Privacy policy
This policy explains what data the Onza app collects, what it is used for and how you can delete it. Onza is developed by cabral.me, the data controller under Brazil's General Data Protection Law (LGPD). Contact: suporte@cabral.me.
Data we collect
- Account: your email address. If you sign in with Google, we receive your Google account's email and name.
- Profile: name, date of birth, height, city and time zone. Biological sex and gender are optional: the first is only used in body-composition formulas, the second only adjusts the app's wording.
- Workouts: your training plans and what you log (exercises, sets, reps, loads, distances and times).
- Body weight: the weights you log.
- In-app progress: points, streak and streak freezes, computed from your workouts.
- Approximate location: only during sign-up, and only if you allow it, to find your city. Your phone's system turns the position into a city name; we store only the city name, never coordinates. You can type your city instead.
We do not collect contacts, photos, payment data or advertising identifiers. The app has no ads and uses no third-party analytics or tracking.
How we use it
- To run the app: show today's workout, keep your logs and sync them across devices.
- To compute points, streaks and goals.
- To email your sign-in code and answer support requests.
The legal basis is performing the service you asked for when you created the account (LGPD art. 7, V). We do not sell or rent your data.
Who we share it with
Only the services that make the app work, which process data on our behalf:
- Supabase: database and authentication, with servers in São Paulo, Brazil.
- Resend: delivery of sign-in code emails.
- Google: Google sign-in, if you choose it.
Some of these services may process data outside Brazil, under the safeguards the LGPD provides. We may also disclose data when required by law or court order.
Visibility
Your profile is private by default. Today none of your data is shown to other people in the app.
Security
Data travels encrypted (HTTPS). In the database, row-level access rules make sure each account can only read and change its own data.
How long we keep it
For as long as your account exists. When you delete your account, your profile, workouts, weights and progress are deleted immediately. Infrastructure backups are overwritten over time and are not used to restore deleted accounts.
Your rights
You can ask to access, correct, port or delete your data, and for information about sharing. Much of this can be done in the app (edit your profile, remove logs, delete your account). For anything else, write to suporte@cabral.me. We reply within 15 days.
Minimum age
Onza is intended for people aged 18 and over.
Changes
If this policy changes, we update this page and the date at the top. Important changes will also be announced in the app.