salinha.

Privacy Policy

Last updated: October 29, 2026

This is a translation for convenience. The Portuguese version is the official one and prevails in case of doubt. Read the Portuguese version.

Salinha (salinha.live) is a voice and screen-sharing app for small groups of friends, provided by Fystec (Samuel Nogueira Gomes, MEI (Brazilian individual microentrepreneur), CNPJ (Brazilian business tax ID) 62.791.129/0001-12). This policy explains, in plain terms, what data we process, why, and what your rights are, in accordance with the Lei Geral de Proteção de Dados (Law No. 13.709/2018 — LGPD, Brazil’s General Data Protection Law) and the Marco Civil da Internet (Law No. 12.965/2014, Brazil’s Internet Civil Rights Framework).

1. What Salinha does not see

Salinha calls work peer-to-peer (P2P): your voice, your screen and chat messages go directly from your device to the devices of the other people in the room, with WebRTC’s own encryption. We do not record, store or have access to the content of conversations, shared screens or chat.

When a direct connection is not possible (some networks block it), the media goes through a Cloudflare relay server (TURN), still encrypted, without us or Cloudflare having access to the content.

In group text channels, messages also go from device to device: each member keeps a copy on their own device and forwards the messages to other members who were offline.

What passes through our server without being stored: the group picture, which the server relays between members; and “Watch YouTube together” searches, which the server sends to YouTube without saying who searched (results are cached for a few hours, not linked to any person). What is stored: only what you yourself send to moderation in a report (see section 3).

A message written while the direct connection is still being established waits on your device and is only sent when the direct channel opens — it does not go through our server.

2. Google user data (Sign in with Google)

Salinha uses “Sign in with Google” only to create and identify your account. We request only the basic openid, email and profile scopes.

• What data we access: your name, your email address (and whether it is verified) and your Google account identifier. Your profile picture and language may come with the sign-in, but are not stored. We do not access contacts, Gmail, Drive, calendar, YouTube or any other data or service in your Google account.
• How we use it: the identifier is used to recognize you on future sign-ins; your name appears on your account and as a suggested name in the room; your email identifies the account and allows us to contact you about it (for example, about your subscription). We do not use this data for any other purpose.
• Where we store it: in Salinha’s database hosted on Cloudflare, with restricted access.
• Sharing: we do not sell, rent or share Google user data with third parties, we do not use it for advertising and we do not use it to train artificial intelligence models. The exceptions are: when you yourself buy Salinha+, we send your name and email to InfinitePay only to identify the order (see section 4); and court orders or legal obligations.
• Retention and deletion: the data is kept for as long as your account exists. When you click “delete my account” (or ask by the email below), your name, email and Google identifier are erased immediately — unless there is a preservation request from an authority or an ongoing case (see “Preservation” in the section on retention periods), in which case a copy is kept separately only for as long as the case lasts. You can also remove Salinha’s access at myaccount.google.com/permissions.

Salinha’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Other data we process

• Google account data: see section 2 above. We do not receive your Google password.
• Salinha account data: creation date, whether you are a founder (and your spot number), until when features are unlocked (trial, invites or Salinha+), how many years of Salinha+ you have had (for the badge), the name color you chose and whether the badge is visible.
• Invites and codes: your invite code, who invited you (if you joined through an invite), the partner code used (if any) and how many friends joined through your invite. To know whether an invite counts, the room server counts only how long you were in a voice chat with someone — never the content of the conversation.
• Gifts: who gave a gift to whom, to show the friend who gave the gift.
• Salinha Turbo and group customization: which groups have Turbo and until when, who paid and how many months (shown to the group members), and when your 30-day trial ends. The cover, icon, theme, font, welcome message and the Table Mode camera layout are stored, compressed, in our storage (Cloudflare R2), and only group members can see them.
• Table Mode: dice, character sheets, scenes, effects and the character voice go directly between the devices in the room (your sheet is saved only on your device). The images shown during the session (scene, map, the game master's characters) stay in our storage (Cloudflare R2) only while it lasts, visible only to group members: they are deleted when the game master ends it, or within 24 hours if the table drops. If the group has Turbo, the campaign the game master saves (system, character sheets and portraits, the game master's characters, scenes and maps (with the fog and tokens) and session log, with images compressed) is kept in our storage (Cloudflare R2), visible only to group members; the previous version is kept alongside. The next-session notice goes to the members' inbox. If you rate the table at the end, we keep the stars, your comment (if you write one), the play mode, how many people, how long and the device type — never the content of the conversation.
• Reports: who reported (or, for a report made without an account, the contact email, if the person chooses to provide it), the reason, what the person wrote, and the messages and images they chose to send as evidence (screenshots, images from the chat, or a capture of the reported person’s screen or camera taken at that moment) — along with the server’s verification of each message’s digital signature — and a record, made by the server when the report is filed, of the reported account or group (nickname, creation date, owner, members and channels) and of the relationship between the people involved (whether they are friends, groups in common, blocks). Reports are kept for moderation; images are deleted 180 days after the report is resolved, unless legally required to be preserved. They are also used to comply with the law (including reporting to authorities in cases involving children and adolescents); the reported person is not told who reported them.
• Blocks and suspensions: who you have blocked and, in case of a ban, an irreversible code of the Google account to prevent it from coming back.
• Badges and name color: visible to other people on Salinha alongside your nickname (the Salinha+ badge can be hidden in settings).
• Access logs: date, time, IP address and source port of each sign-in, each room entry, account deletion and reports made without an account, kept for 6 months as required by art. 15 of the Marco Civil da Internet.
• Session cookie: an essential cookie to keep you signed in (valid for up to 60 days). We store only a code derived from it, not the cookie itself.
• Public signing key: each device creates a key pair; the secret part never leaves it. The public part (which reveals nothing about you or your messages) is stored on the server linked to your account, so that other members of your groups can confirm that a forwarded message was really written by you. It is deleted along with the account.
• GIF search (when it is on): what you type in the search goes to KLIPY (the GIF service) through our server, without your name, email or IP — only a number that does not identify you. The GIFs also come through our server, which keeps searches and images for a short time (minutes to a few days), not linked to anyone. A GIF you send goes in the conversation as a link, just like a message.
• Profile picture and cover: go directly from your device to your friends’ devices (peer-to-peer). If you have Salinha+, they are also stored in your account, in our storage (Cloudflare R2), so they show up on your other devices and for your friends even when you are not online at the same time; only you, your friends and people who share a group with you can see them. They are removed when you change or remove the picture, when you delete your account, or 7 days after your Salinha+ ends (then they go back to passing only from device to device).
• Group picture: relayed by our server between group members, without being stored on it.
• Preferences on your device: display name, last room, streaming quality and chosen microphone are saved only in your browser (local storage) and are not sent to us.
• Your IP to other people: in voice rooms and calls the connection is direct, so your IP address is visible to the other participants, as in any peer-to-peer call (except when the connection goes through the relay server). The same goes for the group messaging network: the connection tries to be direct between devices, and other group members may see your IP (when a direct connection is not possible, it goes through the relay server). In the PC app, your home network address (like 192.168.x.x, which only works inside that network) also appears in the connection, so that your phone, when on the same Wi-Fi, can play on the PC directly over the local network.
• Temporary technical data: to connect the people in a room, our server relays technical network information (such as IP addresses and ports) between participants. This information is not stored.

