Brazil Privacy Notice

Brazil Privacy Notice

Published: July 2, 2026
Last updated: July 2, 2026
Document version: 1.0

This Notice supplements the Olisora Privacy Policy for people located in Brazil. It explains how BIONIC PLUS LLC processes personal data under Brazil's General Personal Data Protection Law, Law No. 13,709/2018 (the LGPD). If this Notice conflicts with the general Privacy Policy in relation to processing subject to the LGPD, this Notice applies.

The controller is BIONIC PLUS LLC, TIN 311 660 692 in the Republic of Uzbekistan, registered at Uzbekistan, Tashkent, Mirobod District, OQ UY MFY, Eskiotchopar Ko'chasi, Eski Otchopar Tor Ko'chasi, 3-UY.

Our privacy and data-protection contact, including the channel for contacting the person or team performing the encarregado function, is support@babytips.me.

2. Scope and age eligibility

The LGPD applies where Olisora offers services to people in Brazil or processes personal data collected in Brazil. Olisora is not offered to anyone under 16 years of age. A person under 16 must not create or use an account. Additional information is provided in our Age Eligibility and Child Data Notice.

3. Purposes, data categories, and legal bases

• Account and requested service: contact details, account credentials, profile settings, language, and service activity are processed to create and operate the account, authenticate you, provide requested functions, and communicate about the service. The legal bases are performance of a contract or preliminary procedures at your request and, where applicable, compliance with legal obligations.
• Health and reproductive functions: cycle, fertility, contraception, pregnancy, postpartum, symptom, wellbeing, measurement, checkup, and related child-profile information are processed to provide the trackers, calculations, reminders, personalized content, and reports that you choose to use. Because these categories may reveal health information, we rely on your specific and highlighted consent under Article 11(I) of the LGPD, except where another Article 11 basis clearly applies. See the Health Data Processing Notice and Consent.
• Personal AI reports: relevant health, reproductive, pregnancy, and child-related information is processed and disclosed to our AI processor only when you request a report and provide separate explicit consent. See the AI Personal Reports Data Processing Notice.
• Optional sensitive product analytics: life-stage categories and detailed product-use signals are processed in our Internal Analytics System only with consent. See the Analytics Notice and Consent.
• Limited general measurement: health-neutral installation, session, technical, subscription, and general product events may be processed to measure adoption, reliability, and performance. Where permitted, the basis is our legitimate interest in operating and improving the service, following a necessity and balancing assessment and subject to your right to object. Consent is used where Brazilian law or the applicable platform requires it.
• Subscriptions and payments: plan, purchase, renewal, cancellation, and payment-platform metadata is processed to supply paid functions, administer the contract, meet accounting or legal duties, and establish or defend rights.
• Support, safety, and legal compliance: communications, account and technical data, security events, and relevant service records are processed to answer requests, prevent abuse and fraud, protect the service and users, comply with law, and establish or defend rights. The bases are contract, legal obligation, exercise of rights, and legitimate interests, as applicable.

We do not use legitimate interest as the legal basis for optional processing of health or other sensitive personal data.

4. Sharing and international transfers

Depending on the function, data may be shared with hosting, storage, security, support, payment, and infrastructure providers; Google and Mixpanel for the limited analytics described in the Analytics Notice; OpenAI for a personal AI report requested with separate consent; professional advisers; and public authorities where legally required. We limit the data to what is necessary for the stated purpose.

Personal data may be transferred from Brazil to Uzbekistan, the United States, the European Economic Area, and other countries where our providers or their subprocessors operate. Each transfer requires both an LGPD legal basis for the processing and a valid international-transfer mechanism. Depending on the recipient and destination, BIONIC PLUS uses an adequacy decision recognized by the ANPD, the standard contractual clauses approved by the ANPD and incorporated without modification into the relevant contract, or another mechanism permitted by Article 33 of the LGPD and Resolution CD/ANPD No. 19/2024.

You may request, free of charge, information about the mechanism used for a particular recipient and, subject to protection of commercial and industrial secrets, a copy of the applicable transfer clauses by emailing support@babytips.me.

5. Retention

• Account, profile, health, reproductive, pregnancy, and child-profile data: while the account or relevant feature is active, then deleted or de-identified following account/data deletion, except for limited records that must be retained by law or for the exercise of rights.
• Consent records: for the period needed to demonstrate the choice and address legal claims after the relevant processing ends.
• Subscription and transaction metadata: for the period required by applicable tax, accounting, consumer-protection, payment, and limitation rules.
• Support communications: until the request is resolved and thereafter only for the period reasonably needed for security, quality, legal compliance, or the exercise of rights.
• Security and operational logs: ordinarily up to 21 days in the currently configured application logging environment, unless an event is isolated for incident investigation, security, legal compliance, or the exercise of rights.
• Analytics and AI data: according to the specific periods and controls in the Analytics Notice and AI Notice. Provider-console settings and contractual periods govern where they are not controlled in the application code.

When a retention period ends, data is deleted, securely overwritten, or irreversibly de-identified, subject to backup cycles and lawful retention exceptions.

6. Your LGPD rights

Subject to the LGPD, you may request confirmation of processing; access; correction; anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data; portability where regulated; deletion of data processed with consent, subject to legal exceptions; information about public and private entities with which data was shared; information about the possibility and consequences of refusing consent; withdrawal of consent through a free and facilitated procedure; review of decisions made solely by automated processing that affect your interests; and information about the criteria and procedures used for such decisions, subject to commercial and industrial secrets.

You may also object to processing based on a consent exception where the LGPD has not been complied with, and you may petition the Autoridade Nacional de Proteção de Dados (ANPD) or applicable consumer-protection bodies.

7. Requests and complaints

Email support@babytips.me and describe the right you want to exercise. We may request information reasonably necessary to verify your identity and protect the account. We will respond within the periods required by the LGPD and applicable ANPD regulations. Exercising a privacy right is free, subject to the limits allowed by law.

8. Automated processing

Olisora may use automated calculations to organize tracker information, estimate dates or stages, personalize content, and generate a personal AI report when requested. These functions do not provide a medical diagnosis and are not intended to make decisions about insurance, employment, credit, housing, or access to public services. You may request information and review as provided by the LGPD.

9. Changes

We may update this Notice when our processing or the law changes. We will provide additional notice and request new consent before a material change that requires it.