Privacy policy

1. About this policy

This policy explains how the Attos app collects, uses, stores and protects the information of the people who use it, in compliance with Brazil’s General Data Protection Law (LGPD — Law No. 13,709/2018) and with Google Play’s rules.

By using the app, you declare that you have read and agree with this policy.

2. Data we process

We collect only what the app needs to work:

• Account data: the name, email and profile picture of your Google account, only if you choose to sign in with Google.
• Physical and training data (sensitive data): age, weight, height, biological sex, goal, experience level, training place, workouts, weights, repetitions and session history.
• Pain and limitations: the body areas you mark in your athlete profile, so that risky exercises are avoided.
• Nutrition and habits: calorie and macronutrient targets, logged meals, water intake, supplements and their times, and dietary preferences.
• Conversations with AI Coach: the messages you send and the photos of workout sheets you attach.
• Subscription data: if you subscribe to Attos PRO, the subscription status and a purchase identifier. We do not receive or store your card details.

3. What we use it for and on what legal basis

Processing relies on the legal bases of the LGPD (arts. 7 and 11):

• Providing the service (art. 7, V): building workouts, calculating estimates (BMR, TDEE, BMI, water goal), recording your progress and keeping your history.
• Consent (art. 11, I): using your physical data and your limitations to personalize AI Coach’s answers. You consent by filling in your profile and by using the Coach, and you can withdraw consent by deleting that data.
• Legitimate interest and security: preventing fraud and keeping saved data intact.

4. Who we share it with

Attos does not sell, rent or share personal data with advertisers, ad networks or data brokers.

Data is shared only with the providers the app needs in order to work:

• Google Firebase (Google): sign-in with your Google account and the cloud database, used only if you sign in with Google.
• Artificial intelligence providers (OpenRouter and Google Gemini): when you use AI Coach or the AI diet adjustment, your message is sent to the provider together with the context of your profile: first name, age, weight, height, goal, level, training place, pain areas you reported, dietary preferences, supplements you added, diet targets, water intake and a summary of your recent workouts. Photos of workout sheets you attach are also sent to be read. We do not send your email, password or payment data.
• Cloudflare: hosts the AI Coach server, which messages pass through before reaching the AI provider. It stores the daily message counter and the answers you report.
• Google Play and RevenueCat: they process the Attos PRO subscription and tell the app whether it is active.

These providers may process data on servers outside Brazil, under their own privacy policies and the safeguards the LGPD sets for international transfers.

5. Where the data is kept and how it is protected

• On the device, by default: your data is saved in the app’s storage on your phone.
• In the cloud, if you choose: when you sign in with Google, a copy is synced with Google Firebase.
• Encryption in transit: all communication with servers uses HTTPS/TLS.
• Restricted access: only the authenticated Google account can access its own data in the cloud.

Water and supplement reminders are scheduled on the device itself. The content of those alerts is not sent to servers.

6. How long we keep it

We keep your data for as long as you use the app. When you delete your account, the data on the device and the cloud copy are permanently erased. Data sent to AI providers to answer a message follows those providers’ retention periods.

7. Your rights (art. 18 of the LGPD)

You are the owner of your data and may, at any time:

• Confirm and access: know whether we process your data and look it up. Everything the app stores is visible on the Profile, History, Nutrition and Athlete profile screens.
• Correct: change incomplete or outdated data in your Athlete profile and on the app’s own screens.
• Request a copy (portability): ask by email for a copy of the data associated with your account.
• Withdraw consent and delete: permanently erase all data, from the device and from the cloud.

To exercise any right, write to privacidade@attosfit.com. You may also file a complaint with Brazil’s National Data Protection Authority (ANPD) or with the data protection authority in your country.

8. How to delete your account and your data

• In the app: Profile → the gear at the top → Delete account and data → Delete permanently. The app erases your data from the device and the cloud and disconnects your Google account.
• By email: if you uninstalled the app, write to contato@attosfit.com with the subject “Data deletion — Attos” and tell us the email of the Google account you used. The request is handled within 5 business days, with confirmation by email.

Deleting the account does not cancel an active subscription: cancellation is done in Google Play.

9. Children and teenagers

The app is not directed at anyone under 16. If we identify that someone below that age signed up without proven consent from a parent or guardian, the data will be erased.

10. Changes to this policy

We may update this policy to reflect new app features or legal requirements. The date at the top shows the version in force. Relevant changes are announced in the app.

Contact