Privacy Policy

1. Information We Collect

Account information

When you create an account, we collect:

• Your email address.
• Your password.

Passwords are never stored in plain text. They are securely hashed using BCrypt before being stored on our server.

Service usage information

We collect limited information about how much you use our service. This information is used to measure service usage and enforce applicable subscription or usage limits.

This usage information is not used for advertising, marketing, behavioural profiling, or cross-app tracking.

2. Information We Do Not Collect

The App does not collect:

• Contacts.
• Photos, videos, or other media files.
• Precise or approximate location information.
• Advertising identifiers.
• Payment card information.
• Personal information beyond the information described above.

We do not use advertising SDKs, cookies, or third-party tracking technologies.

3. How We Use Your Information

We use the information we collect to:

• Create, authenticate, and manage your account.
• Provide the App and its related services.
• Measure service usage and apply usage limits.
• Maintain the security and integrity of our systems.
• Respond to support requests.
• Comply with applicable legal obligations.

4. Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) or similar privacy legislation applies, we process personal data on the following legal bases:

• Performance of a contract: to create and manage your account and provide the service you request.
• Legitimate interests: to protect the service, prevent misuse, measure usage, and enforce service limits.
• Legal obligations: where processing is necessary to comply with applicable law.

5. Authentication

The App uses JSON Web Tokens (JWTs) to maintain authenticated communication between the App and our server. JWTs are used for authentication and session management and are not used for advertising or tracking.

6. Data Storage and Security

Account and service usage information is stored on a server operated and managed by Corydalis.

Our security measures include:

• BCrypt password hashing.
• JWT-based authentication.
• Encrypted communication using HTTPS.
• Reasonable technical and organisational access controls.

No electronic transmission or storage method can be guaranteed to be completely secure. However, we take reasonable measures to protect personal information against unauthorised access, alteration, disclosure, or destruction.

7. Data Sharing

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

Information may be disclosed only where required by applicable law, a valid legal process, or where reasonably necessary to protect the rights, security, and integrity of Corydalis, our users, or others.

8. International Availability

The App is available worldwide. If you use the App outside Portugal, your information may be transmitted to and processed in Portugal or in another location where our server infrastructure operates.

Where required, we take reasonable steps to ensure that personal information receives an appropriate level of protection.

9. Data Retention

We retain personal information only for as long as necessary to provide the service, maintain security, resolve disputes, enforce our agreements, or comply with legal obligations.

When an account is deleted, the personal information associated with that account is deleted from our active systems within a reasonable period, unless retention is required by law.

10. Account Deletion

You may permanently delete your account directly from within the Notifications Voice Alert Android App.

Account deletion removes the personal information and usage data associated with your account, subject to any legal requirement that obliges us to retain specific records.

For help with account deletion, contact tomasantunes@gmail.com.

11. Children's Privacy

The App is not intended for children under the age of 13 or under the minimum age required to consent to digital services in their country.

We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will take reasonable steps to delete it.

12. Your Privacy Rights

Depending on your country of residence, you may have the right to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Request restriction of certain processing.
• Object to certain processing.
• Request a portable copy of your personal data.
• Lodge a complaint with a competent data protection authority.

To exercise these rights, contact us using the details at the end of this policy.

13. Google Play and Third-Party Services

The App does not use third-party advertising services or third-party analytics services.

If you purchase a subscription, payment processing is handled by Google Play. Corydalis does not receive or store your complete payment card details. Your use of Google Play is also subject to Google's own terms and privacy policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the App, our practices, or applicable legal requirements.

When this policy is updated, the “Last updated” date at the top of the page will be revised. Material changes may also be communicated through the App or another appropriate channel.

15. Contact Us

For questions about this Privacy Policy, account deletion, or your privacy rights, contact: