Privacy Policy

The Keznu brand and its Services are operated by the legal entity listed below, which acts as the data controller under applicable privacy laws:

• 61.119.645 LUIZ HENRIQUE DA SILVA GONCALVES
• CNPJ: 61.119.645/0001-32
• Belo Horizonte, MG — Brasil
• Contact: luiz.goncalves@keznu.com

We collect data only when necessary to operate the Services:

a) Information you provide

• Account data: name, email, password (hashed)
• Profile data: age, height, weight, goals, dietary preferences (FitScan only)
• User-generated content: photos of meals, workout logs, search queries
• Payment data: processed by Apple App Store or Google Play — we never store credit card numbers

b) Information collected automatically

• Device identifiers (model, OS version, language, time zone)
• Usage data: feature interactions, crash logs, performance metrics
• Approximate location (city-level), only when explicitly allowed

c) Health data (FitScan only)

FitScan may request access to Apple HealthKit or Google Fit. Health data is processed exclusively on your device and/or under your explicit consent. We do not sell, share, or use health data for advertising.

• Service provision — to deliver the core functionality of each app
• Legitimate interests — to improve features, fix bugs, prevent fraud
• Consent — for optional features (push notifications, marketing emails)
• Legal obligations — to comply with tax, accounting and regulatory requirements
• Contract performance — when you purchase paid features or subscriptions

We rely on a minimal set of trusted vendors to operate the Services:

• Apple Inc. — App Store distribution, push notifications, in-app purchases
• Google LLC — Play Store distribution, Firebase analytics (anonymous)
• OneSignal — push notification delivery
• OpenAI — AI features (image recognition in FitScan); content is processed but not used to train third-party models
• Vercel Inc. — website hosting

Each processor has its own privacy practices. We require contractual guarantees that meet LGPD/GDPR standards.

Some processors (Apple, Google, OpenAI, Vercel) are based in the United States. When data is transferred internationally, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) where applicable.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account data: until you delete your account
• Usage logs: up to 12 months
• Payment records: 5 years (Brazilian tax law)
• Crash reports: 90 days

You may request deletion of your account at any time via luiz.goncalves@keznu.com.

Under LGPD, GDPR and CCPA, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion ("right to be forgotten")
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority (ANPD in Brazil)

To exercise any right, contact luiz.goncalves@keznu.com. We respond within 15 days.

The Services are not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe we may have, please contact us so we can delete it.

We use industry-standard measures to protect your data: TLS encryption in transit, encryption at rest where supported, hashed passwords, limited access on a need-to-know basis, and continuous monitoring. No method of transmission is 100% secure, but we treat security as a baseline, not a feature.

keznu.com uses only strictly necessary cookies for site functionality. We do not use third-party advertising cookies or cross-site trackers.

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the current version. Material changes will be communicated within the apps and on this page.

Questions, requests, or concerns? Reach us at luiz.goncalves@keznu.com.