Back

Privacy Policy

In effect since 11/05/2026. The app is going to change its name; when it does, we'll publish the final version of this text and let you know in the app.

Here we explain, in plain words, what data Velaclara keeps, who it is shared with and what you can do about it.

Who looks after your data

Velaclara is a product by Análise Visual, which decides how your data is handled (the "controller", in data protection terms). Questions or requests about your data: contato@velaclara.com. Messages sent to that address arrive through Cloudflare (Email Routing) and are kept in the mailbox of the person in charge.

What we keep

Your name, email and language, and what you record in the app: accounts, balances, transactions, categories, recurring items, installments and cards. For a card, we keep its name, the closing and due days, the payment account you chose and, if you enter them, the last 4 digits; never the full number, expiry date or security code. Your password isn't stored as you typed it: we keep only a code derived from it, which can't be turned back into the password. For each session, we keep the IP address and the browser. We don't connect to your bank.

What we use it for, and on what legal basis

Only to make the app work for you: show balances, reports and reminders, send account emails (confirmation, password changed, access from a new browser or device) and protect your account. The legal basis is performing our contract with you (GDPR Art. 6(1)(b); LGPD Art. 7, V): without this data we can't provide the service you asked for. To protect your account (session IP address and browser, access alerts), the basis is our legitimate interest in keeping your account secure (GDPR Art. 6(1)(f); LGPD Art. 7, IX).

No ads

We don't show ads, we don't use advertising trackers and we don't sell your data.

Where your data is stored and who helps us

The app and its database run on servers in the United Kingdom, and every connection is encrypted. To work, the app relies on these services (processors), and each one gets only what it needs:

Data outside Brazil and the European Union

Some of these services process data outside Brazil and the European Union, including in the United Kingdom and the United States. This transfer is necessary to perform our contract with you (LGPD Art. 33, IX), and these services are bound by contract to protect the data. For the United Kingdom, the European Commission's adequacy decision applies; for the United States, the standard contractual clauses approved by the Commission or the Data Privacy Framework, depending on the service (GDPR and UK GDPR, Chapter V).

On your device

One cookie keeps you signed in; others remember your language, theme and chosen look. Your browser also keeps preferences for this device, such as amounts hidden with the eye. To work offline, a copy of your data stays on the device for up to 7 days and is deleted when you sign out. None of them is used for advertising.

How long we keep it

For as long as your account exists. If you archive an account with its transactions, you can restore it for 30 days; after that it's deleted for good. If you delete your account, it's locked right away and erased for good after 90 days; encrypted backups expire up to 30 days after that. The records of each session (IP address and browser) are kept while your account exists and are deleted with it. The server's technical logs are automatically replaced by newer ones and don't contain your email, password, IP address or amounts.

Your rights

You can ask whether we process your data, see it, correct it, take it with you, delete it, and find out who it's shared with. In the app itself you can correct what you recorded, export transactions, accounts and categories to CSV, and delete your account (with 90 days to change your mind by signing in again). For anything else, email contato@velaclara.com. You can also complain to the data protection authority in your country, such as the ICO (United Kingdom), the CNPD (Portugal) or the ANPD (Brazil).

Security

To sign in, your email must be confirmed. Five wrong passwords in a row lock password sign-in for 15 minutes. You get an email when your password changes and when your account is accessed from a new browser or device, and in Settings you can see and end your sessions. We make a daily encrypted backup, with the restore tested every time.

Changes to this policy

When the app changes its name, we'll publish the final version of this policy. If it changes in a meaningful way, we'll let you know in the app before the change takes effect.

Velaclara is a product by Análise Visual.