Biomapa Privacy Policy

Biomapa is operated by NATARIO LABS DESENVOLVIMENTO DE PROGRAMAS LTDA, CNPJ 67.312.898/0001-04, based in Rio de Janeiro, Brazil ("Biomapa", "we", "our" or "us").

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when individuals in the United States use our application, website and related services.

Biomapa processes sensitive health-related information. We recognize that this information requires special care and additional legal protections.

This Privacy Policy is supplemented by our Consumer Health Data Privacy Policy, which addresses consumer health data rights under Washington, Nevada and other applicable state laws. These documents should be read together, along with our Terms of Use.

Our service is intended for adults aged 18 or older.

Account and profile information. Depending on the features used, we may collect:

• Name and email address.
• Authentication information.
• Year of birth or age.
• Sex information you choose to provide.
• Height, weight and related measurements.
• Preferred language, region, time zone and units of measurement.
• Account settings, the consents and choices you make, and subscription status.

Passwords are managed through our authentication infrastructure and are not stored as readable text.

Health and wellness information. We process information that you voluntarily enter, upload or authorize us to import, including:

• Laboratory and diagnostic test results.
• Medical reports, imaging reports and check-up reports.
• Relevant health-related documents you choose to upload.
• Body composition and physical measurements.
• Physical activity and workout records.
• Heart rate, sleep, steps, VO2 max and wearable-device information.
• Meals, nutritional information and hydration.
• Medication and supplement information.
• Prescription documents.
• Menstrual-cycle information when you use that feature.
• Health and training goals.
• Health-related insights and inferences generated from your information.

Uploaded documents and sensitive findings. Uploaded medical documents may contain sensitive information beyond the specific data fields that Biomapa extracts. For example, a laboratory report may contain reproductive-health information or results involving sexually transmitted infections.

When you upload a document, it is placed in temporary storage, read by our systems and our AI provider, and then deleted from our storage; a scheduled routine removes anything left behind within 24 hours. What Biomapa keeps are the structured results extracted from the document (and, for imaging reports, the text of the report).

Automated extraction and filtering exclude results for sexually transmitted infections (such as HIV, hepatitis B or C, syphilis, chlamydia, gonorrhea, HPV, herpes and HTLV) from the structured records that Biomapa saves. However, automated systems are not guaranteed to identify every sensitive item, and the original document, while it is being processed, still contains everything included in the uploaded source. We encourage you to review the documents you choose to upload.

Photographs. Depending on the feature, we may process meal photographs, body photographs and photographs of medical documents. Photographs are used for the specific purpose for which they are submitted. Retention of photographs and resulting data is described in the Data Retention section below. Body photographs never produce body measurements.

Connected services. When you authorize an integration, Biomapa may receive selected categories of information from Apple Health, Google Health Connect, Samsung Health and Strava. The information collected depends on the permissions you grant and the capabilities of the connected service. You may revoke the connection through the available controls.

Technical and account information. We may collect information required for security, operation and troubleshooting, including IP address, device type and operating system, app version, authentication and security events, application errors and diagnostic information, and relevant service usage information. We seek to minimize unnecessary personal information in technical logs.

Purchase information. Subscriptions are processed through Apple or Google. We may receive purchase identifiers, subscription status, billing-period information and related transaction metadata. We do not receive complete payment-card numbers from those app stores.

We process personal information to:

• Create and manage accounts.
• Provide requested health and wellness features.
• Import, organize and display information.
• Read documents submitted by users.
• Generate available reports and insights.
• Support workout, nutrition and wellness features.
• Maintain subscriptions.
• Respond to support requests.
• Secure accounts and prevent abuse.
• Maintain service performance.
• Measure our own advertising campaigns, only if you allow ad measurement (see section 5).
• Meet applicable legal obligations.
• Respond to valid privacy-rights requests.

Sensitive information is processed only for disclosed and legally permitted purposes.

We do not use medical records or consumer health data to determine eligibility for employment, credit or insurance.

Biomapa uses artificial intelligence to perform certain features requested by users. Our currently disclosed AI provider is Anthropic.

Depending on the requested feature, AI processing may involve medical documents, extracted health information, nutrition records, training information, photographs or other information needed to produce the requested output.

We seek to limit the information shared to what is necessary for the relevant feature. Some AI tasks use selected health measurements rather than complete original documents: to build a training plan or write the weekly coach review, the AI receives information such as your age in years, sex, weight, height, VO2 max, resting heart rate, workouts, runs, sleep and steps, without your name or email. Other tasks, such as document interpretation, require processing the uploaded source itself.

AI processing is performed subject to Anthropic's commercial terms, technical safeguards and legal requirements. Under those terms, Anthropic does not use the content of our requests to train its models. Anthropic may retain request data for a limited period under its own policies; we do not claim zero retention by our AI provider.

