Privacy Policy & Sensitive Health Data Protection

GLP-1 Daily (diarioglp1.com) is designed under the foundational principles of Privacy by Design and strict clinical confidentiality, in total observance of the General Data Protection Regulation (Regulation EU 2016/679 — GDPR), UK GDPR, and the U.S. Federal Trade Commission (FTC) Health Breach Notification & Privacy directives.

1. Data Collected & Explicit Consent (GDPR Article 9 & CCPA)

We collect and process solely the minimal information required to deliver your private personal dashboard (GDPR Art. 6(1)(b) and Art. 9(2)(a)):

• Authentication & Profile: Email address and cryptographic one-time password (OTP) verification tokens.
• Billing & Invoicing: International payment methods are securely processed with PCI-DSS Level 1 certification by Stripe Inc. (Credit/Debit Cards, Apple Pay, Google Pay) or decentralized on-chain Web3 stablecoins (USDC/USDT). We never store or view raw credit card numbers.
• Voluntary Self-Reported Health Logs: Date and anatomical site of subcutaneous injections, body weight measurements, daily protein and hydration logs, and user-configured medication dosage names for steady-state calculation. By entering these records, you provide explicit affirmative consent for their secure processing solely to render your private journal.

2. Zero Health-Ad Tracking, Strict Isolation & FTC Compliance

We provide absolute, binding privacy commitments to our global users:

• Zero Data Brokering or Reselling: We never sell, lease, rent, or trade your personal or health data to pharmaceutical companies, insurance underwriters, healthcare plans, employer groups, or data brokers.
• No Ad Pixels on Health Records (FTC Compliance): In strict adherence to FTC health application enforcement policies, no personal health metrics, symptoms, or medication entries are shared with third-party tracking or advertising networks (including Meta/Facebook Pixel, Google Ads Remarketing, TikTok, or Twitter/X).
• Zero Public AI Model Training: Your private clinical logs are strictly excluded from ingestion or training datasets of any public artificial intelligence or large language models.
• Multi-Tenant Isolation & Encryption: All data is transmitted exclusively over encrypted TLS 1.3 channels and stored with AES-256 encryption at rest, using segregated tenant session keys.
• Doctor PDF Report Discretion: Clinical summary PDF reports are generated exclusively on-demand under your voluntary direction, allowing you to print or present them in person to your physician.

3. International Data Transfers & User Autonomy (GDPR Articles 15–22)

You remain the sole owner of your data. At any time, via the My Account dashboard or by emailing privacy@performacia.com.br, you may exercise your global data rights:

• Full Data Portability: Export your complete historical tracking data in an open, structured format.
• Permanent Account Eradication (Right to Erasure): With a single command, you can permanently, irreversibly, and completely delete your account and all associated health records from our active databases.
• Cross-Border Safeguards: Cross-border data processing is safeguarded with technical security measures equivalent to EU Standard Contractual Clauses (SCCs).