Privacy Policy

The controller of personal data is The Cyber Punk Desenvolvimento de Software Ltda., CNPJ 27.527.160/0001-40 (“we”, “Turu”, “Controller”), operating the Turu app and https://turu.date.

Data protection contact (LGPD): Fernando Carvalho Garcia — [email protected].

Operational representative: Fernando Carvalho Garcia.

This policy covers the Turu Android app, turu.date, waitlists, transactional email, and support channels.

The service is provided from Brazil. If you access from another country, this policy and Brazilian law apply, plus the app store rules of your territory.

Depending on use, we may process:

• Account: name, email, password (hash), date of birth/age, confirmations.
• Profile: photos, videos, bio, intent, interests, values, personality (MBTI/Enneagram/zodiac when provided), ethnicity (optional), gender, height, and other fields you fill in.
• Affinity and usage: likes, passes, matches, filters, product events.
• Messages: content and metadata needed to deliver and moderate chat.
• Approximate location: with permission, for distance/map in broad bands (never exact home address in the UI).
• Device/technical: model, OS, language, app identifiers, error logs, IP in security logs.
• Analytics: aggregated events via Firebase Analytics / similar tools.
• Purchases: tokens and status of digital goods via Google Play (we do not store full card numbers).
• Support: what you send by email.

We process data to: create and authenticate accounts; compute affinity and show profiles; process Turus/Plus; security, fraud and abuse prevention; legal obligations; product improvement; essential notices; and data-subject rights.

Typical bases: contract performance; legitimate interests for security and improvement (with impact assessment when appropriate); consent for location and optional communications; legal obligation.

Other users see only your public profile and product-allowed interactions (e.g. match/chat).

We may use essential processors under contract (hosting, database, email, analytics, Google Play, CDN).

We may disclose to authorities when required by law or to protect rights, safety, and community integrity.

We do not sell personal data.

Some infrastructure (cloud, analytics, Play) may process data outside Brazil. We use LGPD-compatible safeguards (contractual clauses, suitable vendors, minimization).

Cashflow and merchant ownership of Google Play digital purchases are tied to our Brazilian company; payment processing follows Google’s rules in the store territory.

We keep data while the account exists and as needed for purposes or legal duties (e.g. purchase records when applicable).

When you delete your account, we delete or anonymize personal data reasonably linked to you, subject to temporary backups and legal duties. See Account deletion.

We apply reasonable technical and organizational measures (encryption in transit, access control, monitoring). No system is perfectly secure; we handle relevant incidents as required by law.

To maximize privacy of profiles, photos, videos, and chats, the Android app aims to restrict screenshots and any form of screen recording as much as possible while Turu is in use (including OS-level controls and equivalent blocks where available). These measures reduce visual leak risk but cannot eliminate every technical bypass on every device, OS version, or abusive software; careful use and the Community Guidelines remain essential.

Under the LGPD you may request confirmation, access, correction, anonymization, portability (when applicable), deletion, sharing information, and withdrawal of consent. Contact: [email protected]. See Data subject rights.

Turu is strictly 18+. We do not knowingly collect children’s data. Underage accounts will be removed. See Age policy.

We may update this policy. The date at the top is the effective date. Material changes may be announced in-app or by email.