← Lano

Privacy policy

Draft. This is a provisional text, not yet reviewed by a lawyer, and not the final version. Version 2026-10-25-rascunho-7. This is a translation for your convenience: the text in Portuguese (Brazil) is the one that prevails.

1. Data Lano processes

• Sign-up: name, e-mail and CPF. Lano uses no password: you sign in through an e-mailed link.
• Open Finance: the accounts and cards you connect and their transactions, such as date, amount, description and counterparty.
• Savings destination: the Pix key of an account of yours, which you register.
• App usage: the sign-in session and, for up to one day, the IP address, to limit sign-in attempts, and how many messages you sent to Lano AI, to limit usage. Lano does not keep the IP or the browser of sessions.
• Lano AI, if you turn it on: the date you turned it on, the AI provider and the version of the consent text you accepted, plus the messages you write in the conversation. The messages stay only in your browser; Lano does not keep them (section 4).

2. What we use it for

We use the data to create your account, connect your bank through Open Finance, work out how much to save, generate the Pix copy-and-paste code and send the weekly notice and, if you turn on Lano AI, to answer the questions you ask it. We do not sell your data and do not use it for advertising.

Smart rule. If you turn on "Weigh by context" in a rule, Lano decides automatically how much each purchase reserves: double on what looks extra, half on essentials, up to a weekly cap. The decision uses only the purchase's category, the time of day and the day of the week, in a fixed table; never the store's name, who received the money, your CPF or your location. Health purchases and donations are not weighed and are not recorded. This builds a spending profile, used only to calculate the reservation, within the service you signed up for (LGPD, art. 7, item V), and never for offers. Lano keeps the reason for each reservation and the "It was extra" and "It was needed" taps you give. The criteria are in “How Lano decides”, in Profile, and you can ask for a review of any reservation with one tap on the purchase screen (LGPD, art. 20).

3. Who we share it with

For the Open Finance connection, your CPF is sent to the provider that integrates with the banks. We also use infrastructure suppliers, such as hosting and e-mail delivery, that process the data on our behalf. Lano AI is turned off, and no data goes to an AI provider (section 4).

4. Lano AI

Lano AI, a chat on Home that would answer questions about your money with an AI model from another company, is turned off. None of your data goes to an AI provider, and the chat answers only with Lano's ready-made answers, sending nothing out. If it is turned on, this policy will first say who processes the data and what is sent, and nothing will be sent without your consent.

5. How we protect it

The CPF, the Pix key, the holder's name, the transaction descriptions and the counterparty's name are encrypted in the database and do not appear in system logs. Communication with the app, and from it to the Lano AI provider, uses an encrypted connection.

6. How long we keep it

Transactions are erased after 24 months, and Open Finance technical notices after 90 days. The Pix key of a destination you replaced and the Pix copy-and-paste codes of weeks already settled are erased the next day. The date you turned on Lano AI, the provider and the version of the consent text you accepted are erased when you turn it off. The reason for each smart-rule reservation is erased after 180 days; you erase your "It was extra" and "It was needed" taps whenever you want, in “How Lano decides”. The rest of the data stays while the account exists and is erased when you delete it. Encrypted backups are discarded within five weeks.

7. Your rights

Under Brazil's General Data Protection Law (LGPD), you can confirm the processing, access, correct, export and delete your data, and revoke at any time the Open Finance consent and the Lano AI consent. In Your account, you download your data as a JSON file and delete the account. In Profile, you turn off Lano AI. You can also ask for a review of an automated decision of the smart rule: on the purchase screen, “It was extra” or “It was needed” corrects the reservation right away.

8. Children and teenagers

Lano is only for people aged 18 or older and is not made for children and teenagers. By creating the account, you declare that you are 18 or older; Lano does not ask for your date of birth. Lano does not knowingly collect data from people under 18 (LGPD, art. 14). An account that belongs to someone under 18 may be deleted, and the data is erased as in any account deletion (section 6).

9. Contact

The contact channel of the data protection officer will be given in the final version of this text.