Legal document

Privacy Policy

How BipView handles your data. In plain English, no fine print.

Version 1.3 · effective as of October 8, 2026 · replaces version 1.1, of September 27, 2026.

1. Who is responsible

BIPVIEW SISTEMAS LTDA, CNPJ 63.306.772/0001-76, headquartered at Praça Monsenhor Emílio Lottermann, 40 — Moinhos de Vento, Porto Alegre/RS, Brazil, CEP 90560-050.

Data Protection Officer (DPO): Denis Rocho — privacidade@bipview.com.

This policy applies to the BipView app, on Android and iPhone, and to the bipview.com website.

This policy exists in Portuguese, Spanish, and English. If the versions differ, the Portuguese version prevails. BipView is a Brazilian company and processes your data under Brazilian law, wherever you use the app.

2. What data we collect

Account data

Your email, an internal identifier created at sign-up, and your name, if you provide it. That is the minimum for you to sign in, for us to know the wallet is yours, and to call you by name. Sign-in is handled by Amazon Cognito.

If you prefer to sign in with your Google account, we receive from it only your email and, if available, your name — never your password.

Exchange credentials

If you connect an exchange, we store the API key you provide — and it must be read-only. The app does not ask for, use, or have any way to use trading or withdrawal permissions.

These keys are stored encrypted. We use envelope encryption: a master key in AWS KMS protects a data key unique to each credential, and only the ciphertext is stored. The key never appears in readable form — not in logs, not in error messages.

On-chain wallets

The public address you provide — or, if you prefer, the wallet's extended public key (xpub), from which we derive the addresses. We never ask for a seed phrase, private key, or wallet password — and if anyone ever asks for these on BipView's behalf, it is a scam.

Statements you upload

If you choose to upload a statement from an exchange to complete your history, we receive the file you select — and only that file. It is stored encrypted, in Brazil, only for as long as it takes to process it, and is deleted automatically within 10 days. What remains is the history we build from it.

Financial data we display

Balances, positions, transaction history, and values calculated from the sources you connected. It is the content the product exists to show.

Subscription

If you subscribe to a paid plan, the store (Google Play or App Store) and RevenueCat tell us the plan, the dates, the amount, and the status of your subscription. We never receive your card details.

Notifications

If you allow notifications on your device, we store its token so we can send them. By design, no notification shows money amounts — the alert brings you to the app, and the number stays behind the login. You can turn them off at any time in your device settings.

Surveys and feedback

From time to time we may ask how likely you are to recommend BipView (a score from 0 to 10), or whether a specific action worked well. You can also write to us whenever you like.

We store the score, the text you write, the app version, and the date. We never store amounts from your holdings alongside your survey answer — the score does not need to know how much you have, and combining the two would create data that did not exist.

Answering is always optional. Dismissing it changes nothing in the service, and keeps the question from coming back too soon.

BIPVIA, the assistant (only if you turn it on)

BIPVIA is BipView's artificial intelligence assistant. It is optional: it only works after you turn it on and accept its terms, and you can turn it off at any time in Settings.

To answer, we process the text of your question, up to three previous questions from the same conversation, and the data in your BipView account needed for the answer — for example, amounts in R$ and US$ by asset and by source, percentages, movements, your plan, and your usage. Before sending, a safeguard removes what directly identifies you — name, email, CPF, CNPJ, phone number, wallet address, and extended public key (xpub) — and refuses any question that seems to contain a recovery phrase, private key, or transaction hash. The data remains linked to your account: it is not anonymous, but it goes without direct identification.

Example: if you ask "where is my bitcoin?", what goes is the question, the list of your assets with their amounts, and how much bitcoin you have on each exchange and wallet, in R$ and US$. Your name, your email, and the wallet address do not go.

Whatever you write goes along and is your responsibility. Do not write passwords, codes, or your own or other people's data, such as a name, an ID number, or health information: the safeguard does not catch everything.

Today, the conversation stays only on your device, while the BIPVIA screen is open: we do not store the text of your questions or of the answers. Once conversation history exists, it will be kept for up to 30 days, and you can delete it. Once voice questions are available, the audio is turned into text on your device, in your browser (which may use its maker's service), or by an AWS service in Brazil or in the United States, and BipView does not keep the audio. We keep usage counters and the record of your acceptance.

