead you want to be told and, if you ask for them on a device, that browser's subscription (an address its maker — Google, Apple, Mozilla or Microsoft — gives us to send it the notification) and the browser type. We also note which notice we sent you each day (the day, the group and the channel, not the content), so it is never sent twice. And we keep the last day you used the app, and nothing else about your usage. In the Android and iOS apps, the subscription is the address that your phone's notification service gives us (Firebase Cloud Messaging, from Google, which delivers the notices to Android and iOS) and whether the device is Android or iOS.

If you subscribe to Pro: the state of your subscription (the plan, how often it is paid, when it renews or ends) and the identifiers the payment processor gives us. We never receive or keep your card details. In the Android and iOS apps the purchase is made through Google Play or the App Store and managed by RevenueCat: we keep the state of the subscription and the purchase identifiers RevenueCat gives us, and we do not receive your payment details either.

If you use the WhatsApp assistant: your phone number, which you link with a code from your profile, and, of each message you send it, only its identifier, the time and which account it belongs to, to count how many you used in the month. We do not keep the content of your messages, voice notes, photos or PDFs: it is used to interpret it and discarded (what Google may keep of what it receives is explained under "Who we share it with"). When a voice note or a photo waits for your confirmation, what the assistant understood (for example, an expense of 450 today) is kept until you confirm it, discard it or a new message replaces it; after 10 minutes it can no longer be confirmed. If a phone that is not linked writes to it, we keep a fingerprint (a hash) of the number, never the number, only to limit linking attempts.

To provide the service: showing your payments, expenses, pockets and incomes to you and to the people in your groups, reminding you of due dates and sending you a weekly summary if you turn those notices on. If you sign up and have not added anything yet, we send you up to two emails to help you get started; turn them off in your profile, under Reminders.

We do not sell or rent your data. What you enter is used for nothing other than showing it to you and your group. The free plan may show ads: we pass nothing of what you enter to whoever serves them.

For the WhatsApp assistant, if you turn it on: reading what you write or say to it, turning it into an expense or a payment and replying to you. What you add through WhatsApp is the same as adding it in the app.

With the people in the groups you share: they see what is entered in that group, including what you enter and your incomes if you record them there.

With the providers that run the service, for that alone: Google (Firebase Authentication for signing in, Firebase Hosting to serve the app and the llegamos.uy page, and Cloud Run, where the API runs, in São Paulo, Brazil), Neon (the database, on Amazon Web Services, São Paulo, Brazil), Sentry (Functional Software, Inc., United States: receives the error reports), Google Analytics (Google: measures visits and the screens used), Microsoft Clarity (Microsoft, United States: heatmaps and usage recordings, with text and figures masked) and GitHub (Microsoft, United States: stores the database backups, encrypted). If you sign in with Facebook, Meta Platforms runs that sign-in under its own privacy policy and hands us only what is described under "What data we keep".

For Llegamos's own ads we use the Meta Pixel and Meta's Conversions API (Meta Platforms, United States and Ireland): they count visits and when someone taps “Start” or creates an account on the web, to know which ad brought them. When you create an account on the web, we send Meta your email and our identifier of your account hashed (SHA-256: Meta does not receive the email in clear), your IP address and your browser's details. We never send it anything you enter in the app (amounts, payments, expenses or groups). The Android and iOS apps carry no Pixel.

A notification on your device travels through your browser's notification service (Google, Apple, Mozilla or Microsoft), encrypted for that device. Email notices (with the names and amounts of what is due) and the emails to get started go out through Amazon Web Services (Amazon SES, United States), which receives your address and the content of the message; the same goes for group invitations, which carry your name and the group's. On a phone, the notice travels through the system's notification service: Firebase Cloud Messaging (Google) and, on iOS, Apple's notification service.

If you subscribe to Pro on the web, the payment is processed by Lemon Squeezy (Lemon Squeezy, LLC, United States): it receives your name, your email and the payment details you enter on its page, under its own privacy policy.

In the Android and iOS apps, Pro is bought through Google Play (Google) or the App Store (Apple), which charge you and receive your payment details under their own policy. RevenueCat (RevenueCat, Inc., United States) manages the subscription for us: it receives your Llegamos account identifier and the purchase data, without your name or your email.

If you are on the free plan and the app shows ads, they are served by Google (AdSense): it receives your browser's technical data and may use cookies or identifiers to choose and measure them, under its own policy. The Pro plan loads no ads. In the Android and iOS apps the ads are served by Google AdMob: it receives your device's advertising identifier and technical and usage data to choose and measure them, under its own policy. We ask for your consent before showing them where the law requires it, and you can reset or turn off the advertising identifier from your phone's settings.

