Alonga Fácil Privacy Policy

Version: 1.2.0
Last updated: August 7, 2026

This Policy explains how Marcus Flávio Costa Magalhães, based in Brasília, Federal District, Brazil ("we"), processes personal data in the Alonga Fácil application (the "App"). For privacy matters, contact alongafacil.suporte@gmail.com.

1. Who this Policy applies to

This Policy applies to people who create an account, complete mobility assessments, use routines, track their progress, or interact with App features.

The App is intended for people aged 18 or older. We do not knowingly collect data from children or adolescents. If we identify an account created in violation of this rule, we will take steps to delete the data.

2. Data we process

We may process the following categories:

Account and authentication: email address, internal identifier, email confirmation, technical authentication logs and, when you choose to sign in with Google or Apple, the account identifier, email address, and name provided by those services. Section 6 explains this in detail.
Profile: name, avatar, age, height, weight, primary goal, experience level, and personal preferences you voluntarily provide.
Mobility and body perception: test answers, perceived limitations, overall and body-region scores, and assessment history.
Product usage: generated routines, exercises, completed sessions, duration, progress, daily streak, goals, and saved routines.
On-device preferences: reminder time and status, video audio preference, drafts, and the option to disable usage data.
Operational diagnostics and analytics: a random installation identifier and events such as opening the App, completing onboarding, starting and completing assessments or routines, viewing the paywall, and completing a purchase. This random identifier is also provided to the subscription manager so that renewal and cancellation events—which occur on store servers while the App is closed—are attributed to the same installation rather than a second record. This collection is enabled by default and can be disabled in Profile. We do not send your Mobility Score, body goal, experience level, perceived limitations, test answers, name, email, weight, height, or assessment content to the analytics service.
Technical data required to provide the service: IP address, basic connection information, operating system, and security logs that our service providers may process when authenticating your account, delivering videos, or protecting the infrastructure.
Subscription: subscription status, purchased product, billing period, renewal or expiration date, and transaction identifiers provided by the App Store and subscription manager. We do not receive card details or any other payment method information—billing takes place entirely through your Apple Account.

Answers about your body and mobility may reveal information about your physical condition. We restrict access to this information and process it only to provide the features you request. The App does not provide medical diagnoses.

3. How we collect data

We obtain data:

directly from you during registration, onboarding, assessments, and routine use;
automatically during the technical operation of the App;
from Google or Apple when you choose to sign in with either provider;
from the App Store and subscription manager regarding your subscription status.

4. Purposes and legal bases

We process data for the following purposes:

Purpose	Main data	Legal basis considered
Create, authenticate, and protect your account	Account and security records	Performance of a contract and legitimate interest in security
Personalize assessments, routines, and progress	Profile, mobility, usage, and preferences	Performance of a contract; consent when required for sensitive data
Store history and synchronize your experience	Account, assessments, routines, sessions, and goals	Performance of a contract
Grant and maintain paid access	Internal identifier, random installation identifier, and subscription status	Performance of a contract
Send requested reminders	Notification preferences and activity	Consent, which you may withdraw in the App or iOS settings
Measure product stability and usage	Non-sensitive operational events and random identifier	Legitimate interest in improving the service, with a right to object in the App
Respond to requests and legal obligations	Account, communications, and necessary records	Compliance with legal or regulatory obligations and exercise of legal rights
Prevent abuse, fraud, and incidents	Technical and security logs	Legitimate interest and protection of life or physical safety, as applicable

When processing depends on consent, you may withdraw it. Withdrawal does not invalidate processing previously carried out on a lawful basis.

5. Sharing and service providers

We do not sell personal data. We may use providers strictly necessary to operate the service:

Supabase: authentication, database, backend functions, and related infrastructure.
Google: identity provider when you choose Google sign-in. We do not send Google your mobility data, assessments, routines, or body profile.
Mixpanel: operational product analytics while this preference remains enabled in Profile. It receives App events and, when the integration is active, subscription events sent by the subscription manager.
Panda Video: hosting and streaming exercise videos.
Expo and Apple: application resources, local notifications, distribution, and operating-system services.
RevenueCat: technical management of subscriptions and paid-access entitlement. It receives your internal identifier, random installation identifier, technical device data, and purchase information returned by the App Store. It does not receive your name, email, assessments, Mobility Score, routines, or body-related data.
Apple: processes subscription and lifetime-purchase payments. The billing relationship is between you and Apple.

