Privacy Policy

Orkadu is a performance and health tracking app operated by Vinicius de França Alves Graciano Consultoria em Tecnologia da Informação Ltda. (H.Tech Consultoria), registered under Brazilian company ID (CNPJ) 51.312.657/0001-25, responsible for processing your personal data (the controller), under Brazilian Law 13.709/2018 (LGPD). For any privacy matter, reach our data protection officer at contato@orkadu.com.

We collect only what the app needs to work:

• Sign-up: name and e-mail (stored encrypted).
• Date of birth: to verify the minimum age of 18 and to calculate indicators that depend on age.
• Physical and health data: weight, height, body measurements, resting heart rate, activity level, health conditions you report and stress level.
• Lab tests: the files (PDF) you upload and the markers extracted from them.
• Body progress photos: images you choose to upload in check-ins.
• Prescriptions and supplements: medications, doses and supplements you record.
• Training and progress: workouts, loads, per-exercise effort, check-ins, periodization and goals, plus the time, place and plan B you choose for your workout, used only for the reminder you asked for.
• Body composition and measurements: values you record or upload.
• App usage (first-party telemetry): navigation and funnel events (e.g. sign-up completed, workout logged), processed on OUR servers and with no health content.
• Google Analytics (optional, only with your consent): the pages you visit, with the address reduced to the screen template (e.g. /exams/[id]), and the funnel steps (sign-up, sign-in, onboarding start and finish, plans viewed, subscription started and completed). We never send health data, your name, your e-mail or your account identifier.
• Minimal technical data: IP address and timestamp for security and consent records (audit logs).
• Kadu conversations: the questions you ask the assistant and its answers, stored encrypted so the conversation picks up where it left off. Deleting your account deletes them too.
• Habit journal: what you report, day by day, about energy, sleep and hours slept, body, mind and mood, and anything out of the ordinary (flu symptoms, pain not from training, alcohol, an unusual night). Your period is only recorded if you turn on menstrual cycle tracking in Privacy, and it can be deleted on its own. It is self-reported and has no free text. Together with what your watch measures, if you connected one, it feeds the estimated recovery of the day, stored only as a derived number (0 to 100), band and confidence.
• Watch (only if you connect it, in the mobile app): from the last 30 days, resting heart rate, workouts (type, start, end and duration), heart rate variability and hours of sleep, read from Apple Health (iPhone) or Health Connect (Android) with your consent and the device permission. Used only for Fitness Age, estimated recovery and to suggest workouts you import. They never go to usage telemetry or advertising, and the app writes nothing to Apple Health or Health Connect. Kept for 13 months and deleted with the account.
• Public profile (only if you turn it on): nickname, profile photo, join month, level, achievements and four indicators (fitness age, peak load, best readiness, best self-reported sleep). Visible to other members of the app while it is on. Your name and e-mail never appear.
• Communities (only if you join): nickname, level, weekly streak and the ranking metric are visible to that community's members, and what you post on its wall is visible to them. Leaving undoes it.
• Guide waitlist (only if you opt in): the email you leave to get ONE heads-up when the app opens outside Android, stored encrypted. It never becomes a newsletter; to leave the list before the notice, write to the contact above.

Health data is sensitive personal data (art. 11 of the LGPD) and receives reinforced protection.

We process your health data based on your explicit and specific consent (art. 7, I and art. 11, I of the LGPD). Consent is granular and independent for each purpose:

• Terms of use and general account operation.
• Processing of lab tests by artificial intelligence, at specialized providers (section 5).
• Storage of body photos.
• Processing of medical prescriptions.
• Photo progress analysis by artificial intelligence (optional).
• Calculation of estimated fitness indicators, such as Fitness Age (optional, off by default).
• Google Analytics to measure visits and sign-ups (optional, off until you accept).

You can withdraw any consent at any time in Settings, without prejudice to processing already carried out. Withdrawing a consent disables the corresponding purpose.

We use your data solely to provide the service: organizing your history, generating test analyses, training and nutrition plans, recommendations, estimated indicators and progress tracking. Every AI output is informational and does not replace professional medical assessment. We do not use your health data or your photos for advertising, and we do not track you across apps. Anonymized results — with no name, email, identifier or exact date, and with age and measurements in ranges — may be used to improve the app's own rules and models, without identifying you.

