V Core

Privacy Policy

Last updated: August 2, 2026 · Legal home · Terms of Service

This Privacy Policy explains how MUHD & ASSUNCAO LTDA, a Brazilian limited company registered under CNPJ 00.707.536/0001-41, operating the V Core service (“V Core,” “we,” “us,” or “our”), handles personal information when you use the V Core iOS application and related web services (the “Service”).

1. Scope and controller

MUHD & ASSUNCAO LTDA is the controller responsible for personal information processed for V Core. V Core is a personal wellness and fitness companion for organizing records and viewing trends. It is not a healthcare provider.

This Policy covers the iOS application, account services, support communications, and V Core web pages that link to it. Apple and other third parties process information under their own privacy policies when you use their services.

2. Information we handle

The information depends on the features you choose:

• Account and authentication. Your email address, account identifier, authentication events, confirmation status, session information, and security metadata needed to create and protect your account. V Core does not receive your plaintext password.
• Profile and onboarding. Information such as date of birth, biological sex, height, weight, goals, preferences, activity level, allergies or intolerances, and answers you choose to provide.
• Health and lifestyle records. Food, nutrition, hydration, sleep, mood, menstrual cycle and symptom records, training and gym activity, body measurements, lab-document files, and related notes.
• Medication and supplement records. Names, doses, schedules, adherence entries, contraceptive records, supplements, and notes that you enter for personal organization. V Core does not prescribe, recommend, calculate, verify, or change a dose.
• Apple Health information. When you grant permission, V Core may access the specific HealthKit types shown in Apple’s authorization screen. The types V Core may request are described in Section 5.
• Support communications. Your email address and the content and attachments you send when contacting us.
• Limited technical information. App version, device and operating-system type, request timestamps, IP address, and security or error information may be processed by Apple, our authentication provider, or our website host as necessary to deliver and protect their services. V Core does not currently include a third-party advertising or behavioral analytics SDK.

Health, medication, reproductive-health, and similar information may be sensitive personal information. Optional fields and integrations can be left unused.

3. Where information is stored

• On your device. V Core currently stores your profile, settings, and wellness logs in the app’s local database. Imported lab documents are handled on the device. Deleting the app generally removes information stored only in its app container, subject to device backups managed by you or Apple.
• Account service. If you create an account, your email, account identifier, authentication metadata, and session information are processed by Supabase, our authentication and infrastructure provider. Authentication sessions are also stored in the iOS Keychain.
• Apple Health. HealthKit data remains in Apple’s Health data store. V Core processes authorized HealthKit information on the device unless a separate sync feature expressly tells you that particular information will be uploaded and asks for any consent required by law.
• Optional future sync. If V Core later offers cloud backup or sync for wellness logs, the feature will identify what will be uploaded before activation. We will update this Policy and obtain additional permission where required. V Core does not currently upload your local wellness logs to Supabase merely because you create an account.

4. How we use information

We use information to:

• create, authenticate, secure, and support your account;
• save, organize, display, and let you manage the records you enter;
• show calculations, estimates, comparisons, trends, and general wellness insights requested through the app;
• connect to Apple Health and read authorized data types for the feature you enable;
• write a record to Apple Health only when an implemented feature clearly offers that action and you grant write permission;
• respond to support, privacy, and account-deletion requests;
• prevent abuse, investigate security incidents, and maintain Service reliability; and
• comply with law and enforce our Terms of Service.

We do not use health or wellness information to determine eligibility for employment, housing, credit, insurance, or other essential services.

5. Apple Health and HealthKit

Apple Health access is optional and permission-gated. V Core asks for access only after you choose an Apple Health feature. Apple lets you approve or deny individual types and, where available, limit the history V Core can read.

Depending on the feature and app version, V Core may request read access to:

• Activity and workouts: workouts, activity summaries, steps, walking or running distance, cycling distance, flights climbed, exercise time, stand time and stand hours, and active and basal energy;
• Heart and recovery: heart rate, resting heart rate, walking heart-rate average, heart-rate variability, blood-oxygen saturation, respiratory rate, and cardio fitness (VO₂ max);
• Sleep and mindfulness: sleep analysis and mindful sessions;
• Body measurements: body mass, height, body-mass index, body-fat percentage, and lean body mass; and
• Nutrition: dietary energy, protein, carbohydrates, total fat, and water.

V Core does not currently need routine access to blood type, date of birth, biological sex, or blood glucose from HealthKit. If a future feature genuinely requires another type, V Core will explain the purpose before requesting it and this Policy will be updated where appropriate.

