Privacy Policy
Effective July 14, 2026
This policy explains, without unnecessary legalese, what Belzo does with your data — especially your photos, which are the most sensitive thing you trust us with. It covers the Belzo app and this website.
1. Who is responsible for your data
The data controller is The Chosen One Naturais Ltda, a Brazilian company that develops and operates the Belzo app. For anything related to privacy, including exercising your rights, write to contato@belzoapp.com.
2. What we collect
We collect only what the product needs in order to work:
| Data | What it is for |
|---|---|
| Photos of your face | Generating your reading, building your routine and building your progress timeline. This is the core of the app. |
| Answers to the intake questionnaire (age, habits, goal) | Personalizing your routine and the calculation of your potential. |
| Routine records (what you checked off, and when) | Keeping your history, your streak and the movement of your curve. |
| Email address | Identifying your account, recovering access and contacting you about the service. |
| Subscription data | Confirming whether your subscription is active. Payment is processed by Apple — we never see your card. |
| Technical and usage data (device model, app version, screens visited, errors) | Keeping the app stable and understanding where it breaks. |
3. Your photos: the most important part of this policy
We treat the image of your face as sensitive personal data, with the care that requires. In practice, that means:
- We collect your photos only with your specific, clearly presented consent, requested inside the app before your first reading. You can withdraw that consent at any time.
- Your photos are used to generate your reading and your progress timeline. Nothing beyond that.
- They are stored for as long as your account exists, because comparison over time is precisely what the app delivers. You can delete any individual photo, or your whole account, whenever you want.
- We do not use your face to identify you biometrically, and we do not run facial recognition to link your image to any other database or person.
- We do not sell, rent or license your photos. They never appear in advertising, in marketing material or on any public surface without a separate, explicit request for that specific use.
- We do not use your photos to train artificial intelligence models.
4. Who we share it with
We do not sell your data. We share the minimum necessary with service providers who operate under contract and may only process the data on our instructions:
- An AI image-analysis provider — receives the photo to generate the reading and does not retain it to train models.
- A cloud infrastructure and storage provider — hosts your account and your photos, encrypted.
- Apple — processes the subscription payment and tells us only whether it is active.
- A transactional email provider — sends operational messages, such as access recovery.
- Public authorities, where there is a legal obligation or a court order.
Some of these providers operate outside Brazil. In those cases, the international transfer is made with the safeguards required by Brazil's data protection law (LGPD), including contractual clauses providing equivalent protection.
5. Why we are allowed to process your data (legal basis)
- Consent — for your photos and for data about your habits.
- Performance of a contract — to keep your account and your subscription working.
- Compliance with a legal obligation — where the law requires us to keep or report something.
- Legitimate interests — for security, fraud prevention and fixing bugs, always within the limits of what you would reasonably expect.
6. How long we keep it
- Photos, routine and history: for as long as your account exists.
- After you delete your account: we erase the photos and the content within 30 days, backup copies included, unless the law requires otherwise.
- Tax and transaction records: for the period Brazilian law requires.
7. Your rights
Brazil's data protection law (LGPD) gives you rights over your data, and we honor them free of charge and without asking you to justify yourself. If you are in the United Kingdom or the European Union, you have equivalent rights under the GDPR, and we handle those requests the same way:
- Know whether we process your data, and access what we hold.
- Correct data that is incomplete or out of date.
- Request deletion of data processed on the basis of your consent.
- Withdraw your consent — including consent for your photos — at any time.
- Request portability of your data.
- Object to a given processing activity, and ask who we share your data with.
To exercise any of them, write to contato@belzoapp.com. We respond within 15 days. You can also delete your entire account yourself, right in the app, without talking to anyone.
8. Security
Photos and account data are encrypted in transit and at rest. Internal access is restricted to the fewest people needed to operate the service, and it is logged. No system is infallible — if an incident occurs that could put you at meaningful risk, we will notify you and the Brazilian data protection authority (ANPD), as the law requires.
9. Minors
Belzo is for adults 18 and over only. We do not knowingly collect data from minors. If we discover that an account belongs to a minor, it will be closed and the data erased.
10. This website
This site uses no advertising cookies and does no cross-site tracking. We use only aggregate, anonymous traffic measurement — no individual profiling, and nothing sold to third parties.
11. Changes to this policy
If we change something material, we tell you inside the app before the change takes effect. The effective date at the top of this page is always the one for the current version.