Brotia Privacy Policy

Effective 6 November 2026

Who we are

Brotia is made by Tempo Software SAS, Montevideo, Uruguay ("we"). We are responsible for your personal data in Brotia (the data controller). You can reach us at brotia@temposoftware.dev.

What we collect

Your account. Your email address, so we can send you sign-in codes; the name you choose to be called (optional); and your app language.

What you log. Everything you enter is kept with your account so the app can show it back to you and compare days:

• meals: photos, food tags, descriptions and notes;
• symptoms: how bloated you felt, heartburn, gas, pain, bowel movements and notes;
• your day: sleep, stress, water and notes, and, only if you choose to track it, whether you were on your period;
• your onboarding answers: how often you feel bloated, foods you suspect and whether you want periods taken into account;
• experiments and programs: which ones you start, their dates, your daily check-ins, how you rated them, what you noticed, the experiments you create yourself and your progress through guided programs.

The warning signs you can tick during onboarding are never sent to us or saved.

Your subscription. If you buy Brotia Plus, Apple handles the payment. Apple tells us which plan you bought, its dates, its transaction number and whether it renews. We never see your card or your Apple ID.

Messages to us. If you email us, we receive your email address and what you write.

Kept only on your phone. Your sign-in session, reminder times and app settings stay on your device. Reminders are scheduled by your phone; we do not send push messages.

What we don't collect. We don't use your location, contacts or advertising identifier, and Brotia contains no advertising, analytics or tracking software. Our servers do not keep logs of who visits or when; error logs may contain technical details of a failed request.

Your health data and your consent

Your logs are health data, which the law treats as sensitive. Before you start, Brotia asks for your explicit consent to store it as described here. That consent is our legal basis for handling it. You can withdraw it at any time by deleting your account in Settings; we then stop processing your data and delete it as described below.

Brotia is not medical advice and does not diagnose or treat anything. It helps you understand your body and talk with your doctor.

How we use it

• To run Brotia for you: keep your logs, compare before and after in your experiments, build "What you've learned" and your doctor report, and follow your progress in programs.
• To sign you in, by email code.
• To give you Brotia Plus when you subscribe, and keep it in step with Apple.
• To answer your messages and keep the service secure and working.

When you rate an experiment from the library, your rating is also added to an anonymous count (for example, "12 people said it helped"). The count holds no link to you and is shown only once at least 5 people have rated.

We do not use your data for advertising, sell it, or use it to build profiles for anyone else.

The doctor report is made on your phone. It goes to someone only if you share it yourself.

Who handles it for us

• Amazon Web Services stores your data and runs Brotia's servers in the United States (Virginia), and sends sign-in emails. AWS acts on our instructions only.
• Apple processes App Store purchases under its own privacy policy.
• Google hosts the inbox where we read the emails you send us.

We share nothing with anyone else, unless the law requires it.

Where it is stored

Your data is stored in the United States. We rely on Amazon Web Services' data processing terms, which include the standard contractual clauses, to protect it when it leaves Uruguay or your country.

How long we keep it

• Your logs stay until you delete them or your account.
• Deleting your account in Settings removes your data from our database and deletes your sign-in account straight away. Copies in our encrypted backups expire within 35 days, and error logs within 30 days.
• We keep emails you send us for as long as we need them to help you.
• Anonymous rating counts stay, since they cannot be linked to you.

Your rights

You can ask us to access, correct, delete or give you a copy of your data, object to how we use it, or withdraw your consent. Much of this you can do yourself in the app: edit or delete entries, share your report, or delete your account. For anything else, write to brotia@temposoftware.dev. We answer within the time the law sets.

If you are unhappy with how we handle your data, you can complain to Uruguay's data protection authority, the Unidad Reguladora y de Control de Datos Personales (URCDP), or to the authority where you live.

Security

Your data travels encrypted (HTTPS) and is stored encrypted. Each account can reach only its own data, and sign-in uses one-time email codes instead of passwords.

Age

Brotia is meant for adults (18 or older). We don't knowingly collect data from anyone younger; if you think a child has used it, write to us and we will delete the account.

Changes

If we change this policy, we will update the date above. If a change matters for how your data is used, we will tell you in the app before it applies.