Your privacy, our priority.

Remi is operated by REMI LTDA, registered under CNPJ 69.610.522/0001-01, which is the controller of your personal data. This policy explains, under Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018), how we process your data when you use the Remi app and this website.

For questions, requests about your rights or any data protection matter, write to support@remifitness.com. This is our communication channel for data subjects: REMI LTDA is a small processing agent and, under ANPD Resolution CD/ANPD No. 2/2022, provides this channel instead of appointing a data protection officer. We answer requests about your rights within 15 days, as LGPD article 19 requires.

This is Remi's only Privacy Policy. The version published on this website is the one in force, and the app opens this same page. The rules for using Remi are in our Terms of Use.

Information you provide

• Account: name, email, nickname, profile photo, bio, date of birth, gender, height, weight and fitness goals. Sign-in uses a short-lived one-time code (OTP) sent to your email; you do not create a password.
• Activity content: routines, workouts, sets, reps, weights, distances, durations and (for endurance workouts) GPS coordinates of your route, distance and pace.
• Live activity (only if you turn it on): while you train, your workout status (name, category, exercises and sets done, last exercise and time) or, on a run, the sport, distance, time and pace; and, if you choose, the music you are listening to (title, artist, album, artwork and the music app). On Android, Remi uses notification access only to read what is playing from the media controls: automatic detection looks only at music apps, and when you tap to use what is playing, Remi takes whatever media is playing at that moment; Remi does not read the content of your notifications. On iPhone, automatic detection works only with Apple's Music app.
• Photos and videos you upload: profile and team avatars, posts in the community feed, set-completion videos, progress images and bug-report screenshots.
• Community content: chat messages between users, captions, comments and likes on feed posts, team membership and team profile.
• Trainer verification (optional): CREF registration number and document image, only for users who choose to verify as trainers.
• AI routines and meal plans, and plan imports (when you use them): what you enter to generate a routine or a meal plan, such as your goal, experience, schedule, available equipment, injuries and food preferences, and the files or photos of a workout plan you import.
• Body reading (optional, 18+ only): the photos you send are analysed on the spot and never stored; we keep the observations generated from them and the record of your consent (section 6).
• Health & fitness data (only if you connect Apple Health or Health Connect and grant permission): workouts (type, duration, route/GPS, heart rate, calories), your daily steps and active energy that your watch or phone recorded and, if you turn on water sync, the water other apps logged. Remi reads only the data types you authorize, and you can disconnect or delete this data at any time.
• Water and reminders: the water you log (amount and time), your daily water goal and the times of your meal and water reminders. Reminders are scheduled and fired by your own phone.
• Messages from Remi (only if you turn them on): your preferences (frequency, time, days and topics) and the history of the messages we sent, including whether you opened each one and whether you answered "I liked it" or "Less like this".
• Purchases and payments: your history of subscriptions and routines bought, the amount, the payment method, the dates and status of each payment, the details you enter to pay (name, email and CPF or CNPJ, which are saved to your account) and the transaction identifiers at Asaas. Card details and the cardholder's details pass through our servers only to reach Asaas at the moment of payment; Remi does not keep them (section 5).
• Selling routines (only if you open a payout account): name or company name, CPF or CNPJ, date of birth (for a CPF) or company type (for a CNPJ), email, mobile phone, address and monthly income or revenue, which we send to Asaas to open your account. After that, Remi keeps only your document (encrypted), the account identifiers at Asaas, the account's access key when Asaas provides one (encrypted), and the account's status, plus the history of your sales and your share of each.
• Blog newsletter (only if you subscribe): your email and your consent, to send you new blog articles.

Automatically collected

• Device and app: model, OS version, app version, language and time zone.
• Push notification token (only if you enable notifications) so we can deliver in-app notifications to your device.
• Session: an authentication token kept in your device's secure storage (Keychain on iOS, Keystore on Android).
• Usage: features used, screens viewed, session duration.
• Logs: IP address, error and crash reports collected by our backend.
• Location (only when you grant permission): GPS coordinates during an active endurance workout, used to calculate route, distance and pace; and your precise location at the moment you check in at a venue, used to confirm you are there, to prevent fake check-ins and, in aggregate, to decide which areas to add places for. If you turn on the arrival reminder, your phone uses background location to notice when you arrive at places where you often check in; this runs on your device and that location is not sent to Remi. If you turn on live location for a run, your position during that run is sent to Remi and shown only to the friends you choose (see "Visible to other Remi users").

