Privacy Policy

1. The early list

CARGA is run by Antonio Andrade, the controller of your data. The app is not open to the public yet. This section covers the waitlist page at /early. The rest of this policy applies once you have an account.

When you join the list we keep your email address, your language, the campaign tag in the link you used, the date, and the version of the consent line you saw. If you answer the two optional questions, we also keep how many days a week you lift and who you train with, linked to your email. You can skip them. We use your answers to plan invites and shape the product.

We process this data because you consented when you joined, including to marketing emails: a welcome note, build updates, short research questions, a request for a call and your invite. You can withdraw consent at any time with the unsubscribe link in any email or by writing to toniandrade2000@hotmail.com. We keep your entry until you ask us to delete it. If you unsubscribe, we keep your address only so we don't write to you again.

The list is for people 18 and over. The page uses no analytics, advertising pixels or tracking cookies, and we don't use your answers for advertising.

2. Account information

When you sign up we collect your name, email address, password (stored only as a hash by our authentication provider), a username, your language and your time zone. You can add a phone number and a profile photo. We use this to run your account, show your profile and compute things like streaks in your local day.

3. Workout and activity data

We store what you log: sessions, exercises, sets, loads, durations, notes, and what is derived from them — journeys and milestones, streaks, personal records, challenge and league results, and feed posts.

If a coach trains you through CARGA, the workouts they assign and the sessions you log against them are visible to that coach.

4. Health data from Apple Health and Health Connect

Health sync is optional and only exists in the mobile apps. If you turn it on, we read the workouts and step counts you authorise and turn them into activities in your account, so they count toward your journey, streak, challenges and leagues.

Data obtained from HealthKit or Health Connect is used only to provide these fitness features to you. It is never used for advertising or marketing, never sold, never shared with data brokers, and never used to build advertising profiles. We do not write to your health records. You can switch sync off at any time in the app or in your phone's settings; deleting your account deletes the synced activities.

5. What other people can see

Your profile is followers-only by default: only people you approve as followers see your activities, streak, records and feed posts. You can make your profile public in settings, and switch back later.

Regardless of that setting, your name, username and photo can be found by other signed-in users so they can ask to follow you. People in a challenge with you can see your name and your score on that challenge's leaderboard, and people in your weekly league can see your name and league score. Comments and reactions you leave are visible to whoever can see the post. You can block a user; blocked users cannot see your content.

6. Notifications

If you allow notifications, we store a push token or browser push subscription for each device so we can deliver them, plus your per-category choices. Delivery passes through the push service of your browser or phone maker. You can turn categories off in settings or revoke permission on the device, and we delete tokens that stop working.

7. Payments

Payments are not live. Nothing is on sale, and CARGA collects no card or bank details today. If that changes, we will update this policy first.

8. How we use information

We use your information to provide the app, score competitions fairly, send the notifications and emails you would expect (for example account confirmation), send the early list emails you agreed to, keep the service secure and fix problems.

We do not sell personal information and we do not show third-party advertising.

9. Service providers

We rely on service providers that process data on our behalf: a cloud database and authentication provider (Supabase), an application host, an email delivery provider, and the push services run by Apple, Google and browser makers.

Your data, including early list entries, is stored in the United States, and these providers may process it there and in other countries, which may not offer the same protection as your own. If you are in Brazil, this is an international transfer under the LGPD, and we rely on the consent you give when you join the list or create an account.

We may also disclose information when the law requires it or to protect people's safety or our rights.

10. Export and deletion

You can download a copy of your data at any time from Profile → Account → Export my data.

You can delete your account from the same screen. Deletion removes your login, profile, activities, journeys, streak, records, follows, feed posts, comments, reactions, challenge and league entries, notification settings and push tokens. Copies may remain in routine backups for a limited time before they are overwritten.

One thing survives deletion because it belongs to someone else's records: a coach who trained you keeps their own roster entry for you (the name and contact details they entered).

11. How long we keep data

We keep early list entries as described in section 1. We keep account data for as long as your account exists. When you delete your account we delete it as described above. Logs kept for security and debugging are retained for a limited time.

12. Age limits

For this test, the early list, the app and Coach mode are for people 18 and over. If you are under 18, do not join the list or create an account. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has joined the list or created an account, contact us and we will delete it.

13. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing.

If you are in Brazil, the LGPD gives you the right to confirm that we process your data, access it, correct it, have unnecessary or unlawful data anonymized, blocked or deleted, move it to another provider, delete data processed on your consent, learn who we share it with, learn what happens if you refuse consent, and withdraw consent. You can also complain to Brazil's data protection authority, the ANPD.

The export and deletion tools above cover most account requests. For the early list, or for anything else, write to toniandrade2000@hotmail.com and we will respond within the time the law requires.

14. Changes to this policy

If we change this policy in a way that matters, we will update the date above and tell you in the app or by email before the change takes effect.

15. Contact

Antonio Andrade is responsible for your data. Questions or requests: toniandrade2000@hotmail.com.