Two exceptions, always at your request. In "Talk to a person", we store the message you write and, if you choose to attach it, the conversation, with the ticket number, so our team can reply. In "Report an answer", we store the answer you reported. These texts may contain data you wrote yourself; the BipView team reads them to reply and may use support tools, including third-party artificial intelligence, also outside Brazil.

Access records

As required by Brazil's Internet Civil Rights Framework (Law 12,965/2014, art. 15), we keep records of access to the app — IP address, date and time, and the type of device or browser — for 6 months, confidentially and in a controlled environment. They are only handed over to anyone under a court order.

On the bipview.com website

The website uses the cookies it needs to work: your chosen language and the record of your cookie choice. Beyond those, only if you accept measurement cookies, we use two third-party tools:

• Google Analytics (Google, United States) — to learn how many people visit the site, where they come from, and whether they click to download the app. This is our marketing measurement.
• Microsoft Clarity (Microsoft, United States) — to understand how the pages are used: heatmaps and replays of browsing on the page (clicks, scrolling, and mouse movement), with anything you type into fields masked. This is our usability measurement.

By accepting, you also consent to the transfer of this browsing data to the United States (Art. 33, VIII of the LGPD, Brazil's data protection law). Google processes it under its own policy (policies.google.com/technologies/partner-sites). Microsoft also collects and receives this data to provide Microsoft Advertising, and may use it for the purposes described in the Microsoft Privacy Statement (privacy.microsoft.com/en-us/privacystatement) — including advertising. BipView does not use any data for advertising; if you do not want Microsoft to receive yours, simply decline.

If you decline, neither tool is loaded. You can change your choice at any time under "Cookie preferences" in the site footer. The details are in the Cookie policy. None of this exists in the app.

What we do NOT collect

Location, contacts, photos, calendar, the messages on your device (texts, emails, and chats in other apps), and browsing history. The app does not request any of these permissions — and it only reads a file from your device when you choose to upload it yourself. What you write inside the app, to BIPVIA or to our team, is described above.

In the app, we do not record your screen or your taps, and there are no third-party trackers.

3. What we use it for

• Show your consolidated holdings and keep them up to date
• Authenticate your access and keep your account secure
• Calculate tax estimates and remind you of deadlines
• Send service notifications
• Process subscriptions and unlock your plan's features
• Answer your questions in BIPVIA, if you turn on the assistant, and protect it against abuse
• Understand what to improve in the product, based on your answers
• Measure how the website is used and improve the experience on it, if you consent
• Comply with legal obligations — such as keeping access records — and respond to authorities when required by law

BipView does not use your data for advertising and does not sell it.

4. Legal basis (LGPD)

We process your data on the following grounds:

• the performance of the contract (Art. 7, V of Law 13,709/2018) for everything the service you signed up for requires — including reading the sources you connect, processing your subscription, sending service notifications, and answering your questions in BIPVIA, if you turn on the assistant;
• the consent (Art. 7, I) for the website's measurement cookies and, in the BIPVIA terms, to use the assistant and for your question to be processed outside Brazil (Art. 33, VIII);
• the legitimate interest (Art. 7, IX) for satisfaction surveys, product improvement, and protection against abuse — including improving BIPVIA based on reported answers, tickets and, once they exist, saved conversations, without direct identification (you can object through the privacy email);
• the compliance with legal obligations (Art. 7, II) for access records and whenever the law requires it.
• the regular exercise of rights (Art. 7, VI) to keep the record of your BIPVIA acceptance and the support tickets.

5. Who we share it with

Only with those needed for the service to work, and always to the minimum necessary:

