Consumer Health Data Privacy Policy

Consumer health data we collect and why

• Treatment details you enter (active ingredient, route, frequency, day or time, dose as written on your prescription, start and changes): to count the days of your injection week and to build your report.
• Injection or dose logs (date, time and site): for your week dial and site rotation.
• Check-ins (energy, hunger, food noise, discomforts and their intensity, sleep and mood and, only if you turn them on, alcohol, training and sexual desire): to show your own pattern and build your report.
• Protein, workouts and measurements (waist and, if you choose, weight, body fat and lean mass): to show what changed.
• Questions you save for your doctor (including the ones on erection, desire or alcohol): to include them in your report.
• Lessons you complete and items you save as favorites: so you can find them again. They can show which health topics interest you.
• Reminders you turn on (which ones, days and times): to send them. So it doesn't remind you of what you already did, the server checks whether you already logged today a check-in, an injection or dose, a workout or protein, and reads the date of your next appointment for that reminder; it doesn't read the content of your logs.
• Your account and your consent records: to run your account. For an app like this, simply having an account can reveal health information, so we protect it the same way.

Where it comes from

Only from you, when you type it into the app.

Who we share it with

We do not sell consumer health data. We do not share it with third parties, and we have no affiliates that receive it. Only these processors handle it on our behalf, under contract, to run the app:

• Hetzner: server and database, in Germany.
• Cloudflare: network, security and access control. It sees the traffic decrypted at the edge of its network, on the way to our server, and does not store your logs.
• Backblaze: storage of encrypted backups, in the United States. The copies are encrypted on our server before they leave it, and Backblaze cannot read them.

Stripe processes Hombrio+ subscriptions outside Brazil, and Mercado Pago processes Hombrio+ purchases made in Brazil: they receive your payment details, the fact that you pay for Hombrio+ and a code that links the payment to your account, never your logs. When you delete your account, your customer record at Stripe is deleted too; Stripe and Mercado Pago keep the records of payments already made under their own privacy policies.

Resend sends Hombrio's emails: it receives your email address, which shows that you have a Hombrio account, and the text of each message, which never mentions medicines, doses, symptoms or weight. It never receives your logs.

No third party collects data about you over time or across websites through Hombrio: we use no advertising pixels, ad SDKs or third-party analytics.

Your rights

• Confirm whether we collect, share or sell your consumer health data, and access it, including the list of everyone who received it (above).
• Withdraw your consent at any time (Profile, Privacy).
• Delete your consumer health data, including from backups within 30 days (in the app: Profile, Privacy, Delete account and data; or by asking us). If a backup is ever restored, deleted accounts are deleted again before the service comes back.
• Correct inaccurate data.

Ask in the app or at privacidade@hombrio.com. You do not need an account to ask. We answer within 45 days and may extend once by another 45 days, telling you why. If we decline, you can appeal by replying to our answer; we decide within 45 days and, if you still disagree, we tell you how to contact your state Attorney General.

Changes

We post each new version here and in the app before it applies. If we change how we use consumer health data in a material way, we ask for your consent again first.