Privacy Policy

1Introduction and controller identification

Your privacy is a priority for us. This Privacy Policy describes, transparently and in detail, which personal data the Monju app collects, why it collects it, how it is used, who it is shared with, how long it is retained and which rights you have over that data, in compliance with Brazilian Law No. 13,709/2018 — the General Data Protection Law (LGPD).

Monju is a mobile app (iOS and Android) for health and wellbeing tracking, aimed at people undergoing treatment with GLP-1 class medications (such as Mounjaro/Tirzepatide, Ozempic, Wegovy, Saxenda, Victoza, Trulicity and Rybelsus). This Policy applies to every feature of the app, to the healthcare professional web portal and to any other service we provide.

2Glossary and definitions

To make this document easier to read, the following terms have the meanings described below:

• Personal data: information relating to an identified or identifiable natural person (LGPD Art. 5, I).
• Sensitive personal data: data on health, sex life, genetic or biometric data, racial or ethnic origin, religious belief, political opinion, among others (LGPD Art. 5, II).
• Data subject: the natural person the data refers to — in this case, you, the Monju user.
• Processing: any operation carried out with personal data, such as collection, storage, use, access, sharing and deletion (LGPD Art. 5, X).
• Consent: a free, informed and unequivocal statement by which the data subject agrees to the processing of their data (LGPD Art. 5, XII).
• Processor: the party that processes data on behalf of the controller (LGPD Art. 5, VII) — the third parties listed in Section 8.
• ANPD: Brazil's National Data Protection Authority.
• GLP-1: the class of medications that includes Mounjaro (tirzepatide), Ozempic and Wegovy (semaglutide), Saxenda and Victoza (liraglutide), among others.

3Acceptance of this Policy

By creating a Monju account, continuing to use the app after a change to this Policy, or expressly accepting this document during onboarding, you declare that: (a) you have read and fully understood this Policy; (b) you are aware of the categories of data collected and of the purposes; (c) you agree to the processing under the terms described here; (d) you are at least 16 years old or are assisted by your legal guardians as set out in Section 15; (e) you have the legal capacity to enter into contracts; (f) you are aware that Monju is not a medical device and does not replace guidance from a healthcare professional.

If you do not agree with any provision of this Policy, do not use the app, and delete your account if you have already created one.

4Categories of personal data collected

4.1. Registration and identification data

Full name, e-mail (or the Sign in with Apple relay e-mail), profile picture (optional), unique user identifier (UUID), account creation date, age/age range and gender (self-declared, with a "prefer not to say" option).

4.2. Contact data

WhatsApp number (optional, for reminders) and mobile phone number (when using SMS/OTP authentication).

4.3. Sensitive health data (LGPD Art. 5, II)

The nature of Monju requires collecting sensitive health data, all of it processed under explicit and specific consent (Art. 11, I), given during onboarding and renewed for each new category of functionality. It includes:

• Body data: height, weight (current, starting and target), weight history, BMI, body composition (lean mass, body fat %), measurements, progress photos and bioimpedance reports.
• Medication data: medication, active ingredient, dosage, frequency, day/time, device, injection site, dose history and how you felt after the injection.
• Nutrition data: meal descriptions and photos, AI-generated protein/calorie estimates, protein and hydration goals, water intake and history.
• Symptoms and side effects: symptom type, severity (1 to 10), date/time and notes.
• Medical test results: photos of lab reports, values extracted by OCR, AI-generated analyses and history.
• Lifestyle and treatment: physical activity, goals, motivations, status and treatment start date.
• Daily check-in: mood, water intake, food quality, symptoms and exercise.

4.4. AI assistant chat content

Text messages and images sent to the assistant, conversation history linked to your account and the generated responses.

4.5. Sharing with healthcare professionals

If you choose to link a professional: the professional's name and e-mail, a unique sharing token, the categories of data you authorized for sharing and the update history.

4.6. Usage, device and diagnostic data

Collected automatically: device model/identifier, operating system and version, app version, language/time zone, IP address (logs), screens and flows, sessions, crashes, anonymous analytics identifiers and install source.

4.7. Subscription and payment data

Monju Pro subscription status, plan, dates, store transaction identifiers, event history and originating store. Financial data (card, bank account) is neither collected nor stored by Monju — payment happens exclusively inside the app stores.

4.8. Notification preferences

Dose reminder preferences, lead time, check-in reminder, push permission and WhatsApp permission.

