Your Data Rights
Last updated:
Overview
Under data protection laws including the General Data Protection Regulation (GDPR), Lei Geral de Proteção de Dados (LGPD), and other privacy regulations, you have specific rights regarding your personal data.
This page explains your rights and how to exercise them with Gram Fit.
Your Rights
Right to Access
You have the right to request a copy of the personal data we hold about you. This includes information about how we use your data and with whom we share it.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
Right to Erasure (“Right to be Forgotten”)
You can request that we delete your personal data in certain circumstances, such as:
- The data is no longer necessary for the purpose it was collected
- You withdraw your consent (where consent was the legal basis)
- You object to the processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer this data directly to another service provider where technically feasible.
Right to Restrict Processing
You can request that we limit how we use your data in certain circumstances, such as while we verify the accuracy of your data or assess an objection you have raised.
Right to Object
You have the right to object to processing of your personal data based on our legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where we process your data based on your consent, you can withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority (data protection authority) in your country of residence if you believe we have violated data protection laws.
How to Exercise Your Rights
To submit a request to exercise any of your data rights, you may:
1. Email Us
Send your request to privacy@gram.fit with:
- Your full name and email address associated with your account
- Which right(s) you wish to exercise
- Any relevant details to help us locate your data
2. In-App Settings
For some requests (like data deletion), you can use the Privacy Center in our app:
- Go to Settings → Privacy Center
- Select the action you want to take
- Follow the prompts to complete your request
Verification
To protect your privacy, we will verify your identity before processing your request. This may involve confirming your email address or asking security questions.
Response Time
We will respond to your request within 30 days. If your request is complex or we receive many requests, we may extend this by an additional 60 days. We will notify you if an extension is needed.
No Fee (Usually)
We will not charge a fee for most requests. However, if your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee or refuse to comply with the request.
Data We Hold About You
When you use Gram Fit, we may hold the following categories of personal data:
| Category | Examples | Retention |
|---|---|---|
| Account Data | Email, name, profile settings | Until account deletion |
| Nutrition Data | Food logs, meal plans, calorie targets | Until account deletion |
| Health Data | Weight, goals, biometric data (with consent) | Until account deletion |
| Usage Data | App interactions, feature usage | 12 months |
| Device Data | Device type, OS, approximate location | 12 months |
For more details about our data practices, please see our Privacy Policy.
Contact Us
If you have questions about your data rights or want to submit a request, please contact us:
Email: privacy@gram.fit
Data Protection Officer: For GDPR-related inquiries, you can contact our Data Protection Officer at the same email address.
Response Time: Within 30 days of receiving your verifiable request.