We do not authorize third-party providers to use Biomapa consumer health information for their independent advertising purposes.

AI outputs may be inaccurate and should not be treated as medical advice.

When you create an account in the United States, the separate health-data consent you give explains that the documents you upload are read by our AI provider. Where the law requires a further authorization, we obtain it before the relevant disclosure.

Biomapa promotes its services through advertising platforms, including Meta (Facebook and Instagram), TikTok and Google. Because Biomapa is a health app, the fact that you use it can itself be consumer health data under laws such as the Washington My Health My Data Act. For that reason, in the United States, ad measurement depends on a separate, optional consent:

• It is separate and off until you allow it. The app asks on a screen of its own ("Can we measure our ads?"), apart from the Terms of Use and the other consents, and nothing is preselected.
• If you do not allow it, the app sends nothing to Meta, TikTok or Google for advertising purposes, and our servers do not send them your email, any identifier or any event about you.
• If you allow it, the following may be shared with Meta, TikTok and Google to measure which of our ads work: that your device installed and opened the app, created an account, started a free trial or subscribed; your device's advertising identifier (on iPhone, only if you also allow tracking in Apple's prompt) and your IP address; a hashed (one-way encrypted) copy of your email that our servers send to Meta and TikTok; and the subscription events (such as a trial that converts or a renewal) that RevenueCat, our subscription provider, reports to Meta and Google with those identifiers.
• Health data from your records is never shared with advertising platforms: no lab results, measurements, meals, medications, workouts, sleep or heart rate, and nothing imported from Apple Health, Health Connect or other connected health platforms.
• You can withdraw at any time in Profile > Privacy and data > Ad measurement. Withdrawing stops the sharing from that moment and asks RevenueCat to delete the measurement identifiers stored with your subscription. On iPhone, turning off tracking in the iOS Settings also counts as a withdrawal.

Biomapa does not sell consumer health data to advertising platforms. Using Biomapa never depends on allowing ad measurement.

Marketing communications. We do not currently send marketing emails or promotional notifications to accounts in the United States. If we start, we will obtain any consent the law requires, include accurate sender identification and a working unsubscribe mechanism, and keep private health details out of promotional messages. Transactional, security and service-related communications may continue when necessary.

We disclose information only where necessary for a legitimate and disclosed service purpose, where authorized by the user, or where legally required. Relevant recipients include:

• Infrastructure and storage: Supabase, for database, authentication and file storage.
• Website and application hosting: Vercel.
• Artificial intelligence: Anthropic.
• Subscription administration: RevenueCat, Apple and Google.
• Email delivery: Resend, for transactional email.
• Platform services: Apple and Google, for app distribution and notifications.
• Health integrations: Apple Health, Health Connect, Samsung Health and Strava, according to the direction of information transfer and the permissions you authorize.
• Ad measurement partners: Meta, TikTok and Google, only with your separate consent, as described in section 5.
• User-authorized AI assistants: Claude, by Anthropic, when a Premium member activates the connection and grants authorization (section 7).
• Government authorities: where disclosure is legally required or permitted in response to valid legal process.

We require appropriate safeguards from service providers that process personal information on our behalf. We do not authorize providers to independently exploit consumer health data for unrelated advertising.

Connecting an external platform or assistant is optional. Before activating an available connection, we disclose the information categories the integration can access.

Premium members can connect Biomapa to the Claude AI assistant, by Anthropic, after signing in and tapping Allow on a screen that lists what will be read. The connection is read-only. It can read your profile measurements (age, sex, height and weight), activity, sleep and heart rate, workouts, meals and goals, body composition, laboratory results, medications and supplements, and your Biomapa insights. It cannot read genetic information, imaging reports, prescriptions, photos, your menstrual cycle, your name, email or payment details, or results for sexually transmitted infections, and it cannot change anything.

You can disconnect it at any time in Profile > Privacy and data > AI connectors; disconnecting stops access immediately. It does not automatically erase information already received and retained by Anthropic, which applies its own privacy policy to information processed through the assistant.

Biomapa is operated from Brazil. Our primary infrastructure is located in São Paulo, Brazil.

Some contracted providers may process information in the United States or other countries. When personal information is processed across borders, we use appropriate safeguards and service-provider arrangements required by applicable law.

The availability of privacy rights does not depend solely on the country where our servers are located. We do not represent that US customer information remains exclusively within the United States.

We use organizational and technical safeguards designed to protect personal information against unauthorized access, alteration, disclosure and destruction.

These safeguards include measures such as encryption in transit, infrastructure-level encryption at rest, authentication, access restrictions, database authorization rules, security logging, backups and incident response controls.

