Mulher Águia 360

Privacy Policy

Transparency about how we collect, use, share, and protect your personal data — including the sensitive health data used in your training, diet, and supplementation tracking.

Last updated: September 8, 2026

1. Who Processes Your Data

This Privacy Policy explains how your personal data is processed when you use the Mulher Águia 360 site and platform. Two parties take part in this processing, with different roles as defined by Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018):

Data controller for student health, training, and progress data: Mara Semiramis, the professional responsible for the training, diet, and supplementation program offered through Mulher Águia 360. She decides the purposes and means of processing the physical assessment, training, diet, and supplementation data recorded on the platform.
Technology platform operator: Nova Era Technology LTDA (Brazilian company registration, CNPJ 56.006.577/0001-65), headquartered at Rua Américo Brasiliense, No. 232, Cambuí, Campinas/SP, Brazil, ZIP code 13.025-230. Nova Era Technology develops, hosts, and technically maintains the site and system, processing personal data strictly under the controller's instructions and for the purposes described in this policy — never for its own purposes.

2. What Data We Collect

2.1. Data provided at sign-up

When you create your account at /en/sign-up/, we collect: full name, email, phone number, date of birth, sex, and the password you choose.

2.2. Your account data

To keep your account working securely, we store: name, email, your password — always as a cryptographic hash, never in plain text (see section 7) — and your access role on the platform (student, administrator, or master).

2.3. Health, training, diet, and supplementation data (sensitive data)

The physical assessment, training, diet, and supplementation modules of your progress tracking contain sensitive personal health data, under Article 11 of the LGPD. This data receives enhanced treatment: role-based access control (RBAC) — only you, Mara, and the strictly necessary technical team can view it —, it is never used for commercial or advertising purposes, and it is never shared with third parties outside the cases described in section 4.

2.4. Cookies and similar technologies

We use cookies for the site to function, to remember your preferences, and, when you authorize it, for audience measurement. The full breakdown — which cookies exist, what they are for, and how to manage your consent — is in our Cookie Policy.

2.5. LGPD rights request form

If you fill out the data subject request form at /en/data-protection/, we collect the data necessary to identify you and fulfill your request (for example, name, email, and phone number provided in the form itself).

3. How We Use Your Data

Create and maintain your account and securely authenticate your access to the platform.
Provide the contracted training, diet, and supplementation tracking, recording and displaying your physical assessments and personalized plans.
Respond to your questions and requests, including via WhatsApp.
Comply with legal and regulatory obligations, and respond to authorities when legally required.
Protect the platform against fraud, unauthorized access, and automated use (bots).
When you consent, measure audience and improve the site — as detailed in the Cookie Policy.

We never sell your personal data, nor do we use sensitive health data for advertising purposes.

4. Who We Share Your Data With

As a rule, we do not share your personal data with third parties. The exception is the use of infrastructure providers strictly necessary for the site and system to function:

Cloudflare, Inc. — provides site hosting, the platform's database, and the protection against automated traffic (bots) used in public forms. Cloudflare processes data as a data processor, following our instructions.

We may also share data when required by law, court order, or request from a competent authority, or to exercise or defend rights in judicial, administrative, or arbitration proceedings.

5. International Data Transfer

Cloudflare, Inc.'s infrastructure operates on a global network, which may involve processing data outside Brazil. This processing is carried out with contractual safeguards compatible with the LGPD (Article 33), including data protection contractual clauses signed with Cloudflare, to ensure an adequate level of protection for your personal data.

6. How Long We Keep Your Data

We keep your personal data for as long as your account is active on the platform, so that your training, diet, and supplementation tracking remains available. After your account is closed, we may retain certain data for the additional period required to comply with a legal or regulatory obligation, or for the regular exercise of rights in judicial, administrative, or arbitration proceedings, as authorized by Article 16 of the LGPD. Once these periods end, the data is deleted or anonymized.

7. How We Protect Your Data

Passwords never in plain text: we store only the cryptographic hash of your password, generated with PBKDF2 and 100,000 iterations — even in the event of unauthorized access to the database, your original password cannot be recovered from the hash.
Encrypted connection: all traffic between your browser and the platform happens over HTTPS/TLS.
Role-based access control (RBAC): each user can only access data compatible with their role (student, administrator, or master) — your sensitive training, diet, and assessment data is not visible to other students.
Bot protection: public forms (such as sign-up and LGPD requests) use Cloudflare Turnstile to block automated submissions and fraud attempts.

8. Your Rights as a Data Subject

The LGPD guarantees you, among others, the rights to confirmation of the existence of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing, and revocation of consent. You can exercise these rights at any time through our dedicated request form, with full details on each right:

Request My LGPD Rights

9. Changes to This Policy

We may update this Privacy Policy periodically, for example to reflect changes to the platform or legislation. The date at the top of this page always indicates the most recent version. We recommend that you review it from time to time.

10. Contact

Do you have any questions about this Privacy Policy or how your data is handled? Reach out to us directly on WhatsApp:

Chat on WhatsApp