Privacy Policy
How the MindPilot app handles your personal data.
Last updated: October 2, 2026.
This Policy explains, in plain language, what data the MindPilot app collects, what we use it for, who we share it with, how long we keep it and what your rights are. It applies to the mobile app, to the mindpilothealth.com website and to our support channels.
Who is responsible for your data: razão social, registered under CNPJ no. CNPJ, headquartered at endereço ("MindPilot", "we"). Data Protection Officer (DPO): nome do encarregado, email privacidade@mindpilot.ai.
1. One-page summary
- You answer an assessment about your routine and your health. With it, the app calculates a score and builds a habit plan for you.
- Your health data is sensitive data. We only process it with your consent, which you give item by item and can withdraw whenever you want inside the app.
- The chat assistant and the meal photo analysis use an artificial intelligence service from the company Anthropic. We send that service only what is necessary, without your name, email or phone number.
- We do not sell your data. We do not use your health data for advertising.
- You can view, download a copy of, correct and delete your data, and close your account, in the app itself or by emailing privacidade@mindpilot.ai.
- MindPilot is an informational and educational tool. It does not diagnose and does not replace your doctor.
2. What data we collect
The table below lists the data the app processes, where it comes from and why.
| Data | How it reaches us | What for |
|---|---|---|
| Sign-up: name, email, password (stored encrypted), phone (optional), emergency contact (optional) | You provide it when creating your account and in your profile | Create and protect your account; contact you |
| Profile: date of birth, sex, height, weight, waist circumference, activity level, city/state, time zone | You provide it in your profile and in the assessment | Calculate the score and personalize the plan |
| Assessment answers: habits, personal and family health history, symptoms, exposure to harmful substances | You answer the questionnaire | Calculate the Brain Health Score and areas of attention; build the plan |
| Daily logs: mood, sleep, meals (text and, if you wish, a photo), water, exercise, blood pressure, blood glucose and other test results you enter | You log them in the app | Track your progress; adjust the plan; generate the report for your doctor |
| Health device data: hours of sleep, steps and heart rate | Read from Google Health Connect (Android) only if you separately authorize this access | Show this data on the dashboard and use it in the score, without you having to type it |
| Plan usage: actions completed, postponed or swapped; streak of days | Generated as you use the plan | Adjust the plan to your pace; celebrate consistency |
| Conversations with the assistant | You type them in the app | Answer your questions. Today the content stays only on your phone; it is not stored on our servers (see section 5.7) |
| Ratings of the assistant's answers ("helpful" / "not helpful") | You tap the buttons below each answer | Improve the assistant. We store only the rating, never the text |
| Consent records: what you accepted, when, in which version of the text and on which device | Generated when you accept or withdraw a consent | Prove that the processing was authorized (legal obligation) |
| Technical data: device model, operating system, app version, notification identifier, crash logs | Generated automatically by the app | Keep the app working; send reminders you turned on; fix errors |
| Usage events: screens opened and actions completed, such as "assessment completed" or "plan generated", linked to a code, not to your name | Generated automatically, only if you authorize "usage analytics" | Understand how the app is used and improve it. Never includes answers, test values or conversations |
| Feedback and suggestions you send through the support channel | You write them | Assist you and improve the product |
What we do not collect: precise location (GPS), your phone contacts, microphone, photos other than the one you choose to send as a meal. The "location data" consent refers only to the city and state you enter in your profile.
3. What we use your data for and on what legal basis
| Purpose | Legal basis (LGPD) |
|---|---|
| Create the account, authenticate you and keep the app working | Performance of a contract (art. 7, V) |
| Calculate the score, identify areas of attention, build and adjust the plan, display the dashboard, generate the report for your appointment | Specific consent for health data (art. 11, I) |
| Answer questions through the assistant and analyze meal photos | Consent for health data (art. 11, I) |
| Read sleep, steps and heart rate from the device | Specific and separate consent (art. 11, I), also granted in the phone's system |
| Send plan reminders and notices | Consent (art. 7, I); can be turned off at any time |
| Send news and content by email or notification | Consent (art. 7, I); optional and off by default |
| Measure app usage and fix crashes | Consent (art. 7, I) for usage events; legitimate interest (art. 7, IX) for crash logs, which contain no health data |
| Use de-identified data in brain health studies | Consent (art. 7, I); optional and off by default |
| Keep consent records and handle data subject requests | Compliance with a legal obligation (art. 7, II) |
| Prevent fraud and abuse, protect the security of the service | Legitimate interest (art. 7, IX) |
Automated decisions. The score and the plan are calculated automatically from your answers, using rules defined with medical supervision. The assistant uses artificial intelligence. None of these features makes a decision with legal effect or replaces the assessment of a health professional. You can ask for an explanation of how your score was calculated in the app itself (tap the help icon next to the score) or by emailing the DPO.
