Privacy policy

Who we are

Chave Fit is an app of recipes and suggested menus for a daily calorie target, made by Brazza Studio (brazzastudio.com), an independent studio. It runs on Android and in the browser, where the creator area lives. This policy covers the app and this site, chavefit.brazzastudio.com. "We" means Brazza Studio, the data controller under Brazil's LGPD. For anything about your data, including exercising your rights, write to support@brazzastudio.com.

What we process and why

What stays on your phone

The recipe catalog and the ingredient database ship inside the app and are not personal data. What you create is stored on the device (in the browser, when you use the web version): favorites and lists, your own recipes, allergens and ingredients you avoid, your target, weight logs, menus, meal diary, saved combinations, shopping lists, menus received from creators and app settings.

Health data, only with your consent

To estimate your target and keep your history, the app uses biological sex, height, weight, whether you are pregnant or breastfeeding, your weight logs and the diary of what you eat. The LGPD treats this as sensitive personal data. Before collecting any of it, the app shows the Your health data screen, which explains what is collected, why and where it is kept, and only continues if you tap I agree. The legal basis is your consent (LGPD, art. 11, I).

We use this data only to calculate your target, build your menu, show Today and keep your history. Never for ads and never in usage statistics. In You › Privacy you can see when you gave consent, withdraw it and delete the health data already saved. Withdrawing consent stops the collection; what is already saved stays until you delete it. Without consent you still have recipes, lists, shopping lists and menus for a calorie number you type.

Anonymous ID and cloud copy

The first time you open the app, it signs in anonymously through Firebase Authentication. This creates a random ID with no name or e-mail. A copy of the data listed under "What stays on your phone" is stored with that ID in Cloud Firestore, on servers in the São Paulo region, so you do not lose everything when you change devices. The database rules only let your own account read or change that copy.

Sign in with Google (optional)

If you tap Sign in with Google, Firebase Authentication receives the e-mail, name and profile photo link of your Google account. The app uses the name and e-mail to show your account in You, to move your data between devices and, if you are a creator's client, to deliver model menus sent to that e-mail. The app reads nothing else from your Google account and never posts anything on your behalf.

Purchases

Recipe packs are sold through Google Play Billing. Google handles the payment, and we never see your card number. With your data we store which packs you own and each purchase's identifier, so each purchase is delivered once and your packs can be restored on a new device. When Brazza Studio grants a pack or creator area access without a purchase (for example, during the closed test), we store the grant, its date and who granted it in your account.

Usage statistics

On Android, while You › Privacy › Usage statistics is on (it is on by default), the app sends anonymous events to Google Analytics for Firebase: the start and result of Google sign-in, sync (start, completion, conflicts and errors), visits to the pack store and purchases (product, displayed price, currency and store country). Firebase adds automatic events, such as first open and sessions, and device data such as an app instance ID, phone model, Android version, language and an approximate location derived from the IP address. We use this to find bugs and see which features are used. These events carry no name, e-mail, account ID, health data, recipes, menus or diary. The app does not use the advertising ID. Turn the setting off and the app stops sending these events. The web version sends no statistics.

App integrity

On Android, Firebase App Check uses Google Play Integrity to confirm that requests to our cloud services come from a genuine copy of the app. This protects your data from abuse. It is not used to identify you.

Recipe videos

A recipe can have a video link. We do not host videos: the app only shows or opens the link.

• YouTube: when you open a recipe with a YouTube video, the app loads the video's thumbnail from img.youtube.com, and Google receives your IP address at that moment. When you tap play, the app loads YouTube's official player in privacy-enhanced mode (youtube-nocookie.com). From then on, YouTube may store cookies or identifiers under Google's policy.
• Instagram, TikTok and other sites: the link opens outside the app, in their own app or browser, under their own rules.
• In your own recipes: a link to a video file plays inside the app, loaded directly from the link's site, which receives your IP address.

PDF, sharing and export

The menu PDF, a shared recipe and the export of your data are generated on the device. The file goes wherever you choose in the share screen, and we do not receive a copy. The export contains everything on the device and, if you signed in with Google, the account's name and e-mail.

Support e-mails

When you write to us, we receive your address, your message and any attachments. We use them only to reply and, for a deletion request, to confirm what was done.

This site

This site has no ads, analytics or cookies. Fonts and images are served by the site itself. Your browser remembers the language you chose, only on your device. The hosting provider keeps standard access logs, such as IP address and browser type, for security and to run the service.

