LGPD for AI-built apps: the minimum checklist before you launch
Your AI tool doesn't know Brazilian law. If your app collects any personal data, here's what you need to guarantee.
Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018) applies to any application that processes the personal data of users in Brazil — including the app you built in a weekend on Lovable. And AI tools, trained mostly on international patterns, don't generate the items Brazilian law requires by default.
The minimum checklist: a clear privacy policy accessible inside the app; a defined legal basis for every piece of data collected; a cookie notice with real consent (not just a decorative banner); a channel for data subjects to exercise their rights (access, correction, deletion); and, when applicable, a named Data Protection Officer (DPO).
The good news: all of this is verifiable automatically. An LGPD analysis flags what's missing on your site before a user — or Brazil's data protection authority (ANPD) — flags it for you.