Privacy Policy

Costovida helps you model lifestyle costs across cities. You can use much of the Service without an account. If you sign in, we store your email and sync the lifestyle profile and scenarios you build. We do not sell your personal information. We use service providers (hosting, auth, email, and optional location hints) to operate the Service.

This Policy explains what we collect, why, where it lives, and how to access, correct, clear, or delete it. Our Terms of Service also apply.

The Service is operated by Two Brains LLC (the “Company,” “we,” “us,” or “our”), a United States company. Costovida is a product of Two Brains LLC.

Privacy questions and data requests: legal@costovida.com.

Depending on how you use Costovida, we may process:

• Account email — when you request a magic-link sign-in.
• Lifestyle and scenario inputs you enter — household size, habits, optional income/budget fields, city and neighborhood choices, saved scenarios, and similar modeling parameters.
• Local browser storage — the same kinds of inputs may be saved on your device even if you never sign in.
• Feedback you send — message text, feedback type, and optional city or page URL (we do not require your email in the feedback form).
• Approximate location hints — to suggest a nearby catalog city we may use network/edge signals or a short-lived IP-based lookup. We do not use this to build a marketing profile.
• Technical logs — our host (Google Cloud Run) and security systems may record IP address, user agent, timestamps, and request metadata as part of operating and protecting the Service.
• Auth session tokens — stored in your browser by our authentication provider so you stay signed in.

We do not intentionally collect government IDs, payment card numbers, or precise GPS tracks. Please do not submit sensitive personal data (health diagnoses, full financial account numbers, etc.) into free-text fields.

Most information comes directly from you (forms, toggles, feedback). Some comes automatically from your browser or network when you load pages (technical logs, optional city guess). Price catalogs and public cost data are not personal information about you; they are product content.

We use personal information to:

• Provide, operate, and improve cost modeling, comparisons, scenarios, and account sync.
• Authenticate you and keep your synced profile available across devices.
• Respond to feedback and operate the Service securely (fraud, abuse, and reliability).
• Comply with law and enforce our Terms.
• Produce aggregate or de-identified statistics that do not reasonably identify you.

Unsigned-in use: lifestyle state is stored in your browser (localStorage keys used by Costovida). Clearing site data in your browser removes it.

Signed-in use: your email and authentication records are stored with our auth provider (Supabase, Costovida project). A copy of your app state (lifestyle, scenarios, and related fields) is stored in our database table for your user id so it can sync.

Feedback emails are delivered to our operations inbox via our email provider (Resend).

Infrastructure is hosted on Google Cloud (Cloud Run) for Two Brains / Costovida only—not mixed with unrelated company projects.

We use vendors to host and operate Costovida. They process data only to provide their services to us:

• Supabase — authentication and synced app state.
• Google Cloud — application hosting and platform logs.
• Resend — sending feedback and operational alert emails.
• IP geolocation API (currently ipwho.is) — transient IP lookup to suggest a city; Costovida application code does not save your IP from that lookup into our product database.
• Domain DNS registrar (Namecheap) — domain registration for costovida.com (not your Costovida lifestyle profile).

We do not sell personal information. We do not share it with third parties for their own advertising. If we enable additional processors (for example an AI provider for a lifestyle interpreter), we will update this Policy and disclose that in the product before turning the feature on in production.

Costovida may include optional natural-language or AI-assisted features that interpret text into lifestyle parameters. At public launch, third-party AI processing for the in-product interpreter is not enabled (API keys are not configured for production).

If we enable such features later, user text and relevant lifestyle parameters may be sent to disclosed AI providers under our provider agreements. We will update this Policy and show an in-product warning before enabling that path. Do not paste sensitive personal data into chat or interpreter fields.

On some pages we may guess a nearby city to speed setup. That guess can use edge/network headers or a short-lived IP-based lookup. It is approximate, optional to keep, and not precise geolocation. You can change the city in the product at any time.

We do not use third-party advertising cookies, ad pixels, or third-party marketing analytics at launch. Authentication and preferences rely primarily on browser localStorage (including tokens managed by our auth library), essential first-party session cookies for sign-in, and similar browser storage—not a marketing cookie wall.

When you dismiss our in-product storage notice, we set a first-party cookie (`costovida_storage_notice`) so we do not show that banner on every visit. It does not track you across sites.

You can clear Costovida’s local profile from the Account page or by clearing site data in your browser. That does not by itself delete your cloud account email record.

Local browser data remains until you clear it or your browser evicts it.

Synced app state remains until you delete it while signed in or we delete it when handling an account-deletion request.

Auth email/account records remain until you request deletion and we complete removal in our auth provider, subject to legal retention needs (security, dispute, or legal obligation).

Feedback emails and operational logs are kept only as long as needed for support, security, and operations, then deleted or aggregated.

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. You can:

• Edit lifestyle and scenario inputs in the product.
• Sign out from the Account page.
• Clear this browser’s Costovida profile from the Account page.
• Delete your synced cloud app state from the Account page while signed in.
• Email legal@costovida.com to request access, correction, or deletion of your auth account (email record). We may need to verify the request.

We will not discriminate against you for exercising privacy rights. Some requests may be limited where we must keep data for security, fraud prevention, or law.

The Service is for users 18 or older (or the age of majority where higher). It is not directed to children. We do not knowingly collect personal information from children. If you believe a child provided data, contact us and we will take appropriate steps to delete it.

We operate from the United States. If you access Costovida from another country, your information may be processed in the United States and other locations where our providers operate. Those places may have different data-protection laws than your home country.

We use reasonable administrative and technical measures appropriate to a small consumer web app (TLS in transit to our host, access controls on cloud projects, RLS on synced state). No method of transmission or storage is perfectly secure. You are responsible for devices you use and for protecting access to your email inbox (magic links).

We may update this Policy from time to time. The “Last updated” date will change when we do. Material changes may also be signaled via the Service or email. Continued use after the effective date means you accept the updated Policy. If you do not agree, stop using the Service and request deletion of your account data.

Privacy and data requests: legal@costovida.com.

Website: https://costovida.com.

Costovida is a product of Two Brains LLC.