Your data has an owner. You.

UmAtletaIA is developed by Jubarte Labs, a software studio that is still being formalized and therefore has no CNPJ (Brazilian company registration). Meanwhile, the party responsible for processing the data (controller) is the individual in charge of the project, who also acts as data protection officer. The full identification is given to each beta participant in the invitation and will be published here when the service opens to the public.

Data protection officer contact, for questions and requests about your data: privacidade@umatleta.ia.br.

UmAtletaIA is under construction, in closed beta, by invitation. This website does not collect data: it has no sign-up, form, cookie or tracker. The data described below only comes into existence when you are invited and create an account.

• Account: name, e-mail and, if you choose to sign in with Google, the identifier it provides.
• Training: .fit files and metrics from your watch (power, heart rate, pace, sleep, variability).
• Health (sensitive data): weight, measurements, lab tests, medication and supplements, injuries and pain.
• Food: what you log about meals, supplements and hydration.
• Gear: bike, shoes and parts, with wear tracked by your workouts.
• Conversations: what you write to the Coach and to the AI.
• Technical: operational logs that keep only identifiers and the type of error, never what you wrote or your name.

• Providing the service you asked for (performance of a contract, LGPD art. 7, V): training, diet, lab tests, gear, reminders.
• Health data (specific and highlighted consent, art. 11, I): you authorize per module and can revoke whenever you want.
• Sending excerpts of your dossier to the AI (specific consent, separate from the others): without your “yes”, nothing is sent.
• Security and fraud prevention (legitimate interest and protection of the data subject, art. 7, IX, and art. 11, II, g).
• Complying with legal obligations when they apply (art. 7, II).

We do not sell data, we do not use it for advertising and we do not build commercial profiles.

Rules decide the skeleton of the training and the safety limits. The AI writes explanations and picks content within what the rules allow. You see the exact text the AI read about you (the Dossier). Your name is not sent, and another person's content never enters your analysis.

When you authorize it, excerpts of the Dossier are sent to the AI provider (currently Anthropic, in the United States) only to generate the answer. We use the provider's commercial interface, whose terms, as of the date of this version, do not use the content sent to train models. The provider may keep the content for a short period to prevent abuse. If you turn the AI down, everything keeps working by rules.

• Amazon Web Services: hosting, storage, backups and sending the service's e-mail. São Paulo region.
• Cloudflare: DNS, protection, receiving the domain's e-mail and the tunnel that carries the app's traffic to the hosting.
• Anthropic: AI processing, only with your consent (section 5).
• Google: sign-in, if you choose to sign in with your Google account.
• Grafana Labs: technical operating metrics, with no personal content.
• Garmin, Strava and similar: only if you connect your account yourself.

When the list changes, this page changes and beta participants are notified by e-mail.

Some processors handle data abroad (Anthropic, Cloudflare, Google, Grafana). We do this with contractual safeguards and, in the case of the AI, with your specific consent (LGPD, art. 33). The app's data is stored in São Paulo.

For as long as your account exists. When you delete your account, we remove the active data within 15 days. Backups are kept for up to 30 days and then discarded. Technical logs with no personal content may be kept longer, for security and diagnostics.

You can ask for confirmation of processing, access, correction, anonymization, blocking or deletion, portability, information about who we share with, and revoke your consent at any time (LGPD, art. 18). Write to privacidade@umatleta.ia.br. We answer within 15 days.

If you are not satisfied, you can file a complaint with Brazil's National Data Protection Authority (ANPD).

What exists today:

• All traffic is encrypted (TLS 1.2 or higher) and the browser is required to use HTTPS.
• Disks and backups are encrypted.
• The server has no port open to the internet; administrative access is through authenticated channels.
• The main administrative accounts (cloud and code) use two-step verification and minimal permissions.
• The app is built so that each person can only reach their own data, and not even those who run it can see another person's data.
• Technical logs do not keep what you wrote or your name.

What we will still do before opening to the public: monitoring with alerts and a security and privacy review. Found a vulnerability? Write to seguranca@umatleta.ia.br. We thank you and we answer.

In the event of an incident that may cause relevant risk or harm, we notify the ANPD and the people affected, within the deadlines set by the authority, saying what happened, which data was affected and what to do.

UmAtletaIA is intended for people aged 18 and over. In the beta, we do not accept accounts from minors.

This website does not use cookies, analytics, pixels or third-party resources: fonts and images come from the website itself. We only store in your browser your theme preference (light or dark).

This is the beta version and it will change when the service opens to the public and the company is formalized. Each version carries its date at the top. Relevant changes are announced to participants by e-mail.