Privacy Policy

Last updated: August 28, 2026

TalkCity is operated by Luciana Antunes, an individual, hereinafter "we" or "the controller", who can be reached at suporte@orbitverse.io.

This Privacy Policy describes how we collect, use, share and protect your personal information when you use the TalkCity app.

By creating an account or using TalkCity, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the service.

1. Definitions

• "Personal Data": any information relating to an identified or identifiable natural person, under Brazilian Law No. 13.709/2018 (LGPD).
• "Processing": any operation carried out with personal data, such as collection, use, access, transmission, storage, deletion or control of information.
• "Data Subject": the natural person to whom the personal data refers.
• "Controller": Luciana Antunes, the individual responsible for decisions regarding the processing of personal data at TalkCity.

2. Personal Data Collected

2.1. Data you provide:

• The name you want to be called by
• Surname, when provided by you or by signing in with Apple or Google
• Date of birth, used to calculate your age and confirm that you are over 18
• Gender
• Profession
• City where you live, when provided
• Profile and gallery photos
• Content of the messages you send to other users
• A status you choose inside a place, from fixed options such as "looking around", "enjoying the music" or "keeping to myself"
• Reports about how a place is at the moment — how busy it is, tables, line and music — chosen from fixed options, with no free text

2.2. Sign-in data:

• Email address or phone number, depending on the sign-up method you choose

2.3. Data collected automatically:

• Geographic location, collected when you walk into a place and when the app is reopened while you are in a place, never in the background
• A technical record with the coordinate and IP address of the check-in, kept for 7 days and used only to detect location spoofing
• IP address
• Device identifier
• Operating system and app version
• Date and time of access
• Usage and navigation data within the app

2.4. Data received from third parties:

• Name and email, when you choose to sign in with Apple or Google
• Confirmation of transactions processed by the Apple App Store. We have no access to your credit card data.

2.5. TalkCity does NOT collect sensitive data as defined in Art. 5, II of the LGPD. We do not collect racial or ethnic origin, religious belief, political opinion, union membership, health data, data about sex life, genetic data or biometric data. Photos are used solely to display your profile, never for facial recognition or biometric identification.

2.6. TalkCity does NOT collect national ID numbers (CPF), home address, postal code or banking data.

3. Legal Bases for Processing (LGPD, Art. 7)

• Performance of a contract (Art. 7, V): to provide the service you signed up for
• Consent of the data subject (Art. 7, I): for collecting location and for displaying your profile to other people present at the same place
• Legitimate interest (Art. 7, IX): for fraud prevention, platform security and service improvement
• Regular exercise of rights (Art. 7, VI): for defense in judicial or administrative proceedings
• Compliance with a legal obligation (Art. 7, II): to comply with court orders and requests from authorities

4. Purposes of Processing

We use your personal data to:

• Create and manage your account
• Confirm that you are at the place you said you are, on entry and while you remain there with the app open
• Display your profile to other people present at the same place
• Calculate and display your age from your date of birth
• Show which areas and places are busy at the moment
• Show, in aggregate and without identifying who answered, how each place is at the moment, based on reports from the people present there
• Prevent fraud, fake accounts and abuse of the platform
• Detect location spoofing
• Process subscriptions
• Send notifications related to the use of the service and security alerts
• Respond to support requests
• Comply with legal and regulatory obligations
• Improve the quality and security of the service

5. Data Sharing

5.1. With other people at the same place: while you are present at a place, the people there can see the name you want to be called by, your age, your profession, your city and your photos. Your exact date of birth, your email and your phone number are NEVER shown to other users.

5.2. You control that display. The app lets you choose who can see you at each place, including becoming invisible to everyone.

5.3. With service providers:

• Supabase — infrastructure, database and authentication
• Apple App Store — subscription processing
• RevenueCat — subscription management
• Google Places — information about venues
• Google Maps — map display
• Resend — transactional email delivery

5.4. With authorities: we may share personal data upon a court order, a request from law enforcement or a determination by the Brazilian National Data Protection Authority.

5.5. We do NOT sell, rent or trade your personal data to third parties for marketing or advertising purposes.

6. Storage and Security

6.1. Your data is stored on servers operated by Supabase, encrypted in transit (TLS) and at rest.

6.2. Security measures in place:

• Row Level Security on tables containing personal data
• Mandatory authentication on all server functions
• Request rate limiting to prevent abuse
• Location spoofing detection
• Protection against automated data scraping
• Audit logging for administrative actions

6.3. No system is entirely secure. Although we apply appropriate technical and organizational measures, we cannot guarantee absolute security against unauthorized access.

7. Data Retention

• Profile data: kept while the account exists
• History of check-ins at places: up to 2 years
• Messages: up to 2 years after being sent
• Photos: while the account exists, or until you delete them
• Location coordinate and IP recorded on check-in: 7 days
• Records of fraud attempts and security blocks: up to 5 years
• Records of reports and moderation decisions: up to 5 years
• Transaction records: up to 5 years, as required by tax law
• After account deletion, the profile stops being displayed immediately and personal data is deleted within 90 days. That period exists to allow investigation of reports and defense in any proceedings concerning conduct prior to deletion. Where there is a court order or an ongoing investigation, data may be preserved for as long as necessary

8. Rights of the Data Subject (LGPD, Art. 18)

You have the right to:

• Confirmation that processing exists
• Access to your personal data
• Correction of incomplete, inaccurate or outdated data
• Anonymization, blocking or deletion of unnecessary data or data processed in breach of the law
• Data portability to another provider
• Deletion of data processed on the basis of consent
• Information about data sharing with third parties
• Information about the option not to give consent and its consequences
• Withdrawal of consent at any time

8.1. You can delete your account directly in the app, under Settings.

8.2. For the other rights, write to suporte@orbitverse.io.

8.3. Response time: up to fifteen (15) days, under Art. 19 of the LGPD.

9. Data of Minors

TalkCity is intended exclusively for people over 18. We do not knowingly collect data from anyone under 18. When we become aware that a minor's data has been collected, we delete it.

10. International Data Transfers

Your data may be processed on servers located outside Brazil, since Supabase and the other providers listed operate on global infrastructure. The transfer is made under Art. 33 of the LGPD, with adequate contractual safeguards.

11. Cookies and Similar Technologies

The TalkCity app does not use cookies. Device identifiers and session tokens are used for authentication and security.

12. Data Protection Officer

As this is an operation run by an individual, the controller herself acts as the data protection officer and can be reached at suporte@orbitverse.io.

13. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced in the app or by email. Continued use of the service after changes are published constitutes acceptance.

14. Contact

For questions, requests or complaints: suporte@orbitverse.io

15. Governing Law

This Policy is governed by Brazilian law, in particular Law No. 13.709/2018 (LGPD), the Consumer Protection Code (Law No. 8.078/1990) and the Brazilian Civil Rights Framework for the Internet (Law No. 12.965/2014).