PRIVACY POLICY
This Privacy Policy explains how FitNote collects, stores, processes, and shares the personal data of Users and Students in compliance with the Brazilian General Data Protection Law (LGPD) (Law 13.709/2018). By using the platform or providing data, you consent to this policy.
1. General Information
2. Data We Collect and Purposes
2.1. Registration data: name, email, password, company/studio, CNPJ/CPF, etc., to create your account, authenticate, and manage access.
2.2. Platform usage data: login records, IP, device, activity logs, to improve the Service, security, and provide support.
2.3. Student data by professionals: name, email, activity level, diet, workout, body metrics, history. Collected to enable the workout and diet prescription Service.
2.4. Payment data: when applicable, for billing, payment compliance, and plan renewals.
2.5. Communications: sending transactional emails (password recovery, billing notifications), communications with paying subscribers, students, and offers to customers, within the limits of the consent given.
2.6. Purposes: platform management, provision of the Service, billing, opt-in marketing, improvements, and internal analysis.
3. Legal Basis for Processing
3.1. Consent: for marketing/promotional purposes.
3.2. Contract performance/service provision: for account opening, workout and diet prescription, billing.
3.3. Compliance with legal or regulatory obligations: when applicable.
3.4. Legitimate interest: for platform security, fraud prevention, internal analytics, always assessing proportionality.
4. Data Sharing and Transfer
4.1. FitNote may share data with service providers (e.g., hosting, email delivery, payments) acting on behalf of FitNote under confidentiality agreements.
4.2. We do not sell or rent your personal data to third parties for marketing purposes without your consent.
4.3. International data transfers may occur if providers are located abroad, in compliance with LGPD (articles 33 and 34) and with appropriate safeguards.
5. Storage and Security
5.1. Data is stored for as long as necessary for the informed purposes or as required by law. After that period, it will be deleted or anonymized.
5.2. We adopt technical and organizational measures to protect data against unauthorized access, destruction, loss, alteration, or disclosure, according to security best practices.
6. Cookies and Similar Technologies
6.1. We may use cookies, web beacons, and similar technologies for session maintenance, usage analysis, interface personalization, or marketing.
6.2. Users may disable cookies in their browser, but this may affect platform functionality.
7. Data Subject Rights
As a data subject, under article 18 of the LGPD, you have the following rights:
- confirmation of the existence of processing;
- access to your data;
- correction of incomplete, inaccurate, or outdated data;
- anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data;
- data portability to another service provider;
- deletion of data processed based on consent;
- information about public or private entities with which FitNote shared data;
- withdrawal of consent;
- information about the possibility of not consenting and the consequences of not providing consent.
To exercise your rights, contact us at: [contact email].
8. Data Retention
Data will be kept while the account relationship exists or as needed for legal, contractual, or service provision purposes. After that, data may be deleted or anonymized.
9. Changes to this Policy
We may change this Privacy Policy at any time. We will publish the new version on the platform website and inform users when relevant. Continued use after publication implies acceptance of the new version.
10. Contact
If you have questions or want to exercise your rights as a data subject, contact us at: suporte@fitnote.com.br