Privacy Policy

In short

• Your health data is used only for the app's features, with your consent.
• We never sell your data or share it with drug makers, pharmacies, insurers, employers or advertisers.
• Without an account, everything you log stays on your device only.
• With an account, your data is kept on a server in Germany (European Union), over an encrypted connection. Backups are kept on the same server and, encrypted, on a team computer in Brazil and with Backblaze in the United States; all of them are deleted within 45 days.
• You can download your data and delete your account in the app, whenever you want.

1. Who is responsible

The controller of your data is Hombrio. For anything about privacy, write to privacidade@hombrio.com or use Profile, Contact us, in the app. We answer within 10 days.

2. What Hombrio does

Hombrio organizes what you log about your treatment with a GLP-1 medicine, your protein, workouts and measurements, shows educational content with sources and builds a report for you to take to your doctor. It shows; it does not assess, does not diagnose and does not calculate or suggest doses.

No automated decision is made about you. The texts offered for reading depend only on what you logged and are the same for everyone who logs the same thing; you choose whether to open them.

3. What data we handle

• If you use it without an account: everything you log stays on your device and nothing goes to the server.
• Account (optional): nickname, email, password (stored only in protected form, never as plain text), date of birth if you give it, language, country, time zone, the privacy jurisdiction that applies to you, the channel through which you signed up (QR code, site, link or campaign, never your internet address), when the app last connected, the version of the terms you accepted and the record of your consents (which, when and the version of the text you saw).
• Health data (sensitive data), if you have an account: your app profile (where you are in treatment, topics you follow, the protein goal you typed and the date of your next appointment), the treatment you enter (active ingredient, route, frequency, day or time, dose as written on your prescription, start, status and changes), injections or doses (date, time and site), check-ins (energy, hunger, food noise, discomforts and their intensity, sleep, mood and, if you turn them on, alcohol, training and desire), protein, workouts, measurements (waist and, if you want, weight, body fat and lean mass), questions for your doctor, completed lessons, favorites, the history of your reports (period and date), the protein portions you save (name, grams and, if you scan it, the barcode), your app preferences (such as discreet mode) and the tips and cards you dismissed. Where your medicine comes from, if you enter it, stays on your device by default. The PDF report is put together on your device and never goes to the server.
• Hombrio+: if you start the free trial, when it starts and ends. If you buy in Brazil, through Mercado Pago: the pass (30 or 365 days), the amount, the method (Pix or card), the coupon used, if any, the status, the dates and the Mercado Pago codes that link the payment to your account. If you subscribe outside Brazil, through Stripe: the plan, the subscription status, the dates and the Stripe codes that link the subscription to your account. Your card details stay with Stripe or Mercado Pago, and the details of the account a Pix payment comes from stay with Mercado Pago; we do not keep them.
• Coupon: if you receive a come-back offer, the coupon code, the discount, the expiry date and whether you used it.
• Emails: which notices and offers we sent and when, and whether you accept offers by email.
• Messages: what you send through Contact us, so we can answer: with an account, linked to it; without an account, with the email you give for the reply.
• Reminders, if you turn them on in the browser: which ones (check-in, your day, workout, protein, week, appointment, when you're away), their days and times, the language and whether notifications are discreet, plus the record of notifications sent or skipped in the last 35 days.
• Technical: the cookie that keeps you signed in on the browser (on a phone, a session code stored on the device) and, if you turn on reminders in the browser, the device's notification address. The server's technical logs keep only the path requested, the result and the time taken: no content, no health data, no email and no IP address. To limit abuse, the server keeps the IP address and, in sign-in and password reset attempts, the email typed only in its memory, for up to 24 hours. Cloudflare also sees your IP address when it carries the connection (section 5). To show the right purchase option for your country, the server also uses the country of the connection, which Cloudflare provides, without storing it.
• Usage statistics, only if you turn them on: counts such as "check-in completed", with the platform, the app version, the time rounded to the hour and a random installation code. No account, no name, no IP address and nothing you log.
• Counts with no identification: the server adds up, per day, the visits to each page of the site and the app and the steps on the way to Hombrio+ (each sign-up step, each time an offer is shown, each trial and each purchase started). It keeps only the day, the step or page and the total: no code, account, device, cookie or IP address.

4. Why we use it and on what basis

• Health data: to keep your logs and show your injection week, your pattern, protein, workouts, progress, the texts to read about what you logged and your report. Basis: your express consent, given on its own screen before any health question. You are not required to give it, and you can withdraw it at any time. In Colombia, it is the explicit authorization for sensitive data under Ley 1581 de 2012.
• Account and Hombrio+: to create and keep your account, sync your devices, start the free trial, record purchases and subscriptions, refund you when you withdraw from a purchase and unlock Hombrio+, as set out in the Terms of Use.
• Emails: to send account and purchase notices, which are part of the service (such as the receipt, the start and end of the trial, the end of a pass and password resets), and, unless you unsubscribe, Hombrio+ offers: a second chance the day after you sign up, if you have not started the trial or bought, and, once, a come-back offer with a discount, if you have not bought. Every offer email has a link to unsubscribe; account and purchase notices continue. No email mentions medicines, doses, symptoms or weight.
• Counts with no identification: to learn where people stop on the way and how often each page is seen, to improve the app. They do not depend on consent, because they identify no one.
• Reminders: only if you turn them on, with their own consent, which you can turn off at any time. To send them in the browser, the server reads only the days and times of the reminders you turned on, the date of your next appointment (for that reminder), the last time the app connected and whether you already logged today a check-in, an injection or dose, a workout or protein, so it doesn't remind you of what you already did. It doesn't read the content of your logs.
• Usage statistics: only if you turn them on, with their own consent, which you can turn off at any time.
• Security: to limit sign-in attempts and protect the service from abuse.

