Privacy Policy

Who is responsible for your data

Guentaí is a marketplace that connects people who need a restroom with people who have one to offer. The controller of the data handled in the app and on this site is Guentaí, reachable at [email protected] or through our support page.

What we collect

Information you provide when signing up

• Full name
• Email address
• Mobile number, which is also how you sign in
• Tax ID (CPF)
• Date of birth and gender
• Profile photo, if you choose to add one

Identity verification data

Before requesting access to a restroom, you go through identity verification. It protects both sides: whoever opens the door needs to know who is coming in, and whoever comes in needs to know the place is real. At this stage we collect:

• An image of your ID document, front and back
• A selfie captured with liveness detection, confirming there is a real person in front of the camera rather than a photo or video
• The result of the comparison between the selfie and the document photo, including the similarity score and the approval decision

Identity documents and facial biometrics are sensitive personal data under Brazil's General Data Protection Law. They are used solely to confirm your identity and prevent fraud, never for advertising, and are never shown to other users.

Location

The app requests your location only while it is in use, never in the background. We use it to show the closest bathrooms on the map, sort them by distance and estimate arrival time. We also record the coordinates of your searches, with date and time, to understand which areas lack supply and to measure the reach of Support Network promotions.

Denying location does not block the app. Everything else keeps working, and the map shows a notice with a shortcut to turn it on whenever you want.

Payment data

• Card details, sent straight to our payment provider and returned as a secure token. We keep only the brand, expiry date and last digits, just enough for you to recognise the card on screen
• Your Pix key, if you are a host and add one to get paid
• Identifiers for your account with our payment provider, needed to charge and to pay out
• Transaction history: accesses paid and received, amounts, dates, receipts and withdrawals

Your full card number and security code are never stored on our servers.

Data from people who offer a restroom

• The restroom address, including coordinates, postcode, street, number, neighbourhood, city, state and any additional details
• Photos, price, opening hours and features of the restroom
• The link to staff members authorised to approve access
• Bank details or Pix key to receive payouts

The restroom address is public inside the app, because that is what lets someone get there. By listing a restroom you are offering that address for other users.

Content you publish

Reviews and comments about bathrooms are visible to other users, alongside your first name and the date. Hosts also rate the people who used their restroom, and that rating forms your reputation. Guentaí has no user-to-user chat and no public profiles.

Support and reports

We keep the messages exchanged with our support team, the category and channel of each ticket, plus the content of any report you file and the files you attach as evidence.

Notifications and technical data

If you allow notifications, we store your device push identifier and the history of alerts sent, such as an access approval. We also record technical device information and error logs, used only to diagnose failures and keep the service running.

Face data

This section describes, end to end, how the face data collected during identity verification in the Guentaí app is handled.

What we collect

• During the liveness check, the front camera captures a few seconds of video frames of your face. Those frames are processed in real time by Amazon Rekognition Face Liveness for the sole purpose of confirming that a real person is in front of the camera
• From the completed session we keep a single still image of your face, the reference image returned by the service
• Two numbers: the liveness confidence score and the similarity score between that image and the face on your ID document

The photo of you holding the document, described in the Identity document section, also shows your face. It goes through no facial recognition algorithm: only the review team looks at it.

We do not create or store a face template, a faceprint or any biometric signature derived from your face. We keep no face collection for search, we do not identify you in other photos, we do not use your face for advertising and we do not train models with it.

How we use it

For one purpose only: to confirm that whoever requests access to a restroom is a real person and the same person shown on the submitted ID document, preventing fraud and impersonation. The image is never shown to other users. A member of the Guentaí team only looks at the image when the automated decision falls into the manual review range, and only to complete that verification.

Who we share it with

With Amazon Web Services, acting as our processor on our behalf and under our instructions, through Amazon Rekognition and Amazon S3 in the us-east-1 region (United States). No other third party receives your face data. We do not sell it, trade it or share it for advertising or with data brokers. Disclosure to public authorities happens only under a court order or a legal obligation.

Where it is stored

In Amazon S3, in a private bucket in the us-east-1 region, encrypted at rest, with access restricted to the Guentaí verification service and the team responsible for review.

