1. Information We Collect

1.1. Information You Provide Directly

We collect information that you voluntarily provide to us when using VivaFit:

Type of Information	Examples	Purpose
Registration Information	Name, email, date of birth, gender	Create and manage your account
Health Data	Weight, height, goal (lose/gain weight), dietary restrictions	Personalize diet and workout plans
Exercise Preferences	Type of exercise, available time, activity level	Create personalized workout plans
Meal Records	Foods consumed, calories, photos of meals	Track nutritional progress
Payment Information	Credit card data, transaction history	Process premium subscriptions
Communications	Support messages, feedback, reviews	Provide support and improve services

1.2. Information Collected Automatically

When you use VivaFit, we automatically collect certain information:

• Device Information: Device model, operating system, app version, unique identifiers
• Usage Data: Features used, time spent, access frequency, clicks and navigation
• Location Data: Approximate location based on IP address (we do not collect precise GPS location without your permission)
• Cookies and Similar Technologies: To remember preferences and improve experience
• Error Logs: Information about crashes and technical issues to improve stability

1.3. Information from Third Parties

We may receive information about you from third parties, including:

• Payment Providers: Google Play Store, Apple App Store
• Authentication Services: If you choose to log in with Google or Apple
• Analytics Services: Firebase Analytics, Google Analytics

2. How We Use Your Information

We use your personal information to:

3. Use of Artificial Intelligence (AI)

The VivAI Coach feature uses artificial intelligence to provide personalized recommendations. Regarding AI use:

4. Information Sharing

We do not sell your personal information. We may share your data only in the following situations:

4.1. Service Providers

We share information with third-party companies that help us operate VivaFit:

• Cloud Hosting: AWS, Google Cloud, Firebase (data storage)
• Payment Processing: Google Play, Apple App Store
• AI Services: OpenAI API, Google Cloud AI (image and text processing)
• Analytics and Statistics: Firebase Analytics, Google Analytics
• Customer Support: Customer service and communication tools

All these providers are contractually obligated to protect your information and use it only as we instruct.

4.2. Legal Compliance

We may disclose your information if:

• Required by law, court order, or legal process
• Necessary to protect our legal rights
• To investigate fraud, security breaches, or illegal activities
• To protect the safety of users or the public

4.3. Business Transfers

In the event of a merger, acquisition, or asset sale, your information may be transferred. You will be notified of any change in ownership or use of your personal information.

4.4. With Your Consent

We may share your information with third parties when you explicitly authorize us to do so.

5. Data Security

We implement rigorous security measures to protect your information:

• Encryption: All data in transit is encrypted using TLS/SSL
• Secure Storage: Sensitive data is encrypted at rest
• Access Control: Only authorized employees have access to personal data
• Monitoring: Intrusion detection systems and suspicious activity monitoring
• Regular Backups: To prevent data loss
• Security Updates: We apply patches and updates regularly

Despite our efforts, no system is 100% secure. You should also take precautions, such as using strong passwords and not sharing credentials.

6. Data Retention

We retain your personal information only for as long as necessary to:

• Provide VivaFit services
• Comply with legal obligations (e.g., tax records for 5 years)
• Resolve disputes and enforce agreements
• Improve our services in an aggregated and anonymized manner

When you delete your account:

• We delete or anonymize your personal information within 30 days
• Some data may be retained for legal or security reasons
• Backups may take up to 90 days to be completely removed

7. Your Privacy Rights

How to Exercise Your Rights:

• Through the App: Settings → Privacy and Data
• By Email: vivafit@funitapps.com
• Response Time: We will respond within 30 days

8. Children's Privacy

VivaFit is not intended for individuals under 18 years of age. We do not knowingly collect information from minors without parental or guardian consent.

If you are under 18 years old:

• Obtain permission from your parent or guardian before using the app
• Your parent or guardian should review this Privacy Policy
• If we discover that we have collected data from minors without consent, we will delete it immediately

9. International Data Transfers

Your data may be transferred to and stored on servers located outside of Brazil, including:

• United States (AWS, Google Cloud servers)
• European Union (backup data centers)

We ensure that these transfers meet the protection standards of LGPD (Brazilian General Data Protection Law) through:

• Standard contractual clauses
• Provider security certifications
• Adequate technical protection measures

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Type	Purpose	Can Be Disabled?
Essential Cookies	Basic app functionality, authentication	❌ No (required)
Performance Cookies	Usage analysis, bug fixes	✅ Yes (Settings)
Functionality Cookies	Remember preferences, language	✅ Yes (Settings)
Marketing Cookies	Personalized ads (free plan only)	✅ Yes (Settings)

How to manage cookies: Go to Settings → Privacy → Manage Cookies

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make significant changes:

• 📧 We will notify you by email
• 📱 We will display a notice in the application
• 📅 We will update the "Last Updated" date at the top of this page
• ⏰ We will provide a 30-day period before changes take effect

We recommend that you review this policy regularly to stay informed about how we protect your information.

12. LGPD Compliance

VivaFit is in compliance with the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018). We have appointed a Data Protection Officer (DPO) to ensure compliance.

DPO Contact:

• Email: vivafit@funitapps.com
• For LGPD-related questions and data protection matters

13. Legal Bases for Processing

We process your personal data based on:

• Consent: When you explicitly authorize us
• Contract Performance: To provide the services you contracted
• Legal Obligation: To comply with laws and regulations
• Legitimate Interests: To improve our services, prevent fraud, and ensure security