Privacy Policy

1. Summary

• NuFocco is a training, nutrition and health app. To work, it processes health data, which Brazilian law (LGPD) treats as sensitive data. You decide what to log and which features to turn on.
• We do not sell your personal data.
• We do not use health data to choose the ads you see, and data from Health Connect and Apple Health never goes to advertising.
• The artificial intelligence features (coach in the chat, photo analysis, AI workouts and diets, reports) send the data they need to OpenAI, which processes it on our behalf. Watch data only goes into them if you allow it (section 5).
• The app uses measurement and advertising tools from Google (Firebase and AdMob), Meta (Facebook) and TikTok, which receive device identifiers and usage events. Section 9 explains what each one receives and how to limit it.
• In group runs, people in the room see your live position, and people who ran with you see your route afterwards.
• If you are a client of a trainer or gym on NuFocco, that company's staff can see your history of workouts and measurements.
• You can delete your account in the app (Configuration > Delete account) or at nufocco.com.br/delete-account, and you can write to us to exercise any right: contato@nufocco.com.

2. Who we are and how to reach us

3. Who this policy applies to

• the NuFocco app for Android and iOS;
• the website and web version (nufocco.com.br and nufocco.com), including the web dashboard and the account deletion page;
• the panel for professionals and companies (personal trainers, nutritionists and gyms), including the client data stored in it;
• the affiliate program, whose full rules are in the program terms (in Portuguese);
• the connectors that let AI assistants (such as Claude or ChatGPT) access your account with your authorization.

4. Data we process

Registration and account

• Email and password. The password is stored only as a hash (bcrypt), never as text.
• If you sign in with Google or Apple: email, name and, for Google, your profile photo, received through Firebase Authentication (Google).
• Guest account: a random device identifier.
• Name, @ (username), photo, date of birth, sex, language and time zone.
• A record that you accepted the Terms.

Profile, goals and health data you log

• Weight, height, activity level, training type, goal, target weight and date, focus areas, dietary restrictions, preferred training time and water goal.
• Body measurements, weight history and values calculated from them (BMI, body fat, basal metabolic rate and daily energy expenditure).
• Food diary, food searches, scanned barcodes, meal plans and chosen diets. Choosing the diet for people who use a GLP-1 pen indicates use of that medication.
• Water, fasting, workouts (exercises, sets, loads and duration), declared activities, timers, missions, challenges, points and achievements.
• Planner reminders, with the text you write (which may include, for example, the name of a medication).

Photos

• Meal photo: sent for AI analysis and stored in our storage so it shows in your diary.
• Body photo (body analysis): sent for AI analysis and not stored on our servers. We keep only the result (scores by body area and an estimated body fat range). A copy of the photo stays on your device. The feature requires you to be 18 or older and asks for your consent before it starts.
• Photo of a cardio machine display: sent so the AI can read the numbers on the screen (time, distance, calories and heart rate). The photo is not stored; we keep the activity you save.
• Profile photo, post photos and challenge photos (proof and check-in): stored in our storage.

Location

• Precise GPS during outdoor activities (running, walking, cycling) that you record in the app, including with the screen locked. On Android this shows as a persistent notification; on iPhone the app asks for "Always" location permission. Location is used only while a recording is active.
• The full route (points with latitude, longitude, altitude and time) stays on the device and is sent to the server, simplified, so it shows in your history.
• Group runs: while you record in a room, your position, distance and pace are sent live to people in the same room. Afterwards, people who ran in the room can see everyone’s route. The SOS button alerts the other participants with your name.
• Routes of workouts imported from Health Connect or Apple Health (section 5).
• Approximate location from your IP address (city and region), recorded at each login for security and suspicious-access detection.
• Maps use Google Maps on Android and Apple Maps on iPhone, which receive the area shown in order to draw the map.

Voice

Conversations and messages

• Conversations with the AI coach, including dictated text.
• Messages with professionals and companies, including attachments.
• Messages in challenge group chats.
• Support tickets. The app automatically attaches device data (model, system, language and app version) and your subscription status.

Social content

Professionals and gyms

Purchases and subscriptions

• Plan, status, dates and transaction identifiers from the App Store and Google Play.
• When you buy on the website, the payment page belongs to Stripe: we receive the purchase identifier, your email and the status. We do not receive your card number.
• Coupons and referral codes used.
• AI credits and rewarded videos watched.

