When you install and open the GeHost app, even before you sign in, the app registers the device on our server. We store: on Android, the notification token issued by Firebase Cloud Messaging (a Google service), used only to deliver notifications to this device; the device ID, a random identifier and a secret code created by our server and sent by the app with every request (X-Aparelho header), which is not the serial number, the IMEI or the advertising ID of the phone; and the operating system (Android or iOS), the notification preferences, the dates of registration and last use, the account signed in on the device and the notification center. On iPhone, for now, notifications are shown only in the in-app notification center, with no notification token.
This data is used to send the notifications you chose (invoice due, payment confirmed, support reply, service suspended or reactivated and, for staff, tickets and payments) and to protect the session: the ID and the secret code ensure that only the device itself can read its notification center and that one account's notifications are not shown to someone who later signs in on the same phone. It is not used for advertising or behavioral analytics, and it is not sold. Google (Firebase) receives the token and the notification text only to deliver it, as a service provider.
How long it is kept: the record exists while the app is installed. When you sign out, the device is no longer linked to the account. When you request closing of the account, the records of the devices linked to it are deleted immediately, together with the notification center; if the app stays installed, it creates a new record with no account. If the app is uninstalled, the token stops working: we erase it as soon as a delivery is rejected, and the record is deleted after 90 days without the app being opened. Each item in the notification center is deleted after 90 days. You can turn notifications off in the app (Conta › Notificações) or in the phone settings.