1. Data we use
- Account: name, email, year of birth, and password (stored in a form that cannot be read back).
- Labs: the values you review and save. The photo or PDF of the report is read and is not kept.
- Meals: the foods and amounts you confirm. The meal photo is analyzed and discarded.
- Check-ins, menu profile (goal, measurements, restrictions, and the safety questions), and the menus that were built.
- Apple Health: only the types you allow on the iPhone (steps, sleep, heart rate, variability, VO2max, oxygen, respiration, weight, exercise minutes, active energy), from the last 30 days, with the name of the device that produced each value.
- App use: counts of screen visits, not tied to you and without health content.
2. Why we use it
We do not sell your data. We do not use health data, including Apple Health, for advertising or marketing. Whoever pays for your care does not see your individual data through Life.
- To show your data, charts, and estimates inside the app.
- To read reports and meal photos, build menus, and answer questions — only with the AI permission.
- To keep your account safe and meet legal duties.
3. Legal basis (LGPD)
- Health data: your specific, highlighted consent (art. 11, I), asked before any record.
- Use of AI with your data: a separate consent you turn on and off in Account.
- Account data: performance of the service you asked for (art. 7, V).
- Access logs: a legal duty (Brazilian Internet Civil Framework, art. 15).
4. Artificial intelligence
Minds features use a contracted AI provider, OpenAI, which processes the request and returns the result. Only the data that feature needs is sent — for example the meal photo, the report, your question, or the menu goals. Your name, email, phone, and account identifiers are not sent.
The data is not used to train models and is not kept in the provider's chat history. Nothing is sent without your permission.
5. Where data lives and who we share it with
Your data is stored in a database in Brazil (São Paulo region), limited to your own account. We use processors to host the app and run the AI features. Some of them are outside Brazil, and the transfer follows the safeguards in LGPD art. 33. They may use the data only to provide the service to DocMinds.
We do not share your data with clinics, health plans, or other third parties without your permission.
6. Security
- Encrypted connections (TLS) and database rules that let each person read only their own data.
- Optional Face ID or fingerprint lock in the phone app.
- Photos and reports sent for reading are not kept. Location stored in a meal photo is removed before it is sent to the AI provider.
7. How long we keep it
- Account and personal data are deleted within 30 days of the request. In the app, Life data is removed as soon as the request is processed.
- Backups are purged within 90 days.
- Access logs: 6 months, as the law requires.
- Proof of consent, withdrawal, and deletion, without health content: for as long as needed to show that we honored your choice.
- Messages written by a care team, and labs that belong to a clinic record, are not deleted when the Life account is deleted: that service has a legal duty to keep the record.
- If the same login is also used on DocMinds MD, that access remains. On Life, you only stop being a patient.
- Beyond that, we keep data longer only when the law requires it.
8. Your rights (LGPD art. 18)
To exercise a right, email privacidade@docminds.ai. We reply within 15 business days. Deletion itself follows the timelines in section 7.
- To know which data we have and to access it.
- To correct incomplete or wrong data.
- To ask for deletion — in the app, in Account → Delete my account, or on the public account-deletion page.
- To take your data to another service (portability).
- To withdraw consent, including AI consent, at any time. Withdrawal does not undo what was already done.
- To know who we share your data with.
9. Children
For now DocMinds Life is only for people 18 or older.
10. Controller, privacy contact, and changes
The controller of personal data in DocMinds Life is Cortexa Social, Inc.. Contact: i@cortexa.social. A postal address is available upon request by email.
Privacy contact (DPO): privacidade@docminds.ai.
When this policy changes, you will see the new version in the app and will need to accept it again. The current version is always on this page.