Privacy policy

• Your location goes to the server every time the app builds the feed, runs a search, or checks for notices nearby. It is how it knows what is “near you”.
• Your name does not appear on reports. Whoever publishes an incident appears as “A neighbor” on the map, in the feed, and on the report screen. Your display name only appears in comments.
• What you report is public — the text, photos, category, and location appear on the map and in the feed of people nearby.
• We do not sell your data, we do not show advertising, and we do not use your information for commercial profiling.
• You can delete your account in the app itself or through this page, without having to talk to anyone.

For the purposes of the LGPD (Brazilian General Data Protection Law, Law No. 13,709/2018), the controller of the data processed in Viicus is:

• Contact: contato@viicus.com
• Data Protection Officer: privacidade@viicus.com

We collect the minimum the app needs to work. There is no social sign-up, and we do not ask for CPF (Brazilian taxpayer ID), identity documents, or phone number.

We do not collect your contact list, your browsing history, advertising identifiers, or your location in the background — when the app is closed, it does not know where you are.

The app's report editor blocks the publication of CPF numbers, phone numbers, and emails inside the text, and warns you when the report seems to single out a specific person. Even so, what you write is your responsibility: do not include other people's data.

This is the most important part of this policy, because it is the one with consequences beyond you.

When you publish a report, it appears on the map and in the feed of people nearby, with the text, the approved photos, the category, the address, the location, and the date. That is what makes the app work: a problem nobody sees is a problem nobody solves.

What is not public is you. On the map, in the feed, and on the report screen, the author appears as “A neighbor” — never by name. Your display name only appears in comments, where it is conversation, not a report.

For people who are not signed in, coordinates are rounded to about 110 meters. The exact position of a report can reveal where someone lives; to read the map, the block is enough.

Reports only stop being published when they violate the terms of use — prohibited content, other people's personal data, sexually explicit material. Beyond that, what you publish stays visible.

Reports leave the map and the feed according to the nature of the issue — from 12 hours for something short-lived to 30 days for a problem that stays until someone fixes it. Leaving the map does not delete it: the report remains in your history, with its tracking number, so you can follow up with the public body.

Every report goes through automated review before being published, and so do attached media. It is what keeps prohibited content, third-party personal data, and inappropriate material off the map.

The review receives only the content of the report — category, address, text, and media. It does not receive your name, your email, or your account identifier.

The review can decline publication. When that happens, the report is not deleted and remains in your history. Under art. 20 of the LGPD, you can request human review of the decision through this policy's contact channel — and a legitimate report of a neighborhood problem declined by mistake is exactly the case for that.

We do not sell, rent, or hand over your data for advertising. Sharing happens in three situations:

• Vendors that operate the service. Companies hired to host the application, store media, deliver emails and notifications, and run the automated content review. They process data on our behalf and under our instructions, limited to the contracted purpose, and cannot use it for their own ends.
• Responsible public bodies. It is the app's reason to exist: reports are forwarded to the competent body for handling, with the content, the location, and the tracking number.
• Authorities, upon legal request. We comply with court orders or requests from competent authorities within the limits of the law.

Some of these vendors process data outside Brazil. International transfers rely on the hypotheses of art. 33 of the LGPD and on contractual clauses with each of them.

• Account data: for as long as the account exists.
• Reports and media: remain after leaving the map, because they are the case history and the proof that you contacted the public body.
• Reports declined in review: kept, so you can request review. They are not published.
• Application access logs: six months, under art. 15 of the Marco Civil da Internet (Brazilian Internet Civil Framework).
• Verification codes: expire within minutes and are deleted when the account is deleted.

The LGPD (art. 18) guarantees you, regarding your personal data: confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing, and review of automated decisions.

On Viicus, much of that does not depend on asking anyone:

• Correcting your name or email: in Account, in the app.
• Changing your password: in Account — all other sessions are ended.
• Seeing what you published: in the incidents tab, with each report's tracking number.
• Deleting your account: in Account, or through this page.
• Stopping location sharing: revoke the permission in your system settings. The app still opens, but the proximity feed stops working.

For other requests, write to privacidade@viicus.com. We reply within 15 days. You can also petition the ANPD (Brazil's National Data Protection Authority) directly.

Deletion erases the person and preserves the case: your email, your name, your password, your sessions, your reactions, and your blocks are erased, and your comments are taken down. The reports you published remain, ownerless — they already appeared as “A neighbor”, and they stay that way.

All traffic between the app and our servers is encrypted, and your password is stored encrypted — not even we can read it. Administrative access to data is restricted and logged.

No system is immune. In the event of an incident with relevant risk to your rights, we will notify you and the ANPD, as required by art. 48 of the LGPD.

Viicus is intended for people aged 16 or older. We do not knowingly collect data from children. If we identify an account below that age, it will be removed. Guardians who suspect this can write to privacidade@viicus.com.

When this policy changes, the update date at the top changes with it. If the change significantly affects how we handle your data, we will announce it in the app before it takes effect.