Last updated: 13 October 2026
NaGaveta is an app developed by RR Serviços to help you keep and organise your personal documents and to remember important dates (expiry dates, reminders and medicine times).
This policy explains, clearly and honestly, how NaGaveta handles (or rather, does not handle) your data.
NaGaveta works locally: your documents, your notes, your data and your PIN stay on your device. No NaGaveta server receives your documents; the app requires no sign-up, does not track you and does not sync anything. The only sending that happens is what you yourself decide to do — when you share a file, when you export a backup copy, when you turn on Cloud backup (Android) or when you open the gov.br signing service. The text reading feature (OCR) works on the device itself.
Four honest caveats, detailed below: (a) the system's own backup (iCloud on iPhone, Google on Android) may include the app data, according to your settings; (b) Google's text recognition component may send technical diagnostic data; (c) if you turn it on, Cloud backup — optional, free and off by default — sends a copy encrypted on the device to your own account (Google on Android, iCloud on iPhone), and neither we nor Google or Apple can open it (item 4-A); (d) on Android, the app may send an anonymous usage count — usage and Premium milestones, with the country of the Google Play account —, with no data about you or your documents, and you can turn it off (item 6).
All your data stays on your device. NaGaveta has no server and no cloud storage of its own for your data — there is no service of ours for your documents to go to. (Our only service is the one that adds up the anonymous count in item 6, which receives nothing from your documents. Cloud backup, in item 4-A, uses your Google account (Android) or your iCloud (iPhone) when you turn it on, not a service of ours.)
Only the following is kept on your device, in a private area that only the app itself can access:
The app does not send, copy or sync any of this outside your device on its own. The only exception is Cloud backup, and only if you turn it on: it keeps an encrypted copy in your Google account (Android) or in your iCloud (iPhone) (item 4-A). NaGaveta does not sync between devices.
System backup (Android): Android may automatically back up app data to your Google account, according to your device settings, and NaGaveta data may be included in it. That backup belongs to the system, not to NaGaveta.
System backup (iPhone) — please read: if iCloud Backup is enabled on your iPhone, NaGaveta data may be part of the device backup, as happens with other apps, according to your iOS settings. That backup is an operating-system feature, performed by Apple into your iCloud account — it is not NaGaveta syncing, and we still have no access whatsoever to your data. You control it in Settings → your name → iCloud.
Protection of stored files: on iPhone, the app declares the highest level of iOS Data Protection. While the device is locked, the system keeps NaGaveta files encrypted at rest. The app does not add encryption of its own on top of that.
Important consequence: since the data stays only on your device and we have no copy of it, if you uninstall the app or lose the device, the data cannot be recovered by us, because we never had access to it. To protect yourself, use an exported backup copy (item 4) or Cloud backup (item 4-A) — both optional.
NaGaveta can read the text of your documents to help identify information such as dates. This reading is done entirely inside your device, using Google's on-device text recognition technology (ML Kit).
The image of your document is not sent to any server for this reading.
Honest statement: ML Kit is a component provided by Google. Although the content of your document is not sent, that component may: (a) download the text recognition model once; and (b) transmit to Google technical diagnostic data and an installation identifier, not linked to your identity. According to the privacy manifests published by the component itself, this data is not used for cross-app tracking or advertising. This is part of Google's component, not a feature created by NaGaveta, and it never includes your documents. Apart from it, the only transmission is the anonymous usage count described in item 6. To understand this handling, consult Google's Privacy Policy.
NaGaveta does not make network requests to send your documents or your personal data to a server of its own. In normal use, the app works offline. The requests the app makes itself are the anonymous usage count in item 6 (on Android), which contains no data of yours, and — only if you turn it on — Cloud backup in item 4-A, which sends an encrypted copy to your Google account (Android) or your iCloud (iPhone) and, with automatic backup on, does so by itself when you open the app.
The only interactions with the "outside world" are started by you:
In every case, sending any information to third parties is your choice.
Since your documents stay only on your device, changing phone or losing it would mean losing everything. That is why NaGaveta lets you make a copy.
When you tap "Export backup copy" (menu → Backup), the app assembles a single file containing all your documents, reminders and medicines and hands that file over to you through your phone's own sharing. NaGaveta does not choose the destination and does not send anything on its own: you are the one who decides where the file goes.
What this means in practice, said plainly:
When you import a backup copy ("Import backup copy"), the app reads the file inside your device and puts the documents back into the vault. Nothing is sent out during this process.
NaGaveta offers Cloud backup. It is optional, free for everyone and off by default: it only works if you turn it on in menu → Backup → Cloud backup. The app works normally without it. It is not sync: it is a copy to restore.
Storage and transmission to Google Drive are carried out by Google, under Google's Privacy Policy. We do not receive a copy of your backup.
On iPhone, Cloud backup works the same way — optional, free, off by default, encrypted on the device with the same Recovery Key before it leaves — with these differences:
Storage and transmission to iCloud are carried out by Apple, under Apple's Privacy Policy. We do not receive a copy of your backup.
