Privacy Policy

This Privacy Policy explains how BRANFIT collects, uses, shares and protects your information when you use our app and website. By using BRANFIT, you agree to the practices described here. We process your data under Brazil's General Data Protection Law (Law 13.709/2018 — LGPD); if you are in another country, you may exercise equivalent rights under your local law by writing to us.

What data we collect

• Account: name, email and password (stored hashed, never in plain text).
• Social login: if you sign in with Google or Apple, we receive your name and email from the provider.
• Health and training: goal, sex, age, measurements, activity level, where you train, preferences and dietary restrictions — used to build and adjust your plan.
• In-app activity: completed workouts, meal logs and messages exchanged with the Coach.
• Camera and photos: with your permission, we use the camera to scan food barcodes and to photograph your plate, and we may access photos you pick from your gallery. The camera is only activated when you open those features, and a photo is only used when you confirm the upload. Plate images are used to estimate the items, calories and macros of the meal.
• Payment: processed by the app stores (Apple/Google) via RevenueCat; we never store your card details.
• Usage and device: technical data (model, OS, identifiers) and interaction data. We use Google/Firebase Analytics to understand usage in aggregate and improve the app; we do not use this data for cross-app tracking by third parties.

How and why we use your data

• To build and adjust your workout, your meal plan and your health numbers (contract performance).
• To run the AI Coach and personalize your experience.
• To process subscriptions, prevent fraud and comply with legal obligations.
• To send the notifications and messages you configure.

Artificial intelligence

BRANFIT uses AI models (Anthropic Claude) to generate workouts, meal plans and Coach replies. When you use photo-based meal analysis, the image is sent to the AI provider to identify foods and estimate macros. We send the provider only the data needed for each purpose, never payment data. Health calculations (BMI, calories, macros, water) are deterministic and do not rely on AI.

Sharing with third parties

We do not sell your data. We share the minimum necessary with essential providers, under confidentiality obligations: our AI provider (Anthropic), payment processing (Apple, Google and RevenueCat), usage analytics (Google/Firebase Analytics), infrastructure and cloud, and notification tools. We may disclose data when required by law.

International transfers

Some providers (such as the AI provider and our infrastructure) may process data outside Brazil. In those cases we apply appropriate safeguards as required by the LGPD.

Retention and security

We keep your data while your account is active and for as long as needed to meet legal obligations. We use encryption in transit (HTTPS) and access controls. No system is 100% secure, but we work to protect your information.

Deleting your data

You can delete your account and your data at any time. See how on the Delete account and data page.

Children

BRANFIT is not intended for anyone under 16. We do not knowingly collect children's data. If we identify such a case, we delete the data.

Your rights

You can access, correct, port, anonymize or delete your data, withdraw consent and object to processing, at any time. To exercise your rights, write to contato@branfit.app.

Changes

We may update this policy from time to time. Material changes will be announced in the app or by email, with a new update date at the top.

Contact

Questions about privacy or about our data protection officer? Write to contato@branfit.app.