Privacy Policy
InsurIA Wellness · Last updated: 2026-08-18
Who processes your data
This policy describes how InsurIA Wellness processes personal data. The controller is «legal entity, company number and address».
Data protection officer, as required by article 41 of the Brazilian LGPD: «officer's name and e-mail».
Contact for anything in this policy: privacidade@insuria.app.
What this product is — and what it is not
InsurIA Wellness follows wellbeing over time. It describes what was measured and compares a person with their own recent pattern.
It is not a medical device and it does not diagnose. Clinical classification (green/amber/red) exists only where there is a clinical context and a rule set naming the professional who authored it; everywhere else the product shows measurements, a wellbeing index and goals, never a clinical colour.
What data is processed
Only what the follow-up needs. Nothing is sold, and nothing is used for advertising or to train models.
| Category | What it is | Where it comes from |
|---|---|---|
| Account identity | Name, e-mail, and the identifier Google or Apple returns when authenticating. No password is stored for social sign-in. | You, when signing in |
| The followed person's record | Name, internal code, date of birth, admission date, legal representative and care notes, where applicable | You, or the organisation that invited you |
| Health and wellbeing measurements | Heart rate, variability (HRV), oxygen saturation, temperature, respiration, blood pressure, steps, calories, distance, weight and sleep — each with value, unit, timestamp, source and a quality indicator | Facial scan, ring, the device's health platform, manual entry |
| Consents | Which permission was given or withdrawn, and when | You |
| Devices | The paired ring, and your phone's notification token used to wake the sync | Your device |
| Access records | Who read which record and when, for audit | The system |
Where the measurements come from
Facial scan: the analysis runs on your device. The video is not sent to our servers and is not stored by us — what reaches us are the computed numbers and a signal-quality indicator.
Ring: read directly over Bluetooth by the app, on your phone.
Apple Health and Google Health Connect: read-only, limited to the types you authorise in the operating system, and only while you keep that authorisation. The app never writes to those platforms.
Manual entry: values you or the team record.
Why it is processed, and on what legal basis
Health data is sensitive personal data under the LGPD. Processing rests on your specific, highlighted consent (article 11, I), given per purpose — facial scan, ring and health platform are separate permissions, and each can be withdrawn without affecting the others.
The purposes are: showing you your own follow-up; letting the staff of the organisation that follows you do the same; computing the wellbeing index, goals and comparisons against your own history; and keeping an audit record of who accessed what.
Identity and service-usage data are processed to perform the contract and to meet record-keeping obligations.
Who can see your data
You. The followed person sees their own follow-up.
The staff of the organisation that invited you, limited to the groups they have access to. Organisations are separated by construction: one profile cannot reach another organisation's records.
Anyone you expressly allow to follow you, such as a family member. That permission is revocable at any time and takes effect immediately.
The processors listed below, each limited to what it needs.
| Processor | What for | Where |
|---|---|---|
| Cloud infrastructure provider | Application server and database | São Paulo, Brazil |
| Google and Apple | Authentication (Sign in with Google / with Apple) and delivering notifications to the device | United States |
| Facial-analysis technology provider | Analysis running on your device | European Union |
| E-mail delivery provider | System e-mail (invitations and notices) | United States |
Where the data lives, and for how long
Application data is held on a server located in São Paulo, Brazil.
Measurements are kept for as long as the follow-up lasts, because comparing you with your own history is what the product does. Audit and billing records are kept for the period the applicable law requires and are append-only by construction — they cannot be altered or deleted once written.
The period we adopt is 24 months after follow-up ends. Today that period is applied through review and instruction, not by automatic deletion — and we would rather say so than promise otherwise.
At any time, regardless of that period, you may ask for erasure — and it happens when it is asked for, as described below.
Your rights, and how to exercise them
The LGPD (article 18) gives you: confirmation that processing exists; access; correction; anonymisation, blocking or deletion of data that is unnecessary or processed unlawfully; portability; information about who we share with; and withdrawal of consent.
To exercise any of them, write to privacidade@insuria.app. We answer within 15 days.
Deletion: on request, the name, date of birth, legal representative details and care notes are erased from the record, and the measurements stop being associated with an identifiable person. Audit and billing records remain, without identifying you, because the law requires them to exist.
Withdrawing a consent takes effect immediately and does not erase what was already measured: it stops collection from that source. If you also want existing data deleted, ask for both.
Children and people under legal representation
Where the followed person is a child, an adolescent, or under legal representation, consent is given by the representative, and the record states who that is.
Security
Access requires authentication. All traffic is encrypted in transit. Access is scoped to the organisation and profile of whoever asks, and every access to a person's record is audited.
No system is immune. If an incident carries relevant risk, we will notify you and the Brazilian data protection authority (ANPD).
Changes
Material changes will be announced in the app and by e-mail before they take effect. The date of the last update is at the top of this page.