Privacy Policy
English translation for reference. The Portuguese version prevails. Legal text under review.
Controller: BWJ SYSTEM LTDA, CNPJ 69.990.502/0001-03. Privacy and support channel: contato@bwjsystem.com.br. Data protection officer: named appointment pending; until it is announced, please direct requests to BWJ's privacy channel.
Legal text under review · version dated November 11, 2026. This page describes the website and the technical scope of the pilot; it does not authorize the use of real data. Legal bases for each purpose, app providers and participation agreements must be defined before operations with participants begin.
Static website
This static website presents GABI, which is in testing / pilot phase. It does not offer registration, forms, payments, advertising or collection of health data. The website uses a single visual theme and does not store appearance preferences. We do not use cookies.
Hosting and technical logs
The website is hosted by Vercel. The provider may process IP addresses, dates and times, requested URLs and technical browser information to deliver pages, diagnose failures, protect infrastructure and prevent abuse. The default Pro plan's Runtime Logs viewing window is one day; this is not a universal deletion period for the provider's internal security logs. Retention of those other logs depends on their purpose, applicable obligations and Vercel's contractual terms. We do not maintain our own copy or a Log Drain of access logs for this project.
Processing by the provider may involve infrastructure outside Brazil. The provider's terms and retention information are available in its privacy notice. Request information about transfers and retention through BWJ's contact channel.
Cookie-free Vercel Web Analytics
We use Vercel Web Analytics for aggregate statistics on visits, pages, referral sources and general technical characteristics, without cookies or sending app data. The identifier derived from a request lasts up to 24 hours. The default Pro reporting window is 12 months; this is an availability window, not a guarantee of deletion within that period. We do not send custom events or health data. Avoid putting personal information in URLs.
Details: Analytics privacy and report retention.
App, dashboard and SMS
The app is separate from this website. Depending on configuration and permissions, it processes contact information, preferences, schedules, episodes and location during SOS. The optional dashboard receives events and location for linked caregivers. Location is neither continuous nor guaranteed. The SMS composer requires confirmation before sending; an SMS provider participates only when configured, contracted and authorized. The server notification directs the recipient to consult the dashboard, without a name or location in the SMS. Telecommunications services and recipients also process messages under their own controls.
The purposes are to perform the selected functions, control access, record episodes and handle requests and incidents. Phone permissions and acceptance of the terms do not constitute unrestricted authorization for processing. The pilot is intended for adults and requires specific enrollment by the individual and their contact.
App retention and deletion
According to the documented technical scope: local core history, seven days; private exports, 24 hours; dashboard events, 30 days; audit logs, a configurable default of 90 days; SMS worker sending logs, 30 days. Recipient registration remains until revocation. Dashboard recovery copies have a configurable validity of 1 to 30 days, defaulting to 30, with removal by the operator. Cleanup may be delayed; accounts, links and external copies require their own procedure.
Deleting data in the app removes private local data through the revocation process. It does not delete received SMS messages, caregiver accounts or third-party copies. See how to request deletion.
Rights, contact and changes
Request confirmation of processing, access, correction, information about sharing, revocation and erasure, where applicable, through the privacy channel. We will verify identity proportionately and report the outcome, outstanding matters and grounds for any retention. Do not send health information in your first message. Incidents should also be reported through this channel.
Material changes will be presented on this page with a version and date. Read the Terms of Use.
