This Privacy Policy describes how Hobbio ("we") collects, uses and protects the personal data of those who use the app and the website, in compliance with the LGPD (the Brazilian General Data Protection Law — Law No. 13,709/2018).
This is a courtesy translation. In case of any discrepancy, the Portuguese version prevails legally.
1. Data we collect
- Account data: name and e-mail, obtained through social login (Google, Apple or other OAuth providers).
- User content: posts, comments, messages, photos and videos you publish in the app.
- Identifiers: user ID and device identifiers (for example, push notification token).
- Usage and diagnostic data: interactions with the product, crash reports and performance data, collected in aggregate form via Firebase.
- Health and fitness data (optional): only if you connect Apple Health (Apple Watch) or Health Connect (Android) — see section 2A.
Hobbio does not collect your precise location, contacts or financial data. Health data is only accessed with your explicit permission, as described in section 2A.
2. How we use the data
- Authenticate your account and operate the app's features (feed, events, friendships, messages, gallery).
- Send notifications that you enable.
- Understand product usage and fix issues (analytics and crash reports).
We do not use your data for tracking across third-party apps or for targeted advertising, and we do not sell personal data.
Legal bases (arts. 7 and 11 of the LGPD): performance of the app's terms of use, your consent (for example, for notifications) and legitimate interest for security and product improvement.
2A. Health and fitness data (Apple Health and Health Connect)
With your explicit permission, Hobbio can read workout data from Apple Health / Apple Watch (iOS) and Health Connect (Android) to automatically log your practice sessions in the hobbies you choose. The integration is optional and off by default.
- What we access (read-only): exercise sessions (activity type, start, end and duration),
distance, total and active calories and, when available, the session's average heart rate.
On Android this corresponds to the Health Connect permissions
READ_EXERCISE,READ_DISTANCE,READ_TOTAL_CALORIES_BURNEDandREAD_ACTIVE_CALORIES_BURNED. We do not read any other health data types and we never write to Health Connect or Apple Health. - How we use it: exclusively to show your workouts in your profile and hobby pages (sessions, goals, training calendar and friends ranking). Workout posts in the hobby feed — visible to the other members — are only created if you turn on “Publish workouts to the hobby feed” (off by default; you can turn it off at any time in the integration screen). Data is stored on our servers, linked to your account.
- What we don't do: we do not use health data for advertising, marketing, credit scoring, insurance or any purpose unrelated to the features above; we do not sell it or transfer it to third parties, except to the infrastructure processors listed in section 3, under contract and only to host the service; and we do not use it to train general-purpose AI models.
- Control and deletion: you can revoke access at any time in your device's Health Connect / Health app settings, or disconnect the integration in Profile → Settings → External Integrations. Once disconnected we stop reading new data; you can delete imported workouts in the app, and deleting your account removes all stored health data.
Hobbio's use and transfer of information received from Health Connect APIs adheres to the Google Play User Data Policy, including the Limited Use requirements, and to the Health Connect Permissions Policy.
3. Sharing
We share data only with processors necessary for the operation of the service: authentication providers (Google, Apple), Firebase (notifications, analytics, crash) and hosting and media storage infrastructure. All of them act under contract and only for the purposes described here.
4. Retention and deletion
Your data is kept while your account is active. You can delete your account directly in the app (Profile → Settings → Delete account), which removes your personal data and content, subject to legal retention obligations.
5. Your rights (LGPD)
You may request confirmation of processing, access, correction, anonymization, portability or deletion of your data, as well as withdraw consent. To exercise these rights, write to [email protected].
6. Security
We adopt technical and organizational measures to protect the data: encrypted communication (HTTPS), access control and storage with providers holding security certifications.
7. Children and teenagers
Hobbio is not directed at children under 13 and does not knowingly collect data from children.
8. Changes
This policy may be updated; the current version will always be available on this page, with the date of the last update at the top.
9. Controller and Data Protection Officer (DPO) contact
Controller: Danilo Ischiavolini Chaves.
Data Protection Officer (DPO): Danilo Ischiavolini Chaves — [email protected]