V Core

Privacy Policy

Last updated: August 5, 2026 · Legal home · Terms of Service

This Privacy Policy explains how MUHD DESENVOLVIMENTO DE SOFTWARE LTDA, a Brazilian limited company registered under CNPJ 68.395.651/0001-61, operating the V Core service (“V Core,” “we,” “us,” or “our”), handles personal information when you use the V Core iOS application and related web services (the “Service”).

1. Scope and controller

MUHD DESENVOLVIMENTO DE SOFTWARE LTDA is the controller responsible for personal information processed for V Core. V Core is a personal wellness and fitness companion for organizing records and viewing trends. It is not a healthcare provider.

This Policy covers the iOS application, support communications, and V Core web pages that link to it. If a future version enables a remote V Core account, cloud sync, or third-party artificial-intelligence processing, the relevant screen and this Policy will explain that processing before it begins.

2. Information we handle

The information depends on the features you choose:

• Profile and onboarding. Information such as date of birth, biological sex, height, weight, goals, preferences, activity level, allergies or intolerances, and answers you choose to provide.
• Health and lifestyle records. Food, nutrition, hydration, sleep, mood, menstrual-cycle and symptom records, training and gym activity, body measurements, lab-report information or files, and related notes.
• Medication and supplement records. Names, doses, schedules, adherence entries, contraceptive records, supplements, and notes that you enter for personal organization. V Core does not prescribe, recommend, calculate, verify, or change a dose.
• Apple Health information. When you grant permission, V Core may access the specific HealthKit types described in Section 5 and shown in Apple’s authorization screen.
• Support communications. Your email address and the content or attachments you send when contacting us.
• Limited technical and diagnostic information. App version, device and operating-system type, request timestamps, IP address, and security or error information may be processed by Apple or by providers that deliver V Core’s public pages and media. If you enable Apple’s sharing of crash diagnostics with developers, Apple may provide us with crash traces and related technical context. We do not intentionally include your wellness logs in diagnostic reports.
• Account information, if enabled. The current version does not create a remote V Core account. In a version where remote sign-in is enabled, we may process your email address, account identifier, authentication events, session information, and security metadata. We will identify the account provider and update this Policy before or when that processing becomes active.

Health, medication, reproductive-health, and similar information may be sensitive personal information. Optional fields and integrations can be left unused.

As of the date above, V Core does not include a third-party advertising, behavioral-analytics, or crash-reporting SDK. Automated calculations and plan-generation features operate locally unless a feature clearly tells you that selected information will be sent to an online service.

3. Where information is stored and processed

• On your device. V Core currently stores your profile, settings, and wellness logs in its local SQLite database. Imported files and automated calculations are handled on the device unless a feature expressly states otherwise.
• Apple Health. HealthKit data remains in Apple’s Health data store. V Core processes the authorized HealthKit information on the device.
• Public content delivery. Supabase currently stores and delivers public exercise media. Other image-delivery providers may supply public interface media. These requests may expose ordinary network information such as IP address, request time, and device or browser headers, but V Core does not intentionally include your wellness logs in those media requests.
• Legal and support pages. Cloudflare hosts V Core’s public legal and related web pages and may process ordinary web-request information when you visit them.
• Device backups. V Core does not intentionally use iCloud as a health-record sync service. Depending on your Apple and device settings, the local app container may be included in Apple-managed encrypted device backups.
• Optional future services. If V Core later offers remote accounts, cloud backup, wellness-log sync, or third-party AI processing, the feature will identify the information sent, purpose, recipients, and available controls before activation. We will update this Policy and obtain any consent required by law.

4. How we use information

We use information to:

• save, organize, display, and let you manage the records you enter;
• show calculations, estimates, comparisons, trends, plans, and general wellness insights requested through the app;
• connect to Apple Health and use authorized data types for the feature you enable;
• deliver exercise media and other public app content;
• respond to support and privacy requests;
• prevent abuse, investigate security incidents, diagnose failures, and maintain Service reliability; and
• comply with law and enforce our Terms of Service.

We do not use health or wellness information to determine eligibility for employment, housing, credit, insurance, or other essential services.

5. Apple Health and HealthKit

Apple Health access is optional and permission-gated. V Core asks for access after you choose the Apple Health connection. Apple lets you approve or deny individual types, and you can continue using the rest of the Service without granting HealthKit access.

The current Apple Health connection may request permission for the following types:

• Steps;
• Active energy burned; and
• Walking and running distance.

V Core uses read access to support activity context and personalization. The current authorization screen may also show write access for those same types; the current onboarding flow does not create or write HealthKit samples. If a future feature writes information to Apple Health, it will do so only for the specific user-initiated action and after Apple grants the corresponding write permission.

V Core does not currently request routine HealthKit access to heart rate, reproductive health, medications, blood glucose, sleep, body measurements, nutrition, clinical records, or other health categories. If a future feature genuinely requires another type, V Core will explain the purpose before requesting it and update this Policy where appropriate.

V Core does not use HealthKit data for advertising, marketing, unrelated profiling, or use-based data mining. We do not sell HealthKit data or disclose it to advertising platforms, data brokers, or information resellers.