• Amazon Web Services — hosting, database, sign-in (Amazon Cognito), service emails, and key vault. Your data is stored in a Brazilian region (São Paulo). If you turn on BIPVIA, AWS also runs the artificial intelligence model that writes the answers (Amazon Bedrock), in Brazil or in the United States (see International transfer).
• RevenueCat — subscription management. It receives your account's internal identifier and the purchase data (plan, dates, amount, and status). It does not receive your email, your name, or your balances.
• Google Play and App Store — process the payment, directly with you. We never receive or store your card details at any point.
• Google and Apple — deliver notifications to your device; Google also handles sign-in, if you choose to use your Google account.
• Expo — forwards notifications to Google and Apple (it receives the device token and the alert text, which never contains amounts) and delivers app updates.
• Amazon Bedrock (AWS), only if you turn on BIPVIA — runs the language model that writes the answers. The model is from another company, but AWS runs it on its own servers: the model provider does not receive your data.
• Exchanges and blockchain data providers — to read your balances, we query the exchange with the read-only key you gave us, and your wallet addresses at public blockchain data providers. They see the query coming from our servers — not your name or your email.
• On the website only: AdOpt records your cookie choice; Google (Analytics) and Microsoft (Clarity) receive browsing data only if you accept (section 2).

Declare Cripto, our partner for official tax filing, does not receive any of your data from BipView. If you go to them through the link in the app, whatever you provide there is governed by their policy.

International transfer

Some of these partners are outside Brazil. Each transfer relies on one of the grounds in Art. 33 of the LGPD:

• Google, for sign-in with Google (USA) — receives the email and name on your Google account, to confirm it is you. Basis: standard contractual clauses approved by the ANPD, incorporated into Google's data protection terms (Art. 33, II, "b").
• Google Play and App Store, for payment (USA) — receive the purchase data directly from you, to charge the subscription. This is not a transfer by us: the store collects it directly from you (ANPD Resolution CD/ANPD No. 19/2024, art. 6).
• RevenueCat (USA) — receives the internal identifier and the purchase data, to manage your subscription. Basis: performance of the contract you requested (Art. 33, IX, together with Art. 7, V).
• Expo, plus Google and Apple for delivery (USA) — receive the device token and the alert text, with no amounts, and the IP address when checking for updates, to deliver notifications and app updates. Basis: performance of the contract (Art. 33, IX).
• Exchanges you connect and blockchain data providers (various countries) — receive the read-only key (only the exchange that issued it) and the wallet's public addresses, to read the balances you asked to see. Basis: performance of the contract (Art. 33, IX).
• Google (Analytics) and Microsoft (Clarity), on the website only (USA) — receive browsing data on the site, for marketing and usability measurement. Basis: your specific consent, given in the cookie notice (Art. 33, VIII).
• Amazon Bedrock, in BIPVIA (Brazil or the United States, depending on the available model) — receives the question and the account data needed to answer it, without direct identification, to write the answer. Basis: your specific consent, given in the BIPVIA terms (Art. 33, VIII), and, to the extent needed for the service you requested, the performance of the contract (Art. 33, IX). AWS does not keep the question; content flagged by its automated abuse filter may be kept for up to 30 days, without anyone reading it and without it going to the model provider. If the country or who receives the data changes, beyond what this policy provides, we will ask for your acceptance again.
• AWS delivery servers (Amazon CloudFront) (in Brazil and abroad) — encrypted traffic between the app and our servers may pass through them, without their keeping the content, so it arrives faster and protected. Basis: performance of the contract (Art. 33, IX).
• Support tools (in Brazil or abroad, including third-party artificial intelligence) — may receive the message and the conversation you send through "Talk to a person", so our team can reply. Basis: performance of the contract (Art. 33, IX): you requested the support.

The data that makes up your holdings — balances, positions, credentials, and statements — is stored in Brazil. If you turn on BIPVIA, the data needed to answer each question may be processed in the United States, without being stored there, except in the abuse case described above; and what you send through "Talk to a person" may pass through support tools abroad. Each transfer lasts as long as its purpose (section 6); traffic is always encrypted; your rights (section 8) also apply to this data, and you can file a petition with the ANPD. If you would like the full text of the applicable standard clauses, ask at privacidade@bipview.com — we send it within 15 days.

