← Back to home

Privacy Policy

Last updated: August 10, 2026

This Privacy Policy explains how Nascimento e Memolo Desenvolvimento de Programas de Computador Ltda ("we", "us", or "ENDIA FLOW") collects, uses, stores, shares, and protects information when you use the ENDIA FLOW mobile application (the "App").

1. Who We Are

Data Controller: Nascimento e Memolo Desenvolvimento de Programas de Computador Ltda

CNPJ: 68.454.409/0001-11

Address: Alameda Professor Lucas Nogueira Garcez, 865 - Sala 01, Vila Thais, Atibaia - SP, CEP 12942-020, Brazil

Privacy contact: privacy@endiaflow.com

2. Information We Collect

We collect only the minimum information necessary to operate the App.

2.1 Information you provide

  • Name
  • Email address

These details are obtained through Google Sign-In when you create an account.

2.2 Physiological data

ENDIA FLOW may process the following physiological data:

  • Heart rate (BPM)
  • Heart rate variability (HRV - RMSSD)

How this data is handled:

  • Camera-based heart rate measurement is processed locally on your device. Camera frames are converted into numerical values and immediately discarded. We never store, upload, or transmit photos or videos.
  • HRV is read exclusively from a connected wearable through Health Connect, in read-only mode. The App never writes data to Health Connect.
  • We only store and transmit HRV baseline values when real HRV readings from a wearable are available. If no wearable HRV readings are available, the App may use an internal default value with a zero reading count. This default value does not represent the user's personal HRV and is not used as a personal measurement.
  • The App may store baseline values in Firebase, including median BPM, median HRV, and the number of readings used to calculate each baseline. Raw readings remain on your device.

2.3 Account and technical information

We may process:

  • Unique user identifier, such as Firebase UID
  • App user identifier used for subscription management
  • Subscription and purchase status
  • Technical information necessary for app functionality, such as device type, operating system, app version, and country or region, where provided by service providers such as RevenueCat or the app stores

2.4 Information we do not collect

We do not collect:

  • Photos or videos
  • Audio recordings
  • GPS or precise location data
  • Contacts
  • Messages
  • Advertising identifiers
  • Full session history, which remains only on your device

3. How We Use Your Information

We use your information solely to:

  • Create and manage your account
  • Deliver the personalized sensory experience
  • Process and manage subscriptions
  • Provide customer support
  • Respond to privacy or account deletion requests
  • Comply with legal obligations

We do not sell your personal data or use it for advertising.

4. How We Share Information

We share information only with service providers necessary to operate the App.

  • Google Firebase — Authentication and secure data storage
  • RevenueCat — Subscription and entitlement management
  • Google Play or Apple App Store, when applicable — Payment processing and store services

Data is transmitted using encryption in transit.

We do not sell or rent your personal information.

5. Data Retention and Deletion

  • Account data is retained while your account remains active.
  • When you delete your account, we delete your data from Firebase Authentication and Firestore, and remove the corresponding RevenueCat customer profile where technically applicable.
  • Purchase records may remain with Google Play, Apple App Store, RevenueCat, or payment providers as required for financial, legal, tax, or fraud-prevention reasons.
  • Data stored only on your device, including local readings, local baseline, and session history, can only be deleted by deleting the account inside the App, uninstalling the App, or clearing the App data in your device settings.
  • The web deletion page cannot access or delete data stored solely on your device.

6. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Withdraw consent where applicable
  • Contact a data protection authority where applicable

To exercise these rights, contact us at: privacy@endiaflow.com

7. Account Deletion

You may delete your ENDIA FLOW account at any time:

  • From inside the App
  • Through the account deletion page on our website, following the verification steps provided there

Important: Deleting your ENDIA FLOW account does not cancel any active subscription with Google Play or the Apple App Store. You must manage or cancel your subscription directly through the respective store.

8. Children's Privacy

The App is not directed to children. Users under 18 should use the App only with the involvement and consent of a parent or legal guardian, where required by applicable law.

We do not knowingly collect personal information from children under 13 years of age.

9. International Processing

Your information may be processed by service providers located outside Brazil, including Google Firebase, RevenueCat, Google Play, or Apple App Store, when applicable.

When this occurs, we take reasonable steps to ensure appropriate safeguards are in place.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted in the App and on our website with a revised "Last updated" date.

12. Early Access / Landing page

When you submit your name and email through the Early Access form on our website, we collect this information to contact you about ENDIA FLOW™, including updates on early access, launch, and related communications.

We do not sell this information or use it for advertising.

You may request deletion of this data by contacting us at privacy@endiaflow.com.

11. Contact

For privacy-related questions, please contact: privacy@endiaflow.com