Payment for annual access: payment (by Pix, Brazil’s instant payment system, or by card) takes place on the InfinitePay page (CloudWalk Instituição de Pagamento S.A.). Salinha does not receive or store card or bank details — we keep only the order number, the amount, the payment method (Pix or card), the date, the access expiration date and, for gifts, which friends it was for.

4. What we use the data for

• Creating and maintaining your account, identifying you and controlling access (founder or subscription) — legal basis: performance of a contract (art. 7, V, LGPD).
• Keeping access logs for the legally required period — legal basis: compliance with a legal obligation (art. 7, II, LGPD).
• Security and prevention of abuse of the service — legal basis: legitimate interest (art. 7, IX, LGPD).

We do not sell your data, we do not use your data for advertising and we do not build behavioral profiles.

5. Who we share it with

• Cloudflare, Inc.: hosting of the website, server and database, and TURN service, plus website visit counts (Cloudflare Web Analytics: no cookies, aggregate numbers only, nobody is identified). Data may be processed outside Brazil, with the safeguards provided for in the LGPD.
• Google LLC: only for sign-in (“Sign in with Google”).
• InfinitePay (CloudWalk Instituição de Pagamento S.A.): processes payment for annual access; we send your name and email to identify the order.
• Authorities: only upon a court order or valid legal request, or to report crimes against children and adolescents, as required by law.

6. How long we keep it

• Account data: for as long as the account exists. When you delete the account, it is erased. We keep only an irreversible code (hash) of the Google account, with no name or email, so that the same account does not get another free trial if it is created again.
• Group customization and Table Mode campaign (Turbo): while Turbo lasts and for 15 more days after it ends; then it is deleted. It is also deleted if the group is deleted.
• Images shown in a Table Mode session: until the session ends, or 24 hours at most; they are also deleted if the group is deleted.
• Table Mode ratings: up to 2 years, or until the account is deleted.
• Payments: the order record (number, amount, method and date) is kept for the period required by tax law, even after the account is deleted.
• On your device: when you sign out of or delete your account, the conversation history, pictures and keys stored on that device are erased.
• Access logs: 6 months, after which they are automatically deleted.
• Preservation: when there is a request from an authority (art. 15, §2, of the Marco Civil), a court order or a serious report under investigation, the logs and data of the account involved may be preserved for longer, only for the period the case requires (reviewed every 90 days). In this situation, if the account is deleted, a copy of the data is kept separately, with restricted access; when the case ends, the copy is erased within 30 days.
• Sessions: up to 60 days or until you sign out.

7. Your rights

You may, at any time: confirm whether we process your data, access it, correct it, request portability, request deletion and withdraw consent (art. 18 of the LGPD). You can delete your account directly on Salinha’s sign-in screen (“delete my account”) or ask by the email below. You can also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD, Brazil’s National Data Protection Authority).

8. Security

We use encrypted connections (HTTPS/WSS and WebRTC encryption), a protected session cookie (HttpOnly, Secure), and we store only derived codes (hashes) of session tokens and room names.

9. Children and adolescents

Salinha is not intended for children under 13. Adolescents between 13 and 18 must use it with the permission of their parents or guardians.

10. Changes to this policy

If we change this policy, we will update the date at the top and, when the change is significant, we will let you know in the app itself.

11. Contact

Data controller: Fystec (Samuel Nogueira Gomes, MEI, CNPJ 62.791.129/0001-12).
Address: Rua Adamir Gonçalves Chaves, 53 — Cidade Nova, Patos de Minas/MG, CEP 38706-422, Brazil.
Data Protection Officer (Encarregado, DPO): Samuel Nogueira Gomes.
Email: contato@salinha.live

Summary in English

← Back to Salinha · Terms of use