• Service: deliver, maintain and improve the app and its features.
• Personalization: tailor your routines, missions and progress views.
• Communication: respond to support requests, send essential service updates and, if you subscribe, the blog newsletter.
• Security: detect abuse, protect accounts, and enforce our Terms of Use.
• Analytics: understand aggregate usage to improve the product.
• Legal: comply with applicable laws and lawful requests.
• Health & fitness integration: sync workouts you recorded on your watch into your Remi history, activity feed and XP, use your daily steps and active energy to inform your diet calorie targets and, if you turn on water sync, write the water you log in Remi to Apple Health or Health Connect (and delete it there when you delete it in Remi) and add the water other apps logged to your day.
• Messages from Remi (only if you turn them on): send tips and encouragement chosen from a library written by our team. With "Personalize with my activity" on (the default), we use your workouts and today's routine, your streak, your practices, your recovery check-in, whether you have injuries on file and your training goal and level to choose the topic; none of this appears in the notification. Without personalization, we choose messages without reading your data. The messages are not generated by AI.
• Live activity with friends: show your mutual friends that you are training right now, the music you chose to show and, if you turn it on for a run, your live location; and deliver the boosts they send you.
• AI features: generate training routines and meal plans from what you enter, turn an imported plan into a routine and, if you use body reading, produce the observations in section 6. Everything the AI suggests is a draft you review before using it.
• Payments and routine sales: charge for Premium and routines, give you access to what you bought, open and follow sellers' payout accounts, split each sale between the author and Remi, handle refunds and disputes, prevent fraud, and meet tax and accounting obligations.

We process your data on the following bases:

• Performance of a contract (art. 7, V): create and maintain your account, log workouts, run the social features and AI features, process subscriptions and purchases and, for sellers, open the payout account and pay out the share of each sale.
• Consent (art. 7, I, and art. 11, I): location, push notifications, posting public content, health data you enter or connect (weight, height, physical performance, Apple Health and Health Connect), body reading, live activity, Messages from Remi and the blog newsletter.
• Legitimate interest (art. 7, IX): security, fraud prevention and product improvement.
• Compliance with a legal or regulatory obligation (art. 7, II): keeping the payment, sale and payout records that tax and accounting law requires, and responding to requests from competent authorities.

You can withdraw consent at any time in the app or device settings, or by writing to support@remifitness.com. Withdrawal applies from then on and does not affect what was done before it.

We do not sell, rent or trade your personal information. We share it only when one of the following applies:

• Service providers (cloud hosting, push notification delivery, email delivery for login codes, crash reporting, product analytics, maps and place search, payment processing) bound by contracts that require them to protect your data.
• Legal requirements when required by law, court order, or to protect the rights, property or safety of users.
• Business transfers in the event of a merger, acquisition or sale of assets — with the same protections preserved.
• With your consent for anything else.
• Health data is never shared, sold or used for advertising. Data Remi reads from Apple Health or Health Connect is used only to provide the in-app features you enabled (syncing your activities and water and informing your diet targets). We never use it for marketing or advertising, never sell it, and never share it with third parties for their own purposes.

Asaas, our payment processor

Remi's payments are processed by Asaas Gestão Financeira Instituição de Pagamento S.A. ("Asaas"). It receives:

• From buyers (Premium or a routine): name and CPF or CNPJ. For a card payment, also the card details, which pass through our servers only to reach Asaas and are not kept by Remi; the cardholder's name, CPF or CNPJ, email, postal code (CEP), address number and complement, and phone (the cardholder may be someone else); and the IP address of the device used to pay.
• From sellers: name or company name, CPF or CNPJ, date of birth (for a CPF) or company type (for a CNPJ), email, mobile phone, address and monthly income or revenue, to open the payout account. Remi keeps only the document (encrypted), the account identifiers at Asaas, its access key when Asaas provides one (encrypted), and the account's status.

Asaas also processes this data as a controller, to meet its own legal obligations (such as identity verification and anti-money-laundering rules), under its own privacy policy.

