This policy describes what data the VRAT Care app collects, why, where it lives and how you remove it. It applies to the iOS app and to this website.
1. What we collect
Only what the app needs to work. Nothing is collected for advertising.
| Data | Purpose |
|---|---|
| Email address | Identify your account and send your sign-in code |
| First and last name | Personalize the app; optional |
| Weight, height, date of birth, sex | Calculate your calorie and macronutrient targets |
| Goal, activity level, dietary restrictions | Adjust targets and suggestions |
| Country | Date format and units |
| Meal, workout and water records | Show your history and progress |
| Chosen language | Send emails and show the app in your language |
If you sign in with a Google account, we receive only your name, email address and profile picture from it — nothing else, and we never have access to your Google password.
What we do NOT collect
- Passwords — access is by a code sent to your email.
- Location, contacts, photos, microphone or camera.
- Browsing data for advertising or profiling.
- Cross-app tracking identifiers.
2. Where the data lives
- Supabase (servers in the United States) — your account and app data.
- Amazon Web Services (SES) — delivery of sign-in code emails.
- Your device — preferences such as language and units stay local.
International transfer is permitted under Brazil's LGPD and the GDPR; we use providers with contractual safeguards and encryption in transit and at rest.
3. How long we keep it
As long as your account exists. When you delete your account, profile data and history are removed. Minimal security records and legal obligations may persist for a limited period.
4. Who we share with
We do not sell, rent or share your data with third parties for commercial or advertising purposes. It is accessed only by the providers listed above, to the extent needed to operate the service, or under a court order.
5. Your rights
Under the LGPD and the GDPR, you may at any time:
- Access and correct your data — directly in the app's Profile screen.
- Request a copy of your data.
- Delete your account and all associated data.
- Unlink connected Google or Apple accounts.
To exercise any of these, write to support@vratcare.com. We respond within 15 days.
6. Children
VRAT Care is not intended for children under 13 and we do not knowingly collect their data. If we identify such a case, the account is removed.
7. Security
All communication over HTTPS/TLS. Access uses a one-time code sent to your email, valid for a limited time — there is no password to leak. Internal access to data is limited to what is needed to operate and support the service.
8. Changes to this policy
Material changes are announced on this page, with the date at the top revised.
9. Contact
Questions, requests or complaints about privacy: support@vratcare.com