Pixio

Privacy Policy

Effective October 15, 2026

Pixio brings your financial life together in one place. This policy explains what data we use to do that, why we use it, who we share it with, how long we keep it and how you stay in control. If you have any questions, write to help@pixio.cloud.

In short

  • We don't sell your data and we don't show ads.
  • We never receive or store your bank password.
  • The assistant is an artificial intelligence and only works with your consent.
  • You can export your data and delete your account from the app.

1. Who we are

Pixio is provided by BYMAV LTDA, CNPJ 65.003.381/0001-08, the controller of your personal data under Brazil's General Data Protection Law (Law No. 13,709/2018, the LGPD). This policy covers the Pixio app, the pixio.cloud website and our support channels.

2. Data we collect

Data you give us

  • Account: name, email and photo when you sign in with Apple or Google, or the email you use to sign in, and your phone number if you confirm it.
  • Profile: CPF (Brazilian taxpayer ID), date of birth, income, goals and preferences you fill in.
  • Records: transactions, accounts, budgets, goals, assets and receipts you add.
  • Conversations with the assistant: messages, images you send and transcripts of voice conversations. We don't keep the audio.
  • Family: if you join a family in Pixio, the family's name and photo and what each member chooses to share.
  • Support: the messages you send us asking for help.

Data we receive from other companies

  • From your bank, through Open Finance: accounts, balances, transactions, cards, loans, investments and registration data from the institutions you authorize. Pix and wire transfer statements may include the name of the payer or payee; we use it only to show you the transaction.
  • From Apple or Google: the sign-in data you choose to share.
  • From the App Store: your subscription plan, dates and status. We never receive your card details.

Data collected automatically

  • Device model, operating system, app version, language and IP address.
  • Error and performance logs. When the app fails, we may record a replay of the screen at that moment, with text and images hidden, to find the cause.
  • Your device's notification identifier, if you allow notifications.

We only ask for what each feature needs. When something is optional, the app says so.

3. How we use your data

  • To provide the service: create your account, bring your accounts and transactions together, categorize spending and show balances, budgets, goals and net worth.
  • For the assistant: answer what you ask, using only the information that answer needs.
  • For your subscription: unlock the plan you bought and email you before a trial ends and before long plans renew.
  • For security: protect access to your account and prevent fraud and duplicate accounts.
  • To improve Pixio: find and fix failures and learn which features need to be simpler.
  • For support: respond to your requests.
  • To comply with the law: meet tax, accounting and regulatory obligations and requests from authorities.

We don't use your data for advertising or to build marketing profiles.

4. Artificial intelligence

Pixio's assistant is an artificial intelligence, not a person. To answer, it receives your message, the images you send and the financial information that answer needs. This content is processed by AI models we run in Brazil and, in some cases, by partner AI providers engaged only to generate the answer.

The assistant only works after you agree to this policy in the app. If you don't agree, the rest of Pixio stays available.

AI answers can contain mistakes, so check them before you decide. What the assistant says is informational and is not investment advice. Pixio doesn't make automated decisions that affect your rights, such as granting or denying credit.

5. Open Finance

A connection to your bank only starts after you authorize it in the institution's own environment. Pixio never receives your password or security codes. Connections are made through Pluggy, an authorized Open Finance participant in Brazil. You can revoke a connection at any time in the app or with your bank; after that, we stop receiving new data from that account.

6. Legal bases

We process your data on the following LGPD legal bases:

  • Performance of a contract: to provide the service you signed up for.
  • Consent: to connect your accounts through Open Finance and to use the AI assistant. You can withdraw consent at any time.
  • Legitimate interest: for security, fraud prevention and fixing failures, always respecting your rights.
  • Legal or regulatory obligation: to meet tax, accounting and regulatory duties.
  • Regular exercise of rights: to defend ourselves in legal proceedings.

7. Who we share data with

We only share data with companies that help us provide the service, limited to what each function needs and under contracts that require them to protect your data:

  • Cloud infrastructure: hosting for our servers, storage, website delivery and backups.
  • Artificial intelligence: AI model providers, for the assistant's answers.
  • Open Finance: Pluggy, to connect the institutions you authorize.
  • Apple and Google: sign-in, App Store subscription billing and notifications.
  • Subscriptions: a provider that verifies App Store receipts and unlocks your plan.
  • Communication: account emails and, if you use it, the assistant's messaging channel.
  • Support and diagnostics: support and error-reporting tools.

We may also share data when the law requires it, by order of a competent authority or to defend our rights.

We don't sell personal data.

8. International transfers

Your data is stored mainly on servers in Brazil. Some partners, such as those for artificial intelligence, sign-in, subscriptions, email and website delivery, process data in other countries, and backups are encrypted before they leave Brazil. These transfers only happen to provide the service you asked for and follow the safeguards required by the LGPD.

9. How long we keep data

  • Account, financial data and conversations: for as long as your account exists.
  • Technical usage and error logs: up to 90 days.
  • Messages sent to support through a messaging channel: until you ask us to delete them.
  • Data the law requires us to keep, such as tax and billing records: for the legal period, with restricted access.
  • Backups: replaced in the normal backup cycle.

To delete your account, open Settings › Account details and tap Delete account. We delete your data, your files and your bank connections, except what the law requires us to keep. Deleting your account doesn't cancel your Apple subscription: cancel it in iPhone Settings › your name › Subscriptions.

10. Your rights

Under the LGPD, you can at any time:

  • confirm whether we process your data and access it;
  • correct incomplete, inaccurate or outdated data;
  • ask us to anonymize, block or delete unnecessary data;
  • request portability of your data;
  • learn who we share your data with;
  • withdraw consent and learn the consequences of not consenting;
  • request a review of decisions made solely by automated means.

To download your data, use Settings › Privacy › Export data. For other requests, write to help@pixio.cloud. We may ask you to confirm your identity to protect your account. We respond within 15 days. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

11. Cookies and tracking

The pixio.cloud website doesn't use advertising or analytics cookies. Connector authorization pages store in your browser only the sign-in session needed to complete the authorization. The app doesn't use advertising tools and doesn't track you across other companies' apps and websites.

12. Security

We protect your data with encryption in transit, access controls that ensure each account sees only its own data, encrypted access keys, encrypted backups and continuous monitoring. No system is completely free of risk. If a security incident could put you at risk, we will notify you and the ANPD as the law requires.

13. Adults only

Pixio is for people 18 and older. Every member of a family in Pixio needs their own account and must be an adult. We don't knowingly collect data from minors; if we learn of an account belonging to a minor, we will close it and delete the data.

14. Contact

Controller: BYMAV LTDA, CNPJ 65.003.381/0001-08.

Data protection officer and privacy contact: help@pixio.cloud.

15. Changes to this policy

We may update this policy when Pixio or the law changes. The date at the top shows the version in effect. If a change is significant, we will let you know in the app before it takes effect and, when needed, ask for your consent again.

16. Other provisions

Links to other companies' websites follow their own policies. This policy is governed by the laws of Brazil. If there is any difference between versions, the Portuguese version prevails.