Privacy Policy

This policy explains how BYTU handles personal data under Brazil's General Data Protection Law (Law 13,709/2018, the LGPD). It applies to the site bytu.com.br and to the app bytu.app.

1. Who we are

BYTU is a product of GM Softwares, CNPJ (Brazilian company ID) 32.954.793/0001-74, with its office at Avenida Prefeito Osmar Cunha, 416, sala 1108, Centro, Florianópolis/SC, CEP 88015-100, Brazil. For any matter about personal data, contact us at contato@bytu.com.br.

2. Our role for each type of data

• Data about the school and the people who use the system (managers and instructors): BYTU is the controller. We decide how this data is used, within the limits of this policy.
• Data the school registers about its students: the school is the controller and BYTU is the processor. We process this data only to provide the service, following the school's instructions. If you are a student, talk to your school first. If you prefer, talk to us and we will forward your request.

3. What data we collect

• Sign-up on the site: school name, the name of the person in charge, email, WhatsApp and the chosen plan.
• Use of the app: data about managers and instructors (name, email, phone), the lesson schedule, packages, payments, equipment and school settings.
• Student data the school registers: name, email, phone, weight, height, notes, lessons, payments and course progress.
• Digital commitment agreement: the student's acceptance, with date, time and IP address.
• WhatsApp messages: when the school connects its WhatsApp, BYTU sends reminders and receives replies from students and instructors to update the schedule. Voice messages may be transcribed to text.
• Subscription billing: name, CPF or CNPJ (Brazilian tax ID) and email of the payer.
• Technical data: IP address, browser type and error logs. In the app, some sessions may be recorded to find bugs. The recording shows clicks and navigation, with all text and fields masked.

4. What we use the data for

• To create and keep the school's account and provide the service (performance of contract).
• To send the access password, system notices and lesson reminders (performance of contract).
• To bill the subscription and issue invoices (performance of contract and legal obligation).
• To give support and talk to you about your account (performance of contract).
• To fix errors, prevent fraud and protect the system (legitimate interest).
• To understand, in aggregate, how the site is used, to improve the product (legitimate interest).

We do not sell personal data and we do not use student data for advertising.

5. International transfers

Some suppliers we use to run the service store or process data outside Brazil, mainly in the United States. In those cases, we use suppliers that adopt contractual clauses and security measures compatible with the LGPD (art. 33).

6. Cookies

The site does not use advertising or tracking cookies. Visit statistics are anonymous and do not use cookies. The app only uses the cookies needed to keep you signed in.

7. How long we keep data

• While the school's account is active.
• After cancellation, we delete the data within 90 days. Before that, the school can ask for a copy.
• We keep data longer only when the law requires it, for example billing tax records (5 years) and access logs (6 months, under Brazil's Internet Civil Framework).
• When a record is deleted in the app, we keep a log of the deletion for security and to resolve disputes.

8. Your rights

Under the LGPD (art. 18), you can ask for:

• confirmation that we process your data, and access to it;
• correction of incomplete or wrong data;
• anonymization, blocking or deletion of unnecessary data;
• portability of your data to another supplier;
• information about who we share your data with;
• review of decisions made only by automated means.

Send your request to contato@bytu.com.br. We reply within 15 days. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

9. Security

We use encrypted connections (HTTPS), hashed passwords, access separated by school and by role, and error logging. No system is 100% secure. If an incident may cause relevant risk or harm, we will tell the people affected and the ANPD.

10. Changes to this policy

We may update this policy. When a change is relevant, we will tell you by email or in the app. The date at the top of the page shows the version in force. See also the Terms of Use.