Privacy Policy

1. Who looks after your data

The controller is Saulo Tasso Mourão Freire, responsible for One Minute X. Contact and data protection officer (DPO): oneminutex.oficial@gmail.com.

2. What data we collect

Account: name, email and photo from Google or Apple sign-in (or the sign-up email); @, bio, language and date of birth.

Content: audios, transcriptions, translations, captions, replies, threads, shows, direct messages (audio and text) and community content.

Usage: audios played, likes, followers, searches and interactions.

Device: notification identifier, language and access logs (kept for 6 months, as required by Brazil's Marco Civil da Internet).

3. What we use it for and the legal basis (LGPD)

Creating the account and showing your profile, content, conversations and communities → performance of contract (art. 7, V).

AI transcription, translation and recommendations that make the app work → performance of contract (art. 7, V).

Moderation, security and fraud prevention → legitimate interest (art. 7, IX).

Internal metrics and app improvement → legitimate interest (art. 7, IX), with the right to object.

Phone notifications → consent, given through your device settings (art. 7, I).

Keeping records and responding to authorities → legal obligation (art. 7, II).

4. What is public

Your name, @, photo, bio and the audios published in the feed, on profiles and in public communities can be seen by other users — and by anyone who receives a shared link. Content from private communities is visible only to members. Direct messages are visible only to the participants.

5. Who we share with

We do not sell your data and we do not license your audios to train third-party AI.

Providers that operate the app: Base44 (hosting and database), Google and Firebase (sign-in and notifications), Apple (sign-in), ElevenLabs (transcription) and the platform's AI providers (text translation).

Authorities, when required by law or court order.

In case of a sale, merger or investment in the company, data may be transferred to the successor, which must respect this Policy and the choices you have already made.

6. International transfer

Some providers are located outside Brazil. In those cases, we follow the mechanisms of the LGPD (art. 33) and the ANPD's regulations.

7. How long we keep it

While your account exists. After deletion, we erase it within 30 days, except backups (up to 90 days), access logs (6 months, by law) and what is needed for legal defense.

8. Your rights

You can confirm processing, access, correct, request portability, object, withdraw consent and request deletion (LGPD, art. 18). Most of this can be done in the app; for the rest, write to oneminutex.oficial@gmail.com. We reply within 15 days. You can also file a complaint with the ANPD.

9. Minors

The app is only for people 18 or older. Accounts of minors that are identified are closed.

10. Security

We use encrypted connections, access control through permission rules and restricted access to data. In case of a relevant incident, we will notify those affected and the ANPD.

11. Changes to this Policy

We will announce relevant changes in advance. Any new use that requires consent will require new consent.