Visible to other Remi users

Some information is visible to other users by design: your nickname, name, profile photo, level, XP and streak appear on global and team leaderboards. Posts you publish to the community feed (and their captions, media, comments and likes) are visible to other users in the feed. Chat messages are visible to the participants of the conversation. Your team profile is visible to your team members. A venue check-in is visible to your followers by default, and you can make it public or private; nobody is listed at a venue with fewer than 3 people present, and check-ins by accounts whose date of birth shows they are under 18 are always private. In a live run, the other people in the same run see your nickname, name, profile photo, distance covered and time while the run is happening; they never see your location or heart rate through the live run, and that live progress is deleted from the server within 6 hours. When you race someone else's run, you receive only that run's distance over time, never its route. Live activity with friends: if you turn it on, people you follow who also follow you (mutual friends) see that you are training right now — the workout name, exercises and sets done and time, or a run's sport, distance, time and pace — and the music you choose to show. While you share, they can send you a boost, which can be read aloud during a run; you can turn boosts off at any time. Nobody else sees it, and unfollowing or blocking someone removes their access immediately. Live location is optional for each run, is shown only to the mutual friends you pick (up to 10), is hidden while the run is paused, and is only available to accounts whose date of birth shows they are 18 or older. If a mutual friend turns on the “Friends starting a workout” notification, they may get a notification when you start a workout or run. You can stop sharing or go invisible at any time. You can control what you share by adjusting your profile, leaving teams or removing posts at any time.

Selling routines: anyone who views or buys a routine on sale sees the author's public profile (nickname, name and photo). In Remi, the author sees each sale, the routine and the amount, but not who bought it or any payment details. Routines you buy are not shown to other people on your profile, and payout account details are never shown to other users.

The photos you send for a body reading are never stored. They are analysed on the spot and discarded within seconds: no file in cloud storage, no database column, and we do not even keep a hash of the image.

The feature is optional, started only by you, available only to people 18 or older, and preceded by explicit consent before the camera is ever opened.

What is kept are derived, non-diagnostic observations drawn from a fixed vocabulary we define: for example, that a shoulder appears to sit forward, or that one region looks less developed than another. We do not estimate body fat, weight, BMI or lean mass; we do not score you; and we make no claims about your health or appearance. Your calorie and macro targets are still calculated from the weight, height, age and goal you enter, never from a photo.

You see every observation before anything uses it and choose which to keep. Anything you switch off stops being used and leaves the app.

Retention: an approved observation applies until you delete it, or for 365 days, whichever comes first; an observation you never approved is discarded after 24 hours; the record of your consent is kept as history, including if and when you withdrew it. A deleted or discarded observation stops being used and no longer appears in the app, but it stays in our database, marked as deleted; to have it removed for good, write to support@remifitness.com. After 90 days, a reading stops influencing new plans and the app offers a fresh one; it stays visible and deletable until you remove it.

You can delete a reading at any time: on the screen where you approve it, in the AI section of your training settings, or in Settings › Privacy. Plans already generated are not rewritten, because they are the record of what you were following, but they stop referring to the deleted reading.

Your photos are not used to train any model, ours or anyone else's, and they are not sold or shared. A photo is sent to our AI processing provider only to produce the observations described above. Our internal monitoring and diagnostic tools are configured to exclude these images, so they do not appear in logs or traces.

The observations are general training guidance, not a diagnosis. A posture observation is not a clinical finding.

We apply appropriate technical and organizational safeguards, including:

• Encryption in transit (TLS) and, at rest, of sellers' payout account details (the document and the Asaas credentials).
• Session tokens kept in the device's secure storage (Keychain on iOS, Keystore on Android).
• Access controls and least-privilege authentication.
• Sign-in with short-lived one-time codes (OTP) sent to your email, with no password.
• Regular security reviews of dependencies and infrastructure.

No system is 100% secure. If a security incident could cause significant risk or harm, we will notify you and the ANPD without undue delay, as LGPD article 48 requires.

We keep your information only for as long as we need it. The specific periods we apply:

When you delete your account (Settings › Account Preferences › Delete Account), your personal data — name, email, nickname, photo, bio, date of birth, gender, measurements and document — is erased from the account record, and your sessions end immediately. Your venue check-ins and venue chat messages, water logs and reminders, live activity settings and your workouts' GPS routes are deleted too; your body-reading observations stop being used (section 6); and a Premium subscription paid by card is cancelled. Your activity history (workouts, including those imported from a watch, posts, comments, likes, messages, teams and leaderboards) remains, tied only to a deleted account with no name, email or photo. This is deliberate: those records are part of other people's experience, and a conversation with your replies removed would damage accounts that are not yours. Notifications other people already received stay as they were sent, including the nickname you used. Your training and diet profile (including injuries and restrictions), the data used to generate routines and meal plans, recovery check-ins, meal logs, daily summaries imported from a watch and your CREF document are also kept, tied to the deleted account. If you want any of this erased as well, write to support@remifitness.com.

We may keep limited information when needed to meet legal obligations, resolve disputes or enforce our agreements, such as the payment records in the table above.

