Privacy Policy

You do not need to tick a box to "accept" this Policy. By creating your account, you confirm only that you were given access to it.

1. Who we are

This Privacy Policy is published by Fitzer Tecnologia Ltda., registered under CNPJ 68.056.855/0001-78, responsible for the Fitzer app.

2. Scope

This Policy applies to the Fitzer app, available for iOS and Android, and describes how we handle the personal data of people who create an account and use the app.

3. Controller

Controller of the personal data: Fitzer Tecnologia Ltda., CNPJ 68.056.855/0001-78, with registered office at Rua Dona Carmelita Gama Romeiro, nº 300, Parque São Benedito, Pindamonhangaba/SP, CEP 12.410-200, Brazil.

Privacy contact: [email protected].

3.1. Privacy contact channel

Fitzer Tecnologia Ltda. maintains a dedicated channel for personal data protection matters at [email protected], through which data subjects and the Brazilian National Data Protection Authority may submit requests, complaints and communications.

4. Separate channels

Privacy and personal data matters should be sent to [email protected]. This channel is separate from operational support, [email protected].

5. Data we collect

We collect data you provide directly, data generated by your use of the app, and technical data necessary for the service to run and stay secure.

Fitzer does not request access to your device’s precise location and does not collect GPS coordinates. IP addresses may be processed by the infrastructure services for operation, security and abuse prevention.

Fitzer does not request access to your contact list and does not ask you to provide other people’s personal data. In the social features, we may process the profile and participation data that other users chose to make available to participants.

We do not collect payment data. In the current version, Fitzer does not collect steps, sleep, heart rate or equivalent data from watches, bands or health apps, and does not request permissions for that kind of data.

6. Account data

Name, email, authentication credentials, preferred language, unit of measurement, and display and notification preferences.

7. Technical data

To operate the service and protect it against abuse, technical data is processed, such as session identifiers, date and time of access, IP address, information about the device and the operating system, app version, and error and security logs.

Part of this data is generated and kept by the infrastructure services we use, as part of their normal operation. We do not use this data for advertising or to build a behavioural profile.

8. Sensitive health data

Part of the data Fitzer processes is sensitive personal data relating to health: weight, height, body measurements, body composition, goals, the biological sex used to calculate calorie needs, workouts, food, hydration, history and progress, medication dose and time, injection site, reported symptoms, and body and progress photos.

9. Menstrual cycle

The menstrual cycle module is optional and only exists if you turn it on. When active, it may record period dates, associated symptoms and fertility information that you enter yourself.

None of this is collected if the module stays off. You can turn it off and request deletion of those records.

10. Progress photos

Progress photos exist so you can compare your own progress over time. They are not shown to other users.

Before upload, the image is resized, recompressed and has its orientation corrected. This processing creates a new file from yours, without the original metadata, including EXIF, GPS data, device model and capture date.

The photos are kept in private Storage, reachable only through temporary signed links. You can view, compare and delete them at any time.

10.1. Capacity and cycle quota

These are two distinct limits. Capacity is how many photos can be stored at the same time: 12 on Free, 120 on Plus. Cycle quota is how many uploads you can make within a cycle: 2 uploads per cycle on Free, 10 uploads per cycle on Plus.

Deleting a photo frees capacity, but does not give back an upload already consumed in the cycle.

10.2. Earlier photos

Photos recorded before this structure are neither deleted nor migrated automatically. If you choose to migrate them, they take up capacity and do not consume cycle quota.

11. Body analysis

Body analysis sends three of your photos for automated analysis by artificial intelligence, producing a visual reading of your progress.

It is available only on the Plus plan, with a minimum interval of seven full days between analyses, counted from the last analysis completed successfully.

Body analysis is not a medical diagnosis and does not assess any health condition.

The image you send does not automatically enter your progress photo gallery: you decide whether to save it. When you choose not to save it, the image is not written to your permanent collection in the app. The result of the analysis may remain in your history even without the original image.

12. Meal photos

Captured with the device camera or selected from the gallery, for the purpose of estimating food information through automated analysis.

