HealthIt

← HealthIt

HealthIt account and data deletion

This page explains how to delete your account and data from HealthIt (Android app by MASTER MILS TECNOLOGIA LTDA, CNPJ 44.448.628/0001-20). See also the Privacy Policy. To delete only some data without deleting your account, see the section "Delete only some data".

In the app

  1. Open HealthIt and go to Profile > My data.
  2. Under "Delete", tap "Delete account" and confirm. You must be online: deletion happens on the server first.
  3. To also erase the records on this device (habits, workouts, meals, weight, measurements, water, goals), tap "Delete local data". You can export your data first. Uninstalling the app also removes the data on the device.

By e-mail

If you cannot use the app (for example, you lost access to your Google account or device), write to dpo@mastermils.com.br asking for deletion. Include the e-mail of the Google account used in the app. We reply within 15 days.

Delete only some data (without deleting your account)

You can ask us to delete part of your HealthIt data without deleting your account.

In the app

  1. Your health records (habits, workouts, meals, weight, measurements, water and goals) are stored only on your device. To delete them: open HealthIt, go to Profile > My data and, under "Delete", tap "Delete local data" and confirm. You can export your data first (Profile > My data > "Export my data"). Your account and server data do not change.
  2. To withdraw your health consent: in Profile > My data, under "Consents", tap "Health data" and revoke the consent. The app deletes the record of that consent on the server and stops recording and showing your health data until you consent again. Data on your device is not deleted (use "Delete local data" for that). Offline, the request is queued and sent when you are back online.

By email

To ask us to delete other data we process on the server without deleting your account, write to dpo@mastermils.com.br with the subject "HealthIt - delete data", stating the email of the Google account used in the app and which data you want deleted. We reply within 15 days: we assess the request and tell you what can be deleted.

What is deleted and what is kept

  • Delete local data: removes all health records and settings from the device. The account and server records stay.
  • Revoke health consent: deletes the health consent record on the server. The account, the records of acceptance of the Terms and Policy, and the data on your device stay.
  • The account (Google account ID, email, email HMAC code and first-login and last-access dates) cannot be deleted in parts: it either stays whole or is removed with "Delete account" (section above). If you stop using the app, the server deletes the account after 1 year without access.
  • Access log (IP address, date/time and route): not deleted on request; kept for 6 months under a legal obligation (Brazil's Marco Civil da Internet, art. 15) and then deleted automatically. It is not linked to your account.

What is deleted

  • On the server: account data (Google account ID, e-mail, e-mail HMAC code and first login and last access dates) and consent records (erased when the device has already sent its random code, which the app does automatically). If you reinstalled the app or changed devices, records linked to the old code cannot be identified as yours and are erased after 1 year without access from that device.
  • On the device, if you choose "Delete local data" or uninstall the app: all your health records and settings.
  • Your health records (habits, workouts, meals, weight, measurements, water and goals) are never sent to the server.

What is retained and for how long

  • Access record (IP address, date/time and route of each request to the server): kept for 6 months by legal obligation (Brazil's Marco Civil da Internet, art. 15) and deleted automatically afterwards. It is not linked to your account and is not erased earlier.
  • Deletion request state record (without identification of you): erased 90 days after completion; if not completed, it expires after 30 days and the app notifies you; in that case, request again in the app or by e-mail.
  • If you only revoke health consent (without deleting the account), the account (ID, e-mail, dates) stays on the server; to erase it use "Delete account".

Timeframe

E-mail requests are answered within 15 days (LGPD, art. 19, II). Deletion in the app is immediate when you are online.

Contact: dpo@mastermils.com.br