4.9. Feedback sent by the user

Feedback messages, ratings given in in-app prompts and e-mail communication with support.

5How data is collected

Data is collected in three ways: (5.1) provided directly by you through onboarding, tracking screens and settings; (5.2) collected automatically (usage, device, diagnostics, analytics) by native SDKs; and (5.3) received from third parties — Google Sign-In (name, e-mail, public picture), Sign in with Apple (name and real or relay e-mail) and RevenueCat (identifiers and subscription status).

6Specific purposes of processing

Data is processed in order to: (6.1) provide the tracking service (records, BMI calculations, goals, estimated medication level, charts); (6.2) power AI features (macro estimates, reading of lab and bioimpedance reports, health assistant, recipe images); (6.3) send reminders and treatment-related communications (push, WhatsApp, check-in, operational notices); (6.4) share data with healthcare professionals; (6.5) manage your account and subscription; (6.6) continuously improve the product (aggregated, anonymized analytics); (6.7) ensure security and prevent fraud; (6.8) comply with legal obligations; and (6.9) send marketing communications (optional and revocable).

7Legal bases for processing

For each purpose we apply one or more legal bases from the LGPD: performance of a contract (Art. 7, V) for service provision and account management; specific explicit consent (Art. 11, I) for sensitive health data, AI features and sharing with a professional; consent (Art. 7, I) for push/WhatsApp reminders and marketing; legitimate interest (Art. 7, IX) for product improvement, analytics and security, over aggregated/anonymized data; and compliance with a legal obligation (Art. 7, II) where required. Consent for sensitive data is collected specifically and prominently during onboarding and may be withdrawn at any time.

8Data sharing with third parties

Monju shares data only when strictly necessary to provide the services. The main processors are:

• Google LLC — AI (Gemini API): processes meal descriptions and photos, lab and bioimpedance reports, assistant messages and a summary of your health context — without your name, e-mail, phone number or any data that directly identifies you. Requests go through a secure proxy (Supabase Edge Function) over HTTPS/TLS, only after your explicit consent. The data is not used to train Google models and is retained only for as long as needed to generate the response.
• Supabase, Inc. — database, authentication and storage: stores your data with encryption at rest (AES-256) and in transit (TLS), per-user Row Level Security and encrypted backups. SOC 2 Type II certified.
• RevenueCat, Inc. — subscriptions: receives an anonymous identifier, store receipts and subscription status. It does not receive your name, e-mail, health data or financial data.
• Google (Sign-In and Play Store) and Apple (Sign in with Apple and App Store): authentication and payment processing in the respective stores. No health data or password is shared.
• Resend, Inc. — transactional e-mails: sends e-mails to the professional you nominate (first name and secure link only) and operational e-mails to you.
• 360dialog GmbH — WhatsApp Business API: sends generic dose reminders (no sensitive details), only if you provide your number.
• Microsoft — Clarity (analytics): anonymous usage behavior with a non-reversible hashed identifier; no health data, name or e-mail.
• Google — YouTube Data API: recipe search terms only; no personal data is sent.
• Infrastructure providers (Vercel, AWS, Cloudflare): serve the professional web portal and process operational logs for short periods.

9International data transfers

Some processors are located outside Brazil — mainly in the United States (Google, Supabase, RevenueCat, Apple, Resend, Microsoft), in Singapore (Supabase) and in Germany (360dialog). Transfers are carried out under Chapter V of the LGPD (Arts. 33 to 36), based on consent, performance of a contract, compliance with a legal obligation and specific contractual clauses. These providers adopt security standards equivalent to or higher than those required by the LGPD (SOC 2, ISO 27001, GDPR compliance where applicable).

10Storage and security

We adopt technical and organizational measures to protect your data. Technical measures: encryption in transit (HTTPS/TLS 1.2+) and at rest (AES-256); secure local token storage (Keychain/Keystore); Row Level Security in the database; private storage buckets with signed URLs; API keys kept exclusively server-side; token-based validation in the professional portal. Organizational measures: access restricted to authorized people, access logs for sensitive data, team training, an incident response plan and periodic review. In the event of a relevant incident, we will notify the ANPD and the data subjects as set out in Art. 48 of the LGPD.

11Data retention and account deletion

Your data is retained while your account is active, for as long as it is necessary for the contracted services, or while there is a legal obligation or legitimate interest in defending rights.