We do not use your data for advertising, we use no advertising pixels or third-party ad or analytics tools, and we do not use your data to train artificial intelligence.

5. Who we share it with

No one, to sell, advertise or analyze. Only these providers handle data so Hombrio can work, under contract and following our instructions:

• Hetzner: server and database, in Germany.
• Backblaze: storage of encrypted backups, in the United States. The copies are encrypted on our server before they leave it, and Backblaze cannot read them.
• Cloudflare: network and protection against attacks. Every connection to Hombrio passes through its network, which decrypts it at the edge to protect the service and encrypts it again on the way to our server: Cloudflare sees this traffic, including what you log, but does not store your logs. It keeps records of access to the service, such as IP addresses.
• Mercado Pago: Hombrio+ payments in Brazil, by Pix or card, only if you buy. It receives the payment details you enter on its page and, from us, your email, the pass bought and a code that links the payment to your account. It keeps the payment records under its own privacy policy.
• Stripe: Hombrio+ subscriptions outside Brazil, only if you subscribe. It receives the email and payment details you enter on its page, plus a code that links the payment to your account, the plan and your country. It keeps the records of charges under its own privacy policy.
• Resend: sending Hombrio's emails, only to people with an account. It receives your email address and the text of each message, which never mentions medicines, doses, symptoms or weight.
• Your browser's or device's notification service (Apple, Google or Mozilla): only if you turn on reminders in the browser, and only with neutral text, with no symptom, medicine, dose or weight.

Outside Brazil, Hombrio+ payments are received by Hombrio, who sees the billing details in Stripe only to receive payments and, when needed, refund them. In Brazil, they are received by the controller of Hombrio (section 1), who sees the payment details in Mercado Pago, with the same limit.

We only hand data to an authority when the law requires it.

6. Where it is kept

• Without an account: only on your device.
• With an account: on Hombrio's server in Germany (European Union), over an encrypted connection. Backups are kept on the same server and, encrypted, on a team computer in Brazil and with Backblaze in the United States; all of them are deleted within 45 days. A copy of your logs also stays on your device so the app works offline.
• On the way to the server, connections pass through the network of Cloudflare, which has servers in many countries and sees them decrypted at its edge (section 5).
• Cloudflare, Stripe, Backblaze and Resend may process data in the United States, under contract. In Colombia, international transfers follow Ley 1581 de 2012 (Art. 26).

7. How long we keep it

• As long as your account exists.
• A log you delete disappears from the screens right away and is removed from the server within 30 days, the time it takes for the deletion to reach your other devices.
• When you delete your account, everything leaves the server right away and backups are deleted within 45 days. Only a receipt with no name, no email and no health data remains, to prove the deletion happened.
• If you had subscribed, your customer record at Stripe is deleted with your account. Stripe keeps the records of charges already made, and Mercado Pago those of payments made in Brazil, under their own privacy policies. Resend keeps the record of emails already sent under its own privacy policy.
• If a backup ever has to be restored, accounts deleted in the meantime are deleted again, using the deletion receipts, before the service comes back.

8. Your rights

At any time, you can:

• access your data and download it (Profile, Privacy, Download my data): the file has all your logs, plus your account data, reminders, consents, Hombrio+ and messages;
• correct, update or delete data (Profile, Privacy, or the Delete account page);
• withdraw each consent (Profile, Privacy).

Ask in the app or at privacidade@hombrio.com; we answer within 10 days. If you are not satisfied, you can complain to the data protection authority of your country; in Colombia, the Superintendencia de Industria y Comercio.

If you withdraw your health data consent, the server stops receiving health logs from your account. What is already stored stays until you delete it, and the app offers to delete it right away.

9. Security and incidents

Passwords protected with an algorithm made for passwords, encrypted connections, data separated by account inside the database and no team access to your health logs through the team area. In the team area, the team reads the messages you send through Contact us, and administrators see the list of accounts (nickname, email, country, language, privacy jurisdiction, sign-up channel, creation date, last activity and Hombrio+ status) and, for each account, the time zone, the date of the last password change, the history of consents, the Hombrio+ periods, open sessions and devices with browser reminders (type, platform and dates), which reminders are on and whether discreet notifications are on, the notifications of the last 35 days (type and result), the messages and what the team did. They never see your health logs, not even how many there are. Every team action, such as ending your sessions, blocking sign-in, deleting the account at your request or granting Hombrio+ days, is recorded with its reason and kept for up to 13 months, with account codes only. Technical access to the server and to backups is limited to the people who maintain the service. If a security incident happens that puts you at risk, we notify you and the competent authority without delay, as the law requires.

10. Adults only

Hombrio is only for people 18 and older. If you are under 18, do not use the app.

11. Cookies

Hombrio's website uses no cookies. In the app on the browser, only the cookie needed to keep you signed in. No advertising or analytics cookies. Cloudflare may use a technical cookie to protect the service against robots.

12. Changes to this policy

A relevant change becomes a new version, shown in the app before it applies. When the change calls for it, we ask for your consent again.