Privacy Policy

Cobrei Privacy Policy

Effective October 24, 2026

Cobrei has no account and no server holding your data. Your clients, hours, documents, amounts and business profile live on your device and, if you use iCloud, in your own private iCloud account — which JJ Software cannot see or access.

The app shows no ads, does not track you and sends no usage data to JJ Software. Its only contact with a third-party service is the optional lookup of a company's public CNPJ record at BrasilAPI, made only when you tap "Preencher com os dados do CNPJ" (section 6). Calendar import and on-device text suggestions run entirely on your device, only when you ask (sections 7 and 8). The Portuguese version of this policy is the authoritative one.

1. Who we are

Cobrei is developed by JJ Software ("we", "us"). This policy covers Cobrei for iPhone and iPad, including its widgets, Live Activities, Control Center controls and Siri shortcuts. Questions: contato@jjsoftware.online.

2. There is no account

Cobrei never asks for your name, email, phone number or a password. There is no login and no JJ Software server that knows who you are.

3. What the app stores — and where

Everything you enter is kept in a local database on your device (Apple's SwiftData):

  • Your business profile: name, CNPJ (Brazilian company number), email, phone, address, Pix key, company opening date, how you charge, document colour and MEI preferences
  • Your business logo, if you add one, to print on documents
  • Clients: name, contact person, email, WhatsApp number, CPF or CNPJ, hourly rate
  • Time entries (including those imported from the Calendar, with a reference to the event), invoices, receipts and quotes with deposits, partial payments and cancellations, the NFS-e number you record, extra income, DAS payments and recurring charges

Your business profile is also kept in your Apple Account's iCloud Key-Value Storage so it appears on your iPad and returns after a reinstall. Widgets and Live Activities read the same data through an App Group on the device. None of it is sent to us.

4. iCloud sync: your account, not ours

When you're signed in to iCloud, Cobrei mirrors your data to your private iCloud database with Apple's CloudKit. That database belongs to you; JJ Software cannot access or read it and keeps no copy. It is governed by Apple's privacy practices. You can turn iCloud off for the app or delete its data in Settings › [your name] › iCloud › Manage Storage.

5. Your clients' data (LGPD)

When you add a client who is a person, you process their personal data. Under Brazil's LGPD you are the controller of that data. JJ Software is neither controller nor processor, because it never receives, stores or accesses it.

6. CNPJ lookup (BrasilAPI)

Only when you tap "Preencher com os dados do CNPJ", Cobrei sends the 14-digit CNPJ you typed, over HTTPS, to BrasilAPI (brasilapi.com.br), a free, open-source service that serves the public CNPJ registry of Brazil's Federal Revenue. The answer (legal name, address, city, state, phone, email, opening date) only fills empty fields of your profile, on your device.

The CNPJ number is public information and is the only data sent. As with any internet request, BrasilAPI and its infrastructure providers also see the connection's IP address and may log it under their own practices. JJ Software receives neither the request nor the result.

7. Importing hours from the Calendar

If you use "Importar horas do Calendário", iOS asks your permission for Cobrei to read Calendar events. Cobrei then reads the events in the period you choose (title, start, end, calendar name) on the import screen only, on the device, and saves only the ones you confirm as time entries. It never changes or creates Calendar events and sends no event to JJ Software or anyone else. You can deny or revoke access in Settings › Apps › Cobrei › Calendars.

8. On-device text suggestions

On devices that support Apple Intelligence, "Escrever a partir das anotações" suggests an invoice line from your time-entry notes using Apple's on-device language model (Foundation Models). The notes are processed on the device, with no connection to JJ Software or third-party servers.

9. Service invoices (NFS-e)

Cobrei does not issue tax invoices and does not connect to government systems. It shows a receipt's details for you to copy and opens the official NFS-e portal in the browser, where you issue it with your own gov.br login. The app only stores, on the device, the number and date you enter.

10. WhatsApp, PDFs and sharing

"Enviar no WhatsApp" opens a wa.me link with the message text and, if saved, the client's number. You send it, through WhatsApp, under WhatsApp's own policies. Documents and exports are generated on the device and leave it only when you share them through the iOS share sheet.

11. Pix

Pix QR codes and copy-and-paste codes are generated on the device from your Pix key and the document's amount (or its balance after a partial payment), following the Central Bank's BR Code standard. Cobrei does not connect to banks or process payments; you mark an invoice as paid — in the app, from a notification's "Recebi" button, with Siri or with a Shortcuts automation you set up.

12. Notifications, Siri, Shortcuts and widgets

Reminders (DAS, monthly report, annual declaration, invoices due or overdue and "did they pay?", NFS-e to issue, recurring charges, a timer left running) are scheduled locally, and their buttons act only on the data on your device. The app registers for Apple's silent notifications only so iCloud can signal changes from your other devices. Siri requests are processed by Apple; the app receives only the resulting instruction.

13. Subscriptions

Cobrei Pro is sold and billed by Apple through the App Store. JJ Software never receives payment details — only Apple's signed confirmation that a subscription is active.

To follow how subscriptions do — trials that turn into a subscription, renewals, cancellations, refunds — the app shares your App Store purchase records with RevenueCat, Inc. (United States), which processes them for JJ Software. It receives a random ID created by the app, the products, prices, dates, your App Store country, Apple's transaction IDs, and the device model and system version; never your payment details, your clients, invoices or anything you record in the app. Apple also sends RevenueCat notices of your purchases (trial start, renewal, cancellation, refund).

14. No ads, tracking or usage events

Cobrei contains no advertising or tracking SDKs, does not collect the advertising identifier and sends no usage events to JJ Software. Its only third-party SDK is RevenueCat's, which records purchases only (section 13). Its App Store privacy label lists "Purchase History", used for analytics and not linked to you.

15. Export, delete and your rights

Export time entries as CSV and documents as PDF at any time. To delete everything, remove the app and, if you used iCloud, its iCloud data. Because your data lives on your device and your iCloud, you exercise your rights of access, correction, portability and deletion directly in the app. Questions: contato@jjsoftware.online.

16. Changes

If we make a material change we'll update the effective date above and, where needed, tell you in the app before it takes effect.

17. Contact

JJ Software

Email: contato@jjsoftware.online

Website: jjsoftware.online

Cobrei · Effective October 24, 2026