PRIVACY POLICY – NuvFit

Last updated: November 24, 2025

NuvFit ("Application", "we", "our", "company") respects user privacy and is committed to protecting your personal data, ensuring security, transparency, and compliance with applicable legislation, including the GDPR (General Data Protection Regulation) of the European Union, the LGPD (General Data Protection Law) of Brazil, and App Store / Google Play requirements.

By using NuvFit, you agree to this Privacy Policy.

1. Information We Collect

We collect only the information strictly necessary to provide and improve our services.

1.1. Information Provided Directly by You

• Name

• Email

• Date of birth

• Gender (optional)

• Fitness goals

• Manually entered data: weight, height, measurements, routine, training history

• Dietary preferences

This information allows for personalization of content and app functionality.

1.2. Health Data (HealthKit / Google Fit)

NuvFit does NOT use the Clinical Health Records API.

With your explicit authorization, the app can read data from the following services:

• Apple HealthKit (iOS)

• Google Fit (Android)

Data may include:

• Steps

• Active calories

• Distance

• Heart rate

• Weight

• Exercise minutes

Important:

• This data is NEVER sent to our servers without your explicit authorization.

• It remains stored securely directly on your device.

• You can revoke access at any time.

1.3. Technical and Usage Data

We collect anonymous and aggregated data for:

• Failure diagnosis

• App stability

• Performance improvements

• General usage statistics

Includes:

• Device model

• Operating system

• App version

• Error logs

This data does not identify the user.

1.4. Subscription Data

When you purchase a subscription, we receive from the stores only:

• Transaction ID

• Subscription status

• Expiration / renewal date

We never receive credit card or payment information.

2. Processing Purposes

We use your data to:

• Create personalized workouts

• Generate non-clinical meal plans

• Generate intermittent fasting protocols

• Adapt recommendations according to your progress

• Provide user support

• Validate Premium subscriptions

• Improve overall app functionality

• Prevent fraud and misuse

NuvFit does NOT:

• sell data

• share data for marketing purposes

• access clinical data

• use sensitive data without clear authorization

• make diagnoses or medical prescriptions

3. Legal Basis for Processing

According to GDPR, the legal bases used include:

• Explicit consent (HealthKit, Google Fit, sending personal data)

• Contract execution (app functionality and Premium subscription)

• Legitimate interest (app improvement, abuse prevention)

You can withdraw your consent at any time.

4. Data Retention and Deletion

We define clear retention periods and give you a straightforward way to delete your data whenever you want.

Retention periods

• Account and profile data: kept while your account is active and deleted within 30 days after a deletion request

• Backups and audit logs: purged within 90 days after deletion, following security and legal requirements

• Support tickets: retained for up to 24 months to comply with audit and dispute obligations

• Subscription records (store receipts): retained for up to 5 years to meet accounting and tax laws

• Health data from HealthKit / Google Fit: stays on your device; we do not store it on our servers

How to delete your data

You can request deletion at any time:

• Send an email to privacidade@nuvfit.app from the same email used in the app, requesting deletion

• We acknowledge within 48 hours and delete active records within 30 days (backups follow the 90-day window)

• We confirm completion by email after deletion is finalized

How to revoke HealthKit / Google Fit access

• Apple HealthKit: Settings > Privacy & Security > Health > NuvFit > disable all categories you no longer want to share

• Google Fit: Google Fit app > Profile > Settings > Manage connected apps > disconnect NuvFit

If you reinstall or create a new account after deletion, previous data will not be recoverable.