Privacy Policy

1. Overview

Cyclolab is an app for organizing and tracking cycles, compounds, protectors, doses and lab tests. Because the Service involves health data, we take privacy seriously: we collect only what is needed to operate the Service and we never sell your data.

2. Data we collect

a) Sign-up data: given name, surname, username, e-mail address, date of birth and gender. Your password is stored in encrypted form (hash), never in plain text.

b) Preferences: language, measurement units (height/weight), currency and app settings.

c) Content registered in the app: cycles, compounds, protectors, post-cycle therapy (PCT), doses, schedules, injection sites, syringes, needles, product catalog and application history.

d) Health data: lab tests you register, including name, laboratory, date, price and uploaded files (PDF or image, up to 5 MB each).

e) Technical data: device identifiers and tokens used to deliver push notifications, access and error logs, and IP addresses used to operate and protect the Service.

3. How we use the data

• create and authenticate your account and sync your data across devices;
• operate the app features (cycles, agenda, reminders, lab tests);
• send dose and lab test notifications and reminders that you set up;
• send transactional e-mails (sign-up confirmation and password recovery);
• keep the Service secure and prevent fraud and abuse;
• improve the Service based on aggregated and anonymized metrics.

We do not use your data for targeted advertising, and we do not sell, rent or trade personal data.

4. Legal basis (LGPD)

Data processing relies on: performance of a contract and pre-contractual procedures (art. 7, V) to operate the Service; compliance with a legal or regulatory obligation (art. 7, II); legitimate interest (art. 7, IX) for security and fraud prevention; and consent (art. 7, I) for communications that require opt-in. You may withdraw consent at any time, without affecting processing already carried out.

5. Sharing

Your data may be accessed only by:

• Infrastructure providers that operate our systems: cloud hosting, database, storage of exam files, push notification service (Firebase Cloud Messaging) and transactional e-mail service — all bound by confidentiality and security obligations;
• Authorities, in response to legal requests, court orders or to protect rights and safety.

6. Notifications and e-mails

Push notifications require your consent and use a token associated with your device. You can turn them off at any time in your operating system or app settings without losing access to other features. Transactional e-mails (sign-up confirmation and password recovery) are required to operate your account and cannot be disabled while the account exists.

7. Data retention and deletion

We keep your data while your account is active. When you request account deletion, we erase or anonymize your personal data from our active systems, subject to backup copies kept for a limited period and retention required by law.

8. Security

We adopt technical and organizational measures to protect your data, such as encryption in transit (TLS), hashed passwords, role-based access controls and security monitoring. No system is entirely immune; in the event of a relevant incident, we will notify affected users and the competent authorities as required by the LGPD.

9. Your rights

Under art. 18 of the LGPD, you may request: confirmation of the existence of processing; access to your data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary, excessive or non-compliant data; data portability; deletion of data processed based on consent; information about with whom we share your data; and withdrawal of consent.

To exercise your rights, write to contato@cyclolab.com.br. We will respond within the legal deadline and may request information to confirm your identity.

10. Users under 18

The Service is not intended for anyone under 18, and we do not knowingly collect data from this population. If we identify an account belonging to a minor, it may be terminated.

11. Changes to this Policy

We may update this Policy to reflect changes in the Service or in the law. The current version will always be published on this page, with its update date, and relevant changes may be announced in the app.

12. Contact

For privacy questions or to exercise your rights, contact our data protection officer (DPO) at contato@cyclolab.com.br.