Privacy Policy

This Privacy Policy explains how BRANFIT collects, uses, shares and protects your information when you use our app and website. By using BRANFIT, you agree to the practices described here. We process your data in accordance with applicable data protection laws, including Brazil's General Data Protection Law (LGPD, Law No. 13.709/2018) and, where applicable, the EU General Data Protection Regulation (GDPR).

What data we collect

• Account: name, email and password (stored hashed, never in plain text).
• Social login: if you sign in with Google or Apple, we receive your name and email from the provider.
• Health and training: goal, sex, age, measurements, activity level, training location, preferences and dietary restrictions — used to generate and adjust your plan.
• In-app activity: completed workouts, meal logs and messages exchanged with the Coach.
• Camera and photos: with your permission, we use the camera to scan food barcodes and to photograph your plate, and we may access photos you choose from your gallery. The camera is only activated when you open these features and a photo is only used when you confirm the upload. Plate images are used to estimate the items, calories and macros of the meal.
• Payment: processed by the stores (Apple/Google) via RevenueCat; we do not store your card data.
• Usage and device: technical data (model, operating system, identifiers) and interaction data. We use Google/Firebase Analytics to understand usage in aggregate and improve the app; we do not use this data for third-party cross-app tracking.

How and why we use your data

• Build and adjust your workout, diet and health numbers (performance of the contract).
• Operate the AI Coach and personalize your experience.
• Process subscriptions, prevent fraud and comply with legal obligations.
• Send notifications and communications you configure.

Artificial intelligence

BRANFIT uses AI models (Anthropic Claude) to generate workouts, diets and Coach replies. When you use the photo meal analysis, the image is sent to the AI provider to identify the foods and estimate the macros. We send the provider only the data needed for each purpose, with no payment data. Health calculations (BMI, calories, macros, water) are deterministic and do not rely on AI.

Sharing with third parties

We do not sell your data. We share the minimum necessary with essential providers, under confidentiality obligations: AI provider (Anthropic), payment processing (Apple, Google and RevenueCat), usage analytics (Google/Firebase Analytics), infrastructure and cloud, and notification tools. We may disclose data when required by law.

International transfer

Some providers (such as the AI provider and infrastructure) may process data outside your country. In those cases, we adopt appropriate safeguards as required by applicable law.

Retention and security

We keep your data while your account is active and for as long as necessary to comply with legal obligations. We use encryption in transit (HTTPS) and access controls. No system is 100% secure, but we work to protect your information.

Data deletion

You can delete your account and your data at any time. See how on the Delete account and data page.

Minors

BRANFIT is not intended for anyone under 16. We do not knowingly collect data from children. If we identify such a case, we will remove the data.

Your rights

You can access, correct, port, anonymize or delete your data, withdraw consents and object to processing, at any time. To exercise your rights, write to contato@branfit.app.

Changes

We may update this policy from time to time. Material changes will be communicated in the app or by email, with a new update date at the top.

Contact

Questions about privacy or our data protection officer (DPO)? Reach us at contato@branfit.app.