6. How long we keep it

• Account, connected sources, history, and survey answers: for as long as your account exists.
• Exchange credential: until you remove it or delete your account — it is erased immediately.
• Uploaded statements: up to 10 days, deleted automatically. The history built from them stays with your account.
• Access records (IP, date, and time): 6 months, as required by law — even after the account is deleted.
• Technical error logs: 30 days.
• BIPVIA: today, the conversation stays only on your device; conversation history, once it exists, is kept for up to 30 days, and you can delete it. The record of your acceptance (terms version, date and time, channel, and language) and of when you turned the assistant on and off: for as long as your account exists. Usage records (counters and the assistant's cost for the month): up to 14 months. "Talk to a person" tickets, with any conversation you attach, and reported answers: 1 year.
• Database backups: erased automatically within 35 days.
• Subscription data: the store and RevenueCat keep the purchase record under their own rules, linked to an internal code that no longer points to you once your account is deleted.
• Website measurement (if you accepted): for each tool's retention period, stated in the Cookie policy.

7. Deleting your account

You can delete your account inside the app, under Settings, or request deletion at bipview.com/excluir-conta — without needing the app installed and without talking to anyone.

Deletion immediately erases your account data, your exchange credentials, your wallet addresses, your history and positions, your survey answers, and your login. The statements you uploaded are deleted automatically within 10 days. It is irreversible — which is why the app asks for explicit confirmation.

Deletion also erases what BIPVIA kept: the record of your acceptance, the tickets, the reported answers and, once it exists, the conversation history.

All that remains is what the law requires us to keep (access records, for 6 months) and backups, which erase themselves within 35 days.

If you have an active subscription, cancel it in the store as well (Google Play or App Store), because billing is controlled by the store, not by us.

8. Your rights

The LGPD guarantees that you can, at any time:

• Find out whether we process your data and access it
• Correct incomplete or outdated data
• Request anonymization, blocking, or deletion
• Request portability to another provider
• Withdraw consent
• Object to processing based on legitimate interest
• Be told who we share your data with
• File a petition with the ANPD (Brazil's National Data Protection Authority) if you believe your rights were not honored

To exercise any of them, write to privacidade@bipview.com. We respond within the legal deadline. Support requests made through "Talk to a person" in BIPVIA are answered within 3 business days, and never in more than 5 calendar days.

9. Automated calculations

BipView automatically calculates a risk score (0 to 100) and tax estimates. The score describes the concentration and composition of your portfolio — it is not a buy or sell recommendation, and BipView does not provide investment advice.

You can ask for an explanation of the criteria behind these calculations at the email above, under Art. 20 of the LGPD.

BIPVIA does not make decisions about you. Usage limits are general rules for each plan; if your use is blocked on suspicion of abuse, a person at BipView reviews the block on request, through "Talk to a person", within the ticket deadline.

10. Security

• All traffic between the app and our servers is encrypted (HTTPS)
• Exchange credentials are encrypted with a key managed in AWS KMS
• Your session is kept in the operating system's secure vault (Keychain on iPhone, Keystore on Android), accessible only when the device is unlocked
• Each customer sees only their own data — isolation is verified by automated tests
• In BIPVIA, the personal data safeguard runs before sending, and a checker reviews every answer written by the assistant before it reaches you: it looks for numbers outside your account's values, links, investment advice, and instructions to move crypto, and blocks any answer where it finds them. The assistant only has tools to read your own account
• Our technical logs do not store your balances, your credentials, or the text of your questions to BIPVIA

No system is immune to incidents. If one occurs that could pose a significant risk to you, we will notify you and the ANPD within the deadlines set by ANPD regulations, as required by Art. 48 of the LGPD.

11. Children and teenagers

BipView is not intended for anyone under 18, and we do not knowingly collect data from children or teenagers.

Before using BIPVIA, you confirm that you are 18 or over.

12. About the tax information

BipView's tax calculations are estimates for personal organization. They do not replace your accountant, do not constitute tax advice, and are not an official document for Brazil's tax authority (Receita Federal).

13. What BipView does not do

BipView does not buy, sell, transfer, or hold virtual assets. We have no access to your coins and cannot move them — the keys we use are read-only, and we never have your private key.

BIPVIA also only reads: it explains your numbers and may bring general information and the app's alerts, but it does not recommend buying or selling, moves nothing, and can make mistakes — the number that counts is the one on the source screen in the app.

14. Changes to this policy

If we change anything significant, we will let you know through the app or by email before the change takes effect. In BIPVIA, only a change of purpose, of country, or of who receives the data, beyond what this policy already provides, requires your acceptance again; other changes are announced, and you can turn BIPVIA off at any time. The date of the current version is always at the top of this page.