Privacy Policy

Loculum is a budgeting app run by XHID Software e Tecnologia Ltda (CNPJ 60.854.481/0001-24, Av. Champagnat 140, Praia da Costa, Vila Velha, ES, 29101-410, Brazil), which is responsible for your data (the "controller" under the EU's GDPR and Brazil's LGPD). This page says what we collect, why, where it's kept and who else touches it. The short version: we keep only what the app needs, in the EU, we never sell it, and you can take it out or have it deleted.

What we collect

• Your account: your email, your name if you give it, and your password as a one-way hash (we can't read it). If you sign in with Google, we receive your name, email and Google account ID.
• Your budget: the accounts, transactions, categories, payees, tags and plans you type or import. Loculum doesn't connect to banks, so it only knows what you tell it.
• Sign-in sessions: a cookie that keeps you signed in for up to 30 days, and the date each session was created.
• Billing: your trial and subscription status. Card details go straight to Stripe; we never see them. If you pay with Pix Automático, we send Woovi your name, email and CPF (Pix Automático requires it); Woovi handles the payment and tells us when it's done. We don't store your CPF.
• Waitlist: if you joined it, your email and the page or campaign you came from.
• Site analytics: on loculum.com we use PostHog to count visits and sign-ups (pages viewed, browser, approximate location from your IP address).
• Ads: loculum.com also loads the Meta Pixel, to learn which ads on Facebook and Instagram bring visits. When you create an account or subscribe, Loculum tells Meta so (your email and account id, hashed, plus your IP address and browser). Nothing from your budget ever goes to Meta, and the app itself doesn't load the Pixel.

Why we use it

• To run the app you signed up for (the contract between us).
• To send the emails the service needs: sign-in, password reset, invitations and account or billing notices.
• To charge for the subscription, and keep the records tax law requires.
• To understand, in aggregate, how people find and use the site, so we can improve it (our legitimate interest).
• To measure which of our ads work (our legitimate interest).

We don't sell your data, we don't show ads in the app, and we don't use your budget for anything except showing it to you.

Where it's stored

The app's database lives on a server rented from Hetzner in Germany. Backups are copied continuously to Cloudflare R2 object storage. Traffic to loculum.com, app.loculum.com and the API passes through Cloudflare, which also hosts the website and the app.

Who else processes it

• Hetzner (Germany): hosts the server and the database.
• Cloudflare: hosting, network protection and backups on R2.
• Stripe: payments and subscriptions.
• Woovi (Brazil): Pix Automático payments (receives your name, email and CPF).
• Resend: sends Loculum's emails.
• PostHog (EU cloud): website analytics.
• Meta (Facebook and Instagram): measures our ads.
• Google: only if you choose "Continue with Google".

Each of them handles data only to provide their service to us. Some are US companies; where data leaves the EU, it's covered by the safeguards the GDPR requires, such as the EU standard contractual clauses.

Cookies

The app uses one cookie to keep you signed in, plus a short-lived one during Google sign-in. Both are needed for the app to work. PostHog on the website uses its own cookie to tell visits apart, and the Meta Pixel sets cookies on loculum.com to tie a sign-up to the ad that brought it.

How long we keep it

Your account and budget data stay for as long as you have an account. You can delete your account anytime in Settings: it's deleted right away, along with every budget you own, and copies in backups roll off within 30 days. Billing records are kept for as long as tax law requires.

Your rights

You can export your transactions to CSV from the app at any time, and delete your account anytime in Settings. You can also ask us for a copy of everything we hold about you, to correct it, or to stop using it for analytics. Write to hello@loculum.com from the email on your account and we'll answer within 30 days. If you think we've mishandled your data, you can complain to your local data protection authority.

Security

Connections are encrypted (HTTPS), passwords are stored with argon2id, and sessions can't be read by scripts on the page. No system is perfectly safe; if a breach ever affects your data, we'll tell you.

Changes

If we change this policy in a way that matters, we'll email you before it takes effect.

Contact

Anything about your privacy: hello@loculum.com.