Última atualização: fevereiro de 2026
We collect information that you provide directly to us, including: • Account information (username, email address) • Profile information (name, bio, date of birth, gender) • Workout and fitness data (exercises, sets, reps, weights, duration) • Diet plan interactions (viewing prescribed nutrition plans) • Check-in responses and progress notes • Photos (when you choose to upload profile pictures or exercise documentation) If you sign in with Apple or Google, we receive your name and email address (and profile picture for Google). With your explicit permission, we access data from Apple HealthKit (iOS) or Google Health Connect (Android), including heart rate, step count, and active energy burned. Health data is used solely to enhance your workout tracking and is never used for advertising or sold to third parties. We also automatically collect device information, push notification tokens, and crash reports.
We use the information we collect to: • Provide, maintain, and improve our services • Process your subscription transactions • Send push notifications (workout reminders, rest timers, plan updates) • Authenticate your identity and secure your account • Connect you with your assigned fitness professional • Display your prescribed workout and diet plans • Track your fitness progress and personal records • Respond to your support requests • Monitor and analyze app performance and stability • Comply with legal obligations
We use the following third-party services: • Sentry: Crash reporting and performance monitoring (receives user ID, email, device info, crash screenshots). Data processed in the US. • Expo: Push notification delivery (receives push token, device type). • Resend: Transactional email delivery for login codes (receives email address). • Twilio: SMS delivery for login codes (receives phone number). • Apple App Store / Google Play Store: Subscription and payment processing. • Apple HealthKit / Google Health Connect: Health and fitness data integration.
We do not sell, trade, or rent your personal information to third parties. We may share your information only: • With your assigned fitness professional (workout data, check-in responses, progress) • With third-party service providers listed in Section 3, strictly for the purposes described • To comply with legal obligations, court orders, or governmental requests • To protect our rights, safety, and property • With your explicit consent
We implement appropriate technical and organizational measures to protect your personal information, including encrypted data transmission (HTTPS/TLS), secure token-based authentication (JWT), passwordless login via one-time passcodes, and server-side access controls. While we strive to protect your information, no method of electronic transmission or storage is 100% secure.
We retain your personal information for as long as your account is active. When you delete your account, a 5-day grace period applies during which you can reverse the deletion. After the grace period, your data is permanently deleted from active systems. Backup copies may be retained for up to 30 days.
Depending on your location, you have the right to: • Access your personal information • Correct inaccurate information • Delete your account and data • Export your data in JSON, CSV, or PDF format • Object to processing of your information • Withdraw consent at any time (e.g., health data access) To exercise your rights, use the in-app privacy settings or contact us at support@steelth.com. We will respond within 30 days.
If you are in Brazil, you have additional rights under the LGPD, including the right to confirm data processing, access your data, correct inaccurate data, request anonymization or deletion, request portability, and revoke consent at any time.
If you are in the EEA, we process your data based on contract performance, legitimate interest, consent, and legal obligation. You have the right to lodge a complaint with your local data protection authority.
Our service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us at support@steelth.com.
In the event of a data breach likely to result in a risk to your rights, we will notify affected users without undue delay and within 72 hours where feasible, and notify relevant supervisory authorities as required by law.
We may update this Privacy Policy from time to time. We will notify you of material changes through the App before they take effect.
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: Email: support@steelth.com Website: https://steelth.com