Privacy
Version of November 11, 2026
This is a translation of the Portuguese original. If the two differ, the Portuguese version prevails.
Who looks after your data
RUSHCLUB LTDA, CNPJ (Brazilian company registration) 62.950.297/0001-03, headquartered at Travessa Narciso Antonio Junior, 150, sala B, Barretos, SP, CEP 14781-086, Brazil, is the controller of the data of the RUSH app and of this site. For any privacy matter, including reaching the data protection officer, write to contato@rushapp.pro.
What we keep
| Data | What for | Who sees it |
|---|---|---|
| Email and sign-in method (Apple, Google, or email and password) | To create and protect your account | Only you. Our team sees the email masked and only opens the full email to handle a request of yours, with a record of who opened it |
| Name and username | To show who you are in the app | Your username appears in the ranking to other signed-in athletes. Your name, only you (and our team) |
| Workouts and cardio: date, duration, volume and sets | To calculate your XP and your history | Only you |
| Username, XP, level, streak and season position | Ranking | Other signed-in athletes |
| App backup: routine, history, weight, measurements and your sign-up answers (goal, level, age, sex, height and physical limitations) | To bring your progress back on a new iPhone | Only you. No report and no screen used by our team reads this backup |
| Invite: the username of whoever invited you, if you enter it | To count the invites of the person who brought you in | You. The person who invited you only sees how many people joined through their invite and the highest level among them, not who they are |
| Usage events, from a closed list (opened the app, finished a workout) | To understand what works and what breaks | Our team, as aggregated numbers |
| Reports you send (the reported username and the reason) | To moderate | Our team |
What stays only on your iPhone
- Profile photo, bio, progress photos and the photos in your posts.
- Heart rate, steps and calories that come from Apple's Health app.
- Your conversation with the coach.
None of this is stored on our servers. When you ask the coach something, your question and the day's messages pass through our server to the AI, as explained below.
Health data
RUSH only reads Apple's Health app if you allow it, and you can withdraw that permission whenever you want in the iPhone Settings. We do not use health data for advertising, we do not sell it and we do not share it with third parties.
Artificial intelligence
The routine, the coach and the plate photo use third-party AI models: Google (Gemini) and DeepSeek. What is sent:
- Routine: goal, level, training days, sex, age, weight, height and physical limitations.
- Coach: your question and the earlier messages of the day's conversation, goal, level, sex, age, weight, your routine, today's workout, your calorie, protein and water targets, and your level and streak in the app.
- Plate photo: the photo you took of your meal.
This data passes through our server, goes to the provider only to generate the answer and is not stored by us. Your name and your email are not sent. We only keep how many times you used the AI that day and the size of the messages (in tokens), without their content.
The app asks for your permission before the first use of the AI. Without it, the routine and the plate photo work without AI and the coach stays off. You can change this whenever you want in Perfil › Ajustes (Profile › Settings).
Who we share with
- Supabase, which hosts the database in São Paulo.
- Cloudflare, which delivers this site and protects our team's access.
- Apple and Google, when you sign in with their account, and Apple for the RUSH+ subscription.
- AI providers (Google and DeepSeek), as described above.
We do not sell data and we do not use third-party advertising or tracking kits.
Data outside Brazil
The database is in Brazil. Apple, Google and Cloudflare may process data in the United States and in other countries, and DeepSeek in China. In those cases we send only what is needed for the feature you used.
Why we can process this data
To perform our contract with you (the account and the app's features), with your consent (health data you choose to give, such as weight and limitations, and sending data to the AI) and on the basis of legitimate interest (security, preventing cheating and improving the app), under Brazil's General Data Protection Law (LGPD, Law 13.709/2018).
Your rights
- Delete your account: in the app, under Perfil › Ajustes › Conta › Excluir conta (Profile › Settings › Account › Delete account). Deletion is immediate and erases everything of yours on the server. See the steps.
- See, take with you or correct your data, withdraw a consent or ask a question: write to contato@rushapp.pro. We reply within 15 days.
- You can also file a complaint with Brazil's National Data Protection Authority (ANPD).
For how long
For as long as your account exists. When you delete your account, the data linked to you is erased right away. Only records without identification remain: usage counts and a note that an account was deleted.
Security
Data travels encrypted. Each person can only read what is theirs, by a rule of the database itself. Our team's access is restricted, requires a separate sign-in and is logged.
Cookies on this site
This site does not use advertising or tracking cookies and does not measure who you are. Cloudflare, which delivers the site, may use technical security cookies. We store only one thing in your browser: that you have already seen the cookie notice. The site follows your browser's language, and that is not stored.
Age
RUSH is for people aged 16 and over.
Changes
If this policy changes in a relevant way, we will tell you in the app before the change takes effect.