Privacy policy
1. Who we are
Sthetics is operated by Primethetics Technologies Ltda, CNPJ 67.572.055/0001-47, headquartered at Rua 1822, 400, Sala 902, Centro, Balneário Camboriú, SC, CEP 88.330-484, Brazil. We are responsible for the processing of your data.
2. Data protection officer
The officer in charge of your data is the managing partner of Primethetics Technologies Ltda. Reach them at privacidade@stheticsapp.com for anything about your data.
3. What we store and what for
Account. Your email and what you fill in on your profile: name, birth date, weight, height and goals. They make the account work and power the app's calculations.
Records. Workouts, runs, meals, habits, measurements and books you log stay in your account, visible only to you. What you share by code can be saved by whoever receives the code.
Photos. Profile photo and workout photos live in private storage and are shown through temporary links. The photo of the plate you scan is sent to the recognition service to calculate the meal, and is not stored on our servers.
Location. GPS runs use your location, including in the background while the run is active, to draw the route and measure distance. The route is saved with the run. Outside an active run, the app does not track where you are.
Steps. On iPhone, the app reads the device's step count: the steps of the whole day, every day, to track your daily movement, and the steps of the route during a run. The counts are stored in your account. On Android this does not exist.
Calculations. With weight, height, age and activity level, the app estimates your calorie expenditure and calorie goal, and calculates body mass index. This happens on your device, from what you entered.
Notifications. The app's reminders are created and fired on your own device. Nothing leaves it for that.
4. What the law bases each use on
5. Health data
Sthetics is a health app and processes sensitive data of yours. Before anything else, at sign-up, we show a dedicated screen asking for your specific consent. Without it, the app does not work, and you can delete your account right there.
These are the health data we store:
- Body: weight, height and measurements, by date
- Activity: completed workouts and runs, with the GPS route
- Steps: the daily count and the run counts, on iPhone
- Sleep and water, through the habits you check
- Food: meals and diet plans you log
- Injuries and limitations you declare
You can revoke this consent at any time, in Profile, About, Data and privacy. Revoking ends your use of the app, because there is no version of it without this data.
6. Artificial intelligence
Three features send content to an artificial intelligence provider outside our servers:
- Food scanning: the photo of the plate goes out for recognition and comes back as an estimate. The photo is not kept.
- History import: the text, photo or PDF you send goes out for reading and comes back structured. The uploaded file is kept in our storage and removed after 30 days without movement on the import. The same applies to the workout PDF you attach during sign-up.
- Building your workout plan: your sign-up answers (goal, equipment, level, days and session length) and the limitation you write go to the provider so it can choose, from the app's exercise list, the ones that make up your plan. The choice comes back as numbers and the app checks each one before using it.
The content sent is not used by us to train models.
7. Minors
You must be at least 16 years old to create a Sthetics account. We ask for your birth date at sign-up.
Between 16 and 17, the app works differently:
- Weight loss goals do not appear, and the app never suggests eating less than you burn
- Body mass index and its classification are not shown
Anyone under 16 cannot create an account. If we learn an account belongs to someone below that age, it is closed.
If you are responsible for a teenager who uses Sthetics and want to access, correct or delete their data, write to privacidade@stheticsapp.com. We will ask for proof that you are the responsible adult before acting.
8. How long we keep things
- Your data lives while your account exists
- Shared content expires for saving in 30 days
- After you delete the account, it is deactivated immediately and removed for good, with the files
- The site waiting list sign-up (email, name and country) is deleted whole after the launch notice is sent, or in 12 months, whichever comes first
9. Who your data is shared with
We do not sell your data and do not hand it to anyone for advertising. Those who receive something, and only the necessary, are:
10. Sending data outside Brazil
Your account stays in Brazil. The database and files are hosted on servers in São Paulo.
Some specific uses leave the country, and only them:
These countries have rules different from Brazil's. We choose providers that contractually commit to a level of protection compatible with what Brazilian law requires, and we send only what each function needs.
11. Your rights
You can request access to your data, correction of what is wrong, a copy in a format another service can read, the deletion of your account, and the revocation of the consents you gave. You can also ask for the list of who we share with and ask what the law bases each use on.
Write to privacidade@stheticsapp.com. We answer within 15 days.
12. Taking your data with you
In Profile, Account, Export my data, the app builds a file with everything that is yours and opens the share screen for you to save it wherever you want. It includes your profile, workouts, runs, meals, habits, measurements, books and the record of what you accepted, plus temporary links to your images.
You can request one export per week. If you need more, write to privacidade@stheticsapp.com.
13. Deleting your account
In Profile, Account, you delete your account. It is deactivated immediately and stops working; if you change your mind soon after, sign in again to reactivate it. The account and the files are removed for good.
If you no longer have the app installed, write to privacidade@stheticsapp.com from the account's address and we delete it for you.
14. Consumer health data in the United States
If you are in the United States, some states treat part of what Sthetics stores as consumer health data, including your precise location during a run. You have the right to know what we store, receive a copy, delete it, and withdraw consent. We do not sell this data. Write to privacidade@stheticsapp.com.
15. Security
Your data travels over an encrypted connection. Database access is restricted by rules that separate each person's data. Your photos live in private storage, with expiring links. No one on the team accesses your health data day to day.
No system is immune. If an incident happens that could affect your rights, we notify you and the competent authority.
The app's error reports do not include your network address or the content of what you write, and only exist in the published version of the app.
16. The stheticsapp.com site
The stheticsapp.com site presents the app and gathers this policy, the terms of use and the support page. It uses no advertising cookies and does not track what you do there. The only thing stored in your browser is the language you choose on the site, so it stays the same on your next visit.
The site has a launch waiting list. If you want to be notified, you enter your email and tick a box saying you are 16 or older and want to receive the notice. If you like, you can also leave your name and your country, both optional: the name lets the notice greet you by name, and the country tells us where there is interest, to decide which countries and languages to launch in first. We keep the email, the name and country if you fill them in, the page language, the sign-up date and the version of this policy you saw, and nothing else. The network address is used only to block abuse of the form and is not stored with the sign-up. You receive nothing right away: we send a single email, at launch, in your language. After that email, or in 12 months, whichever comes first, the whole sign-up is deleted. To leave the list earlier, write to privacidade@stheticsapp.com.
The site is hosted by Cloudflare, which logs, like any server, the network address of whoever accesses it and the date of access, to work and to defend against attacks; the waiting list is also stored at Cloudflare. Fonts and images are served by the site itself, not by third parties.
If you write to the addresses on this page, your email and the content of the message are kept for as long as the support case lasts.
17. Changes to this policy and contact
When this policy changes, the app shows what changed the next time you open it and asks you to accept again before continuing. The date at the end of the text always says which version is live.
Questions about this policy: privacidade@stheticsapp.com.
App support: suporte@stheticsapp.com.