Summary
- We use your data so you can sign in, plan the wedding, build the invitation and the gift registry and, if you use it, for the AI assistant.
- We don't show third-party ads, don't sell data and don't use personal data for targeted advertising in the app.
- The assistant's memory and phone notifications only work if you turn them on. Photos and PDFs sent to the assistant are not stored.
- Planning data is stored on servers in the São Paulo region, Brazil. AI requests go through providers that may be outside Brazil, after we replace names with nicknames and remove contacts and documents.
- You can delete your account and data in the app, under Profile → Delete my account.
Who handles the data
The controller of the personal data processed in the Meu Sim app and on this site is Gabriel Durães do Nascimento, an individual based in Brazil, developer of and responsible for Meu Sim. For any privacy matter, including contact with the data protection officer, write to [email protected].
Data we process
Account
- Email and password. The password is kept only by the authentication service, hashed, and we have no access to it.
- Or your mobile number, if you sign in with your phone. The access code arrives by SMS, sent by a messaging provider that receives only the number and the message text.
- If you sign in with Google, we receive only your name, email and profile picture, needed to create and identify the account.
- An internal account identifier.
Bot protection
When you create an account, sign in, resend a confirmation or request a new password, the app runs an automatic security check to block bots and abuse. The provider of this check analyzes technical data from the device and connection, such as IP address and characteristics of the app's internal browser. This data is not used for advertising.
Account emails
Sign-up confirmation and new-password emails are sent by an email delivery provider on behalf of the appmeusim.com domain. The provider receives the recipient's address and the message content.
Wedding planning
- The couple's names, date, city, ceremony and reception venues and times, guest estimate and budget.
- Tasks, vendors and their contacts, expenses, installments, calendar events, the day's schedule, tables and notes.
- Guest list entered by the couple: names, companions (names and number of children), group, type (adult or child), table, notes, RSVP and, if the couple wishes, the guest's WhatsApp number. The number is used only so the couple can open a WhatsApp chat with the guest, with the invitation ready, on the couple's own phone: Meu Sim does not send messages to guests.
- Files you upload to Documents (PDF, JPEG or PNG, up to 10 MB each). The app only accesses the file you choose, never your whole gallery.
Invitation and gift registry
- Invitation design and texts, such as font, palette, frame, message and dress code.
- The couple's photos, if uploaded. They are kept in private storage and only delivered to someone with a valid invitation link.
- Gift registry items: name, store link, image, store, price and quantity. The couple can pick gifts by opening the store inside the app: the store page loads directly on the phone and, when the couple taps "Add to list", the app reads only that product's name, photo, price and link. The store handles the browsing under its own policy. If the couple shares a product from another app with Meu Sim, we receive only the shared text (name and link). When a link is pasted, our server may also fetch the product's public page.
- Invitation test link: the couple can open the invitation as a guest sees it. It records no RSVP or reservation and identifies no one.
- Reservations: which guest reserved each gift and the optional message they left.
Purchases
Subscriptions and credit packs are processed by the app store (Google Play). We don't receive card data. To validate purchases and manage the subscription, we process the internal account identifier, purchase history and subscription status.
AI assistant (CoraLi.SI)
- Messages you send to CoraLi.SI and the answers you receive.
- Planning data used to answer, encoded before being sent to the AI provider.
- Technical usage records (date, credits used, cost and model) and reports made with the "Report answer" button.
- The conversation history is stored only on your device.
- CoraLi.SI memory (only if the couple turns it on): short facts the couple shared, up to 25 per wedding, which the couple can view, edit and delete under Profile → What CoraLi knows.
- Photos and PDFs sent to CoraLi.SI: used only to read that request and not stored on our servers.
Phone notifications, email and SMS
If you allow it, we keep your device's notification identifier to notify you about the planning: when your partner assigns you a task, when a guest replies or reserves a gift, and the day before the free trial ends. On the day before each subscription charge, we may also send a reminder by email or, for people who signed in only with a phone number, by SMS, with the date, the amount and how to cancel. You can turn phone notifications off at any time in your phone settings.
What we don't collect
The app has no advertising, behavioral analytics or cross-app tracking tools. It doesn't read your contacts, phone calendar, location or list of other apps.
