Paula Privacy Policy

Last updated: 17 of October, 2025

Welcome to Paula, a period and cycle tracking app provided by FAMIVITA COMERCIO DE PRODUTOS PARA SAUDE LTDA, CNPJ: 23.583.042/0002-89, Headquarters in RUA JOÃO PEREIRA, 296, LAPA, SÃO PAULO, SP, CEP: 05074-070, Brazil. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use Paula or visit our website.

  1. Who We Are
    Paula is operated by FAMIVITA COMERCIO DE PRODUTOS PARA SAUDE LTDA (“Famivita”, “we”, “our” or “us”). If you have any privacy questions, contact: Sebastian Sommer, Data Protection Officer (DPO), at [email protected]
  2. What Data We Collect
    When you use Paula or our website, we may collect:

    • Account Information: Email address and password if you create an account.
    • Health and Cycle Data: Information you log in the app about your cycle, symptoms, health, or pregnancy. This is stored securely and only with your explicit consent.
    • Device & Usage Data: Data about your device (model, OS, unique identifiers), app usage, crash logs (via Firebase Crashlytics), and website analytics (via Google Analytics).
    • Communication Data: Your email address if you contact support or subscribe to our newsletter.
    • IP Address & Location: IP address is used for security, analytics, and country detection (to ensure age compliance). We do not track precise location.
    • Survey & Feedback Data: If you participate in surveys or provide feedback, your responses are collected in anonymized or de-identified form and cannot be linked to you as an individual.
    • Other Data: Any other information you voluntarily provide.
  3. How We Use Your Data
    We use your data to:

    • Provide, personalize, and improve our services
    • Send you cycle summaries, reminders, or educational emails (via Klaviyo or SendGrid)
    • Troubleshoot, secure, and analyze app performance (Firebase Crashlytics, Google Analytics)
    • Respond to your questions or support requests (via email)
    • Conduct research or surveys—only using anonymized/de-identified data
    • Comply with legal obligations and age restrictions
  4. Data Storage and Security
    • We host data securely on AWS servers in the USA.
    • Your data is encrypted in transit (HTTPS) and protected at rest in our databases.
    • Only authorized staff can access your information for the purposes described here.
  5. Data Sharing
    • We do not sell your data.
    • We only share your data with trusted service providers (e.g., AWS, Firebase, Google Analytics, Klaviyo, SendGrid) to help us deliver our services, and only as necessary.
    • We do not share health data with external partners unless it is anonymized or de-identified for scientific or statistical research.
    • If required by law, we may share information with authorities.
  6. Cookies and Analytics
    • Our website uses cookies for analytics (Google Analytics).
    • We do not use cookies for personalized advertising or retargeting.
    • However, Google Ads may use its own cookies or similar technologies for ad delivery, in line with Google’s privacy policy. You can adjust your browser settings to opt out of non-essential cookies.
  7. Communication and Notifications
    • We send transactional and marketing emails via SendGrid and Klaviyo.
    • If you opt-in, you may receive newsletters or cycle summary emails, which may include information about your logged cycle or health data.
    • You can unsubscribe from promotional emails at any time by clicking the link in the email.
  8. Surveys and User Research
    • Sometimes we may invite you to participate in surveys (via Google Forms or similar tools). All responses are collected in anonymized or de-identified form. We never use non-anonymized data for research or share individual user responses with third parties.
  9. Children and Age Requirements
    • Paula is not intended for children under 13.
    • You must be at least 13 years old to use Paula in the US and globally.
    • In the EU/EEA/UK, you must be at least 16 years old (or have parental consent as required by local law). We detect your country and enforce age restrictions accordingly. If you are under the minimum required age, you may not use Paula.
  10. Your Rights
    Depending on where you live (EU, UK, Brazil, US), you have the right to:

    • Access your personal data
    • Correct or update your data
    • Delete your data or account
    • Object or restrict certain types of processing
    • Withdraw your consent at any time (for example, by deleting your account or opting out of emails)
    • Request a copy of your data in a portable format
    • Complain to a data protection authority

    You can exercise these rights by contacting us at [email protected].

  11. Legal Bases for Processing
    • For EU/EEA/UK users: We process data based on your consent (when you register or input health data), to fulfill our contract with you, to comply with legal obligations, and our legitimate interests (such as improving the app).
    • For Brazilian users: We comply with LGPD, processing data for service provision, consent, and legitimate interests.
    • For US users: We comply with applicable federal and state privacy laws (including CCPA/CPRA as relevant), and process your data with your consent, to provide services, or as required by law.
  12. Data Retention
    • We keep your data only as long as needed for the purposes above, or as required by law.
    • You can delete your account at any time in the app or by contacting us. When you request account deletion, your account and personal data will be permanently deleted within 14 days. Data may remain in backups for up to 30 days but will not be used for any purpose during this time.
  13. International Transfers
    • Your data may be transferred to, and stored on, servers outside your country (such as in the US). We take steps to ensure adequate data protection wherever your data is processed.
  14. Changes to this Policy
    • We may update this policy to reflect changes in our practices, services, or laws. When we do, we’ll post the new version and update the “last updated” date. If we make major changes, we’ll notify you by email or in-app.
    • Paula is used by people around the world and is available in several languages. In the event of any discrepancy between translated versions, the Portuguese version of this Privacy Policy will prevail.
  15. Contact
    If you have any questions about this policy or your data, please contact:
    [email protected]
    Data Protection Officer: Sebastian Sommer ([email protected])