AppMaromba Privacy Policy

Effective date: September 25, 2026

At AppMaromba, we are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you use our mobile application and this website.

1. Information We Collect

We may collect the following personal information from users when they register with our app or use our services:

Name
Email address
Phone number (optional)
Location
Photos (optional)
Health and physical activity data (optional)

The data is collected through registration forms and usage data.

1.1 Health and Physical Activity Data

AppMaromba collects the following health data from the user for the app to function:

Workouts: type, duration, and history of completed workouts.
Active energy burned: energy expended during physical exercise.
Basal energy burned: energy expended by the body at rest to maintain vital functions.

How we use this data: this data is used exclusively to record your activity history, calculate your caloric expenditure, and allow you to track your progress within the app. We do not use health data for advertising purposes.

Sharing: health data is not shared with third parties, except when required by law or with your explicit consent.

Storage and security: health information is stored securely only locally, on your device. We do not send or store this data on our servers. You can delete this data at any time directly through the app.

2. How We Use Your Information

The information we collect is used for the following purposes:

To identify users on the platform
To create and manage user profiles

We do not sell your personal information, and we do not share the data described in section 1 with third parties for advertising purposes.

Some Google services are required for the app to work, and they process data in that context:

Google Cloud — hosting and storage of the data described in section 1 (see section 8).
Google Places — verifying that a check-in was made at a gym (see section 7 of the Terms of Use).
YouTube — displaying the exercise demonstration videos (section 4).

Other providers — for advertising, usage analytics, crash reports, notifications and in-app purchases — collect information directly from your device through technologies built into the app, as described in section 5.

4. YouTube Videos in Workouts (YouTube API Services)

The workouts feature may display demonstration videos of the exercises. To do that, AppMaromba uses YouTube API Services.

These videos are not authored by AppMaromba: we do not produce them, we do not host them and we do not edit them. They are search results obtained from the YouTube Data API, returned based on the exercise name, and they belong to their respective channels and authors.

What we send to YouTube. Only the search term, which is the name of the exercise. We do not send your account data — name, email, tax ID, phone number or location — nor any identifier of your AppMaromba account.

What we store. We do not store the videos. We may temporarily store the data the API returns about them — id, title, channel and thumbnail — so that the same search is not repeated every time you open a workout. That data is refreshed or deleted within 30 days at most, as required by the YouTube API Services Developer Policies.

How the videos are played. Through the official YouTube player. The content is loaded from Google's servers, and Google may collect data about the playback and store cookies or similar identifiers on your device, as described in the Google Privacy Policy. That processing is carried out by Google, not by AppMaromba.

Access to your Google account. AppMaromba does not request access to your YouTube or Google account in order to display these videos, and it does not read, create or change anything in it. Permissions you may have granted to applications on your Google account can be reviewed and revoked at any time at myaccount.google.com/permissions.

By using this feature, you are also subject to the YouTube Terms of Service. The conditions for using these videos are described in section 8 of our Terms of Use.

5. Cookies, Device Storage and Similar Technologies

AppMaromba stores, accesses and collects information, directly and indirectly, on and from your device, and allows third parties to do the same, including by placing, accessing and recognizing cookies and similar technologies on your device or browser — such as local storage, identifiers saved on the device and software development kits (SDKs) built into the app. This section explains what that information is, who handles it and how you can control it.

What the app stores on your device.

Your login session, so that you stay signed in.
Your preferences in the app, such as language and theme.
A local database with your calorie tracker diary and the health data described in section 1.1.
A cache of images and content that have already been loaded, such as photos and video thumbnails, so that the app opens faster and uses less data.

What the app accesses and collects from your device. With the permission your device asks you for, and only when you use the feature that needs it:

Location, for example to confirm check-ins at gyms.
Camera and photo library, for the photos you choose to add — such as profile and progress photos — and to scan product barcodes.
Microphone, when you log a meal by voice.
The health data from Apple Health or Health Connect described in section 1.1.

The app also automatically collects technical information about your device: model, operating system and version, app version, language, time zone, connection status, crash reports and the token used to send you push notifications.

Third parties that store or collect information on your device. The technologies of the following providers are built into the app. They can place and read identifiers on your device and collect information directly from it, under their own privacy policies:

Google. Firebase (Authentication, Analytics, Crashlytics, Cloud Messaging, Remote Config, In-App Messaging and App Check): installation identifiers, usage events, crash reports, the notification token and device integrity checks. Google Mobile Ads (AdMob), which serves the ads shown in the app: the device's advertising identifier, when your settings allow it, IP address, device information and interactions with the ads. Google Maps, on the check-in map. And YouTube: the videos open on youtube.com, in the app's built-in browser, where Google can place and read cookies. See the Google Privacy Policy and how Google uses information from sites or apps that use its services.
PostHog. Usage analytics: the events of how you use the app, device information and an identifier stored on the device, which may be associated with your account. See the PostHog Privacy Policy.
RevenueCat. Management of in-app purchases and subscriptions: an identifier stored on the device, purchase and subscription history and device information. See the RevenueCat Privacy Policy.

On this website. Our pages store only your light or dark theme choice, in your browser's local storage, and we do not use advertising cookies. Like any website, our server receives your IP address and browser information, which we use to deliver the pages and to protect them against abuse; the fonts are loaded from Google Fonts, which receives the same information. The password reset and email verification pages are served by Firebase (Google), and payments are processed on Stripe's page (Stripe Privacy Policy); both can use the cookies and similar technologies these functions need.

How to control it.

You can revoke the location, camera, photo, microphone and health permissions at any time in your device settings. The features that depend on them stop working.
In your device's privacy settings, you can limit the use of the advertising identifier — deleting or resetting it on Android, or not allowing tracking on iOS — and ad personalization.
In your browser, you can block or delete cookies and site data in its settings.
Signing out removes your session from the device, and uninstalling the app deletes the local database, preferences and cache. Data on our servers follows section 7, and data collected by third parties follows their own policies.

6. User Rights

You have the right to access, update, and delete your personal information at any time through the mobile app.

7. Data Retention and Deletion

While the account exists. We keep the data described in section 1 to maintain your profile, your workout history and your participation in challenges.
How to request deletion. You can delete your data and your account at any time from within the app. We also accept requests at [email protected] and through the account deletion page.
Timeframe. Once requested, personal data is removed from our systems within 30 days, including backups as they are rotated. We keep only what the law requires — for example, the tax records of paid challenges, for the legally required period.
Health data. It stays only on your device (section 1.1): it is deleted when you remove it in the app or uninstall the app, with no request needed.
YouTube data. Cached video data returned by the YouTube API is refreshed or deleted within 30 days at most (section 4).

8. Data Security

We take the security of your data seriously. User data is stored server-side in Google Cloud and is encrypted to protect your information.

9. Children's Privacy

Our app is not intended for children, and we do not knowingly collect personal information from children under the age of 13.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be communicated to you via email, app alerts, or push notifications. We encourage you to review this policy periodically for any updates.

11. Jurisdiction

This Privacy Policy is governed by the laws of Brazil. Although our app may be available worldwide, we adhere to the local regulations applicable in Brazil.

If you have any questions or concerns about this Privacy Policy, please contact us at [email protected].