Device, usage and security

• A random device identifier created by the app, device model and name, operating system, app version, language, time zone and notification token.
• IP address, date and time of access, approximate city and the browser or device used.
• Records of changes made to your account, which may include parts of the content sent.
• Usage events in the app and website (screens opened, buttons tapped, purchases), linked to your profile.
• Error reports with technical device data.
• Advertising identifiers: the Android advertising ID and, on iPhone, the IDFA when you allow tracking.

Health Connect and Apple Health

Affiliates

5. Health Connect (Android), Apple Health (iPhone) and watch data

What we read and why

• Exercise (type, start and end, title, source app and device): import workouts from your watch into your history and activity screens.
• Exercise route (GPS): show the map of the imported workout. The route is sent to the server together with the workout.
• Heart rate: calculate the average, maximum and minimum of each workout, your resting heart rate and your average during sleep, and show the Heart screen.
• Resting heart rate: daily summary.
• Steps, distance, active calories, total calories and floors climbed: daily summary, Activity screen and goals.
• Sleep (with stages): Sleep screen, sleep score and energy level for training.
• Weight and body fat: your measurement history.
• Hydration: your water log.
• Basal metabolic rate (resting energy on iPhone): estimate active calories when the watch doesn't report them and calculate the calorie target of the AI Diet.
• Background reading: update this data roughly every hour, even with the app closed (on Android, if you allow it). Android or iOS decides the exact time.

What stays on the device and what goes to the server

How we use it

• Show your data in the app: home screen card, charts, Sleep, Heart and Activity screens and energy level for training.
• Add workouts, weigh-ins and water to your history. Those that started in the last 48 hours count toward points and missions.
• AI features, only with your consent. The Watch and health screen has the option Use watch data in coach conversations, processed by OpenAI, off until you turn it on. When on, the coach receives a watch summary in ranges (for example, "sleep below your average") and, when you ask about your energy level, the day’s numbers (score, hours of sleep and steps); the weekly report and recap and the choice of your daily missions count the imported workouts, weigh-ins and water. This is sent to OpenAI, which processes it on our behalf, only for these features. When off, nothing that came from the watch goes to OpenAI: these features only use what you logged in NuFocco.
• AI Diet: with the same consent, the calorie target is calculated on your device from the watch’s basal metabolic rate and average active calories; only the target goes to the server and, from there, to OpenAI to generate the plan. Without the consent, the target comes from your profile, without the watch.
• Imported workouts and measurements become part of your history. If you are a client of a professional or gym, they appear to that company like any other workout or measurement of yours, and an AI assistant you authorize can also read them.

What we do not do

• We do not sell Health Connect or Apple Health data.
• We do not use Health Connect or Apple Health data for advertising, market research or data mining, or send it to advertising platforms or data brokers.
• The app does not use iCloud to store Apple Health data.
• We do not use this data for credit, insurance or employment decisions.
• We do not use this data to train general-purpose AI models.
• We transfer this data to third parties only to provide the features described above, through the service providers in section 8 (to OpenAI, only with the consent described above); when you choose to share it (with a linked professional or an AI assistant you authorized); to comply with the law; or in a merger or sale of the company.
• People on our team do not read this data, except with your consent, for security, to comply with the law, or in aggregated form for internal operations.

How to disconnect and delete

• To stop the AI from using watch data without disconnecting: turn off Use watch data in coach conversations in Configuration > Watch and health. It applies from the next answer; what was already written stays in your conversations and reports.
• In the app: Configuration > Watch and health > Disconnect. NuFocco stops reading and opens Health Connect (Android) or the Health app (iPhone) so you can remove the permissions.
• On Android: open Health Connect (search for "Health Connect" in Android settings), go to App permissions, choose NuFocco and turn off the types you want, or all of them.
• On iPhone: open the Health app, tap your picture, go to Apps, choose NuFocco and turn off the types you want, or all of them.
• Disconnecting does not delete what was already imported. Imported workouts, weigh-ins and water entries can be removed from your history one by one in the app. An item deleted in Health Connect or Apple Health is also removed from NuFocco while the connection is active.
• To delete all data that came from your watch without deleting your account, write to contato@nufocco.com from your account email. We do it within 15 days.
• When you delete your account, daily summaries and sync records are deleted immediately. Section 11 shows what still needs an email request.

