Last updated: June 19, 2026
O Trainer Connect is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information, in compliance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018).
We collect the following personal data, according to the purpose of processing:
Your personal data is processed for the following purposes, in accordance with the Art. 7 of LGPD:
| Purpose | Legal Basis (GDPR/LGPD) |
|---|---|
| Create and manage your account | Contract performance (Art. 7, V) |
| Connect trainers and students | Contract performance (Art. 7, V) |
| Process payments (available in Brazil) | Contract performance (Art. 7, V) |
| Send push notifications and emails | Legitimate interest (Art. 7, IX) |
| Sync health data | Data subject consent (Art. 7, I) |
| Analyze body assessment photos using artificial intelligence | Data subject's express consent (Art. 11, I — sensitive data) |
| Measure marketing campaigns and conversions (Google Analytics / Google Ads) | Data subject consent (Art. 7, I) or contract performance after accepting the Terms (Art. 7, V) |
| Improve the platform and user experience | Legitimate interest (Art. 7, IX) |
| Comply with legal and regulatory obligations | Compliance with legal obligation (Art. 7, II) |
Your personal data may be shared with the following third parties, solely for the purpose of providing the service:
| Partner | Purpose | Shared data |
|---|---|---|
| Stripe | Payment processing (available in Brazil) | Name, email, bank/card details |
| RevenueCat | Subscription management | User ID, plan type |
| Firebase (Google) | Push notifications and authentication | Device token, user ID |
| Railway | Infrastructure Hosting | Data stored in the database |
| Resend | Transactional email delivery | Name, email |
| Google (Analytics / Ads) | Audience, campaign, and conversion measurement (with consent) | Click identifiers (gclid), SHA-256 hashed email for attribution, aggregated usage events. Payment data is never sent to Google. |
| Anthropic, PBC | AI-powered analysis of physical assessment photos (optional feature, subject to the Student's explicit consent) | Assessment photos (front/back/side) sent via a temporary signed URL, along with assessment context (weight, height, age, goal). No name, email, or direct student identifiers included. |
We do not sell your personal data. We share data with the partners listed above solely to provide the service. Campaign measurement with Google Analytics/Ads only happens after explicit consent on the website or acceptance of the Terms in the app.
About AI processing (Anthropic): Anthropic operates under a policy of zero data retention for enterprise clients via API — photos and prompts are not used to train its models and are discarded after inference. Uploads are sent through a pre-signed URL with a short expiration. The Student can revoke consent at any time in "Profile → AI Analysis" in the app, which blocks future uploads (previously generated analyses remain stored as part of the assessment history).
We've implemented appropriate technical and organizational measures to protect your personal data:
In compliance with the Art. 18 of LGPD, you have the following rights:
To exercise any of these rights, contact us at: [email protected]
We'll respond to your request within 15 business days, as provided by law.
Our website (trainerconnect.com.br) and the web app use cookies and similar technologies for functionality, security, and — only with your consent — audience measurement and campaign tracking (Google Analytics and Google Ads, via Consent Mode).
G-P64R5S4MY0) and Google Ads to understand traffic sources, ad clicks (parameter gclid) and conversions (sign-up, trial, subscription). You can accept or decline via the site's cookie banner; in the app, consent is requested when accepting the Terms of Use.tc_analytics_consent).Native apps (iOS and Android) don't use browser cookies, but may use device identifiers for push notifications, product analytics (Firebase), and backend conversion attribution (hashed email, no gclid).
Your personal data is retained for as long as necessary to fulfill the purposes described in this Policy:
Some of our service providers (Stripe, Firebase, Railway) may store data on servers located outside Brazil, mainly in the United States. These transfers are carried out based on standard contractual clauses and in compliance with Art. 33 of the LGPD.
Trainer Connect is not intended for users under 18. We do not knowingly collect data from minors. If you become aware that a minor has provided personal data, please contact us so we can take appropriate action.
We may update this Privacy Policy from time to time. We will notify users of significant changes by email or through a notice on the platform. The last update date will always be shown at the top of this page.
For matters related to the protection of personal data, contact our Data Protection Officer at:
We also inform you that you have the right to file a complaint with National Data Protection Authority (ANPD) if you believe your personal data has been processed in violation of LGPD.