Privacy Policy

We may collect the following data:

• Account information (name, email)
• System usage data (training, diagnostics, progress)
• Optional training feedback, including pain or discomfort reports and notes, used by Dorica's backend to adapt your training
• Technical information (device, browser, approximate IP, and app-installation identifiers)

Your pain response and the text of your training feedback notes are not included in analytics events sent to Google on the website or in the native apps.

Unauthenticated users may have a temporary anonymous identifier. Firebase Installations may generate an app-installation identifier for app functionality such as messaging, independently of optional analytics consent or notification permission.

When you use microphone-based features, audio is processed only on your device to detect notes. Dorica does not record or upload microphone audio.

We use your data to:

• Provide and personalize the service
• Generate adaptive assessments and training
• Improve user experience
• Ensure security and prevent abuse

We use cookies and similar technologies for authentication, security, and proper platform operation.

On the website, with your consent, we also use analytics and ad measurement tools (Google Analytics, Microsoft Clarity, and Meta Pixel) to understand platform usage and measure our campaigns. Microsoft Clarity records clicks, scrolling, and mouse movement to produce heatmaps and session replays; personal data shown on screen, such as name and email, is masked. Before you consent, Google Analytics receives only cookieless signals, and Microsoft Clarity and the Meta Pixel are not loaded. You can change your choices under "Cookie preferences" in the site footer.

In the iOS and Android apps, only after your explicit, optional consent to the current disclosure, we use Google Firebase Analytics to analyze app usage and improve the experience. It may receive technical device information, app identifiers, screens viewed, usage events, and your account identifier when signed in. With this analytics consent, it may also derive approximate location, such as city or country, from a masked IP address; this does not use GPS or collect precise location. Under our current Google account settings, these analytics data are also shared with Google, which uses them independently to improve its own products and services. Native analytics does not use advertising IDs, and advertising consent remains denied. You can allow, reject, or change this choice at any time under "App analytics" in Profile without affecting functional notifications or purchases. On iPhone, the app asks through Apple's App Tracking Transparency request, and this analytics runs only if you allow tracking. On iPhone the choice is not in Profile: change it at any time under "Allow Tracking" for Dorica in iOS Settings. Your app choice is separate from your website choice; web analytics and advertising scripts do not run in the native apps.

We do not sell your data.

Your data may be shared with essential providers (e.g., payment processing, security, and functional notifications) and, with your consent, analytics and advertising providers (Google, Microsoft, Meta, and Vercel). Vercel Web Analytics and Speed Insights measure site usage and performance; they are not used in the iOS or Android app.

For optional Firebase Analytics in the iOS and Android apps, our current Google account settings also share analytics data with Google for improvement of Google's own products and services. Google acts independently for that use. These data include device and app identifiers, app interactions, approximate location derived from IP, and your account identifier when signed in. This sharing requires your explicit native analytics opt-in to the current disclosure. You may refuse or withdraw it in Profile (on iPhone, under "Allow Tracking" in iOS Settings); functional Firebase messaging and purchases remain separate from this choice.

We retain account and training data while needed to provide the service, until you delete your account or request deletion, subject to applicable legal obligations. The account-deletion section above explains the data removed and our 30-day deadline to process and submit provider requests. Providers may need additional time to erase their internal copies; Google Analytics states deletion can take up to 63 days after a request.

Email-delivery event logs are retained for no more than 30 days while your account is active. Existing identifiable events linked to your account are removed when account deletion succeeds; any new deletion-confirmation delivery event is also limited to 30 days.

Minimal email opt-out suppression records remain only while valid to prevent unwanted email, not for marketing. Request identifiers are kept only while needed for fulfillment and verification, and removed when the request is complete. Short-lived sign-in and verification records expire automatically. Providers may retain legally required financial records.

You have the right to:

• Access your data
• Correct incorrect information
• Request data deletion
• Revoke consent

Requests can be made via the contact email.

We adopt technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

This Policy is governed by Brazilian law (LGPD).

Users from other regions are also protected under applicable local laws, including GDPR.

The controller of your personal data is CELSO HENRIQUE DA SILVA TECNOLOGIA DA INFORMACAO LTDA, Brazilian company registration (CNPJ) 67.505.239/0001-94, registered at Rua Guarapuava, 174, apt. 2002A, Mooca, São Paulo/SP, 03164-150, Brazil.

For questions, requests, or data deletion, contact us at:

contact@dorica.app