Available only on the Plus plan. The limit planned for the commercial Fitzer Plus offering is 210 food analyses per cycle. This limit will be enforced before the paid subscription becomes available.

The estimates may contain errors and do not replace guidance from a qualified professional. The estimate is always reviewed and confirmed by you before it is saved. The photo stays in private Storage so you can consult your diary, until you delete it or delete your account.

13. Artificial intelligence

The Free plan does not use any artificial intelligence feature. No image or data is sent to an artificial intelligence provider on Free accounts.

The Plus plan uses artificial intelligence within the limits of the plan. Data is sent only when you start the feature; there is no background sending. Every result is an estimate, not a diagnosis, and may contain errors.

The provider is Google, and the model used is Gemini 2.5 Flash, reached through a Fitzer backend function. The app installed on your device never communicates directly with the provider, and the access key exists only in the backend.

Only the images and text necessary for processing are sent. Your name, email, account identifier, weight, medication, symptoms and history are not sent.

Processing carried out by Google follows the terms applicable to the service we have contracted and may involve infrastructure located in other countries.

Challenges, duels, groups, achievements and rankings are available on the Free plan as well. Taking part is always optional.

When you take part, what becomes visible to other participants are the elements you chose to expose: display name, avatar, score and position in the ranking of the challenge you joined. Invitations and participation are visible to those involved.

We never share your health, meal, medication, symptom, weight, measurement or photo data with other users. Entering or publishing other people’s health data in any shared space in Fitzer is prohibited.

15. Advertising

Fitzer does not currently display advertising and does not yet have an active advertising platform.

When advertising is switched on, the Fitzer Free plan will display advertising inside the app, which may include banners and videos. Before it is switched on, this Policy will be updated to state the advertising platform used, the data processed, the purposes of the processing and the controls available to the user.

Fitzer Plus will be offered without advertising.

Today none of your data is sent to an advertising network.

16. Analytics and crash reporting

Fitzer does not integrate third party analytics tools, behavioural tracking or automatic crash reporting.

17. Purposes of processing

To enable your account and your authentication; to calculate goals and estimates for calories, protein and water; to organise medication reminders; to record and display your history of weight, measurements, workouts and meals; to generate artificial intelligence estimates from photos you send; to enable your participation in social features when you choose to; and to ensure security and prevent fraud and abuse.

18. Legal bases

Ordinary personal data is processed to perform the contract entered into when you create an account and use the app, to comply with legal obligations where applicable, and on the basis of legitimate interest limited to what is necessary for security and the prevention of fraud and abuse.

Sensitive personal data is processed under the situations authorised by applicable law. Where specific consent is the applicable basis, it must be requested prominently and tied to the stated purpose.

We describe the practices we adopt; we do not claim guaranteed compliance with any legislation.

19. Consents and device permissions

Operating system permissions, such as camera, photo gallery and notifications, are technical authorisations granted to the app by your device. You manage them in the system settings and can revoke them at any time. Granting a technical permission is not, in itself, legal consent to data processing.

Legal consents are recorded separately. Fitzer currently records acceptance of the Terms of Use and keeps a record of the initial consent associated with your profile. For body analysis, photos are only sent after your explicit confirmation within the feature itself.

20. Infrastructure and processing providers

Supabase: database, authentication and Storage, with infrastructure in the South America region (São Paulo). Google: the Gemini 2.5 Flash model, for the analyses described in this Policy.

These providers process data to enable Fitzer features, under the terms of service applicable to each one.

21. App stores

Apple and Google Play distribute the app. They are not providers engaged by us to process the data you record in Fitzer.

Apple and Google may process data relating to your store account, to downloading and updating the app and, where applicable, to payments, under the terms and privacy policies of those companies, over which we have no control. We recommend consulting those policies directly.

Fitzer does not sell personal data.

We do not share your health, meal, medication or symptom data with other users of the app under any circumstances.

23. International transfers

Using artificial intelligence features involves sending images and text to the provider, which may mean processing outside Brazil.

Processing data outside Brazil is subject to the applicable rules on international transfers of personal data and to the terms of the provider involved.

