Your privacy is a priority for RydeFlow. This Privacy Policy clearly explains what personal and health data we access or collect, how we use it, who we share it with, and what rights you have, in accordance with Brazil's LGPD (Law No. 13,709/2018) and app store requirements for health data.

1. Data Controller

RydeFlow, represented by Bendev Junior, is the controller of your personal data. For privacy or health data questions, contact: privacy@rydeflow.com

2. Data We Collect

We collect the minimum information needed for the app and website to work. Health and fitness data is processed only if you enable the integration described in Section 3:

•Data you provide: name, email, and profile information (when you register).
•In-app usage data: workouts completed, streaks, goals, preferences, and progress stored in RydeFlow.
•Technical data: IP address (anonymized when possible), device type, operating system, app version, and cookie identifiers on the website.
•Health and fitness data: only with your explicit authorization via Apple Health (iOS) or Health Connect (Android) — see Section 3.

3. Health Data (Apple Health and Health Connect)

RydeFlow may access, collect, and process health and physical activity data as detailed below. This is optional: it happens only if you turn on sync in the app settings and grant the permissions shown by your operating system. Without that authorization, RydeFlow still works but does not read from or write to your device's health platforms.

3.1 Health data we may access (read)

•Exercise type, date, time, and duration recorded in Apple Health or Health Connect (including workouts from other apps or synced wearables).
•Calories or active energy associated with activities.
•Exercise minutes and other physical activity metrics available on the health platform.
•Heart rate related to workouts when sent to Apple Health or Health Connect by your watch, band, or another app you authorized.
•Any additional health or fitness categories you explicitly approve on the iOS or Android permission screens.

3.2 Health data we collect or write

•Completed HIIT workout records in RydeFlow: workout type, date, start and end time, and session duration.
•Estimated calories and active minutes calculated from in-app sessions.
•Progress metrics, workout frequency, and performance summaries derived from your use of RydeFlow.
•Writing these records to Apple Health (HealthKit) or Health Connect (Google) when integration is enabled and you granted write permission.

3.3 How we use health data

•Automatically log completed workouts to your device's health ecosystem.
•Show history, progress, goals, and analytics inside RydeFlow.
•Estimate calories and, when available, contextualize intensity using heart rate data.
•Keep your workout history consistent between RydeFlow and connected health apps.
•Improve the product in aggregated, anonymized ways — we do not sell health data or use it for health-based behavioral advertising.

3.4 Legal basis, retention, and revocation

Health data processing is based on your explicit consent when you approve Apple Health or Health Connect permissions. We retain this data while your account is active and integration remains enabled, or until you request deletion, disable sync, or revoke access on your device. To revoke: on iOS, Settings → Health → Data Access & Devices → RydeFlow; on Android, Settings → Apps → Health Connect → App permissions → RydeFlow. Revocation stops new reads and writes; records already in Apple Health or Health Connect remain governed by Apple or Google policies.

3.5 Sharing of health data

We do not sell health data. We do not share health data with ad networks. Sharing is limited to the technical transmission required for Apple Health/HealthKit (Apple Inc.) or Health Connect (Google), according to permissions you approve, and to infrastructure providers (hosting, databases) that process data on our behalf under confidentiality and security obligations consistent with applicable privacy law.

4. Purposes and Legal Bases

We process your data based on the following legal bases:

•Contract performance: provide app features, your account, workouts, and sync you request.
•Consent: Apple Health or Health Connect integration, marketing communications (where applicable), and non-essential website cookies.
•Legitimate interest: improve interface, performance, and security while respecting your rights.
•Legal obligation: when required by competent authorities.

5. Data Retention

We keep your data only as long as needed for the purposes described. Account and in-app usage data are kept while your account is active. Synced health data follows the same rule until you revoke integration or delete your account. You may request deletion anytime in the app or by email.

6. Your Rights

As a data subject, you have the right to:

•Confirm processing and access your data, including health data we process.
•Correct incomplete or inaccurate data.
•Anonymize, block, or delete unnecessary or excessive data.
•Data portability to another provider, where applicable.
•Revoke consent at any time, including for health data.
•Be informed about sharing and about the option not to consent.

7. Cookies and Tracking (website)

On rydeflow.com we use cookies to improve navigation. Third-party cookies (such as Google Analytics) are enabled only after explicit consent in our cookie banner. The mobile app does not use the same website cookies; health permissions are managed by the operating system.

8. Data Sharing

We do not sell personal or health data. We may share information with: (a) Apple and Google solely for health sync you authorize; (b) infrastructure and essential service providers (e.g., hosting) under contract; (c) website analytics tools only with your cookie consent. Partners are held to security standards consistent with this policy.

9. Data Protection Officer (DPO)

DPO: Bendev Junior — privacy@rydeflow.com. To exercise your rights, revoke consent, or ask about health data use, contact us here. We will respond within applicable legal timeframes.