You can send a file to NaGaveta from another app (an email attachment, a PDF from WhatsApp, a file from Drive), using that app's "Share" option and choosing NaGaveta. On Android, shared text (a message, part of an email) opens as a note, and is only kept when you tap Save.
In that case the content is copied into the vault, on your device, and comes to follow all the rules of this policy. NaGaveta does not access the content of the other app — it only receives what you sent.
Since version 4.0, on Android, NaGaveta can search for documents in folders on your phone and, if you want, file them into drawers for you. Since version 4.1, you decide once, on the “Search your phone” screen, and Android itself asks for your confirmation for each folder, through the system folder picker: Documents, Pictures (with your screenshots), Camera photos and the folder where WhatsApp saves the documents you receive. You can skip any of them. The same permission covers finding, organizing and automatic organizing. Folders allowed in earlier versions keep working.
Since version 4.0, on iPhone, NaGaveta can search for documents in your photos and files and, if you want, file them in drawers for you. You decide once, on the “Search your iPhone” screen, and iOS itself asks you to confirm each step. The same permission is used to find, to organize and for automatic organizing.
NaGaveta does not collect personal data about you and does not track you. We do not use:
The app uses third-party technical libraries only to function (such as taking a photo, opening a PDF, showing notifications and reading text). ML Kit, described in item 2, transmits to Google technical diagnostics and an unlinked installation identifier, and nothing else. We at NaGaveta neither receive nor consult that data.
Purchases: the subscription and Premium are paid through the store itself (Google Play or App Store). We do not receive card or payment data. The free limit, the annual subscription, Premium forever and the entitlement of people who already used the app are checked on the device, with the store.
So that we know whether people who install NaGaveta actually start using it, the Android app may send, at most once each, only these notices:
After 5 items, no further count is sent — whether you have 6 or 5,000.
What each notice contains: only the name of the notice (for example, "reached 3 items"), whether the installation already existed when this feature arrived or is new, whether it came from the store version or a test version and, since 30/09/2026, the country of your Google Play account — the two-letter code Google Play itself reports for billing (for example, "BR") — and, since version 4.2.0, the app version number (for example, "4.2.0"), which is the same on every device with that version. It is not your location: the app does not use GPS, network or IP address for it, and the account country may differ from where you are. When Play does not report it, "unknown" is sent. It contains no identifier of you, your device or the installation (not even the advertising ID), no language or device model, and nothing about your items: name, type, category, content, note text, recognised text (OCR), dates, reminders, medicines, searches or files. The app does not read any of that to build the notice — only the quantity.
Where it goes: to a service run by RR Serviços on Google Apps Script, which only adds up the notices: it keeps the total of each one (per country), the total per day (without country), for the store version the total per month and per country and, since version 4.2.0, the total per day and per app version. No notice is stored individually, and the service does not receive or store IP addresses. As with any internet connection, the IP address and the technical connection data reach the infrastructure of Google, which operates the service; we have no access to them. Daily totals are kept for up to 400 days, monthly totals for up to 13 months, and overall totals for as long as the service exists. Figures from before 30/09/2026 have no country and show as "unknown".
What it is for: knowing, in aggregate numbers, how many installations actually start using the app and how many reach Premium, in each country — including to evaluate how NaGaveta is promoted. These numbers identify no one and are neither sold nor shared. The app does not record uninstalls.
People who already used NaGaveta take part too: on the first opening of the version with this feature, the app sends that it was opened and up to how many items it already had — at most 5, never the real number — and, after that, only the notices still missing. These numbers are added up separately from those of new installations. To turn it off: Settings → Privacy → Anonymous usage count. When off, nothing else is sent. On iPhone, this count does not exist.
On iPhone, each permission is requested by iOS itself, when you use the feature, and can be removed in Settings → NaGaveta:
On Android, NaGaveta does not ask for camera permission or for access to your photos/files. The camera is opened by your phone's own camera app, and choosing files and folders uses the system picker. The app also does not access location or contacts, and does not ask for the device accounts permission: the Google account for Cloud backup is chosen on Google's own screen.
The PIN you create to protect the app is kept only on your device and never in readable text. We keep only a transformed and irreversible version of it (a "hash"), used solely to check whether the PIN you typed is correct. The original PIN is never stored or sent anywhere.
Honest statement: this protection keeps the PIN out of plain text and off any server, but it is not bank-level encryption. The PIN serves as a layer of privacy for ordinary day-to-day use.
NaGaveta is not directed at children and does not intentionally collect data from minors. Since the app does not collect personal data from any user — the anonymous count in item 6 identifies no one —, no children's information is gathered by us.
We may update this policy if the app changes. When that happens, the "last updated" date at the top will be changed. We recommend reviewing this page from time to time.
If you have questions about this policy or about the app, get in touch:
RR Serviços Email: contato@usenagaveta.com.br
NaGaveta was built on a simple principle: your documents are yours. We do not see them, we do not keep them and we do not share them. They stay where they belong — with you, and, if you want, in an encrypted copy in your own Google account.
This is a translation of the Portuguese original for the convenience of international users. In case of any discrepancy, the Portuguese version prevails.