We may also share information when necessary to comply with the law or a valid authority order, protect rights, or respond to incidents. We require service providers, through applicable contracts or terms, to use safeguards appropriate to the nature of the data.

6. Sign in with Google and Apple

Signing in with Google or Apple is optional. The App also supports email and password.

When you choose Google sign-in, we request only the basic identity scopes—openid, email, and profile. We receive your Google Account identifier, email address, email verification status, and public name and profile picture. We do not request or have access to Gmail, Google Drive, Calendar, Contacts, Photos, or any other Google Account data.

We use this information only to:

create and identify your account in the App;
authenticate future access;
prefill your name and email in your profile.

Storage: identifiers and email are stored in our Supabase database with the rest of your account and protected by Row Level Security. We do not send them to the analytics service.

We do not sell, share, or transfer data obtained from Google to third parties, except to Supabase as the authentication service provider or when required by law. We do not use this data for advertising, advertising profiles, artificial-intelligence model training, or any purpose unrelated to those described above.

Our use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

You can revoke Alonga Fácil's access at any time at myaccount.google.com/permissions. This disables social sign-in but does not delete your App account. Account deletion is available in Profile within the App and removes data as described in Section 8.

Sign in with Apple works similarly and provides only an identifier, name, and email address—which may be an Apple-generated private relay address if you choose to hide your email.

7. International data transfers

Some providers may process data outside Brazil. In these cases, we seek providers with appropriate contractual and technical safeguards and observe the transfer mechanisms allowed by Brazil's General Data Protection Law (LGPD) and regulations issued by the Brazilian Data Protection Authority (ANPD).

8. Retention and deletion

We retain data while your account is active and for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and protect rights.

When you delete your account, user-linked data is removed from the active database, subject to legal retention requirements and service providers' technical backup and security cycles. Records strictly required by law or for the exercise of legal rights may be retained with restricted access.

Local data may remain on the device until storage is cleared or the App is uninstalled. Deleting the account also ends the session; it does not automatically cancel an App Store subscription, which must be managed through your Apple Account.

9. Security

We use controls appropriate to the product's stage and risks, including encrypted connections, authentication, user-level segregation, database Row Level Security, restricted administrative access, and secrets kept outside the mobile bundle. No system is completely secure; we maintain incident assessment and response procedures.

If a confirmed incident may cause relevant risk or harm, we will notify the ANPD and affected data subjects as required.

10. Your rights

Under the LGPD, you may request, where applicable:

confirmation of processing and access to your data;
correction of incomplete, inaccurate, or outdated data;
anonymization, blocking, or deletion of unnecessary data or data processed unlawfully;
data portability, subject to regulation and trade and industrial secrets;
information about sharing and the consequences of withholding consent;
withdrawal of consent and deletion of data processed on that basis, subject to legal exceptions;
objection to unlawful processing;
review and explanation of decisions made solely through automated processing that affect your interests.

You can edit certain information and delete your account within the App. For other requests, email alongafacil.suporte@gmail.com. We may request information to verify your identity and protect the account. Exercising these rights is free of charge.

11. Automated decisions

The App uses answers and scores to prioritize body regions and organize routines. Results are for guidance and do not constitute a diagnosis. You can retake the assessment and request information about the general criteria used by emailing alongafacil.suporte@gmail.com.

12. Notifications

Current reminders are scheduled locally on your device after you grant permission. You can disable them in Profile or iOS settings.

13. Changes to this Policy

We may update this Policy to reflect legal, technical, or product changes. We will highlight material changes and request renewed consent when required. The current version and date appear at the beginning.

14. Contact

Data controller: Marcus Flávio Costa Magalhães
Location: Brasília, Federal District, Brazil
Privacy and data subject rights: alongafacil.suporte@gmail.com
Website: alongafacil.com.br