Privacy policy

Last updated 21 October 2026. La Brasa is a private app for couples. What you share in it is meant for you and your partner, and we built it that way: no ads, no selling data, and analytics only if you say yes, never what you share.

Who we are

La Brasa is made by João Correia, an independent developer in Portugal, who is the data controller. Questions or requests: privacy@labrasa.io.

What we keep, and why

• Your account: your email address, and your name and email from Google if you sign in with Google. Used to sign you in, and for analytics and email only if you say yes (see below).
• Your profile: date of birth (to confirm you are 18 or older), language, time zone, the heat level you chose, reminder time, an optional nickname and avatar colour, and whether you turned on Uncut wording.
• Your pairing: which account you are paired with, and invite codes while they are open.
• What you do in the app: your card ratings, answers to daily questions and games, plans and how they went, reactions and the short lines you add to them, and taps you send (taps and their messages are deleted after 24 hours).
• Activity: a list of what your partner did (answered, matched, reacted, sent a tap), kept for 30 days so the app can show it to you. It never contains the content itself.
• On your own: if you use La Brasa without a partner, your answers to your own daily question and your quiz results. They are private to you, also after you pair, and never shown to a partner.
• How you use the app: the days you open La Brasa, how many times, which screens you visit (names only, such as "Today" or "Matches"), the app version, and how smoothly its animations ran (one frame-time number a session). Never what you rate, write or answer. We use it to see what works and fix what doesn't, and delete it after 6 months. While you set up, the app also notes which set-up screens your phone reached, with the app version (Play or labrasa.io) and language, under a random ID made on your phone (not linked to an account until you sign in, deleted with your account if you make one). This record holds no content, no advertising ID, goes to no third party, and is deleted after 90 days. If you say yes to analytics (below), the screens you visit and these set-up steps also go to PostHog.
• Feedback: messages you send us from the app, with your account and app version, so we can reply.
• Keep it cool: your best times in the ember's game, this week and all-time (weekly ones are deleted after two weeks), and, if you join the couples' board, that you joined and your couple's board name.
• Notifications: a device token so we can send you notifications. Notifications never contain your cards, answers or messages.
• La Brasa Plus: if you subscribe, whether you have Plus, which plan, and when it renews or ends. Google Play handles the payment, or Patreon in the version from labrasa.io; we never see your card or bank details. For a Patreon subscription we keep only your Patreon user ID, your membership ID and the membership status.

We use this data only to run La Brasa for you and your partner. The legal basis is our contract with you (providing the app you asked for). Analytics and email about offers are different: they happen only with your yes.

Analytics and email, only if you say yes

The app asks you once, on a screen called "Help improve La Brasa". Saying no is as easy as saying yes, and you can change your answer at any time in Settings → Privacy. Until you say yes, nothing is sent to PostHog.

If you say yes, the app sends PostHog (PostHog Inc., with your data hosted in the European Union, in Frankfurt) the following, which PostHog processes on our behalf for product analytics:

• your account ID and email address;
• your language, the app version and which version you use (Play or labrasa.io);
• whether you are paired or on your own, whether you have Plus, and the goal you picked when you joined;
• which screens you open and what you do there, such as starting a game, sending a tap, seeing the Plus offer or how a purchase went;
• your phone's model and operating system, as PostHog's software collects them.

PostHog never receives your cards or how you rated them, your answers, your heat level, whether Uncut is on, your limits, fantasies or dares, your map or quiz results, your partner's name, photos, reactions or messages. There is no session recording and no advertising ID, and nothing is sold or used for ads. We use it to see what works, where people get stuck, and whether Plus is worth paying for.

Offers and news by email: a separate switch on the same screen, "Email me offers and news", is off unless you turn it on. Only then do we email you offers and news. You can stop them at any time in Settings → Privacy, by replying to one of them, or by writing to privacy@labrasa.io.

The legal basis for both is your consent (GDPR article 6(1)(a)). You can withdraw it at any time; that doesn't affect what was sent before. When you say no or sign out, the app stops sending to PostHog at once. When you delete your account, we delete you in PostHog too; otherwise PostHog data is kept for 2 years at most.

What your partner sees

Your ratings are never shown to your partner. A card appears to both of you only when you both said yes to it. Your answers to daily questions and games are shown to your partner only after they have answered too. Taps, plans and verdicts on plans are shared with your partner by design.

What other couples see

Nothing, unless you and your partner both join the couples' board in Keep it cool. Then other couples see only your couple's board name (made from our own word lists, never typed by anyone), your ember's stage and look (never an Uncut item), and your two best times and their sum. Never your names, nicknames, photos, your ember's name, or anything you rate, write or answer. Either of you can leave the board at any time, which takes your couple off it at once.

Who helps us run La Brasa

• Supabase hosts our database and sign-in, in the European Union (Ireland).
• Resend sends sign-in code emails.
• Google Firebase Cloud Messaging delivers notifications (it never sees content).
• Google Sign-In, only if you choose to sign in with Google.
• Google Play takes payment for La Brasa Plus, under Google's own terms and privacy policy.
• RevenueCat (United States) checks Plus purchases with Google Play. It receives your account ID (a random code, never your email) and your purchase history, under standard contractual clauses.
• PostHog (data hosted in the European Union, Frankfurt) receives product analytics, only if you said yes (see Analytics and email).

These providers process data on our behalf and only to provide their service. We do not sell or share your data with anyone else, and we use no advertising SDKs. The only analytics SDK is PostHog's, and it sends nothing until you say yes.

Patreon (United States) takes payment for La Brasa Plus in the version from labrasa.io. It isn't a provider acting for us: Patreon is the controller of your Patreon account and payment details, under its own terms and privacy policy. When you join, we send Patreon only a random code for your La Brasa account, never your email or anything you write or answer in La Brasa, and we keep only your Patreon user ID, your membership ID and the membership status.

Security

Data is encrypted in transit. Every rule about who sees what is enforced on our server, not in the app, so a modified app or a hand-made request gets nothing the real app wouldn't:

• Your ratings, answers and fantasies come back only to you, and to your partner only where this policy says so. Nobody else can read them, and an ex reads nothing of yours once you unlink.
• La Brasa Plus is checked with the store or Patreon on our server; the app can't unlock it on its own.
• Limits slow down repeated requests, like guessing invite codes or flooding your partner with notifications.
• Notifications and the home-screen widget never contain what you wrote.
• An optional app lock uses your phone's own fingerprint, face or PIN, and hides the app's content from screenshots and the recent apps view while it is on.

We keep automated tests that try these attacks against our own server. If you find a security problem, please write to security@labrasa.io. We'll reply within a few days, fix what's real and thank you by name if you'd like.

How long we keep it

Until you delete your account. Taps are deleted after 24 hours, Activity after 30 days, weekly game times after two weeks, usage records after 6 months, and PostHog analytics after 2 years at most. If you unlink from your partner, the couple is deleted; your own ratings stay on your account until you delete it.

Your rights

You can access, correct, export or delete your data, and object to or restrict how it is used. Delete your account at any time from the app (Settings → Delete my data), or see how to delete your account. For anything else, email privacy@labrasa.io. You can also complain to the Portuguese data protection authority (CNPD) or the one where you live.

Age

La Brasa is for adults only. You must be 18 or older to use it, and we do not knowingly keep data about anyone younger.

Changes

If we change this policy, we will update this page and the date above, and tell you in the app if the change matters.