4. How you control your consents
When you create your account, you accept the Terms of Use and this Policy, which are required to use the service. All other consents are optional and off by default. You choose each one and can change your mind at any time in Profile → Privacy and Data → Manage consents:
- Detailed health data — enables the full assessment, the plan and the assistant. Without it, the app works only with general content.
- Health device data (sleep, steps, heart rate) — read from Google Health Connect.
- Location (city and state) — to adapt content to your context.
- App usage analytics — usage events with no health content.
- Reminders and notifications — plan reminders and app announcements.
- News and communications — emails and notifications about MindPilot.
- Scientific research — use of de-identified data in studies.
When the text of a consent changes in a relevant way, we will ask you to read and accept it again before continuing with that feature. Withdrawing a consent does not affect what was done before on the basis of it.
5.7. Conversations with the assistant — current situation and future consent
Today, the content of your conversations with the assistant stays only on your phone and is not stored on our servers. Your question and its context are sent to Anthropic only to generate the answer.
6. How long we keep it
- While your account is active: all data needed for the service.
- When you delete your account: your name, email, phone and contacts are removed immediately and the account can no longer be accessed. Health records (assessments, scores, plan, measurements) remain unlinked from your identity for up to 12 months, for technical justification and service improvement, and are then permanently deleted by an automated routine, together with any files you uploaded.
- Consent records: kept for the legal limitation period, even after the account is deleted, as proof that the processing was authorized.
- Crash logs and usage events: up to 12 months.
- Meal photos: analyzed and discarded immediately; they are not stored.
7. Your rights
Under the LGPD, you may at any time:
- Confirm and access what data we hold about you.
- Correct incomplete or outdated data (Profile → Edit).
- Download a copy of all your data in an open format (Profile → Privacy and Data → Export).
- Withdraw consents (Profile → Privacy and Data → Manage consents).
- Delete data processed on the basis of consent and delete your account (Profile → Privacy and Data → Delete account, or on the website at mindpilothealth.com/en/delete-account).
- Know who we share data with (section 5).
- Request a review of automated decisions and an explanation of the criteria.
- File a complaint with Brazil's National Data Protection Authority (ANPD).
To exercise any right that is not available in the app, write to privacidade@mindpilot.ai. We will reply within 15 days.
8. How we protect your data
- Communication is always encrypted (HTTPS); the app does not accept unencrypted connections.
- Data is stored encrypted at rest; the login session on your phone is stored encrypted with a key protected by the device's system.
- Each person can access only their own data: access rules are enforced in the database itself, row by row.
- Passwords are stored only as hashes; protection against known leaked passwords.
- When you log out, all health data stored on the phone is deleted.
- Team access is restricted by role and logged.
No system is completely secure. If an incident occurs that may put you at risk, we will notify the ANPD and you, as required by law.
9. Children and adolescents
MindPilot is intended for people over 18. We do not knowingly collect data from minors. If we become aware of it, we will delete the account.
11. Changes to this Policy
We may update this Policy. Relevant changes will be announced in the app and, when they require new consent, we will ask for your acceptance before continuing. The current version is always available at mindpilothealth.com/en/privacy and inside the app.
12. Contact
Data Protection Officer (DPO): nome do encarregado — privacidade@mindpilot.ai
razão social — CNPJ CNPJ — endereço
MindPilot's assessment, score and plan are informational and educational: they are not a diagnosis and do not replace a medical consultation. Diagnoses and prescriptions are made only by doctors, during consultations. In an emergency, call your local emergency number.