6. Artificial intelligence

• Coach in the chat: understands what you type or dictate, answers questions, logs meals, workouts and measurements when you ask, and analyzes your data.
• Photo analysis: meal, cardio machine display and body.
• AI Workout and AI Diet.
• Weekly report, weekly recap and the choice of daily missions.

• In the chat: what you wrote, the latest messages in the conversation, your goal, activity level, training type, dietary restrictions and, depending on the question, data such as weight, measurements, BMI, food diary, water, fasting, workouts, loads, runs and, only with the consent in section 5, data that came from the watch. The chat does not send your name or age.
• For photos: the image and, for body analysis, only your sex.
• For the weekly report: first name, age, sex, height, goal and the week’s numbers.

7. Why we use data and on what legal basis

• Creating and maintaining your account, providing app and website features and processing subscriptions and purchases: performance of a contract (art. 7, V).
• Health data (weight, measurements, food, workouts, meal and body photos, watch data and health questionnaires): your consent (art. 11, I), given when you enter the data and when you turn on each feature, such as body analysis, the Health Connect connection and the use of watch data in the AI features. You can withdraw it at any time (section 12).
• AI features: performance of a contract for ordinary data and consent for health data.
• Location in outdoor activities and group runs: consent, given through the system permission and when you start recording or join a room.
• Security, fraud and abuse prevention and suspicious-login detection: legitimate interest (art. 7, IX) and, for sensitive data, fraud prevention and the security of the data subject (art. 11, II, g).
• Keeping access logs for 6 months: legal obligation (Brazilian Internet Civil Framework, art. 15; LGPD art. 7, II).
• Measuring app and website usage and fixing errors: legitimate interest.
• Measuring app marketing campaigns and showing ads to non-subscribers: legitimate interest and, on iPhone, your tracking permission.
• News and offer emails and engagement notifications: legitimate interest, with the option to opt out at any time.
• Affiliate program: performance of a contract with the affiliate and legitimate interest in verifying referrals.
• Tax and accounting obligations and defense in legal proceedings: legal obligation and regular exercise of rights (art. 7, II and VI, and art. 11, II, d).

8. Who we share data with

Service providers (processing data on our behalf)

• DigitalOcean (United States): servers, databases and monitoring.
• Cloudflare (United States): image storage and delivery.
• OpenAI (United States): AI features (section 6).
• Google Firebase (United States): sign-in with Google and Apple, remote app configuration, notification delivery on Android and usage measurement.
• Apple (United States): notification delivery on iPhone. Notification text passes through Google and Apple and may include the beginning of a message you received and the sender’s name.
• Resend (United States): email delivery, with delivery, open and click records.
• Stripe (United States): payments made on the website.
• Rollbar (United States): app error reports.
• Expo (United States): delivery of app updates, with a random installation identifier.
• Discord (United States): internal alerts for our team about new support tickets (name and subject), new subscriptions (email or identifier), posts awaiting moderation (name) and affiliate applications (name, email, phone and social media), and server error alerts (user identifier, IP address, browser and address accessed).

Companies that process data under their own rules

• Apple (App Store) and Google (Google Play): process payments and subscriptions made in the stores.
• Apple and Google for system speech recognition and maps.
• Google (Google Analytics and AdMob), Meta and TikTok: see section 9.

Other people on NuFocco

• Public profile: anyone with an account sees your name, @, photo and posts and can see who you follow and who follows you. Private profile: only approved followers see your posts; your name, @ and photo remain visible. Posts created while your profile was public remain public if you switch to private later.
• Monthly ranking: name, @, photo, points and streak of people with a public profile.
• Challenges: participants see each other's name, @ and photo, the weight change in kg and in %, and, in validation, the photo and weight submitted as proof.
• Challenge group chat: participants, including people who join later, see earlier messages.
• Group runs: live position and, afterwards, the route (section 4).

Professionals and gyms you accept

AI assistants you connect

Affiliates

Authorities and corporate transactions

9. Usage measurement, advertising and tracking

• Google Analytics for Firebase: records screens and actions in the app, linked to your NuFocco profile, with device data, approximate location from your IP address and, when available, the advertising ID. Some events include numbers you log, such as weight and target weight, calorie goal, amount of water and fasting duration. We use this data to understand how features are used and to measure install campaigns.
• Google AdMob: shows ads to non-subscribers: banners on some screens, ads in the feed and the optional rewarded video that gives an AI credit. The SDK collects the advertising ID, IP address, ad interactions and diagnostics. For the rewarded video, it also receives your profile identifier to confirm the credit. On iPhone, if you don't allow tracking, AdMob doesn't receive the advertising identifier and the rewarded video is not personalized.
• Meta (Facebook SDK): automatically logs events such as installs, app opens and purchases, with the advertising ID, to measure campaigns.
• TikTok Business SDK: logs app opens and automatic events, such as installs and purchases, with device identifiers, to measure campaigns.

