Privacy Policy

Effective from 13 October 2026 · Last updated: 13 October 2026

Summary. We keep only what is needed for the app to work. We do not sell data, we do not show ads and we do not use analytics cookies. Each home only sees its own data. You can export everything and delete your account at any time.

1. Data controller

The controller of the personal data collected in the “My Home” service (also called “O meu Lar”) is ANLO, based in Windhoek, Namibia. For any privacy matter: anlomarket77@gmail.com.

We process data in accordance with the Personal Data Protection Law of the Republic of Angola (Law no. 22/11 of 17 June), as that is the country where the service is provided and where the people who use it are.

2. What data we process

Account: name, e-mail and password. The password is never stored as text: we only keep an encrypted version (scrypt). If you sign in with Google, when that option is available, we keep the Google account identifier and the verified e-mail, and no password.
Profile: photo (optional) and preferred language.
Home data: home name, products, quantities, rooms, restock points, shopping lists, cart, monthly shopping, prices, notes, product photos and the history of items added and used, with the name of whoever made each entry.
Invitations: the invitation code and, if you send the invitation by e-mail from the app, the invited person’s e-mail. The phone number you type to invite by WhatsApp or SMS is only used on your device to open the conversation and is not sent to us.
Payments: amount, date, method, status, reference and transaction identifier, and the e-mail of the owner who paid. We do not receive or store card data. The Multicaixa Express phone number is sent to the payment provider to process the payment and is not stored by us.
Phone notifications: if you turn them on, the technical address of the device provided by the browser, the language and your notification preferences.
Technical data: the type of browser and device linked to each signed-in session (so you can see and end sessions). The IP address is only used at that moment, to limit repeated access attempts, and is not stored. The server’s technical operation logs do not include the IP address.

3. Why we use the data and on what basis

Providing the service: creating and keeping the account and the home, showing the data to the people in the home, processing payments and giving access to the plan (performance of the contract).
Sending service e-mails: welcome, password recovery, invitations, receipts and notices that access is ending (performance of the contract).
Phone notifications when a product is running low or has run out, and a daily reminder of what to buy (consent, which you can withdraw at any time in the app or device settings).
Security and abuse prevention (legitimate interest).
Complying with legal obligations, namely accounting and tax obligations (legal obligation).

We do not sell or rent personal data, we do not show ads, we do not build profiles for commercial purposes and we do not make automated decisions with legal effects on you.

4. Who we share data with

People in the same home (up to 5): they see the products, lists, cart, history and your name and photo.
Fly.io (United States): hosting of the server, database and backups, on servers in the Johannesburg region (South Africa).
Google (United States): sending the service e-mails through Gmail and storing the encrypted backups; and “Continue with Google”, only if that option is available and you choose it.
MoMenu (Angola) and the Multicaixa network: payments in kwanzas (Multicaixa Express and reference) and issuing the corresponding invoice.
Lemon Squeezy (United States): Visa/Mastercard card payments, when available. Lemon Squeezy is the merchant of record for those payments and handles card data directly; we never see it.
Browser notification services (Google, Apple or Mozilla, depending on the device): only if you turn on phone notifications, to deliver them.
Authorities, only when required by law.

These providers process data only to provide their service and are obliged to protect it.

5. Transfers outside Angola

Because the servers are in South Africa, ANLO is based in Namibia and some providers are in the United States, your data is processed outside Angola. These transfers are limited to what is necessary to provide the service and are made with providers that apply appropriate security measures, including encrypted connections.

6. Cookies and storage on your device

We use a single cookie, which is essential, to keep you signed in. If you choose “Remember me”, it lasts 90 days; otherwise, it disappears when you close the browser.
Your device’s local storage keeps your preferences (language, theme, sorting and other app options), the last e-mail used to sign in, so it can be filled in next time, and actions made without a connection (for example in the cart) until they can be sent. The app also stores its own files on the device so it opens faster. This data stays only on your device and you can delete it in your browser settings.
We do not use advertising or analytics cookies, nor third-party tracking tools. The presentation page does not store anything on your device.

7. How long we keep data

Account and home data: for as long as the account exists, even if paid access ends.
When you delete your account (Profile → Delete account): if you are the only person in the home, we delete the home and all its data; if you are a member of a home with other people, your name is removed from the records (it becomes “—”) and your account is deleted. If you are the owner and the home has other people, you must first remove them from the home.
Payment records: for the legal retention period for accounting and tax documents.
Technical records of payment notifications: 400 days.
Log of e-mails sent: 90 days.
Password recovery requests: deleted up to 7 days after being used or expiring. Ended or expired sessions: deleted automatically.
Backups: a daily copy on the server, kept for 14 days; a daily disk snapshot taken by the hosting provider, kept for 30 days; and a weekly encrypted copy sent to ANLO’s e-mail archive, which only ANLO can open, kept for up to 12 months. Deleted data disappears from the backups at the latest at the end of these periods.

8. Your rights

You have the right to be informed, to access your data, to correct it, to delete it, to object to its processing, to withdraw any consent you have given and to receive your data in a commonly used format.

In the app: Profile → Export my data (JSON file), inventory export (CSV), changing your name and password, and Profile → Delete account.
For any other request, write to anlomarket77@gmail.com from your account’s e-mail. We reply within 30 days.
If you believe your rights have not been respected, you can lodge a complaint with Angola’s Data Protection Agency (Agência de Protecção de Dados, APD).

9. Security

We use an encrypted connection (HTTPS) throughout the service, encrypted passwords, session identifiers stored only in irreversible form, strict separation of each home’s data, limits on repeated access attempts and daily backups, including an encrypted copy outside the server. No system is infallible: if a data breach that may affect you occurs, we will notify the people affected and the competent authorities, as required by law.

10. Minors

The service is intended for people aged 18 or over. If we learn that an account was created by a minor without the authorisation of their guardian, we will delete that account and its data.

11. Changes to this policy

If we change this policy in a relevant way, we will let you know by e-mail or in the app at least 15 days before the change takes effect. The date of the last update is always shown at the top of this page. The Portuguese version of this policy prevails in case of doubt.

12. Contact

ANLO · Windhoek, Namibia · anlomarket77@gmail.com