24. Storage

Database and Storage hosted by Supabase, in the South America region (São Paulo). Photos are kept in private buckets, reachable only through temporary signed links, never through a direct public URL.

25. Retention

Account data, health records and photos remain while your account is active, or until you delete the record or the photo.

Body analysis images that you choose not to save are not written to your permanent collection in the app.

Technical logs and infrastructure backups are kept by the services we use for a limited period, as part of their operation, and are replaced by the rotation cycle.

Data necessary to comply with a legal obligation or to exercise rights may be kept for the applicable periods.

26. Deleting content and deleting your account

Deleting content: you delete a single record or photo; the rest of the account continues.

Deleting your account: requested on the dedicated screen in the app, with explicit confirmation, or through an external request as described on the account deletion page of our website. The request triggers removal of your authentication account, your records in the personal data tables, and your files in the meal, progress, body analysis, profile picture and challenge group image spaces.

Records already deleted may remain in backups until those are replaced by the rotation cycle, without being reintroduced into the app. For that reason this Policy does not describe deletion as immediate and total across all copies.

Anonymised data and data subject to legal retention may be kept.

27. Your rights

You may confirm that processing exists, access your data, correct incomplete or outdated data, request portability or export, request deletion of your account, withdraw consents, object to a specific processing activity, request review of an automated decision where applicable, and obtain information about who your data is shared with.

Requests to confirm processing and for simplified access are answered immediately whenever technically possible. Other requests are answered within the applicable legal deadlines.

You may lodge a complaint with the Brazilian National Data Protection Authority.

28. Data export

Export is available on the account screen and gathers the records from your personal data tables, such as profile, medication, weight, meals, workouts and symptoms.

The export includes the records associated with your photos, but does not include the image files. To obtain the images, use the privacy channel.

29. Correcting data

You can correct most of your data directly on the app screens. For corrections not available in the interface, use the privacy channel.

Where processing is based on consent, it may be withdrawn at any time through the privacy channel or, where available, by turning off the corresponding feature. Withdrawal does not affect the lawfulness of processing carried out beforehand.

31. Children and adolescents

Fitzer is intended exclusively for people aged 18 or over. Fitzer does not intend to knowingly collect personal data from people under 18, and the app blocks completion of sign up when the age provided is below that limit.

If an account is identified as belonging to someone under 18, it may be blocked, and the associated data will be handled under this Policy and applicable law, respecting the technical and legal periods described in the section on deleting content and deleting your account.

Requests relating to this subject can be sent to [email protected].

32. Security

Fitzer uses access controls in the database, private storage with temporary signed links, HTTPS connections, and the security mechanisms offered by the infrastructure platform and by your device’s operating system. The session token is kept in the operating system’s secure storage.

No system is completely immune to incidents. We work to reduce risks and to respond appropriately if one occurs.

33. Notifications

Protein, water and medication reminders are scheduled locally by the app itself, on your device, without sending your health data to an external push notification service.

34. Cookies and similar technologies

The Fitzer app, being a mobile app, does not use cookies. If the public Fitzer website comes to use cookies or similar technologies, that will be described in a dedicated notice published on the website.

35. Integrations with health devices and apps

In the current version, Fitzer has no active integration with Apple Watch, Apple Health, HealthKit, Google Health Connect or other health devices and apps, and does not automatically collect steps, sleep, heart rate or equivalent data through those platforms.

Fitzer may in future offer optional integrations with wearable devices and health apps. Access will depend on the integration actually being implemented, on device compatibility, and on the authorisation you grant.

Before those integrations are switched on, this Privacy Policy and the declarations presented in the app stores will be updated to state the data accessed, its purposes, how it is stored, any sharing, the retention period and how to withdraw the authorisation.

Refusing or withdrawing permission for health app integration will not prevent you from using the other Fitzer features that do not depend on that data.

36. Changes to this Policy

Changes that broaden the types of data processed or their purposes will be communicated. Where required by applicable law, we will request a new statement from the user or adopt another appropriate legal measure before the new processing.

Editorial corrections do not require new consent.

37. Contact

For any matter relating to this Privacy Policy or to your personal data, get in touch at [email protected].