PRIVACY POLICY – LEMEHUB WELLNESS

Version 3.0Last updated: January 2026

LemeHub is a digital platform focused on sports management, training tracking, individual performance analysis, and sports club administration.

This Privacy Policy is maintained by:

HR OLIVEIRA ADMINISTRAÇÃO DE CARTÕES LTDA

CNPJ: 63.820.396/0001-33

This Policy describes how we handle personal data in compliance with Brazil's General Data Protection Law (LGPD – Law No. 13.709/2018), as well as applicable international standards and specific requirements of third-party API integrations.

1. Principles of Data Processing

LemeHub observes the principles of:

  • Purpose
  • Adequacy
  • Necessity
  • Transparency
  • Security
  • Prevention
  • Non-discrimination
  • Accountability

2. Data Collected

2.1 Registration Data

We may collect:

  • Full name
  • Nickname/social name
  • Email
  • Phone number
  • CPF (tax identification)
  • Date of birth
  • Gender
  • Profile photo
  • Full address
  • Internal identifiers linked to clubs or teams

2.2 Sports Data Entered in LemeHub

Includes data manually entered by the user or generated within the platform:

  • Training records
  • Check-ins
  • Evaluations
  • Sports history
  • Individual progression
  • Club administrative data

This data may be used for:

  • Internal statistics
  • Internal rankings
  • Sports planning
  • Team organization

3. Integrations with Sports Platforms (e.g., Strava, Garmin)

LemeHub allows optional integration with sports platforms through official APIs.

Integration occurs exclusively through explicit user consent via OAuth authentication.

3.1 Strava Integration

When connecting your Strava account:

LemeHub may access only the minimum data necessary to:

  • Identify completed activities
  • Verify correspondence with planned workouts
  • Mark workouts as completed

🔒 Strava Data Usage Rules

In compliance with the Strava API Agreement:

  • Data imported from Strava is displayed exclusively to the user who authorized access.
  • Detailed activity data is not shown to coaches, administrators, or third parties.

We do not use Strava data for:

  • Aggregated analysis
  • Global statistics
  • Market insights
  • Advertising
  • Artificial intelligence or machine learning
❌Strava data is not combined with other data for analytical purposes. We do not sell, assign, or commercially share Strava data.

3.2 Strava Data Retention

  • Strava data is not cached for more than 7 days.
  • If an activity is deleted on Strava, the deletion will be reflected in LemeHub within 48 hours.
  • When disconnecting Strava, all tokens and associated data are deleted.

3.3 Access Revocation

The user may:

  • Disconnect Strava in profile settings
  • Revoke access directly in the Strava account
  • Request data deletion via email

After revocation:

  • Authentication tokens are removed
  • Imported data is deleted
  • Derived markings are removed

4. Financial Data

LemeHub does not store complete credit card data.

Payments are processed by certified gateways such as:

  • Mercado Pago
  • Asaas
  • PagSeguro
  • Stripe

We may store:

  • Transaction identifier
  • Payment status
  • Dates and amounts
  • Encrypted tokens for recurring billing

5. Emergency and Health Data

We may collect:

  • Emergency contact
  • Blood type
  • Relevant medical information
  • Fitness declaration
⚠️This data is used exclusively for athlete safety.

6. Purpose of Data Processing

  • Sports management
  • Club administration
  • Financial control
  • User communication
  • Compliance with legal obligations
  • Platform improvement based exclusively on LemeHub's own data

7. Legal Bases (LGPD)

  • Consent
  • Contract execution
  • Legal obligation
  • Legitimate interest
  • Protection of life

8. Data Sharing

Data may be shared only when necessary with:

  • Infrastructure providers
  • Financial gateways
  • Email/notification services
  • Sports platforms with consent
❌We do not sell data.

9. Security

We implement:

  • HTTPS/TLS encryption
  • Secure storage
  • Role-based access control
  • JWT tokens
  • Log monitoring
  • Regular backups

In the event of a relevant incident, measures will be taken as required by law.

10. General Data Retention

Data is retained for the period necessary for the described purposes or as required by law. Data may be anonymized after prolonged inactivity.

11. International Transfer

We may use cloud infrastructure located outside Brazil, with adequate contractual protection guarantees.

12. Data Subject Rights

You may request:

  • Confirmation of processing
  • Data access
  • Correction
  • Portability
  • Deletion
  • Consent revocation
📧contato@lemehub.com.br

13. Cookies and Local Storage

We use:

  • Authentication tokens
  • User preferences
  • Technical cache for performance
❌We do not use third-party advertising cookies.

14. Contact

📧contato@lemehub.com.br

🌐 https://www.lemehub.com.br/privacy

Falar no WhatsApp