Privacy Policy
Last updated: August 18, 2026 · Version 1.0
This Privacy Policy explains how Vertix collects, uses, shares, stores and protects personal data of trainers and clients who use the platform. It follows Brazil's General Data Protection Law (LGPD — Law No. 13.709/2018).
This English version is provided for international partners and API reviewers. The Portuguese version is the legally binding one for users in Brazil.
1. Data controller
The controller of personal data processed in Vertix is Silvio Arruda, registration number CNPJ 29.604.613/0001-10, located in São Paulo, SP, Brazil.
Privacy contact: silvio@scobtech.com.br.
2. Roles: trainer and client
Vertix is a professional tool used by personal trainers to serve their clients. Vertix is the controller of account and platform-operation data, and the processor of the information trainers enter about their clients. The trainer is responsible for the client data they record and for having the client's authorization to process it within the coaching relationship.
3. Data we collect
3.1. Account data
Name, e-mail, username, password (stored hashed) and, when provided, phone number.
3.2. Data entered in the platform
| Category | Examples |
|---|---|
| Training | Prescribed workouts, exercises, sets, reps, loads, rest, notes, completion marks, feedback and rate of perceived exertion (RPE). |
| Physical assessment | Weight, height, skinfolds, circumferences, body fat percentage, lean and fat mass, BMI, waist-to-hip ratio and, with the client's consent, front/side/back photos. |
| Health profile | Age, sex, goal, fitness level and any reported injuries or restrictions — used for safe program design. |
| Attendance & schedule | Check-ins, session counts and appointment times. |
| Financial | Records of fees, packages, charges and payments between trainer and client. |
Assessment data and health profile qualify as sensitive personal data (health data) under the LGPD and are therefore processed strictly on the basis of the data subject's consent.
3.3. Technical data
Access logs (date, time and IP address), kept for security and to comply with Brazil's Internet Civil Framework, and minimal operational data such as the push notification token when the user opts in.
4. How we use data
- Create and maintain accounts and authenticate access.
- Deliver the service: prescribe workouts, track execution, record assessments and show progress.
- Manage attendance, scheduling and the financial relationship between trainer and client.
- Send service-related notifications.
- Ensure security, prevent fraud and investigate misuse.
- Comply with legal obligations.
We never sell personal data, run behavioral advertising, or share data with data brokers.
5. Legal basis
- Consent (LGPD art. 7 I and art. 11 I) — for health data, photos and notifications.
- Performance of a contract (art. 7 V) — for data needed to deliver the service.
- Legal obligation (art. 7 II) — for access log retention.
- Legitimate interest (art. 7 IX) — only for platform security and fraud prevention.
Consent can be withdrawn at any time, free of charge, through the contact channel in section 16.
6. Use of artificial intelligence
Vertix offers an AI-assisted workout generator. Only the training parameters entered by the trainer — sex, age, weight, height, goal, level, focus, days per week, session length, available equipment and reported restrictions — are sent to the model provider. Names, e-mails, phone numbers, photos and any directly identifying data are not sent. The output is a draft that the trainer reviews, edits and approves before it reaches the client.
7. Data sharing
- Hosting and database provider — to run the application.
- AI model provider — only the parameters described in section 6.
- Authorities — only under a court order or legal obligation.
All providers act as processors under contractual confidentiality and purpose-limitation obligations. No data is ever shared for advertising.
8. Security
- All traffic over HTTPS/TLS.
- Passwords stored as cryptographic hashes, never in plain text.
- Restricted and logged administrative access.
- Third-party tokens stored securely server-side.
In the event of a security incident with relevant risk, we will notify affected data subjects and Brazil's ANPD within the deadlines set by the LGPD.
9. Retention and deletion
- Data is retained while the account exists and the trainer–client link is active.
- After account deletion, data is erased within 30 days, except where law requires retention.
- Access logs are kept for 6 months under the Internet Civil Framework.
- Financial records may be kept for the period required by tax legislation.
- Assessment photos are deleted with the account, or earlier at the data subject's request.
10. Your rights
Under the LGPD you may: confirm and access your data; correct incomplete or outdated data; request anonymization, blocking or deletion of unnecessary or non-compliant data; request portability; withdraw consent and request deletion of data processed on that basis; be informed about data sharing; object to processing; and file a complaint with the ANPD.
To exercise any of these rights, write to silvio@scobtech.com.br. We respond within 15 days and may ask you to confirm your identity first.
11. Cookies, trackers and third parties
In the application, we use only strictly necessary storage: a session cookie or token to keep you signed in, and local interface preferences. None of it is used for advertising or profiling.
On this website, there are no cookies, no analytics, no social pixels and no tracking share buttons. Fonts are served from our own domain rather than a third-party CDN — so visiting this site does not send your IP address to any company other than our hosting provider, which records it only in technical access logs.
If we ever add audience measurement, this section will be updated before the tool goes live.
12. Minors
Vertix is intended for adults (18+). Clients under 18 may only be registered with specific, highlighted consent from a parent or legal guardian, obtained by the trainer, as required by LGPD art. 14, and processing is always in the minor's best interest.
13. International transfers
Parts of our infrastructure (hosting and AI provider) may be located outside Brazil. Such transfers rely on the data subject's consent and/or contract performance, and we require providers to offer contractual safeguards compatible with the LGPD.
14. Health disclaimer
Vertix is a management and prescription tool used by qualified fitness professionals. It is not a medical device, does not diagnose, and does not replace medical evaluation.
15. Changes to this Policy
We may update this Policy to reflect product or legal changes. The date at the top always shows the current version. For material changes — especially any expansion of sensitive data processing — we notify users in the app or by e-mail before the change takes effect and, where required, collect new consent.
16. Contact
E-mail: silvio@scobtech.com.br
Data protection officer / responsible: Silvio Arruda
Address: São Paulo, SP, Brazil
You may also file a complaint with Brazil's National Data Protection Authority (ANPD) at gov.br/anpd.