Privacy Policy
Last updated: August 2026. Your health data is handled with special care.
1. Data controller
Emerson Silva Monteiro ("Emerson Silva Monteiro", "we") is the controller of the personal data processed through TotalBody. To exercise your rights or ask questions about privacy, write to privacidade@totalbody.app.
2. What data we collect
Account data (name and email); health data declared in your health assessment (sex, age, height, weight, measurements, goal, medical history, injuries, surgeries, medications, dietary restrictions, sleep routine, stress and training availability); meal photos and workout records and body measurements you enter into the log; and technical usage/telemetry data, IP address and device/browser information collected automatically for security and product improvement.
3. Sensitive health data
Part of the information in your health assessment qualifies as sensitive personal data under applicable data protection laws such as the GDPR and Brazil's LGPD. It is processed exclusively based on your free, informed and specific consent, given when you complete the assessment, and only for the purpose described below. You may withdraw this consent at any time.
4. Purposes and legal basis
We process your data for: (i) performance of a contract — to calculate your body analysis, generate and adjust your training and nutrition plan and track your progress; (ii) consent — specifically for the sensitive health data in your assessment; (iii) legitimate interest — to apply security rules, prevent fraud and improve the service; and (iv) compliance with legal obligations — when required by law or a competent authority, including tax and regulatory obligations related to the sale of the service. We do not use your health data for advertising and we do not sell it.
5. Who we share it with
We share data only with: the infrastructure providers necessary for the app to work (hosting and database) and the artificial intelligence provider that generates plans and analyzes meal photos, all acting as processors under contractual confidentiality obligations; Paddle.com, our online reseller and Merchant of Record, which receives the data necessary to process the sale, payment, tax collection, invoicing and post-sale support related to payments and refunds; and public authorities, when required by law, court order, or to protect our rights.
6. Security and access
Data is stored with encryption in transit and per-user access controls: each account can only read and modify its own records. Meal photos are kept in private storage, accessible only through your account.
7. Retention
We keep your data for as long as your account exists. After a deletion request, personal and health data are erased, subject to legally required retention obligations, including those related to tax and payment records kept by Paddle.
8. Your rights (LGPD and GDPR)
You may request at any time: confirmation of processing, access to your data, correction of incomplete or outdated data, anonymization, deletion or portability of data, information about data sharing, objection to processing, withdrawal of consent, and full account deletion. Just contact us through the contact page or at privacidade@totalbody.app. If you live in the European Union, you may also lodge a complaint with your local data protection authority; in Brazil, with the National Data Protection Authority (ANPD).
9. Cookies
We use essential cookies and local storage to keep your session authenticated and remember your theme preference, as well as analytics cookies to understand product usage and improve it. We do not use advertising or cross-site tracking cookies.
10. International transfers
Some of our hosting, artificial intelligence and payment processing providers (including Paddle) may be located outside your country of residence. In these cases, we adopt appropriate contractual safeguards to ensure a level of data protection consistent with the GDPR and, where applicable, Brazil's LGPD.
11. Privacy contact
To exercise your rights or ask questions about privacy, write to privacidade@totalbody.app or use the contact page. We respond within 15 days.