How long we keep it

• The video frames and the raw liveness session artifacts are deleted from our storage as soon as the verification finishes, in the same processing run
• The reference image is kept while your account exists, and is replaced on every new verification, because it is the evidence that the account passed the identity check
• When you delete your account in the app, the reference image and the ID document images are deleted from our storage in the same operation
• The confidence and similarity scores remain as a fraud-prevention record, with no image attached

How to delete it

In the app, under Menu, Settings, My account, Delete account. You can also request deletion by email at [email protected].

Identity document

The ID document is the other half of identity verification, and because it is sensitive personal data it gets the same level of detail here as face data.

What we collect

• An image of the front and back of the document you choose, a Brazilian ID card, driver's licence or passport, either photographed on the spot with the camera or picked from the files on your device
• A photo of you holding the open document next to your face, showing your face and the document details in the same image
• The data printed on those images, such as name, photo, document number and date of birth
• The review outcome: approved, under review or rejected, with the date

How we use it

To confirm you are who you say you are, and to compare the face printed on the document with the selfie from the liveness check. The photo of you holding the document is there for the human check, so the team can see the document was in your hands and is not an image found online: it goes through no facial recognition algorithm. That is what lets a host open the door knowing who is coming in. We do not use the document for advertising, we do not run credit checks with it and we never show it to other users. Only the Guentaí review team sees the image, and only to complete the verification.

Who we share it with

With Amazon Web Services, acting as our processor on our behalf, through Amazon S3, which stores the file, and Amazon Rekognition, which reads the image only to compare the face on the document with the face in the selfie. No other third party receives the document. We do not sell or trade this data. Disclosure to public authorities happens only under a court order or a legal obligation.

Where it is stored

In Amazon S3, in a private bucket in the us-east-1 region, encrypted at rest. The file is never public: when someone authorised needs to see the image, access goes through a temporary link that expires.

How long we keep it

• For as long as your account exists, because it is the evidence that the account passed the verification required before requesting access to a restroom
• You can delete each image whenever you want, from the app itself, and it leaves our storage immediately
• When you delete your account, the document images and the face image are deleted from our storage in the same operation
• A record that the verification happened remains, with its date and outcome, with no image attached

How to delete it

In the app, under My data, Documents, tapping the file and choosing to remove it. To erase everything at once, Menu, Settings, My account, Delete account. You can also ask by email at [email protected].

Why we process each type of data

Who we share it with

We do not sell your data and we do not use it for third-party advertising. We share only what is necessary with the providers that make the service work:

• Payment provider, to charge, issue Pix and pay hosts
• Amazon Web Services, to store files and run facial verification
• SMS provider, to send the sign-in code to your phone
• Map services, to display the map and draw routes
• Push notification service, to deliver alerts to your device
• Public authorities, when required by a court order or legal obligation

Between users, sharing is limited to what the access requires: the host sees your name, photo and reputation when receiving the request, and you see the public details of the restroom.

How long we keep it

• Account data: for as long as your account exists
• ID documents and face image: for as long as your account exists, deleted from our storage when you delete the account. The full detail is in the Face data section
• Transaction records: for the period required by tax and financial law, even after account deletion
• Support messages and reports: for as long as needed to resolve the case and defend against any claim

Your rights

You can, at any time:

• Confirm that we process your data and access what we hold
• Correct incomplete or outdated data, right in the app
• Request a copy of your data in a readable format
• Request deletion of your account and the data behind it
• Withdraw a consent, such as notifications or any use that is not essential to the service
• Find out who we share your data with

How to delete your account

In the app, go to Menu → Settings → My account → Delete account. The screen lists exactly what you will lose before you confirm. Deletion is permanent and removes your files, documents, saved cards and bank details, and closes your record with our payment providers. Records of completed transactions are kept for the legally required period.

You can also request deletion by writing to [email protected].

Security

Traffic between the app and our servers is encrypted. Documents and files are held in restricted-access storage, and internal access is limited to the people who need it to run the service and review reports. No system is immune to incidents: if one occurs that poses a meaningful risk to you, we will notify you and the Brazilian data protection authority.

Children

Guentaí is not intended for anyone under 18. Signing up requires a tax ID and identity verification, and accounts identified as belonging to minors are closed.

Terms of use

The current terms of use, along with the date and time you accepted them, are available in the app under Menu → Settings → Terms of use.

Changes to this policy

If we change something meaningful, we will let you know in the app before it takes effect. The date at the top of this page shows the last update.

Contact us

Privacy questions, access or deletion requests: [email protected]. For everything else, see our support page.