My Envelopes logo

My Envelopes

Sign Up

Privacy Policy

Last updated: September 24, 2026

Overview

This Privacy Policy explains how My Envelopes ("the App") is handled by Vinicius Lara ("we," "us," "our") when you use the App on iOS.

Who We Are

Controller/Business: Vinicius Lara (individual developer)

Privacy contact: privacy@myenvelopes.app

Information We Collect

We collect only what the App needs to work. Some of it applies to everyone who uses the App, and some only if you sign in and turn on sync.

  • Account and authentication (if you sign in): your email address and authentication data needed to keep you signed in (managed by Firebase Authentication).
  • Synced app data (if you turn on sync): the content you choose to sync (the data you create in the App), stored in Firebase Cloud Firestore.
  • Technical and security data: limited diagnostics (such as IP address, timestamps, app version, and basic security logs) used to operate, secure, and troubleshoot sync.
  • Usage analytics: which screens you open and which features you use (for example, creating an envelope or opening the subscription screen), counts such as how many envelopes or accounts you have, your plan, app version, device model, iOS version, language, and a random identifier created when the App is installed. After you sign in, these events are linked to your account ID. Amounts, balances, envelope or account names, notes and email addresses are never included, and our analytics provider is set to discard your IP address. You can turn this off in Settings → Privacy.
  • Crash reports: when the App crashes, where in the code it crashed, the app version, device model, iOS version and your plan, plus your account ID if you are signed in. Crash reports never include amounts, names or notes. You can turn this off in Settings → Privacy.

We do not show ads, use ad networks, or track you across apps and websites owned by other companies.

How We Use Information

  • Provide the App's features, including sync across devices.
  • Understand which features are used, so we can improve the App.
  • Diagnose and fix crashes.
  • Authenticate you and maintain account access.
  • Prevent fraud, abuse, and unauthorized access.
  • Provide customer support.
  • Comply with legal obligations.

How We Share Information

We do not sell personal information and we do not share personal information for cross-context behavioral advertising.

We use these service providers to run the App:

  • Firebase Authentication (email-based sign-in)
  • Firebase Cloud Firestore (sync storage)
  • Firebase Crashlytics (crash reports)
  • PostHog (usage analytics, hosted in the United States)

Learn more in their policies: Google Privacy Policy, Firebase Privacy and Security and PostHog Privacy Policy.

Purchases and subscriptions (if any) are processed by Apple (App Store). We do not receive or store your payment card details.

Data Retention

We keep account and synced data only as long as needed to provide sync and operate the App, unless a longer retention period is required by law (for example, for security or dispute resolution).

Usage analytics events are kept for up to 7 years. Crash reports are kept for 90 days.

To request deletion of your account, your synced data and the analytics linked to your account, contact privacy@myenvelopes.app.

Your Choices and Privacy Requests

You can turn off usage analytics and crash reports at any time in the App under Settings → Privacy. Turning either one off deletes anything not yet sent; analytics stop right away, and crash reporting stops from the next launch. You can also request to access, correct, or delete your information by contacting privacy@myenvelopes.app.

Regional Notices (US, Canada and Brazil)

California (CCPA/CPRA)

If you are a California resident, you may have rights to request access to, deletion of, and correction of your personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law.

Canada

You may have the right to access and correct personal information we hold about you. To make a request, contact privacy@myenvelopes.app.

Brazil (LGPD)

If you are in Brazil, the Lei Geral de Proteção de Dados (LGPD) gives you the right to confirm whether we process your data, access it, correct it, have it anonymized, blocked or deleted, move it to another provider, learn who we share it with, and withdraw consent. We process account and sync data to provide the service you asked for. We process usage analytics and crash reports on the basis of our legitimate interest in keeping the App working and improving it, and you can object to that at any time in Settings → Privacy. Some of this data is processed in the United States (see International Processing). To exercise your rights, contact privacy@myenvelopes.app. You may also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

Children's Privacy

My Envelopes is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact privacy@myenvelopes.app.

Security

We use reasonable safeguards designed to protect information. However, no method of transmission or storage is 100% secure.

International Processing

Firebase (Google) and PostHog may process and store information on servers outside your state, province or country, including in the United States. Our PostHog analytics are stored in the United States under a data processing agreement. We rely on these providers' contractual and technical safeguards to protect that information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date when changes are made.

Contact

For privacy questions or requests, contact privacy@myenvelopes.app.