Privacy Policy.

Last updated: March 3, 2026

1. Information We Collect

We collect information you provide directly to us when you use our website and mobile applications. This may include:

Personal Information: When you use our contact form, we collect your name and email address. We do not require account creation on the website.

Mobile Application Data: Our mobile applications (MoodDoodle, PFM, PI, MyBestPlaces) may collect data locally on your device, including journal entries, mood data, financial records, drawings, location preferences, and app usage statistics. This data is stored locally on your device unless you explicitly choose to export or back it up.

Automatically Collected Information: When you visit our website, we automatically collect certain information including your IP address, browser type, operating system, referring URLs, pages visited, date and time of visits, and session identifiers.

Geolocation Data: We may collect approximate geolocation data based on your IP address for analytics purposes and to improve our services.

Device Information: When using our mobile applications, we may collect device type, operating system version, unique device identifiers, and app version information.

2. How We Use Your Information

We use the information we collect for the following purposes:

To Provide and Maintain the Service: We use your information to operate, maintain, and improve our website and mobile applications, ensuring they function correctly and efficiently.

To Communicate With You: We use your contact information to respond to your inquiries, provide customer support, and send important notices about the Service.

To Improve Our Services: We analyze usage patterns and visitor data to understand how our website and applications are used, identify areas for improvement, and develop new features.

For Security and Fraud Prevention: We use IP addresses and other technical information to detect and prevent spam, abuse, and unauthorized access to our Service. This includes blocking suspicious IP addresses and filtering spam submissions.

For Analytics: We use aggregated and anonymized data to understand traffic patterns, visitor demographics, and usage trends. This helps us make informed decisions about our Service development.

To Comply With Legal Obligations: We may process your information to comply with applicable laws, regulations, or legal proceedings.

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers: We may share information with trusted third-party service providers who assist us in operating the Service, such as email delivery services, hosting providers, and analytics platforms. These providers are contractually obligated to protect your information.

Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

Protection of Rights: We may disclose information when we believe it is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your personal information.

With Your Consent: We may share your information with third parties when you give us explicit consent to do so.

4. Data Security

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption: Our website uses HTTPS/SSL encryption to protect data transmitted between your browser and our servers.

Local Storage Security: Data stored locally in our mobile applications remains on your device and is protected by your device's built-in security features, including biometric authentication where supported.

Access Controls: We limit access to personal information to those who need it to operate, develop, or improve our Service.

Input Validation: We implement server-side input validation and CAPTCHA verification to prevent malicious submissions and protect the integrity of our Service.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

5. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Right of Access: You have the right to request a copy of the personal information we hold about you.

Right to Rectification: You have the right to request correction of any inaccurate personal information we hold about you.

Right to Erasure: You have the right to request deletion of your personal information, subject to certain legal exceptions.

Right to Restrict Processing: You have the right to request that we limit the processing of your personal information under certain circumstances.

Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format.

Right to Object: You have the right to object to the processing of your personal information for certain purposes, including direct marketing.

Mobile App Data: Since our mobile applications store data locally on your device, you can delete this data at any time by clearing the app data or uninstalling the application. You may also use the built-in backup and export features to manage your data.

To exercise any of these rights, please contact us at leonardo.opitz@gmail.com.

6. Children's Privacy

Our Service is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages.

If we become aware that we have collected personal information from a child under the applicable age without parental consent, we will take steps to delete that information as quickly as possible.

If you are a parent or guardian and you believe that your child has provided us with personal information, please contact us at leonardo.opitz@gmail.com so that we can take appropriate action.

Our mobile applications may be used by children under parental supervision. Parents are responsible for monitoring their children's use of the applications and managing any data stored locally on the device.

7. International Data Transfers

Our website is hosted and operated from Portugal, within the European Union. If you access the Service from outside the EU, please be aware that your information may be transferred to, stored, and processed in Portugal.

By using the Service, you consent to the transfer of your information to Portugal and other countries that may have different data protection laws than your country of residence.

For transfers of personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your personal information.

We comply with the General Data Protection Regulation (GDPR) for all personal data of EU residents, regardless of where the data is processed.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

Website Data: Contact form submissions and associated data are retained for as long as necessary to respond to your inquiry and for our legitimate business interests. Visit logs and analytics data are retained for up to 24 months.

Mobile App Data: Data created within our mobile applications is stored locally on your device and retained for as long as you keep the application installed. You have full control over this data and can delete it at any time.

Blocked IP Data: IP addresses blocked for spam or security purposes are retained indefinitely to maintain the security of our Service.

When your personal information is no longer needed, we will securely delete or anonymize it in accordance with applicable data protection laws.

9. Third-Party Services

Our Service may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third-party services.

App Stores: Our mobile applications are distributed through the Apple App Store and Google Play Store. Your use of these platforms is subject to their respective privacy policies.

Email Services: We use third-party email delivery services to send emails from the contact form. These services process your email address and message content solely for the purpose of delivery.

IP Geolocation Services: We use third-party IP geolocation APIs to determine approximate geographic location of website visitors for analytics purposes. Only IP addresses are shared with these services.

SaaS Products: Our SaaS products (e-escolas.net, sgeventos.pt, portaldasobras.pt, portugal-tourism.com, ilnk.app) are operated as separate services with their own privacy policies.

We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

10. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, our business purpose for collecting it, and the categories of third parties with whom it was shared.

Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.

Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will not receive different pricing or quality of service for exercising your rights.

Do Not Sell: We do not sell personal information to third parties. We have not sold personal information in the preceding 12 months.

To exercise your CCPA rights, please contact us at leonardo.opitz@gmail.com. We will respond to your request within 45 days.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

If we make significant changes that affect how we process your personal information, we will make reasonable efforts to provide notice, such as by posting a prominent notice on our website or sending you a notification through our applications.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: leonardo.opitz@gmail.com

Website: leonardoopitz.com/contact

If you are a resident of the European Economic Area and believe that we have not adequately resolved your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

We will make every effort to respond to your inquiry within 30 days.