Privacy Policy

Last updated: November 2026

This is a translation of the Portuguese original. If the versions differ, the Portuguese version prevails. See the Portuguese original

1. Who we are

DiaVida is operated by Diavida LTDA. (CNPJ 65.512.351/0001-27), the controller of the personal data processed in the app, on the website and on the blog. This policy explains, in plain language, what data we collect, how we use it and what your rights are under Brazil’s General Data Protection Law (LGPD, Law No. 13,709/2018).

2. Data we collect

Without an account: nothing leaves your device. Health entries stay in your phone’s local storage and never reach our servers.

With an account: registration data (name, email and, if you provide them, phone number, date of birth, city and photo) and health data (type of diabetes, height, blood sugar, weight, blood pressure, meals, medications, physical activity and notes). We store this data so you can access it from any device and, if you wish, share it with trusted people you invite.

DiaVida+ waitlist: email and, optionally, name, with the date of the request. We do not collect payment data.

Website and blog usage: we measure visits and clicks (page, where the visit came from, device type and a temporary session ID) without third-party cookies and without identifying you. Hosting providers may log technical security data (IP address, browser).

3. How we use it

To provide the service: store entries, show history, create the report and send reminders.
To let trusted people you invite follow along.
To notify people on the waitlist about the launch of DiaVida+.
To understand, in aggregate, how the website and blog are used, so we can improve them.
To meet legal obligations and prevent fraud.

4. Health data: extra protection

Health data is sensitive personal data. When stored in an account, it is encrypted in transit and at rest, access is restricted to you and the people you authorize, it is not used for marketing or shared with third parties, and you can delete it at any time in the app itself. In DiaVida+, access by health professionals depends on your sign-up and on separate terms.

5. Who we share it with

Trusted people: only those you invite, and only what you choose to share.
Infrastructure providers: Supabase (database and authentication), Netlify (website hosting) and OneSignal (notifications). They process data only according to our instructions.
Authorities: when required by law or court order.

We do not sell, rent or give away data for third-party marketing.

6. International transfers

Part of our infrastructure (Supabase, Netlify, OneSignal) runs on servers outside Brazil, mainly in the United States, with contractual safeguards compatible with the LGPD.

7. How long we keep it

While the account is active and for up to 5 years after it is closed, to meet legal obligations and handle possible disputes. Data with no retention obligation can be deleted sooner at your request. Waitlist data is deleted after the notice is sent or at your request.

8. Your rights (LGPD)

Confirmation of and access to your data.
Correction of incomplete or outdated data.
Anonymization, blocking or deletion.
Portability in a structured format.
Information about sharing.
Withdrawal of consent.

To exercise any of these rights, write to privacidade@diavida.com.br. We reply within 15 days.

9. Deleting your account

In the app (Perfil → Excluir conta, that is, Profile → Delete account), on the account deletion page (in Portuguese) or by email. Deletion removes your personal and health data from active systems; backups are purged within 90 days. Mandatory legal retention follows the applicable period.

10. Cookies and local storage

The website does not use third-party tracking cookies. We use browser storage only for anonymous usage measurement, to avoid repeating notices and to remember the language you chose. The app uses your device’s storage to keep your entries and preferences.

11. Security

HTTPS encryption for all communications, internal access controls, logging of access to sensitive data, regular backups and a team committed to data protection.

12. Children and teens

The service is intended for people over 18, or for minors together with their parents or legal guardians. We do not knowingly collect data from minors without their guardians’ consent.

13. Data Protection Officer (DPO)

Data protection questions: privacidade@diavida.com.br.

14. Changes

This policy may be updated to reflect changes in the service or the law. Significant changes will be communicated in advance. The current version is always at diavida.com.br/privacidade (in Portuguese), with this translation at diavida.com.br/en/privacy.