Who is responsible
Novo Coração is a project created by Luana Ribeiro Moraes, who is responsible for the data-processing decisions described in this Policy. It applies to the Novo Coração app, novocoracao.com.br and the support and privacy channels.
The initial version of the service is intended for people aged 18 or older in Brazil.
Data we process
| Category | Data | Purpose |
|---|---|---|
| Account | email address and technical account identifier | create, authenticate, protect and delete the account |
| Health entries | age, weight, blood pressure, heart rate, date and time entered by the person | keep the diary, history and report on the device |
| Support | name, email address and content the person chooses to send | respond to support, privacy and deletion requests |
| Website and security | technical data such as IP address, date, time, browser and access logs | deliver and protect the website and prevent misuse |
Storage and use of health data
Health entries are processed and stored on the device. Novo Coração does not receive them automatically. They are used to display history and create a quantitative report, without diagnosis, risk classification or treatment recommendations.
A report leaves the device only when the person chooses the sharing feature, app and recipient. The selected recipient and service then process that shared copy under their own terms.
Depending on device settings, the operating system may include local app data in a backup linked to an Apple or Google account. Those backups follow the settings and policies of the relevant service.
Purposes and legal grounds
We use only the minimum data needed to provide and protect the service, respond to requests and comply with legal duties. Health data is processed with specific, prominent consent. A person may refuse or withdraw consent, but features that depend on that data will stop working.
We do not sell personal data. We do not use health data for advertising, behavioral profiling, third-party research or artificial-intelligence training.
Service providers and sharing
Essential authentication, hosting, email and support providers may process only the technical, account or contact data needed to provide their services. Health entries kept on the device are not automatically sent to those providers.
We may also share the minimum necessary when required by law, a valid authority request, or to protect rights and the security of the service.
Retention and deletion
Health entries stay on the device until the person deletes them or the operating system removes them. Account data is kept while the account is active. Support messages and technical logs are kept only as long as needed for their purpose, security and legal obligations.
Deletion can be requested in the app or at novocoracao.com.br/en/delete-account. After confirmation, data linked to the account will be deleted or anonymized, except for the minimum that must be retained for legal duties, security or legal claims. Copies shared by the person and backups managed by third parties cannot be deleted by Novo Coração.
Security and your rights
We use technical and organizational measures appropriate to the service, such as secure connections, access controls and data minimization. No system is completely immune to incidents.
Under the Brazilian LGPD, a person may request confirmation and access, correction, information about use and sharing, portability where applicable, objection, withdrawal of consent and deletion. Requests are free and may require secure identity verification, but never a password.
Changes to this Policy
We will update this Policy when the service or its data practices change. Material changes will be communicated appropriately, and the current version date will remain at the top of this page.