You can change or revoke HealthKit access at any time in the Health app or iOS Settings. Revocation stops future access. It does not delete records already stored in Apple Health or local information previously created by V Core. Manage Apple Health records directly in the Health app and local V Core records through available app controls.

6. Legal bases

Where a legal basis is required, we process information needed to provide the Service to perform our agreement with you; optional health and other sensitive information with your consent or explicit consent where required; limited operational information for our legitimate interests in protecting and maintaining the Service when those interests are not overridden by your rights; and information necessary to comply with legal obligations or establish, exercise, or defend legal claims.

You may withdraw consent at any time through the relevant app or iOS control or by contacting us. Withdrawal does not affect processing already lawfully completed. A feature that requires the withdrawn information may stop working.

7. Sharing and service providers

We do not sell personal information or share it for cross-context behavioral advertising. We disclose information only as follows:

• Service providers. Apple provides the App Store, HealthKit, device services, optional diagnostics, and any App Store billing. Supabase delivers public exercise media. Cloudflare hosts V Core’s public web pages. Other media-delivery providers may supply public interface images. These providers may process only the information needed for their contracted or independent platform function and must protect personal information as required by applicable law.
• At your direction. We may send information to a recipient or integration you deliberately choose, such as through an iOS share sheet. HealthKit information is disclosed only as permitted by Apple’s rules and applicable law.
• Future cloud or AI providers. We will not send your wellness records to a cloud-sync or third-party AI provider unless the feature identifies the recipient and purpose and obtains any permission required before transmission.
• Legal and safety reasons. We may disclose information when reasonably necessary to comply with valid legal process, protect rights or safety, investigate fraud or abuse, or establish and defend legal claims.
• Business transition. If the Service is reorganized, financed, acquired, or transferred, information may be disclosed subject to confidentiality, this Policy, and applicable law.

8. Security

We use safeguards designed for the nature of the information, including Apple’s app sandbox and device protections, encrypted network connections, access controls, and provider security measures. No system is completely secure. Keep your device protected and contact us if you suspect unauthorized access involving a V Core-operated service.

9. Retention and deletion

Local records remain on your device until you delete individual entries through available controls or remove the app. Removing the app generally deletes its local container, subject to device backups managed by you or Apple. The current version does not create a remote V Core account or remotely store your wellness logs, so V Core does not currently hold a server-side account or wellness-log copy to delete.

Public web and media-request logs follow the security and retention cycles of the relevant provider. Support communications are retained only as long as reasonably necessary to resolve the request, maintain an appropriate record, or comply with law.

If a future version supports remote account creation, V Core will provide an in-app way to initiate account deletion and will explain what is deleted, retained, and handled by Apple or other independent providers.

10. Your choices and rights

Depending on where you live, including under the GDPR, LGPD, and applicable U.S. state privacy laws, you may have rights to:

• confirm whether we process your personal information and access it;
• correct inaccurate or incomplete information;
• delete, anonymize, or block information in circumstances provided by law;
• receive a portable copy where applicable;
• restrict or object to certain processing;
• withdraw consent;
• obtain information about recipients and automated decisions where applicable; and
• appeal a decision or complain to a competent data-protection authority.

Information stored only on your device is not accessible to V Core, so you should use the app’s controls or your device to manage it. For information held by us, submit a request using Section 14. We may verify your identity before acting. We will not unlawfully discriminate against you for exercising a privacy right.

11. Children and adolescents

V Core is not directed to children under 13. You must also meet any higher minimum age required in your country to use the Service or consent to personal-data processing, or use the Service only with valid authorization from a parent or guardian where law permits. Any processing involving a child or adolescent must serve their best interests. Contact us if you believe we have received information from someone who cannot lawfully use the Service.

12. International processing

V Core is operated from Brazil. Apple, Cloudflare, Supabase, and media-delivery providers may process limited information in Brazil and other countries when distributing the app, delivering public content, hosting web pages, or protecting their services. Those countries may have different data-protection laws.

Where a transfer is subject to the LGPD or another applicable law, we will limit it to what is necessary and use a valid transfer mechanism and appropriate safeguards. Additional information about relevant providers and safeguards may be requested using Section 14.

13. Changes to this Policy

We may update this Policy when the Service, providers, or legal requirements change. We will post the revised version, update the “Last updated” date, and provide additional notice or request renewed consent when required. Material changes apply prospectively.

The English and Brazilian Portuguese versions communicate the same essential practices. The Brazilian Portuguese version includes explanations adapted to Brazilian law. Any inconsistency will be interpreted without reducing rights that cannot be waived under the law applicable to you.

14. Contact us

Controller: MUHD DESENVOLVIMENTO DE SOFTWARE LTDA (CNPJ 68.395.651/0001-61), operating V Core.

Registered office: Rua Visconde do Rio Branco, 1488, Conjunto 909, 9º andar, Condomínio Universe Life Square, Bloco Comercial, Centro, Curitiba - PR, 80420-210, Brazil.

For privacy questions or rights requests, email contact@vcorefitness.com.

This operator-maintained policy applies to V Core; use the contact above with questions. This document is provided for the V Core application; it is not a substitute for advice from a licensed attorney.