How to limit it

• iPhone: the app asks for tracking permission the first time it opens. If you deny it (or turn it off later in Settings > Privacy & Security > Tracking), the Facebook SDK and AdMob don't receive the advertising identifier and rewarded video ads are not personalized.
• Android: in your device settings, under Google > Ads (or Privacy > Ads), you can delete or reset your advertising ID.
• The app does not yet have an option to turn off usage measurement. If you want your events deleted from Google Analytics, ask through the contact in section 2.

10. International data transfers

11. How long we keep data

• Account, profile, health data, stored photos, conversations with professionals and groups, posts and history: for as long as your account exists.
• AI coach conversations: the text is kept for 15 days. Excerpts of what you type, used to improve how requests are understood, are kept for up to 90 days.
• Body analysis: the photo is not kept on the server; the result is kept until you delete the analysis or your account.
• Guest accounts unused for 60 days are deleted automatically.
• Login sessions: up to 30 days after they expire.
• Access logs (IP, date and time): at least 6 months, as required by the Brazilian Internet Civil Framework.
• Payments and subscriptions: for the period required by tax obligations and for defense in disputes (generally 5 years).
• Affiliate program: for as long as participation lasts and, afterwards, for the period required by tax obligations.
• Today, access logs, records of account changes, records of emails and notifications sent, payment records and affiliate program records are not yet deleted automatically at the end of these periods.

When you delete your account

12. Your rights and how to exercise them

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
• portability of your data;
• deletion of data processed on the basis of your consent;
• information about who we share your data with;
• information about the possibility of not giving consent and its consequences;
• withdrawal of consent;
• review of decisions made solely on the basis of automated processing (art. 20);
• objection to processing carried out without consent, if it breaches the law.

How to do it

• Correct data: in the app itself, in your profile and settings.
• Delete your account: in the app, under Configuration > Delete account, or on the website at nufocco.com.br/delete-account.
• Withdraw consent: disconnect your watch or turn off the use of watch data in the AI (section 5), withdraw consent for body analysis in the app, turn off permissions (location, camera, microphone, notifications) in your device settings, deny tracking on iPhone and use the unsubscribe link in our emails. Engagement notifications, including offers, only stop if you turn off NuFocco notifications on your device.
• A copy of your data (access and portability) and other requests: write to contato@nufocco.com from your account email. There is no automatic export in the app yet; we send the copy in electronic format.

13. Security

• Connections to the app and website use encryption (HTTPS/TLS).
• Passwords are stored only as a hash (bcrypt).
• Your email and your profile name, photo, date of birth, height and weight are encrypted in the database. Other data is kept in databases with restricted access.
• Team access to data is restricted to authorized people, each with their own login.
• Access tokens expire, and you can sign out at any time.
• On your device, app data is kept in the app's own storage and may be included in your Google or iCloud backup, depending on your device settings.

14. Children and teenagers

15. Cookies and browser storage

• Sign-in: cookies and local storage with your access token and a copy of your registration and profile (including date of birth, sex, height, weight, goal and activity level), to keep you signed in. They last up to 30 days and are deleted when you sign out.
• Sign-in with Google: Firebase Authentication keeps the sign-in session in the browser.
• Preferences and features: language (1 year), theme and other preferences. Water, fasting and timer records from the web dashboard are also saved in the browser.
• Support: random identifiers for the support chat for people who are not signed in.
• Google Analytics: cookies (_ga) that measure visits and page usage, including the address of the page visited. You can block them in your browser settings or with the Google Analytics opt-out browser add-on.

Affiliate referral cookie (nf_aid)

16. If you are outside Brazil

17. Changes to this policy

18. Contact

• NuFocco, MJA DESENVOLVIMENTO, SUPORTE TECNICO E MANUTENCA DE SOFTWARE LTDA, CNPJ 63.811.158/0001-61, São Paulo/SP, Brazil.
• Privacy email: contato@nufocco.com.
• Brazilian Data Protection Authority (ANPD): gov.br/anpd.