Privacy Policy — NuFocco

Effective: from March 1, 2026

This Privacy Policy describes how NuFocco handles personal data when you use our apps (iOS/Android), web version, and related services (collectively, the "Service").

1) Who We Are (Controller)

Controller: MJA DESENVOLVIMENTO, SUPORTE TECNICO E MANUTENCA DE SOFTWARE LTDA
Trade name: NuFocco
CNPJ: 63.811.158/0001-61
Location: São Paulo/SP — Brazil
Privacy/support contact: contato@nufocco.com

2) Scope and Eligibility

The Service is intended for users 18 years of age or older. If you are under 18, please do not use the Service.

3) Data We Collect

3.1 Registration and Account Data

• Name, email, date of birth/age
• Biological sex (when applicable to features)
• Access credentials (e.g., password) — stored securely
• Login providers (Apple/Google): provider identifiers and authentication information

3.2 Profile and Content Data

• Profile picture (optional)
• Content you publish and interact with: posts, comments, likes/reactions, media (photos/videos)
• Messages shared in chats/contacts within the Service

3.3 Health, Fitness, and Nutrition Data (may be sensitive)

Depending on your usage, we may process health/fitness-related information such as:

• Weight, height, and body measurements
• Goals and objectives
• Meal plans/diets and meal history
• Workouts/exercises performed and related history

3.4 Usage, Logs, and Technical Data

• IP address
• Device and app information (e.g., model, OS, version, language)
• Device/app identifiers
• Service event logs (e.g., date/time, usage actions, errors)
• Crash reports and failure monitoring data

3.5 Approximate Location (Security)

We may process approximate location for security purposes, fraud prevention, and detection of suspicious activities. This location may be inferred from signals such as IP and/or device permissions.

4) Device Permissions

The app may request permissions when necessary for specific features:

• Notifications: for reminders (e.g., hydration and other alerts)
• Photos/gallery: for profile pictures and published content
• Camera: for profile pictures and/or Service content
• Location (when enabled): for security and suspicious access protection

You can revoke permissions at any time in your device settings.

5) How We Use Data

We use personal data primarily to:

• Provide the Service: create and manage accounts, authenticate access, maintain your profile
• Personalization: generate experiences and recommendations related to diet, workouts, goals
• Social features: enable posts, interactions, chats
• Subscriptions and payments: enable premium features, validate purchases
• Support: respond to requests, troubleshoot, improve experience
• Security and anti-fraud: prevent unauthorized access, abuse, spam
• Product improvement and analytics: understand performance, stability, usage
• Communications: transactional messages and, when permitted, marketing
• Legal compliance: meet legal/regulatory requirements

6) Legal Bases (LGPD)

Under Brazil's General Data Protection Law (LGPD), we process personal data based on: contract execution, consent, legitimate interest, legal/regulatory compliance, and regular exercise of rights.

7) Data Sharing with Third Parties

We may share personal data with third parties to the extent necessary to operate the Service, including:

• Apple App Store / Google Play Store: subscription processing and validation
• Cloud infrastructure providers (e.g., Cloudflare R2, AWS S3)
• Firebase (Google): authentication, remote config, analytics
• Rollbar: error monitoring
• Brevo / SendGrid: transactional email
• Pagar.me / Stripe: web payment processing
• Professionals: may view your data only when you authorize

8) International Transfer

Some providers may process data outside Brazil. When this occurs, we adopt measures to ensure compliance with LGPD and reasonable security standards.

9) Retention and Deletion

We retain data for as long as necessary to fulfill this Policy's purposes. Upon deletion request, we will remove or anonymize your data, subject to technical and legal limitations. Backups may retain residual copies for up to 90 days.

10) Information Security

We adopt technical and organizational measures including encryption in transit (HTTPS/TLS), encryption at rest, access controls, logging and auditing, and backup/recovery procedures.

11) Your Rights (LGPD)

You may request: access to data, correction, deletion/anonymization, information about sharing, and consent revocation. Contact: contato@nufocco.com. We aim to respond within 15 days.

12) Cookies and Similar Technologies (Web)

On our web version, we may use cookies and/or local storage for session management, authentication, security measures, and experience improvements.

13) Communications and Marketing

We send transactional communications necessary for Service operation. Marketing communications may be sent per your settings and/or as permitted by law. You may opt out via settings or by contacting contato@nufocco.com.

14) Changes to This Policy

We may update this Policy to reflect changes in the Service, legal requirements, or security practices. When relevant, we will notify through available channels.

15) Contact

📧 contato@nufocco.com
Controller: MJA DESENVOLVIMENTO, SUPORTE TECNICO E MANUTENCA DE SOFTWARE LTDA

Last updated: February 19, 2026