Privacy Policy

Last updated: September 16, 2026

This Policy explains what data the MoveDiet app ("app", "we") collects, how we use it, who we share it with and what your rights are. It applies to the iOS and Android app and to the website movediet.app.

In short. We collect what is needed to build and track your training and your diet: account data, your physical profile and your preferences, plus the plans we generate and your history. We rely on third-party services for authentication, storage and artificial intelligence. We do not sell your data and we do not show ads. You can delete your account and all of your data at any time inside the app.

1. Who is responsible

The data controller is Medeiros Tecnologia LTDA, a Brazilian company registered under CNPJ 24.471.978/0001-08, reachable at contato@movediet.app. This channel also handles data subject requests under the Brazilian General Data Protection Law (Law 13,709/2018, "LGPD") and, where applicable, the GDPR and the UK GDPR.

2. What we collect

2.1 Account data

Email address and a unique account identifier.
When you sign in with Google or Apple: the identifier provided by that service, your email and, when available, your name. We never receive your password from those services.
When you sign in with email and password: the password is stored only in hashed form by our authentication provider.

2.2 Profile data

Provided by you to personalize your plans: name, weight, height, age, sex, training level, goal, physical or joint limitations, available weekdays, session length and preferred workout time.

Weight, height and physical limitations may be considered health-related data. We process them based on your specific consent, given when you fill in your profile, and only to calculate targets and build plans. You may leave fields blank, knowing that the calorie target and the meal plan depend on weight, height and age.

2.3 Food preferences

Dietary restrictions (for example vegetarian, lactose-free, gluten-free), meals per day, preferred foods and foods you dislike.

2.4 Generated content and app usage

Workout and meal plans generated for you, including the swaps you make.
Workout session history, completed days and streak.
Meals marked as done, extra meals you log and the shopping list.

2.5 Meal photos

If you use the calorie-estimate-from-photo feature, the image is sent, with your consent on each use, for analysis by artificial intelligence. The photo is used only to produce the estimate and is not stored on our servers after analysis. Only the entry you confirm (dish name, calories and macros) is saved to your account. Camera and photo library access is requested by the operating system and can be revoked in your device settings.

2.6 Technical data

Device language and region, to generate content in your language and with dishes common in your region.
Time zone, to schedule workout reminders at the right time.
Theme preference (light or dark), stored on the device.

What we do not collect: precise location, contacts, advertising identifiers, data from other apps. MoveDiet contains no ads and no third-party marketing trackers.

3. How we use data

To create and maintain your account and authenticate access.
To calculate your calorie target and generate personalized workout and meal plans.
To track workouts, meals and history.
To send workout reminders. Reminders are local notifications scheduled on your device; they do not go through our servers.
To answer support requests.
To keep the service secure and prevent abuse.

4. Artificial intelligence

Plans, swaps, the shopping list and the photo estimate are produced by Anthropic language models (Claude), called from functions running on our servers. For each generation we send the model only what it needs: profile data, preferences, the current plan in the case of a swap, and the photo in the case of a calorie estimate. Under Anthropic's commercial API terms, this data is treated as customer content and is not used to train models.

When there is no connection or the AI service fails, the app builds the plan from a built-in library without sending data to third parties.

5. Who we share with

We share data only with processors that provide services needed to run the app, within the limits of this Policy:

Service	Purpose	Data involved
Supabase	Authentication, database, storage and execution of server functions	Account, profile, preferences, plans and history
Anthropic	AI content generation	Profile, preferences, current plan and meal photos, as described in section 4
Google and Apple	Social sign-in, only if you choose that method	Account identifier, email and name
Apple App Store and Google Play	App distribution and, if any, in-app purchases	Data handled by the stores under their own policies

We do not sell or rent personal data. We may disclose data when required by law or by order of a competent authority.

6. International transfers

The services above may store or process data on servers outside your country, including in the United States. Such transfers rely on the safeguards provided by law, such as contractual clauses and the guarantees offered by the providers.

7. Legal bases

Performance of a contract: account, plans, history and the operation of the app.
Consent: health-related data entered in your profile and meal photos.
Legitimate interest: security, fraud prevention and service improvement, always in a way compatible with your expectations.
Legal obligation, where applicable.

8. How long we keep data

We keep your data for as long as your account exists. When you delete your account, your profile, plans and history are removed from our systems; backup copies are purged within 30 days. We may keep minimal records for longer where the law requires it.

9. Security

We use encrypted connections (TLS), hashed passwords, row-level access control in the database so that each user can only reach their own records, and service keys kept out of the app. No system is completely secure; if we identify an incident affecting your data, we will notify you and the authorities as required by law.

10. Your rights

Under the LGPD and, where applicable, the GDPR, you may at any time:

Confirm whether we process your data and access it.
Correct incomplete, inaccurate or outdated data. Most of it can be edited directly in the app, under Profile.
Request anonymization, blocking or deletion of unnecessary or unlawfully processed data.
Request portability of your data.
Know who we share your data with.
Withdraw consent. This may prevent the use of features that depend on it, such as the meal plan.
Delete your account, directly in the app under Settings → Delete account.

To exercise any right, write to contato@movediet.app. We will respond within the legal deadline. You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD) or your local supervisory authority.

11. Children

MoveDiet is intended for people aged 18 and over. We do not knowingly collect data from minors. If we learn that an account belongs to a minor, it will be closed and the data deleted.

12. Website

The website movediet.app is static and uses no tracking cookies. A language preference may be stored in your browser only to avoid repeating the language notice. Fonts are loaded from Google Fonts, which may log the IP address of the request under Google's policy.

13. Changes to this Policy

We may update this Policy to reflect changes in the app or in the law. The current version will always be on this page, with the date of the update. For significant changes we will notify you in the app.

14. Contact

Privacy questions or anything else: contato@movediet.app.