Privacy

Version 1.1 · 12 August 2026

The short version

You do not need an account to use Aguante. Without one, everything you enter — your fasts, your weight, your symptoms, your safety answers — is stored only on your own device and is never sent to us. We cannot see it, because it never arrives.

If you switch on syncing across devices, that same information is copied to a database so your other devices can read it. That is your choice, it is never required, and you can delete all of it permanently from inside the app.

1. Who is responsible

Riv Lux Media Inc is the data controller for aguante.app. Contact: support@rivluxmedia.com.

2. What we handle, and where it lives

Without an account — the default

Everything stays in the app's local storage on your own device: your fasting history, profile details (name, year of birth, weight), the health answers on the safety screen, symptoms you log, movement, badges, and — only if you use that tool — the cycle dates you enter. None of it is transmitted to us. There is no analytics script, no advertising SDK, and no third-party tracker anywhere in this app.

With sync switched on

The same information is copied to our database, hosted by Supabase, so it can reach your other devices. We store your email address to identify the account. The downloaded iOS and Android apps use email and password only. The web version may also offer Google or Apple sign-in; if you choose one, that provider confirms who you are and passes us your email address and name, and learns that you use Aguante. It is told nothing about your fasting, your weight or your health answers. Row Level Security means every row is readable only by the account that owns it.

3. Health data, and why we ask for consent rather than assume it

Weight, symptoms, eating-disorder history, pregnancy, medication and cycle dates are special-category health data under Article 9 of the UK/EU GDPR. Where that applies to you, our legal basis for handling any of it on our servers is your explicit consent, given specifically for sync. We record when you gave it and to which version of this policy.

You can withdraw that consent at any time. Withdrawing stops future processing; it does not make past processing unlawful. Erasing your account removes the data itself.

4. What we never do

• We do not sell your data, and we do not share it for advertising.
• We do not use your health information to target you with anything.
• We do not run behavioural analytics or third-party trackers in this app.
• We do not require an account to use the product.

5. Who else touches it

• Supabase — database, authentication and hosting for synced accounts, under a Data Processing Addendum.
• Google or Apple — only if you choose one of those sign-in options in the web app. They confirm your identity and pass us your email address and name. They learn that you use Aguante; they are told nothing about your fasting, your weight or your health answers.
• Vercel — serves this website. Standard server logs including IP address, kept briefly for security and abuse prevention.

6. Where it is stored

Our database is hosted in the United States. If you are in the UK, the EU or the EEA, your data is transferred there and protected by the EU–US Data Privacy Framework together with Standard Contractual Clauses where required.

7. How long we keep it

• Local data — until you clear it, uninstall, or reset the app. It is yours; we cannot reach it.
• Synced data — until you delete your account, which removes it immediately and permanently.
• Deletion records — we keep a one-way hash and a timestamp, containing no personal data, so we can show a request was honoured.

8. Your rights

Where the GDPR or the UK GDPR applies you have the right to access, rectify, erase, restrict, port and object. Two of these are built into the app rather than requiring an email:

• Export — in the app, at any time, with or without an account, in a plain JSON file that opens anywhere.
• Erasure — deleting your account removes every associated record immediately.

For anything else, write to support@rivluxmedia.com. You also have the right to complain to your local supervisory authority — in Spain, the Agencia Española de Protección de Datos.

If you are in California, we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not discriminate against you for exercising any right.

9. Children

Aguante is not for anyone under 18. The safety screen asks, and answering yes stops the app from running a fast for you. We do not knowingly handle data from under-18s; if you believe we have, write to support@rivluxmedia.com and we will delete it.

10. Security

• Everything is served over HTTPS.
• Row Level Security is enabled and forced on every table, so a row is reachable only by the account that owns it.
• Anonymous database access is revoked by name on every table, not merely left unused.
• No secret key is ever present in the app you download.

11. Changes

If we change this policy in a way that affects how your data is handled, we will say so in the app before the change takes effect — not quietly, and not after the fact. The version number and date at the top always reflect what is currently in force.