ShapiensPortuguês

Privacy policy

Last updated November 3, 2026

This policy explains what data Shapiens collects, why, and your rights under Brazil's General Data Protection Law (LGPD). The data controller is Thiago Veloso, contact thiago.pio2017@gmail.com.

Data we collect

Account: email, name and password (stored encrypted).

Profile and goals: age, sex, weight, height, goal, experience, routine, training and eating preferences.

Health, only with your consent: health conditions, symptoms, medication and timing, injuries, surgeries and notes you write or send (text, audio, image or PDF).

App use: workouts, sets and loads, meals, weigh-ins, measurements, feedback, progress photos and conversations with the assistant.

Before you create an account, your sign-up answers are linked to an anonymous identifier to build your plan.

We do not collect card data: payment happens directly at Paddle.

How we use it

To build and adjust your workout and diet plan, calculate targets, estimate recovery, show your progress and let the assistant log what you ask.

For your safety: health answers are used to adapt training and show precautions, never to diagnose.

To run your account, paid access, support and the security of the service. We do not sell your data and we do not show ads.

Legal basis

Performance of the contract (providing the app you subscribed to), consent (health data, which is sensitive data, and photos), legitimate interest (security and service improvement) and legal obligations.

Who we share it with

Lovable (app hosting and database).

Artificial intelligence providers reached through the Lovable gateway (Google and OpenAI models), which receive only what is needed to answer: the message, audio to transcribe, the photo of the meal or workout and the context of your plan. We do not keep audio after transcription.

Paddle.com (payment, receipts, taxes and refunds).

Authorities, when the law requires it.

Some of these services store data outside Brazil, with the safeguards required by the LGPD.

How long we keep it

While your account exists. Items you delete (meals, workouts, weigh-ins) stay in the trash for 14 days so you can undo, then are erased for good. Deleted progress photos are removed at once.

When you delete your account we erase your data and photos. Payment records stay with Paddle for the period tax law requires.

Your rights

You can confirm we process your data, access it, correct it, ask for portability, withdraw consent and ask for deletion. Most of this is already in the app: Profile to correct and Menu > Account > Delete account to erase everything. For the rest, write to thiago.pio2017@gmail.com. You may also complain to Brazil's National Data Protection Authority (ANPD).

Security

Data travels encrypted, each person can only reach their own records and progress photos are kept in a private area, opened only through temporary links.

Data on your device

The app keeps in the device's browser your login session, the chosen theme and sign-up drafts. We do not use advertising or tracking cookies.

Minors

The app is for people aged 16 and over. People aged 16 or 17 only use it with the permission of a parent or legal guardian, who can ask for access to or deletion of the data at the contact email.

Changes

If this policy changes in an important way, we will tell you in the app or by email.