Access to health information is limited according to operational necessity and authorized purposes.

No electronic system can guarantee absolute security.

Where a security incident creates a notification obligation, we will notify affected individuals and relevant authorities as required by applicable law. Applicable notification requirements may include the FTC Health Breach Notification Rule and state data breach notification laws.

We retain personal information only as reasonably necessary for disclosed purposes, contractual obligations, security and applicable legal requirements.

Account and health records generally remain available while the account is active unless deleted by the user or under an applicable retention rule.

Meal photographs are kept with the meal and removed from storage automatically after 60 days; the meal record itself (foods, calories and nutrients) remains.

Body photographs submitted for training-plan analysis are deleted from our storage after the analysis is completed.

Uploaded medical documents are deleted from our storage after they are read, and any leftover copy is removed within 24 hours. The structured results extracted from them and the insights generated from your information remain while your account is active, unless you delete them.

An account created without starting the free trial or a subscription within 7 days, with no payment and no health information recorded, may be deleted automatically. An account with more than 30 days without any sign-in, with no active subscription and no payment ever made, may be deleted: without notice if it has no health information, and after at least 7 days' notice by email and app notification if it does.

When an account is deleted, we aim to remove associated active personal information within 30 days, subject to authentication, applicable law and legally permitted exceptions. Specific consumer health data deletion deadlines under state law take precedence.

Archived data and backups may require additional time to be deleted, subject to applicable statutory limits.

Where legally required, limited information may be retained to comply with obligations, resolve disputes, prevent fraud or defend legal claims. Such retained information remains subject to appropriate restrictions and security measures.

Biomapa may temporarily store information within the application's private storage area to support offline functionality. Local information may include previously accessed content and records awaiting synchronization.

Users should protect their devices with appropriate security controls.

Signing out or uninstalling the application removes application-managed local data, subject to operating-system behavior and any independently retained device backups.

Depending on applicable law, you may have the right to:

• Confirm whether your personal information is being processed.
• Access information we maintain about you.
• Correct inaccurate information.
• Obtain a portable copy of applicable information.
• Delete personal information.
• Withdraw consent where processing relies on consent.
• Opt out of applicable sale, sharing or targeted-advertising processing.
• Obtain information about applicable recipients of your data.
• Appeal certain decisions concerning privacy requests.
• Exercise legal rights without unlawful discrimination.

You can access available controls within the application under Profile > Privacy and data, including data export, account deletion, ad measurement, connected health apps and AI connectors.

The health-data consent you give when you create an account is necessary for the service to work. To withdraw it, request deletion of your account in Profile > Privacy and data or by email; processing then stops and your data is deleted within the periods described in this policy.

You may also submit requests to biomapa@biomapa.app.br. Account deletion information is available at https://www.biomapa.app.br/en/delete-account.

We authenticate requests using appropriate methods and respond within the time required by the applicable law. We do not require an individual to create a new account solely to exercise a legal privacy right. Where legally required, we provide an appeal mechanism.

Additional rights and procedures for consumer health information are described in our Consumer Health Data Privacy Policy.

Our Consumer Health Data Privacy Policy provides additional disclosures concerning categories of health information, sources, sharing, consent, access, deletion and appeals. These protections apply where required by the relevant state law.

Information that identifies an individual as a user of a health service may itself be regulated as consumer health data, even where a laboratory result or diagnosis is not disclosed.

Biomapa is intended for adults aged 18 or older, and account creation in the United States requires confirming a year of birth of at least 18 years ago.

We do not knowingly offer accounts to children under 18. If we discover that an account belongs to a minor, we will take appropriate steps to restrict the account and delete information as required by law.

We maintain procedures for assessing suspected unauthorized access, acquisition or disclosure of personal information.

When an incident meets applicable legal notification thresholds, we will notify affected individuals, regulators and other required recipients according to applicable law.

These obligations may apply even when information was disclosed improperly without a conventional hacking incident.

We send these notices to the email address on your account, which is your primary method of communication with us for notices about your account and its security, and we also post them in the app.

We may update this Privacy Policy when our practices, services or legal obligations change.

Material changes will be communicated as required by law.

When a new use or disclosure of consumer health information requires consent, we will request that consent before initiating the relevant activity.

The last-updated date identifies the published version.

NATARIO LABS DESENVOLVIMENTO DE PROGRAMAS LTDA
CNPJ: 67.312.898/0001-04
Rio de Janeiro, Brazil
Email: biomapa@biomapa.app.br

Related documents:

• Terms of Use: https://www.biomapa.app.br/en/terms
• Consumer Health Data Privacy Policy: https://www.biomapa.app.br/en/consumer-health-data