Purposes and legal bases
- Create and maintain the account, authenticate access, recover the password and send the SMS access code: performance of a contract (LGPD art. 7, V; GDPR art. 6(1)(b)).
- Provide planning, the digital invitation, the gift registry and RSVPs: performance of a contract (LGPD art. 7, V; GDPR art. 6(1)(b)).
- AI assistant, its memory and reading photos and PDFs: consent, requested before first use, and performance of a contract (LGPD art. 7, I and V; GDPR art. 6(1)(a) and (b)).
- Phone notifications: consent, requested before turning them on (LGPD art. 7, I; GDPR art. 6(1)(a)).
- Validate purchases, manage the subscription and send the reminder before each charge: performance of a contract and legitimate interest (LGPD art. 7, V and IX; GDPR art. 6(1)(b) and (f)).
- Prevent fraud, abuse and bots, control AI costs, handle reports and keep the service secure; count site visits anonymously: legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)).
- Ad measurement cookies on the site, when enabled: consent, requested in the site notice (LGPD art. 7, I; GDPR art. 6(1)(a)).
- Handle requests and comply with legal obligations or orders from authorities: legal obligation and exercise of rights (LGPD art. 7, II and VI; GDPR art. 6(1)(c)).
Sharing
We don't sell or rent personal data and don't share data for advertising. We share data only as needed to run Meu Sim:
- Infrastructure providers that operate the service on our behalf: authentication, database and file storage, hosting of the site and the invitation page, email and SMS delivery (access code and subscription reminder), bot protection, anonymous site visit counts and routing of messages sent to support.
- AI providers: Cloudflare, which runs the server that receives the request and the AI gateway without keeping logs or cache of the content, and OpenRouter, which routes the request to AI model providers. We send only the encoded request.
- Phone notifications: the Expo notification service and Firebase Cloud Messaging (Google) deliver notifications to the device.
- Google: only if you choose to sign in with Google or connect Google Calendar. With Calendar, Meu Sim creates a "Meu Sim" calendar in your account with the events you take part in; we don't read your personal calendar.
- Pwned Passwords: when you create or change a password, the app checks it against public breaches. The password never leaves the device; only the first 5 characters of its SHA-1 hash are sent.
- RevenueCat and Google Play: purchase processing, validation and subscription management. We send only the internal account identifier.
- WhatsApp: when the couple taps to send the invitation through WhatsApp, the couple's own phone opens the chat with the guest. Meu Sim doesn't send the message or receive WhatsApp data.
- Stores: when someone opens a store link, the purchase happens at the store, under its own policy.
- AI assistants you connect, such as ChatGPT: only if you connect and authorize them. See Assistants from other companies.
Within a wedding, the partner you invite can see and edit that wedding's planning and documents. Guests who receive a link see the invitation and the gift registry, and the couple sees who reserved each gift. We may also share data when required by law or by a competent authority.
Storage and international transfers
Planning, invitation and account data and files are stored on servers in the São Paulo region, Brazil (sa-east-1). Some infrastructure and AI providers are based in or use servers in other countries, such as the United States. These transfers happen to provide the service you requested, with providers that offer contractual data protection safeguards, such as the European Commission's standard contractual clauses where applicable, and under LGPD art. 33.
Guests, invitation and gifts
Guest data is entered by the couple. Each invitation link gives access only to that guest's name and companions, the couple's names, the wedding date, venues and dress code, the invitation message and photos, the gift registry and that invitation's RSVP. The guest list is never exposed through a link.
- The link is valid until 30 days after the wedding date and can be revoked by the couple. The couple sees whether the invitation was sent, opened and answered.
- The invitation page is not indexed by search engines, and the guest doesn't need an account.
If you are a guest and want to correct or remove your data, contact the couple who sent the invitation or write to [email protected].
AI assistant (CoraLi.SI)
- Before sending a request to the AI provider, we replace names of people and vendors with nicknames and remove email, phone, ID numbers, card numbers, postal codes and bank details, even when you type them in the chat. Children appear only as a count.
- The table linking nicknames to names exists only during the request and is never sent to the AI or saved.
- We don't use your conversations to train models and we look for providers and settings that don't retain or train on the content.