Exchange rates are fetched from Banco Itaú, the Central Bank of Uruguay and a public dataset (currency-api, served from jsDelivr); those requests carry no data of yours.

With nobody else, unless an authority requires it by law.

If you use the WhatsApp assistant, your messages, voice notes, photos and PDFs go through WhatsApp (Meta Platforms), which runs the conversation under its own privacy policy. What you write, your photos and your PDFs are interpreted by Anthropic (Claude) to turn them into an expense or a payment: we use its paid API, and under its terms Anthropic does not use them to train its models and deletes them within 30 days. Your voice notes are interpreted by Google (Gemini), and so is a message, a photo or a PDF when Claude cannot answer at that moment; we use the free tier of the Gemini API, and under Google's terms what is sent to it may be kept and used by Google to improve its products and models, and people at Google may read it. Along with your message, voice note, photo or PDF, both receive what they need to understand it: your group's categories, currencies, pending payments (with amount and due date) and pockets (with balance); they do not receive your name, your email or your Google account. Do not send the assistant anything you would not want them to see (a photo of a receipt or a PDF invoice may show, for instance, the last digits of your card or your name); if you would rather nothing of yours goes through it, do not link your phone. Each handles it under its own policies.

Some of these providers are in Brazil and the United States: by using Llegamos your data may be transferred to those countries to provide the service, under each provider's contractual terms. By signing in you accept this policy and, with it, those transfers, which are necessary to provide the service; if you disagree, you can delete your account whenever you want.

As long as you have the account. If you delete it, your account, your incomes, the "Between you" settlements you took part in and the groups you were alone in are deleted right away, and your Pro subscription, if you have one, is cancelled. What you entered in a shared group stays for the others, without your name.

Database backups (at our database provider and on GitHub) are kept for up to 30 days and then discarded.

The phone linked to the WhatsApp assistant is kept while it stays linked: you unlink it from your profile whenever you want, or it is deleted with your account.

The record of the messages you sent the assistant (identifier and time, no content) and of the notices we sent you are kept as long as you have the account and are deleted with it.

The notice that you created an account on the web, with what we send Meta, is kept until Meta receives it (seven days at most) and is deleted with your account.

You can access, correct and delete your data (Uruguayan Personal Data Protection Act No. 18.331, articles 14 and 15). From the app: your name is changed in the profile, a group's data is exported from its settings and your account is deleted from the profile. To receive your account data (email, linked phone, subscription) write to hola@llegamos.uy: we reply within the deadlines set by law.

For any other request write to hola@llegamos.uy. If you believe we did not handle it properly, you can turn to the Unidad Reguladora y de Control de Datos Personales (URCDP).

To stop using the WhatsApp assistant, unlink your phone from your profile: your number and any pending confirmation are deleted.

We measure how the app and the llegamos.uy page are used with Google Analytics and Microsoft Clarity, which keep their own cookies or identifiers to tell one visit from another; Clarity masks what you type and the figures on screen, and Microsoft also handles what it collects under its own privacy statement. We do not use Google Analytics for advertising. On the web you can block them in your browser or with an extension without losing any feature. In the Android and iOS apps they measure the same, under the same rules: which screens open and how they are used, never what you enter. The browser keeps your session, language, theme and a few screen preferences in its local storage; they are removed when you sign out or clear the browser's data. The app also keeps a copy of itself on the device so it opens faster and can show notifications. In the Android and iOS apps, your session, language, theme and those preferences are kept in the app's storage and are deleted when you sign out or uninstall it.

The Meta Pixel keeps its own cookies (_fbp and, if you came from an ad, _fbc) in the app and on llegamos.uy to recognize the visit and the ad; Meta handles what it collects under its own privacy policy, and ad personalization is managed in the ad settings of your Facebook or Instagram account. You can block it from your browser or with an extension without losing any feature.

If you are on the free plan and the app shows ads, Google may store cookies of its own to show and measure them; personalisation is managed at adssettings.google.com. On the Pro plan none of that is loaded. In the apps, AdMob uses the device's advertising identifier instead of cookies.

Connections to Llegamos are encrypted and access to the data is restricted. If a security breach affected your data, we report it to the supervisory authority (URCDP) and to whoever else is required, as the law demands.

Llegamos is not aimed at people under 18. If you know of an account created by a minor, tell us and we will delete it.

If this policy changes, the date above is updated and, if the change is important, we tell you beforehand in the app or by email. The version in force is always the one published on this page.

Questions? Write to hola@llegamos.uy.