1. Who we are
ENDORFINAPP is an app for workout management, physical assessment and fitness social networking. This policy explains how we collect, use, store and protect your personal data, in compliance with the Brazilian General Data Protection Law (LGPD, Law no. 13.709/2018).
2. Data we collect
- Registration data: name, email, phone (WhatsApp), password (encrypted), profile photo
- Physical and health data: date of birth, sex, weight, height, body measurements, body fat percentage, lean mass, PAR-Q+ screening answers and physical assessment results (provided voluntarily)
- Training data: workouts created, sets performed, loads, reps, difficulty ratings and execution history
- Usage data: clicks, pages visited, time of use and interactions on the social feed
- Technical data: device identifier for push notifications, IP address and browser type
3. How we use your data
- Provide and operate the service: creating and running workouts, physical assessment, monthly progress and correlations
- Artificial intelligence workout prescription and plan recommendations
- Sending push notifications (workout reminders, motivational messages, news) according to your preferences
- Operation of the social feed, friendships and clubs
- Product improvement through aggregated and pseudonymized analytics
- Subscription billing through Google Play (processed by Google)
4. Legal bases (LGPD)
We process your data based on:
- Consent: physical, health and training data (optional and collected by your own choice)
- Contract performance: data needed to provide the service
- Legitimate interest: product improvement and fraud prevention
- Legal obligation: when required by law or a competent authority
5. Data sharing
- Google Play: subscription payment processing
- Infrastructure providers: hosting (Railway), database and queues (PostgreSQL/Redis) and email/notification delivery
- Analytics: usage measurement provider (PostHog) for aggregated and pseudonymized browsing statistics, when enabled
- Site and blog visit counts: we anonymously record which public pages were viewed, where the visitor came from (for example a search engine or social network) and the device type. We use a random identifier stored in your browser, with no cookies, no IP address and no personal data, only to learn what is read most
- Other users: only the data you choose to publish on the social feed, clubs and profile
We do not sell or rent your personal data to third parties.
6. Security
We use encryption in transit (HTTPS/TLS), securely hashed passwords (bcrypt), expiring authentication tokens and role-based access control. Access to sensitive data is restricted and monitored.
7. Your rights (LGPD)
You may exercise the following rights at any time:
- Confirm that data processing exists
- Access your personal data
- Correct incomplete, inaccurate or outdated data
- Anonymize, block or delete unnecessary data
- Withdraw consent
- Request data portability
- Request deletion of your account and associated data (through the email below or directly in the app)
Practical controls are available on the app's Privacy page (My Profile menu) and at sign-up. For additional requests, contact us at the email below.
8. Data retention
We keep your data only as long as needed for the purposes described or as required by law. Workout and assessment histories may be retained for progress tracking. You can request deletion of your account and associated data through the contact email below; after the request, personal data is removed or anonymized, except where retention is legally required.
9. Children under 13
The app is not directed at children under 13 and we do not knowingly collect personal data from children. If we identify such a case, the data will be deleted.
10. Contact and DPO
Questions, complaints or requests about your data can be sent to:
Email: uranosistemasia@gmail.com
Subject: LGPD / Privacy
11. Changes to this policy
This policy may be updated periodically. The date of the last revision is at the top of this page. Relevant changes will be communicated through the app or by email.