V Core does not use HealthKit data for advertising, marketing, profiling for unrelated purposes, or use-based data mining. We do not sell HealthKit data or disclose it to advertising platforms, data brokers, or information resellers. We do not store personal health information in iCloud.

You can change or revoke HealthKit access at any time in the Health app or iOS Settings. Revocation stops future access; it does not delete records already written to Apple Health or copies you previously chose to store in V Core. Manage Apple Health records directly in the Health app and delete V Core records through the app’s controls.

6. Legal bases

Where a legal basis is required, we process account information to perform our agreement with you; optional health and sensitive information with your consent or explicit consent where required; security and limited operational information for our legitimate interests in protecting and maintaining the Service when those interests are not overridden by your rights; and information necessary to comply with legal obligations.

You may withdraw consent at any time through the relevant app or iOS control or by contacting us. Withdrawal does not affect processing already lawfully completed. A feature that requires the withdrawn information may stop working.

7. Sharing and service providers

We do not sell personal information or share it for cross-context behavioral advertising. We disclose information only as follows:

• Processors. Supabase processes account authentication and related infrastructure data. Cloudflare hosts V Core’s public legal and account-recovery pages and may process ordinary web-request information. Apple provides the App Store, HealthKit, device services, and any App Store billing. Processors may act only for the contracted purpose and must protect information consistently with applicable law.
• At your direction. We may send information to a recipient or integration you deliberately choose, such as through an iOS share sheet. HealthKit information is disclosed only as permitted by Apple’s rules and applicable law.
• Legal and safety reasons. We may disclose information when reasonably necessary to comply with valid legal process, protect rights or safety, investigate fraud or abuse, or establish and defend legal claims.
• Business transition. If the Service is reorganized, financed, acquired, or transferred, information may be disclosed subject to confidentiality, this Policy, and applicable law.

8. Security

We use safeguards designed for the nature of the information, including Apple’s app sandbox and Keychain, encrypted network connections, access controls, and provider security measures. No system is completely secure. Please use a unique password and contact us if you suspect unauthorized access.

9. Retention and deletion

Local records remain on your device until you delete them, erase your account data in the app, or remove the app, subject to backups you control. Account and authentication information is retained while your account is active and is deleted when you complete in-app account deletion, except for limited information that must be retained for security, fraud prevention, dispute resolution, or law.

Operational logs, deletion records, and protected backups follow the provider’s security and backup cycles and are isolated from ordinary use until overwritten. Support communications are retained only as long as reasonably necessary to resolve the request and maintain an appropriate record.

In-app account deletion removes the V Core account from our active authentication system and erases V Core’s local app database on that device. It does not delete information already written to Apple Health, Apple-managed purchase records, or device backups controlled by you or Apple. If deletion cannot be completed in the app, email us from the address associated with the account.

10. Your choices and rights

Depending on where you live, including under the GDPR, LGPD, and applicable U.S. state privacy laws, you may have rights to:

• access or know about personal information we process;
• correct inaccurate information;
• delete information or your account;
• receive a portable copy where applicable;
• restrict or object to certain processing;
• withdraw consent; and
• appeal a decision or complain to a competent data-protection authority.

We will not unlawfully discriminate against you for exercising a privacy right. To submit a request, contact us using Section 14. We may verify your identity and the account involved before acting.

11. Children

V Core is not directed to children under 13. You must also meet any higher minimum age required in your country to consent to personal-data processing, or use the Service only with valid authorization from a parent or guardian where law permits. We do not knowingly collect personal information from a child who cannot lawfully use the Service. Contact us if you believe this has occurred.

12. International processing

V Core is operated from Brazil. Our providers may process information in Brazil and other countries, which may have different data-protection laws. Where required, we use contractual or other recognized safeguards for international transfers and provide information about those safeguards upon request.

13. Changes to this Policy

We may update this Policy when the Service, providers, or legal requirements change. We will post the revised version, update the “Last updated” date, and provide additional notice or request renewed consent when required. Material changes apply prospectively.

14. Contact us

Controller: MUHD & ASSUNCAO LTDA (CNPJ 00.707.536/0001-41), operating V Core.

For privacy questions, rights requests, or account-deletion assistance, email contact@vcorefitness.com.

This operator-maintained policy applies to V Core; use the contact above with questions. This document is provided for the V Core application; it is not a substitute for advice from a licensed attorney.