Nilu Privacy Policy

Last updated: October 12, 2026.

This Privacy Policy explains how Ligamen, the company responsible for Nilu Baby Planner ("Nilu"), processes personal data in the app and on the website nilu.ligamen.com.br. For questions or requests, write to apps@ligamen.com.br.

1. Data we collect

We may process account and profile data, such as name, email, photo, language and city; pregnancy, baby and family data, such as dates, names, relationships and preferences; and information you choose to record about health and routine, including appointments, vaccines, growth, weight, mood, symptoms, feedings, sleep and diaper changes.

We may also process photos, ultrasounds, journal entries, memories, lists, budget, reminders, invitations, family events (with guests, RSVPs, gifts and messages), support network roles, conversations with Luna, subscription data and technical information such as IP address, device, app version, error logs, cookies and advertising identifiers, according to your choices and permissions. When you voluntarily support Nilu, we process the email, amount, identifier, status and dates of the payment; to measure the funnel of the support page, we also record the chosen amount, device type, visit source and UTM parameters provided in the link, without sending name, email, Pix code or payment identifier to analytics. If you choose to take part publicly in the Nilu Community, we also process the name you provide and your authorization to display it.

2. How we use data

We use data to authenticate the account, personalize the experience, sync information, enable family collaboration, send the reminders and notifications you choose, operate Luna, process subscriptions and voluntary contributions, send the thank-you message, manage the Nilu Community, measure in aggregate where the support flow is abandoned, handle requests, prevent abuse, fix failures and improve Nilu.

Processing may be based on performing the service you requested, on compliance with a legal or regulatory obligation, on the legitimate interest of keeping the product safe and working and, where applicable, on your consent. You can use the features that do not depend on Luna without talking to the artificial intelligence.

3. Service providers and sharing

We share only what is necessary with providers that support our operations: Supabase (authentication, database and storage), Resend (emails), Expo (notifications), Sentry (error diagnostics), Vercel (hosting and website usage metrics), Ligamen AI and a contracted model provider (Luna), Google AdMob and AdSense (advertising) and Mercado Pago (payments, contributions and subscriptions). These providers process data according to their contracts and applicable policies.

We do not sell personal data. We may also share information when required by law, by a valid order from an authority or to protect the rights, safety and integrity of Nilu and its users.

4. Luna and artificial intelligence

When you talk to Luna, we send your message and the context needed to produce a useful answer. This context may include the stage of the pregnancy or of the baby, names, city, mood, appointments, vaccines, growth, lists and budget, depending on the feature used and the data on file.

We minimize the context we send and we do not use Luna for medical diagnosis or for decisions with legal effect. The answers are informational and do not replace professional care. Luna does not receive private data from your account when you only use the public pages of the website.

5. Advertising, cookies and consent

The free version may show Google AdMob ads in the app and Google AdSense ads on selected public pages. Google and its partners may use cookies, device identifiers, IP address and similar technologies according to consent, device settings and applicable law.

We do not send Google any health, pregnancy, family, photo, journal, list or Luna conversation data to personalize ads. When available, you will be able to review privacy options and choose non-personalized ads. Nilu Plus subscribers do not receive ads in the areas covered by the subscription.

6. Payments, contributions and Nilu Plus

Payments and subscriptions purchased outside the mobile app stores are processed by Mercado Pago. Card data is sent directly to the processor; Nilu does not store the full card number or the security code. We receive the data needed to identify and manage the charge, such as status, plan, transaction identifiers and dates.

For voluntary support via Pix, Mercado Pago processes the transaction and Nilu keeps the email, amount, identifier, status and dates needed to confirm the contribution, avoid duplicates and send the thank-you message. Name and public display are optional and depend on the authorization given by the person. A contribution is not a subscription and does not grant any individual benefit, ownership stake, financial return or tax benefit.

Purchases made through an app store are also subject to the rules and policy of that store.

7. Family and invited people

When you invite a partner, family member or someone from your support network, you grant access to the data compatible with the role you assign. The invited person may also add or change information according to their permissions. Review the members and remove access that is no longer needed.

Send invitations only to authorized people and avoid entering third-party data without their knowledge or an appropriate legal basis.

8. Events, invitations and guests

When you create an event — such as a gender reveal, baby shower, diaper party, birth announcement, monthly birthday, baptism or birthday — we process what you provide: title, date, time, venue and address, description, event-type details, cover, invitations designed in the Studio, checklist, expenses and album photos. The event belongs to the family's journey and follows the same roles: whoever manages the journey manages the event; people with family access can see the event, but not the guest list or the expenses.

Anyone who receives the link can RSVP, reserve gifts, cast a guess or leave a message without creating an account. In these cases we process the name, phone number and/or email provided, the number of companions and children, dietary restrictions, notes, messages and reservations. This data is visible only to the people who manage the event and never appears on the public page. When someone marks a reservation as a surprise, the family sees that the gift was reserved, but not who reserved it. To prevent repeated votes, guesses store only a random browser identifier.

The public page shows only what the family allows — by default, no full address and no phone number —, is not indexed by search engines and stops showing the details after the chosen deadline. The cover and invitation images can be seen by anyone with the link; the event photo album is private. When adding guests manually, include only people who would expect to receive the invitation.

Event data remains in the family's history after the page expires and is deleted when the family deletes the event or the account.

9. Retention and deletion

We keep data while the account is active or for the period needed for the stated purposes. You can delete your account directly in the app. Deletion removes or unlinks the associated data, except for records that must be kept due to legal obligation, fraud prevention, security, the exercise of rights or billing management.

Support records may be kept for the period needed for reconciliation, fraud prevention, support, the exercise of rights and legal or accounting obligations. You can ask for your name to be removed from the public Nilu Community page without deleting the minimum payment records.

Some copies may remain temporarily in protected backups until the normal replacement cycle. Content shared with other people may remain when it also belongs to their collaborative space or when there is another legitimate basis for keeping it.

10. Your rights

Under the LGPD (Brazil's General Data Protection Law), you can request confirmation of processing, access, correction, anonymization, blocking, deletion, portability, information about sharing, review of consent and objection where applicable.

Send your request to apps@ligamen.com.br, preferably from the email associated with your account. We may ask for additional information to confirm your identity and protect your data.

11. Security and international transfers

We adopt reasonable technical and organizational controls to protect data, including authentication, access rules, encrypted connections and failure monitoring. No system is completely immune to incidents; if there is a relevant risk, we will follow the response and communication measures required by law.

Some providers may process data outside Brazil. In these cases, we seek providers with adequate safeguards and limit processing to what is necessary for the service.

12. Children and data entered by parents or guardians

Nilu is intended for adults responsible for the pregnancy, the baby or the support network. Data about babies and children must be entered by an authorized parent or guardian and always used in the best interest of the child.

If you believe a child's data was entered without proper authorization, contact us so we can assess it and take the appropriate measures.

13. Updates and contact

We may update this policy to reflect changes in the product, in our providers or in the law. Relevant changes will be announced in the app, on the website or through another appropriate channel, and the update date will be recorded on this page.

Data controller: Ligamen, responsible for Nilu Baby Planner. Privacy contact: apps@ligamen.com.br.