Controller and scope
Novo Coração will be provided by [[LUANA LEGAL ENTITY]], CNPJ [[CNPJ]], at [[BUSINESS ADDRESS]]. It applies to the app, website and related channels and is intended for adults in Brazil.
What the MVP does
The app is a personal diary for manually entered age, weight, blood pressure and heart rate, plus quantitative history and reports. It does not measure, validate, interpret or classify results and does not recommend actions.
Data separation
| Category | Examples | Planned location |
|---|---|---|
| Account | email, auth ID, [[NAME IF USED]] | authentication/backend server |
| Consent/security | version, date, IP and minimum events | backend, without health values |
| Health | age, weight, pressure, heart rate and time | device only |
| History/report | values, units and dates | device until user shares |
| Support/site | contact message, IP and actual hosting logs | [[CONFIRM]] |
Purpose, consent and sharing
Account data supports authentication under the Terms. Local health processing uses separate, prominent consent under LGPD article 11(I). No health data is used for advertising, sale, research or AI training.
Reports leave the device only when the person selects the system share action and recipient. There is no automatic sharing with a physician or clinic.
Providers, retention and deletion
Before release we will name [[AUTH]], [[BACKEND/HOSTING]], Hostinger [[PRODUCT]], regions and real retention. Local health data must not be sent to those providers.
The app must allow local correction/export/deletion and account deletion. Account primary deletion: [[REAL PERIOD]]. Backup: [[REAL PERIOD]]. Device backup behavior: [[TEST AND DESCRIBE]].
Security, rights and contact
Controls must include secure transport, protected local storage, OS credential storage, least privilege, admin MFA and no health data in logs. We will claim only tested controls.
LGPD rights can be requested at privacidade@novocoracao.com.br. Never send a password or authentication code. For device-only data, the app provides the practical correction, export and deletion controls.