What we don't do

The app shows no ads, contains no advertising SDK and sends no notifications. It does not ask for access to your location, contacts, camera, microphone, photos or files. We do not sell your personal data and do not use your health data for anything beyond the features described here.

Creator area

In the creator area, a subscriber builds model menus for a calorie level and sends them to their own clients. For this we store:

• About the creator: their display name and an optional short introduction, their Google account e-mail, their model menus and drafts.
• About the creator's clients: the name and Google account e-mail of each client, which the creator types into their own area. Only the creator sees this list. Each send is recorded with the destination e-mail, the model menu, its version, the date and the creator's name, and cannot be changed afterwards.

The model menu appears in the app when the client signs in with the Google account for that e-mail, and only after Google confirms the e-mail belongs to them. The creator sees nothing of the client: no target, weight, diary or recipes, and not whether the menu was opened. A client can remove a creator, and the creator is not told. Chave Fit does not e-mail the client: the creator copies an invitation text and sends it through whatever channel they prefer.

The creator decides whom to send to and is responsible for having each client's permission to use their name and e-mail. Brazza Studio processes this data only to keep the creator's list and deliver the model menus.

Services we use

• Firebase Authentication, for the anonymous ID and optional Google sign-in.
• Cloud Firestore, in the São Paulo region (southamerica-east1), for the copy of your data and the creator area.
• Google Analytics for Firebase, for usage statistics on Android.
• Firebase App Check with Google Play Integrity, on Android.
• Google Play Billing for purchases, and Google Play for distribution and updates.
• YouTube, for recipe video thumbnails and the player.
• Gmail, for support and deletion e-mails.
• A hosting provider for this site.

These services process information under their own terms. Google explains its part in the Google Privacy Policy and in How Google uses information from sites or apps that use our services. The copy of your data is stored in Brazil. Statistics, sign-in, YouTube and Google Play services may be processed in other countries, under Google's contractual safeguards.

How long we keep data

The cloud copy and the account stay until you delete the account. Health data stays until you delete it in You › Privacy or delete the account. Data on the phone stays until you delete the account, sign out, clear the app's data or uninstall. Grants made by Brazza Studio are deleted with the account. Model menus already sent stay with their recipients, even if the creator deletes their account. Usage statistics are kept for the period configured in Firebase Analytics, up to 14 months. An anonymous copy is deleted when you delete the account in the app, and unused anonymous data may be removed after a period of inactivity. Records of deletion requests made by e-mail are kept for one year. We may keep some information longer when the law, security or accounting require it.

How to delete your account and data

In the app: open the You tab and tap Delete account at the bottom. If you signed in with Google, Google asks you to confirm it is you. This deletes the account, all your data in the cloud (recipes, lists, menus, diary, weight and targets) and any grants made by Brazza Studio. For creators, it also deletes their profile, clients, model menus and drafts. The data on the phone is deleted too, unless you tick Keep the data on this device: then it stays on the phone, linked to a new anonymous ID, with a new cloud copy. This cannot be undone.

Health data only: in You › Privacy, tap Delete my health data.

Without the app: send an e-mail, as explained in Delete your account and data.

What remains: purchased packs belong to your Google Play account and can be restored if you come back. Google Play keeps its own payment records. Model menus a creator sent you remain in that creator's send records. Usage statistics are not linked to your account.

Your rights

Under the LGPD you can confirm whether we process your data, access it, correct it, receive a copy, ask for deletion, learn whom we share it with, withdraw consent and object to processing. Much of this you can do directly in the app: correct in You, withdraw consent in You › Privacy, export with Export my data and delete with Delete account. For anything else, write to support@brazzastudio.com and we reply within 15 days. You can also complain to Brazil's data protection authority (ANPD). If you live elsewhere, for example in the European Union under the GDPR, you have similar rights and can use the same contact.

Age

Chave Fit is for adults 18 and over. The app sets no target for anyone who enters an age under 18. If you think someone under 18 has given us data, write to support@brazzastudio.com and we will delete it.

Security

Data travels encrypted (HTTPS). Access to the cloud copy is limited to the account that owns it, and a sent menu can only be read by the creator who sent it and by the account with the confirmed destination e-mail. No system is perfectly secure. If an incident may put you at risk, we notify you and the ANPD as the law requires.

Changes to this policy

When the app changes in a way that affects your data, we update this page and the date at the top. Important changes may also be announced in the app.

Contact

Brazza Studio · brazzastudio.com · support@brazzastudio.com