Privacy
Privacy Policy
Ahead exists to forecast your cash, and that only works with your financial data. This policy explains, in plain language, what we process, on what legal basis, who we share it with, and what your rights are.
Data we collect
We collect your email and, if you provide it, a display name. From your use, we process the financial data you enter: accounts, cards, transactions (including descriptions and free-text notes), declared balances, statements, categories, tags, rules and preferences. We do not collect your phone, address, photo or documents.
How we collect it
The data comes from you: your sign-up and what you record in the app. When you import a statement, the OFX or CSV file is read on your own device and is never uploaded or stored on our servers — only the resulting transactions are saved. When you sign in, we set a session cookie to keep you authenticated.
Purposes and legal basis
We process your data to provide the cash-forecasting service — the legal basis is performance of the usage contract (LGPD art. 7, V). We use minimal technical data for security and to isolate each user’s data, based on legitimate interest (art. 7, IX). Optional alert emails are sent only with your consent (art. 7, I), which you can withdraw at any time in your notification preferences.
Communications and emails
We send account emails that are necessary to the service (sign-in confirmation, email changes and operational notices) and optional alert emails that you configure yourself, such as spending-limit warnings. Each alert type can be switched off at any time in your notification preferences; account emails are inherent to using the service.
What we do not do
No third-party analytics, no advertising trackers, no third-party scripts, and no selling, renting or sharing of your data for advertising. Ahead does not connect to your bank, does not use open finance, and does not process your data with artificial intelligence.
Processors and sharing
To run the service we rely on processors that handle data on our behalf, only for the purposes above: Supabase (database and authentication, hosted in São Paulo), Cloudflare (app hosting and delivery) and Mailtrap (sending account and alert emails). There is no other sharing, except where required by law or court order.
International transfer
The database is in Brazil (São Paulo). Even so, delivering the app over Cloudflare’s network and sending email through Mailtrap may involve processing data outside the country. These transfers happen only to make the service work, with the safeguards required by art. 33 of the LGPD.
Security and isolation
Every row in the database belongs to a single user and is protected by Row-Level Security in the database itself — not only by the application — so a query can only ever see the signed-in user’s data. Connections are encrypted in transit. No measure is infallible, but we work to protect your data from unauthorised access.
Retention
We keep your data for as long as your account exists. When you delete your account, the associated data is removed from the database. We may retain minimal records where required by law or to exercise rights.
Your rights
The LGPD (art. 18) lets you confirm processing and access, correct, anonymise, port and delete your data, and learn who we share it with. You can edit or delete any record directly in the app. To export all your data or delete your whole account, contact us at contato@trackahead.app — we will respond within the legal deadlines.
Cookies
We use only two cookies, both necessary to operate: a session cookie that keeps you signed in, and a display-preferences cookie (language, currency, hide values) with no personal data. We use no tracking or advertising cookies, so we show no consent banner.
Minors
Ahead is not intended for anyone under 18, and we do not knowingly collect data from children or adolescents. If we identify such an account, it will be removed.
Changes to this policy
We may update this policy to reflect changes in the product or the law. If a change is material, we will tell you at your registered email before it takes effect, and the effective date below will be updated.
Effective from 20 July 2026.
Questions about privacy? Write to contato@trackahead.app.