Privacy Policy

The platform is offered to running clubs under each club's own brand. Therefore:

• The running club where you train (Leandro Bitencourt) decides how your athlete data is used to follow your training and is the controller of that data.
• Correria operates the platform on behalf of the running club (processor) and is the controller of the data needed to maintain the platform, your access account and the integrations with devices.
• Contact about privacy and with Correria's data protection officer: legal@correria.co.

• Registration: name, email, phone and photo.
• Profile and health: date of birth, height, weight, gender, blood type, registration answers (such as goal and health information) and physical test results.
• Workouts: prescribed workouts, completed workouts, pace, distance, time, heart rate, cadence, laps and activity samples.
• Connected devices: data received from Garmin and Strava when you connect those accounts (sections 10 and 11).
• Communication: messages exchanged with the coach within the workout.
• Subscription: plan, subscription status and billing history with the running club.
• Usage and security: access logs and logs of actions on the platform.

• To allow your running club to prescribe, follow and adjust your workouts.
• To show you your history, your training zones and your progress.
• To send structured workouts to your watch, when you authorize it.
• To manage your account, your access and your subscription.
• To keep the platform secure, prevent fraud and comply with legal obligations.

We do not sell personal data and we do not use it for advertising.

We process data to perform the service you contracted with your running club, to comply with legal obligations, based on legitimate interest in the security of the platform and, for health data and connected device data, with your consent, which you give when you fill in that information or connect the device account and which you can withdraw at any time.

• Your running club's team (coaches and managers) sees the data needed to follow your training.
• Other athletes in your running club see, in the team's weekly ranking, your first name with the initial of your last name, your photo and the number of workouts you completed that week. No other workout data, such as distance, pace, heart rate or location, is shown. You can leave the ranking in Settings, Privacy.
• Providers that keep the platform running: cloud hosting and database (Lovable, with servers in the United States) and sending of platform emails.
• Garmin and Strava, only when you connect those accounts (sections 10 and 11).
• Payment provider, when billing through the platform is active at your running club.
• Authorities, when required by law.

Correria does not use third-party artificial intelligence (AI) services to process personal data, health data or data received from connected devices (Garmin and Strava), and does not use this data to train AI models. Garmin data is used only for the purposes described in the Garmin data section.

Data is stored on servers in the United States, with providers that adopt security measures compatible with the LGPD.

• Account data, workouts and tests: while your account exists.
• Technical notifications received from devices (Garmin and Strava) already processed: 30 days.
• Audit logs of actions: 12 months.
• Email sending logs: 180 days.

When you delete your account, we delete or anonymize the data, except what the law requires us to keep.

You can request confirmation of processing, access, correction, anonymization or deletion, portability, information about sharing and withdrawal of consent. Request it through the app (Menu → Settings → Delete account, for deletion) or by email at legal@correria.co. We respond within 15 days.

When you connect your Garmin Connect account, Correria receives data from Garmin through the official integration (Garmin Connect Developer Program).

• Artificial intelligence: we do not process Garmin data with third-party AI services and we do not use Garmin data to train AI models.
• What we receive: your activity data, such as type, date and time, duration, distance, pace and speed, heart rate, cadence, laps, activity samples and the device name.
• How we use it: to show your activities and history in the app, to let the coach at your running club compare the prescribed workout with the one you completed and, if you authorize it, to send structured workouts to your watch through Garmin Connect.
• Where we store it: in the platform database, on servers in the United States. The credentials for your Garmin account are stored securely, only on our server, and are never shared.
• Who we share it with: only your running club's coaching team, inside the platform, to follow your training. We do not sell it, we do not share it with any other third party, and we do not use third-party AI services to process Garmin data. The only exception is your running club's weekly ranking, which shows other athletes in your club only the number of workouts you completed that week, without any activity data. You can leave the ranking in Settings, Privacy.
• How long we keep it: technical notifications received from Garmin are deleted 30 days after processing; imported activities stay in your history while your account exists, and you can request deletion at any time (section 9).
• How to disconnect: in Settings → Devices in the app, or in Garmin Connect. When you disconnect, we delete the credentials and stop receiving new data.

Garmin and Garmin Connect are trademarks of Garmin Ltd. or its subsidiaries.

When you connect your Strava account, we receive your activities (type, date, duration, distance, pace, heart rate and laps) to show them in your history and so the coach at your running club can follow your training. This data is not shown to other athletes, except for the count of completed workouts in the team's weekly ranking, which you can turn off in Settings, Privacy. You can disconnect in Settings → Devices or in Strava itself; when you disconnect, we delete the credentials and stop receiving new data.

When you use the platform, you appear in your running club's weekly ranking with your first name, the initial of your last name, your photo and the number of workouts completed that week. You can turn this off at any time in Settings, Privacy. When you turn it off, you no longer appear to other athletes and no data is deleted.

We use encrypted connections, profile-based access control (each person sees only what they need), integration credentials stored only on the server, and audit logs.

The platform is intended for people over 18. Minors may only use it with authorization from their legal guardian, obtained by the running club.

We use only the storage needed to keep you signed in and remember preferences. The running club website loads fonts from Google Fonts, which sends Google technical connection data (such as the IP address).

We may update this policy. The date at the top indicates the latest version, and relevant changes will be announced in the app.