The short version: Documentos is a tool built to make your life easier, not to harvest your data. We collect only what's needed to make the app work, we don't sell your information to anyone, and you can ask us to delete everything at any time.
Who we are
Documentos is an independent product created and operated by Angelique Fletcher, based in Portugal. If you have any questions about your data, you can reach us directly at hello@documentos-app.com.
What data we collect and why
Your account information
When you sign up, we collect your email address and, once you're in the app, your preferred first name. You can optionally add your birthday (day and month only — never the year) from your Account page. We use this to personalise your experience and your reminders. We never ask for your surname, address, or any financial information.
Document images and details
When you scan a document or an official letter, the photo you upload is processed by an AI vision tool to read the key details — the document type, expiry date, and reference numbers. The extracted details are saved to your personal account, and you always review them before relying on them. AI processing is performed solely to fill in these fields on your behalf — your images are not used to train AI models, and they are not shared beyond what is necessary to perform the extraction. This applies to everything you store, whether it expires (like a residency permit) or not (like a NIF document or a marriage certificate) — all of it is private to your household: in the app, only you and the people you invite can see it.
Appointment information
Any appointments you add are private to your household — in the app, only you and the people you invite can see them. If you add a location, it's saved as simple text — we don't use any mapping or location service.
Usage data
Our hosting platform records basic visit information each time a page loads: which page was opened, your browser and operating system, your language setting, where you arrived from, and the time. It also stores a random session number in a cookie on your device for about 20 days, so that repeat visits can be counted as one person rather than several. This information is handled by Tinybird, the analytics provider our hosting platform uses.
We want to be precise about what this does and doesn't cover. It records that a page was opened. It does not include your name, your email address, your account, or anything inside it — no documents, no images, no expiry dates, no ID or NIF numbers. Nothing you store in Documentos forms any part of it.
This is built into our hosting platform and we can't currently switch it off. If that changes, we will. We don't use advertising pixels, and we don't track you across other websites.
What we don't do
We do not sell your data to anyone, ever. We do not share your personal information with third parties for marketing purposes. We do not use your document images for any purpose other than extracting your renewal and booking details. We do not store your payment information — this is handled securely by Stripe if and when you subscribe.
Where your data is stored
Your data is stored with Supabase, on infrastructure located in the European Union (Ireland), encrypted in transit and at rest. Your documents and images live in private storage that, in the app, only your household can access.
We work with a small number of specialist providers, each for one job:
- Supabase (EU) — database and private document storage;
- Stripe — payment processing; we never see or store your card details;
- Mistral AI (France) — reads the details from documents you scan, solely to fill in your fields;
- Resend — delivers our emails to you;
- Lovable — hosts the application.
How long we keep your data
There is no deletion clock. Nothing is deleted because you don't pay, and nothing ever will be. If you never subscribe, or your paid subscription ends, your account continues on the free plan. Nothing is deleted or hidden: your documents, photos, appointments and reminders all stay, and anyone you've already shared with can still see them. The free plan includes 2 GB of storage. If you're using more than that, you keep everything, but you can't add new photos until you're back under 2 GB — you can still add documents and type the details in. You can't invite new people on the free plan, but you can remove anyone at any time.
We keep your data until you delete it. Deleting a document removes that document. Closing your account deletes everything.
Downloading a full copy of your data is available to everyone, free, at any time, from Account.
Your rights under GDPR
You are protected by the General Data Protection Regulation (GDPR). This means you have the right to access the personal data we hold about you, correct any inaccurate information, request that we delete your account and all associated data, and withdraw consent at any time.
To exercise any of these rights, simply email us at hello@documentos-app.com with the subject line "Data Request" and we will respond within 30 days. To delete your account entirely, you can also do so from the My Account section inside the app.
Cookies
Documentos uses a small number of cookies:
- Login and session cookies, which keep you signed in. The app can't work without them.
- A security cookie set by Cloudflare (__cf_bm), which distinguishes real visitors from automated bots. It lasts about 30 minutes.
- A visit-counting cookie (session-id), described under "Usage data" above. It lasts about 20 days.
We don't use advertising or tracking cookies, and we never share cookie data with advertisers. When you subscribe, payment happens on Stripe's own secure checkout page, which uses Stripe's strictly necessary payment scripts.
A note on document security
We understand that you are uploading photos of sensitive personal documents — driving licences, residency permits, insurance certificates, and more. We take this responsibility seriously. Your documents are stored in your private account and are not visible to anyone outside your household or shared with any third party.
Everything you store is private to your household. In the app, only you and the people you invite can see it. Access is enforced by the database itself, which checks every request against who is signed in and which household they belong to. Your data is encrypted in transit and at rest, but not in a way that would prevent us from reading it — so it is technically possible for us to access your documents. We do so only when support or maintenance requires it, and it is not part of how the service normally runs.
We strongly recommend using a secure password or signing in with Google for the strongest account protection.
Account deletion
You have the right to request deletion of your Documentos account and all associated personal data at any time. Self-service deletion is immediate and irreversible: sign in, go to your account settings, choose "Delete my account", and type DELETE to confirm. Full details, including what gets deleted and how to export your data first, are on the account deletion page.
If you cannot sign in, email us at hello@documentos-app.com from the address on the account, with the subject line "Delete My Account". We will act on your request as soon as we can, and within 30 days at the latest.
Once deleted, your documents, appointments, people, and personal information are permanently removed from our systems.
Please note that payment records held by Stripe may be retained for legal and financial compliance purposes as required by law.
Changes to this policy
If we make significant changes to how we handle your data, we will notify you by email before those changes take effect. The "last updated" date at the top of this page will always reflect the most recent version.
Questions?
We're a small, independent team and we genuinely care about getting this right. If anything here is unclear or you have a concern, please email us at hello@documentos-app.com — a real person will read it and respond.