You have the right to:

• Confirmation that we process your data.
• Access to the data we hold about you.
• Correction of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the LGPD.
• Portability of your data to another provider.
• Deletion of data processed on the basis of your consent, except where the law requires us to keep it (LGPD article 16), such as tax records.
• Information about sharing: which public and private entities we share your data with.
• Information about consent: that you may refuse consent, and what happens if you do. Without location permission, for example, Remi cannot record a run's route or check you in; without connecting Apple Health or Health Connect, your watch workouts do not come into Remi.
• Withdrawal of consent at any time.
• Objection to processing based on a ground other than consent, if it breaches the LGPD (article 18, §2).
• Review of automated decisions (LGPD article 20): ask for a review of decisions made solely by automated processing that affect your interests, and for information about the criteria used. Remi's AI features (routines, meal plans, body reading and plan imports) produce suggestions you review before using them.
• Complaint to the Brazilian National Data Protection Authority (ANPD) or to consumer protection bodies.

To exercise any of these rights, write to support@remifitness.com; we answer within 15 days. You can also delete your account directly in the app, at Settings › Account Preferences › Delete Account (section 8). If you live outside Brazil, your local law may give you equivalent rights, such as the GDPR in the European Union and the United Kingdom.

Controls in the app

• Withdraw consent for permissions like location, camera or photo access at any time in your device settings.
• Disconnect health data: stop syncing, remove from your history the activities Remi imported from a connected health source and erase its daily summaries, at any time, in the app's Connected Devices screen; stop water sync on the Hydration screen — and revoke access entirely in the iOS Health app or Health Connect settings.
• Turn off Messages from Remi, or just the personalization, at any time in Settings › Notifications › Messages from Remi.
• Live activity: stop sharing, go invisible or turn off boosts in Settings › Privacy › Live activity.
• Body reading: delete a reading on the screen where you approve it, in the AI section of your training settings, or in Settings › Privacy.

On the website, we do not use sign-in, analytics or advertising cookies. The website only stores your theme preference (light or dark) in your browser's storage, and you can erase it by clearing the site's data.

The app does not use cookies: it keeps an authentication token in the device's secure storage (Keychain on iOS, Keystore on Android) and the push notification token provided by the operating system. You revoke them by signing out or uninstalling the app.

Remi integrates with a limited set of trusted providers to deliver core functionality. Each is contractually required to protect your data:

• Cloud hosting and database infrastructure (Railway).
• Payment processing (Asaas): credit card and PIX charges, splitting each routine sale between the author and Remi, and sellers' payout accounts (section 5).
• AI processing: an AI model provider receives only what is needed to generate a routine or a meal plan, read an imported plan or produce body-reading observations.
• Email delivery for one-time login codes.
• Blog newsletter delivery (Resend), only for people who subscribe.
• Push notification delivery (Apple Push, Google FCM, Expo).
• Crash and error reporting (Sentry). Reports carry your numeric account id and technical data about the failure; we remove location coordinates and search text from them.
• Product analytics (PostHog): in-app usage events such as which features you use, with device and app technical data, linked only to your numeric account id, never your name or email. PostHog does not look up your location from your IP address.
• Google Maps Platform: map display and place search. The search text and the map area you look at are sent to Google by our servers to find places.
• Music services (Spotify, Apple Music, YouTube): when you show a song, our servers look up the service's public catalog (title, artist, artwork and link) using the song's identifier, and follow Spotify short links (spotify.link) to find the song they point to. Your friends' phones load the artwork directly from the music service's servers. Remi does not connect to your account on these services and does not control what you play.
• Apple Health (HealthKit) and Android Health Connect — on-device health data stores you can optionally connect to import your workouts, daily activity and water. Remi only reads the data types you authorize, and the only thing it writes to them is the water you log in Remi, if you turn on water sync.

When you follow a link from Remi to a third-party site, that site's privacy policy applies — not ours.

Remi is not intended for children under 13. Users aged 13 to 17 must have the consent and supervision of a parent or guardian, as LGPD article 14 requires. Accounts whose date of birth shows they are under 18 cannot buy or sell routines, and their check-ins are always private. Body reading and live location require a date of birth showing 18 or older. If we learn that we collected data from a child under 13 without proper consent, we will remove that data. Parents or guardians can write to support@remifitness.com.

Our servers and providers may be located outside Brazil. When data is transferred internationally, we apply the safeguards LGPD article 33 requires, such as standard contractual clauses, to ensure a level of protection compatible with Brazil's.

We may update this policy as Remi evolves. When changes are material, we will notify you in the app or by email before they take effect and update the date at the top of this page. The version published on this website is always the one in force.