Data controller: Serro & Andrade — Contabilidade e Consultoria, Lda.
Contact: [email protected]
Last updated: 1 November 2026
This policy explains how the “Serro & Andrade” app for Android and iOS (pt.serroandrade.portal) processes the data of the firm’s clients who use it. The app is for private use only and is intended for the firm’s accountancy clients.
1. What data do we process?
– Identification and account details: email address, name, and a device identifier (for the session and, if you enable them, notifications).
– Mobile number: Only when you pay a bill via MB WAY can you submit a payment request.
– Your company’s tax and accounting details: tax and social security status, returns and documents (VAT, SAF-T, DMR, Form 22, IES, withholding tax), debts, payment slips, invoicing, number of employees, assets and corporate actions.
– Minimum technical specifications: app version, operating system and access logs, for security and diagnostic purposes.
- Documents you send us: the scans and photographs you choose to send to the office. The camera is only used when you click ‘scan’.
We do not collect your location, contact details or advertising data. There are no adverts in the app, and we do not track your activity on other apps or websites.
2. What we use the data for
– To show you your company’s details and allow you to download or upload your documents.
– To authenticate you and keep your session secure.
– Send you notifications (if you enable them) about relevant updates (new document, new debt, payment slip ready).
– Ensure the security of the service.
Legal basis: performance of the contract for the provision of accountancy services and compliance with legal obligations.
3. Where is the data stored?
The data is stored on the firm’s own servers, hosted in the European Union. On your mobile phone, the downloaded documents are stored in such a way that encrypted, and are deleted when the session ends.
4. Biometrics
Fingerprint or facial recognition (Face ID) is processed only on your device, via the operating system. We never receive or store your biometric data. Biometrics are used solely to unlock the app and, at your request, reveal the passwords for the portals.
5. Portal passwords
Passwords for online portals (AT, Social Security, etc.) are never stored on your mobile phone: they are requested from the server, one by one, along with your biometric data; they are displayed for a split second and then forgotten.
6. Data sharing
We do not sell We do not use your data or share it for marketing purposes. The data is processed solely by our office and by technical service providers strictly necessary for the operation of the service (hosting within the EU and, if you enable notifications, the Google/Apple notification delivery service, which receives only a technical identifier, not the content).
If you enable notifications, they are delivered via your device’s system service: Google’s Firebase Cloud Messaging on Android, and the Apple Push Notification Service on iOS. These services receive a technical identifier for the device and the text of the notification, solely for the purpose of delivering it.
