Privacy Policy

Last updated: August 1, 2026

Draft for review. This text does not yet replace legal advice.

This Policy explains how Treli handles your personal data, in line with Brazil’sGeneral Data Protection Law (LGPD, Law No. 13,709/2018). It applies to the client and trainer apps and to this website.

1. Data controller

The controller is [LEGAL ENTITY], CNPJ [CNPJ], [ADDRESS]. Privacy contact: privacidade@treli.app.

2. Data Protection Officer (DPO)

Our Data Protection Officer can be reached atdpo@treli.app.

3. Data we collect

• Account: name, email, password (stored hashed) and, for trainers, professional data (e.g., CREF).
• Client contact: phone/WhatsApp, when provided.
• Workout data: prescribed workouts, executions, loads, logs and notes.
• Physical assessment: body measurements, weight, height and assessment photos, when you record them.
• Usage and device: technical data (identifiers, app version, IP address, access logs).
• Leads: if you sign up for the beta on this site, we collect your WhatsApp (phone) and/or email and, optionally, your name and profile (client/trainer).

4. Purposes

• create and maintain your account and enable the trainer–client relationship;
• prescribe, execute and track workouts and assessments;
• security, fraud and abuse prevention (e.g., anti-bot verification, rate limiting);
• operational communications and, with your permission, launch notices;
• comply with legal and regulatory obligations.

5. Legal bases (LGPD arts. 7 and 11)

• Performance of a contract (art. 7, V): operating your account and the Service.
• Consent (art. 7, I; art. 11, I): assessment photos and data (sensitive health data) and marketing emails.
• Legitimate interest (art. 7, IX): security, improvement and fraud prevention, with balancing.
• Legal obligation (art. 7, II): retaining records required by law.

You may withdraw consent at any time; this does not affect processing already carried out or purposes with another legal basis.

6. Sharing

We do not sell your data. We share only with:

• Your trainer or your clients, according to the in-app relationship (e.g., the trainer sees the linked client’s logs and assessment).
• Processors that support us: cloud hosting, database, media storage (Cloudflare R2), anti-bot protection (Cloudflare Turnstile), transactional email and error monitoring.
• Authorities, when required by law or court order.

7. International transfer

Some processors may handle data outside Brazil. In those cases, we adopt safeguards compatible with the LGPD (art. 33), such as contractual clauses and providers with an adequate level of protection.

8. Retention

We keep data for as long as necessary for the purposes above and legal obligations. When you close your account, we erase or anonymize the data, except where retention is required by law (seeDelete account).

9. Your rights (LGPD art. 18)

At any time you may request:

• confirmation that processing exists and access to your data;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or non-compliant data;
• data portability to another provider;
• deletion of data processed based on consent;
• information about sharing;
• withdrawal of consent.

To exercise these rights, emailprivacidade@treli.app. We respond within the LGPD deadlines. You may also file a complaint with Brazil’s data protection authority (ANPD).

10. Security

We adopt technical and organizational measures such as encryption in transit, hashed passwords, per-owner access control (isolation between accounts), rate limiting and monitoring. No system is 100% secure, but we work to reduce risk.

11. Children’s data

The Service is not intended for people under 18. We do not knowingly collect data from minors without guardian consent.

12. Cookies and technologies

This site uses the minimum necessary to function and for anti-bot protection (Turnstile). We do not use third-party advertising cookies.

13. Changes

We may update this Policy. Material changes will be communicated by reasonable means, with the date above updated.

14. Contact

Privacy: privacidade@treli.app · DPO: dpo@treli.app.