To generate analyses, the content you upload (text of lab tests, prescriptions and imported workouts; the image of the report or prescription when you photograph the page; and — only when you opt into it — progress photos) is processed by artificial-intelligence models at specialized providers: Groq (text), Cloudflare Workers AI (text, document images and progress photos, when authorized) and, as a fallback when those do not respond, Anthropic (Claude). That processing happens on servers in the United States, which constitutes an international transfer of data (art. 33 of the LGPD). Data is sent over an encrypted connection, on a one-off basis, with no retention for model training, and only to produce the result you requested. When no provider responds, the app builds the result with its own rules, on our servers, without sending anything.

Fitness Age is calculated on our servers, with a published formula (HUNT study, Norway), from your age, sex, waist circumference, resting heart rate and logged workouts. About this processing:

• Legal basis: specific consent, optional, off by default. Without it, the indicator is neither calculated nor displayed.
• No data is sent to artificial intelligence in this calculation.
• The result is NOT stored: it is recalculated on each visit from your source data.
• Your resting heart rate and the indicator are NOT sent to the app usage telemetry.
• To withdraw, turn off “Estimated fitness indicators” in Settings; the indicator disappears immediately and stops being calculated. Your source data stays where it is.

We do not sell your data. We share the minimum necessary with providers that run the infrastructure, under confidentiality and security obligations:

• Groq — AI processing (text of lab tests, prescriptions, imported workouts and questions to the assistant).
• Cloudflare Workers AI — AI processing (text, images of reports or prescriptions and, only with its own consent, progress photos).
• Anthropic — fallback AI processing when the two above do not respond (same data).
• Railway — application and database hosting.
• Resend — transactional e-mail delivery (e.g. password reset, data export).
• H.Tech own support desk — when you open a ticket under Help, your first name, contact e-mail and the text of the ticket are forwarded to our internal support system.
• Google Play (Google) and the App Store (Apple) — they process the purchase and billing of the subscription. We send the store an identifier of your account to link the purchase to it, and receive back only the confirmation (plan, expiry and the subscription identifier). Orkadu never receives or stores your card data.
• Google (Google Analytics), only if you accept: measures visits and funnel steps. It receives the screen address reduced to its template, the device and browser type, and a random identifier stored in a cookie. It receives no health data. Google signals and ad personalization are off. Processing may take place in the United States.

We apply AES-256-GCM encryption at rest to sensitive data (name, e-mail, tests, analyses, prescriptions and photos) and TLS in transit. Photos have their metadata (including location/GPS) stripped before storage and are served only to you, through an authenticated session. Access to your data is restricted to your account.

• While your account is active, we keep your data to provide the service.
• When you delete your account, your data becomes inaccessible and is permanently erased after 30 days (including photos and files).
• Consent records and audit logs are kept for up to 5 years as legal evidence, without exposing the content of your sensitive data.
• Kadu conversations: for as long as the account exists; deleted with it.

At any time, you can:

• Confirm that processing exists and access your data.
• Request portability of your data (export in Settings).
• Correct incomplete or outdated data in your profile.
• Withdraw specific consents.
• Request erasure of your data (account deletion in Settings).

Most of these rights are exercised directly in the app, under Settings. For the others, write to contato@orkadu.com.

We use essential cookies for authentication (keeping you securely signed in). Google Analytics is optional and depends on your consent: it only loads if you accept the notice, sets the _ga and _ga_* cookies to count visits, and receives no health data. To withdraw, turn off Google Analytics in Settings > Privacy and data; its cookies are deleted right away. We do not use advertising cookies.

Orkadu is not intended for people under 18, and we do not intentionally collect data from children or adolescents.

We may update this policy. Relevant changes will be communicated in the app and, when the purpose requires it, we will ask for new consent. The effective date above indicates the latest update.

You can delete your account and your data at any time, straight from the app, under Settings. If you would like to read first what happens to each kind of data and how long it takes, the page /excluir-conta explains everything and can be opened without signing in.