Privacy Policy
The short version
Your training history is stored on your device, not on our servers. We collect the minimum needed to run an account and to let the AI coach help you. We do not sell your data, and we do not use it for advertising.
Who is the controller
Carga is the data controller for the personal data described here, and processes it under Brazil's Lei Geral de Proteção de Dados (LGPD). If you are in the EU or UK, the equivalent GDPR rights apply.
What we collect
Account data: your email address and, if you sign in with Google, the basic profile Google returns. Training profile: your goal, experience level, available equipment, schedule, units, and any injury notes or constraints you choose to enter. Usage and diagnostics: crash reports and error diagnostics (via Sentry), and anonymous usage counters. Payment data: if you subscribe or hire a trainer, the store or Stripe processes your payment — we never see or store your card number. Trainer applicants additionally provide credential documents and identity information for verification.
Where your training data lives
Your programs, sessions, logged sets, and progress are stored locally on your device in an on-device database. They are not uploaded to our servers as part of normal use. If you hire a trainer, the specific subset you consent to share is synced so that trainer can see it — and revoking access stops that sharing.
How the AI coach uses your data
AI features send a limited context — the relevant part of your program, recent sets, and your question — through our own proxy to OpenAI, which generates the response. The proxy exists so your device never holds the API key and so we can send only what is needed rather than your full history. We do not send your name or email to the AI provider. OpenAI processes this data as our processor and, under its API terms, does not use it to train its models. This involves an international transfer to the United States, made under the safeguards the LGPD requires for such transfers.
Why we are allowed to process it
To perform our contract with you (running your account, generating your program, processing a subscription), for our legitimate interests (keeping the service secure, fixing crashes, preventing abuse), to comply with legal obligations (tax and accounting records), and on your consent where consent is what applies — most visibly the explicit consent that shares your training data with a trainer, which you can withdraw at any time.
Who we share it with
Google Firebase (authentication, and the database backing the marketplace), OpenAI (AI coaching, as described above), Sentry (crash diagnostics), RevenueCat and the app stores (subscriptions), Stripe (trainer payments and identity verification), and Vercel (website hosting). Each acts as our processor under contract. A trainer you hire sees the training data you consented to share. We do not sell personal data or share it with advertisers.
How long we keep it
Account data is kept while your account exists and deleted within 30 days of account deletion, except where we must keep records longer by law — for example financial records, which tax rules require us to retain for five years. Local training data is deleted from your device when you delete it or uninstall the app. Crash diagnostics are retained for up to 90 days.
Your rights
Under the LGPD you can confirm whether we process your data and access it; correct incomplete or inaccurate data; request anonymisation, blocking, or deletion of unnecessary or excessively-processed data; request portability; obtain information about who we share it with; withdraw consent; and object to processing based on legitimate interests. Some of these you can exercise directly in the app — Settings offers a data export and a full reset. For anything else, contact us; we respond within 15 days and will not charge you for exercising a right.
Security
Data in transit is encrypted with TLS. Authentication is handled by Firebase, so we never store your password. Trainer credential documents are stored privately and are only ever readable by a reviewer — never published. Admin access is protected by a separate, short-lived session and a hardware-independent claim. No system is perfectly secure; if a breach is likely to create a risk to you, we will notify you and the ANPD as the LGPD requires.
Children
Carga is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
If we change how we handle your data in a way that affects you, we will update this page and, for material changes, notify you in the app before the change takes effect.
Contact
Questions about these terms, your data, or a request to exercise your rights: contact us through the app (Settings → Help) or by email at the address published on carga.fit. We answer data-rights requests within 15 days, as required by the LGPD.