- Photos are sent to the AI provider to be read; please avoid photos of personal documents or unnecessary third-party data. PDFs are converted to text and encoded like the rest of the chat. Neither is stored.
- The assistant only suggests: nothing changes in the planning without the couple's approval.
Assistants from other companies (ChatGPT and similar)
If you connect Meu Sim to an AI assistant from another company, such as ChatGPT, by signing in and tapping "Allow access", the assistant receives the wedding planning data needed to handle your requests: summary, tasks, calendar, guests and RSVPs, budget and payments, vendors (with the saved contacts), gift registry and invitation. We don't send guest phone numbers, children's names, stored documents or photos.
- The legal basis is your consent, given on the connection screen. You can withdraw it at any time by disconnecting Meu Sim in the assistant's settings.
- Names are not replaced with nicknames as with CoraLi.SI: the assistant receives the data as it is.
- Once it receives the data, the assistant's company is responsible for it under its own terms and privacy policy, including retention, model training and international transfers. Meu Sim does not control that processing.
- Access uses a separate authorization that only covers the account that connected and can be ended by it. Meu Sim does not receive your conversations with the assistant, only the read and change requests it makes.
Stores and affiliate links
Store links in the gift registry may be affiliate links. When they are, this will be clearly identified on the page, and Meu Sim may earn a commission at no extra cost to the buyer. Meu Sim receives no personal data from buyers, only aggregate commission reports.
Retention and deletion
We keep data while the account is active. You can delete the account at any time in the app (Profile → Delete my account) or by writing to [email protected] from the registered email. Deletion removes the account and the weddings you own, including guests, vendors, expenses, calendar, documents, invitation, photos, gift registry, reservations, CoraLi.SI memory and your partner's access. Purchase records the app store must keep follow its own rules. Data may be kept longer only when required by law or for the exercise of rights.
Your rights
You can request confirmation and access, correction, anonymization, blocking or deletion, portability, information about who we share data with, and withdraw consent. Most of this can be done directly in the app by editing, exporting or deleting information. For the rest, write to [email protected]. In Brazil, you can also file a complaint with the ANPD.
People outside Brazil
Meu Sim can be used in other countries. Everyone's data is stored on the same servers in Brazil and receives the same protections described in this policy, wherever you are.
European Union, European Economic Area and United Kingdom
If you are in these places, processing also follows the GDPR (Regulation (EU) 2016/679) and the UK GDPR, with the legal bases listed in Purposes and legal bases. You have the right of access, rectification, erasure, restriction of processing, data portability and objection, the right to withdraw consent at any time (without affecting prior processing) and the right to lodge a complaint with your country's data protection authority, such as the CNPD in Portugal or the ICO in the United Kingdom. We reply within one month.
Your data is transferred to Brazil, where it is stored, and may pass through providers in the United States and other countries, as described in Sharing, with the safeguards described in Storage and international transfers. We make no automated decisions that produce legal effects about you.
United States and other countries
We don't sell personal data or share it for cross-context behavioral advertising. Anyone, in any country, can ask to access, correct or delete their data through the app or at [email protected], without discrimination for exercising these rights.
Security
All traffic uses encrypted connections (HTTPS/TLS). Database rules let each account read only the weddings it belongs to. Documents and photos are kept in private storage. RSVP links are random and stored only in hashed form. No system is fully immune to incidents; if an incident may create relevant risk, we will notify affected people and the authorities as required by law.
This site and visit counts
The appmeusim.com site shows no ads. The hosting provider processes technical connection data, such as IP address, to deliver pages and protect the service. We count visits to the site and the RSVP page anonymously and in aggregate, without cookies and without identifying visitors. If ad measurement is enabled on the site, partner cookies load only after you tap Accept in the "Privacy and ads" notice, and you can change your choice at any time under "Privacy preferences" in the footer.
Children
Meu Sim is intended for people aged 18 and over and is not directed at children. Children's names may appear in the guest list only when added by the couple; in the AI assistant, children appear only as a count.
Changes
We may update this policy to reflect changes in the app or the law. The date of the last update is at the top of the page, and relevant changes will be announced in the app.
Contact
Questions, requests and contact with the data protection officer: [email protected].