How to delete your account: inside the app, under Profile → Delete account (deletion permanently erases your data and files through a dedicated server-side function); or by e-mail to contato@meuguru.com with the subject "Account deletion request — LGPD", answered within 15 business days.

After deletion, database records and files are erased immediately; encrypted backups may persist for up to 30 days; operational logs for up to 90 days. Financial transaction data is retained by the app stores for statutory tax periods (5 years), and anonymized aggregated usage data may be kept.

12Data subject rights (LGPD Art. 18)

You have the following rights, which you may exercise free of charge: confirmation that processing exists; access to your data; correction; anonymization, blocking or deletion of unnecessary data or data processed in breach of the law; portability; deletion of data processed on the basis of consent; information about sharing; information about the possibility of refusing consent; withdrawal of consent; and objection to processing.

How to exercise them: send an e-mail to contato@meuguru.com stating your name, the e-mail linked to your account and the right you wish to exercise. We will respond within 15 business days. In the event of the data subject's death, heirs or legal representatives may exercise these rights upon presentation of documentation.

13Cookies, tokens and similar technologies

The app does not use traditional HTTP cookies, but it does use analogous technologies in the mobile environment: authentication JWT tokens stored securely (Keychain/Keystore); installation identifiers for operational purposes and anonymized analytics; local state persistence on the device (AsyncStorage/MMKV). The professional web portal may use strictly necessary cookies to keep the session active, without tracking or advertising.

14Push notifications, e-mail and WhatsApp

With your authorization, we may send: push notifications (dose reminders, daily check-in and operational notices); operational e-mails (account confirmation, recovery, security and billing alerts, legal notices); marketing e-mails (optional, with unsubscribe available at any time); and WhatsApp messages (dose reminders, only if you provide your number and enable them). You can turn off any of these channels at any time.

15Children and adolescents

Monju is not directed at anyone under 16, and we do not knowingly collect data from children under 13. Adolescents aged 16-17 may use the app with informed consent; those aged 13-15 only with the consent of a legal guardian (Art. 14 of the LGPD); children under 13 must not use the app. In the app stores, the rating is 17+ (App Store) and adult (Play Store). Parents or guardians may contact us at contato@meuguru.com.

16Artificial intelligence — clarifications

Monju uses models from the Gemini family (Google), version 2.5, accessed through the Google AI API. Every call goes through a server-side proxy (Supabase Edge Function) that does not include identifiable personal data in the payload — only the content required (the text of your question, the photo of the meal or of the lab report). The API key stays exclusively on the server. Under the Google AI terms, data sent through the API is not used to train models and is processed only for as long as needed to generate the response.

AI responses (macro estimates, interpretation of lab results, assistant) are estimates that may contain errors and do not constitute a diagnosis, a prescription or a medical recommendation. Monju does not make automated decisions with legal effects (Art. 20 of the LGPD); the AI features are informational and educational.

17Important medical notice

Monju is not a medical device, does not diagnose, does not prescribe medication and does not replace guidance from a qualified healthcare professional. All information is informational and educational in nature. Before starting, stopping, changing the dose of or replacing any medication, always consult a doctor. In case of a severe symptom, a serious adverse reaction or an emergency, seek immediate medical care or call your local emergency number (in Brazil, SAMU — 192).

18Changes to this Policy

We may change this Policy at any time. Significant changes will be communicated through a prominent notice in the app, an e-mail to your registered address and an update to the "version" date at the top of this document. Continuing to use the app after publication constitutes tacit acceptance. Previous versions are available on request at contato@meuguru.com.

19Data Protection Officer (DPO)

In compliance with Art. 41 of the LGPD, the Data Protection Officer can be contacted at contato@meuguru.com (subject: "DPO — [your request]") or at the address Av. Eldes Scherrer Souza, 975, Ative Centro Empresarial, room 705, Parque Residencial Laranjeiras, Serra/ES, Brazil, postal code 29.165-680.

20Complaints to the ANPD

If you believe your rights have not been properly addressed, you may file a complaint with Brazil's National Data Protection Authority (ANPD) at gov.br/anpd.

21Contact

For questions, complaints or requests related to this Policy or to the processing of your data: E-mail: contato@meuguru.com · MG Soluções Digitais LTDA · Brazilian company registry (CNPJ) 42.269.770/0001-84 · Av. Eldes Scherrer Souza, 975, room 705, Serra/ES, Brazil, postal code 29.165-680.

This Privacy Policy was updated on May 19, 2026 and takes effect on that date. Version 2.0.