Privacy Policy — AfterHouse

AfterHouse is a social application focused on sharing opinions about music and albums, where users can create an account, rate albums, write reviews, share notes, and interact with other users through profiles, blocks, reports, and other social features.

AfterHouse is operated by Fernando de Lucas da Silva Gomes, who is responsible for processing the personal data collected in the context of the application and serves as the point of contact for privacy, data protection, and legal notices.

AfterLive is the in-app feature to mark presence at events, react to the night, and post comments about music and nightlife events.

AfterHouse is intended for users aged 14 or older.

If you are under 14 years of age, you must not use the application or provide personal data.

We use personal data for the following purposes:

• creating and maintaining your account
• authenticating your access via a link sent by email
• enabling you to use the application's features, including AfterLive
• displaying your profile to other users, according to your settings and the app's rules
• enabling the creation, publication, and viewing of reviews and AfterLive content
• enabling blocks between users
• receiving and reviewing reports of reviews, users, events, and AfterLive posts
• moderating reported or inappropriate content
• responding to support requests
• sending transactional emails, including login and confirmation links
• improving the stability, performance, and security of the application
• preventing fraud, abuse, and misuse
• displaying advertisements through Google AdMob, which may be personalized or non-personalized depending on the user's location, device settings, and, where required by law, consent provided.
• measuring ad performance and related events
• complying with legal, regulatory, or judicial obligations

Depending on the situation and applicable jurisdiction, we process personal data based on one or more of the following legal grounds:

• performance of a contract or preliminary steps related to use of the app
• consent, where required by law or where you expressly authorize us (e.g., push notifications, precise location when posting on AfterLive, personalized advertising where applicable)
• legitimate interest, especially for security, fraud prevention, service operation, and application improvement, always taking into account the user's rights and freedoms
• compliance with a legal or regulatory obligation
• regular exercise of rights in administrative, judicial, or arbitration proceedings, where applicable

Where specific consent is required by law, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. For push notifications, you can disable them in your device settings at any time.

We may share personal data with third parties strictly to enable the operation of the application or to comply with legal obligations, including:

• Supabase, used for authentication, database, and application infrastructure
• Google AdMob, Mixpanel, OneSignal, and Google Firebase (Remote Config), used respectively for advertising, usage analytics, push notifications, and remote experience configuration
• public authorities, courts, or regulatory bodies, where there is a legal obligation or valid order

Third-party services used may have their own privacy policies. We recommend that users consult:

• Supabase: https://supabase.com/privacy
• Google: https://policies.google.com/privacy | Mixpanel: https://mixpanel.com/legal/privacy-policy | OneSignal: https://onesignal.com/privacy_policy

We do not sell your personal data.

Your data may be stored or processed on servers located outside your country, including the United States.

Where international data transfers occur, we will adopt appropriate safeguards, including, where applicable, the use of Standard Contractual Clauses (SCCs) or other recognized legal mechanisms.

We retain data for as long as necessary for the purposes described in this Policy, considering criteria such as: duration of the active account, legal obligations, fraud prevention, and support and security needs.

In general:

• account and profile data is retained while the account is active
• reviews, AfterLive posts, and other content are retained until deletion or moderation
• data requested for deletion is removed when possible
• backups may retain copies for up to 1 week

After that, data is deleted or anonymized.

You may request deletion of your account within the application itself.

You may:

• access your data
• correct it
• delete it
• request portability
• withdraw consent
• object to processing
• request review of automated decisions

Users may publish reviews, AfterLive content, and other text in the application.

We may remove content that involves:

• offenses
• abuse
• improper personal data
• violation of the rules

We adopt technical and organizational measures to protect data, including:

• access control
• email authentication
• backups
• monitoring

The application is intended for users aged 14 or older. The minimum age may vary according to the legislation applicable in the user's country.

The app does not use browser cookies, but may use:

• local storage
• cache
• device identifiers
• third-party SDKs

We use email and, with your authorization, push notifications for:

• account creation
• login
• transactional messages

notifying you when someone replies to your take and other relevant in-app interactions

We may update this Policy periodically. When relevant changes occur, we will indicate the update date at the top of the document.

Application operator: Fernando de Lucas da Silva Gomes Email: fernanddolucas@gmail.com

This Policy is governed by the laws of the Federative Republic of Brazil, without prejudice to the application of local legislation where applicable to the user.