Privacy Policy and
Terms of Use (Client)

Pump's vision is to simplify complex processes in your routine, which is why we have made the Privacy Policy as simple as possible. If you still have any questions, please contact us through the support channels in the "Help" section of the app. We are committed to protecting the personal data of our users, clients, and partners. Pump establishes this Privacy Policy in accordance with the General Personal Data Protection Law (LGPD) – Law No. 13.709/2018.

1. Introduction
By using Pump's services, you entrust us with your personal data to enable the contracting of our products and services and to provide the best possible experience. We value privacy, security, and transparency by adopting the best practices to ensure the confidentiality and integrity of your information.

2. General Data Protection Law (LGPD), No. 13.709/2018.

2.1 – THE PLATFORM will not use or in any other way process the Data or information derived from it for advertising or other similar commercial purposes.

2.2 – The use and processing of data and information obtained and/or provided that can identify or make identifiable the users, clients, suppliers, employees, associates, and/or subcontracted individuals, as well as the content or private communications that occurred ("Personal Data"), will occur in accordance with the applicable Brazilian and international laws, only for legitimate, specific, explicit, and previously informed purposes to the data subjects. The processing and collection, where applicable, will be limited to the minimum necessary for achieving its purposes, covering the relevant data that are proportional and not excessive in relation to the purposes of processing and collecting data.

2.3 – Any operation to process any types of data, that is, to collect, produce, receive, classify, use, access, reproduce, transmit, distribute, process, archive, store, eliminate, evaluate, control, modify, communicate, transfer, disseminate or extract, must be made following the principles of purpose, adequacy, necessity, free access, data quality, transparency, security, non-discrimination, accountability and auditing.

2.4 – Data subjects should be attended to regarding their privacy rights, specifically the following, without prejudice to other rights guaranteed by law: access to data, correction of incomplete, inaccurate, or outdated data, anonymization, blocking or elimination of unnecessary, excessive or unlawfully processed data, data portability to another service or product provider, upon express request; elimination of Personal Data, as provided by law; information about the public and private entities with which data sharing occurred.

2.5 – The processing of Personal Data will be carried out with technical and administrative measures to protect Personal Data from unauthorized access and illicit situations, whether accidental or not, of destruction, loss, alteration, communication or dissemination, in accordance with the purposes outlined in this document and in applicable legislation.

2.6 – The use of Personal Data is limited to the purposes provided for in this document. The use of Personal Data without the prior consent of the data subjects for purposes different from those expressly defined in this document is prohibited, as well as any processing incompatible with it, including operations related to collecting, producing, receiving, classifying, utilizing, accessing, reproducing, transmitting, distributing, processing, archiving, storing, eliminating, assessing, controlling, modifying, communicating, transferring, disseminating or extracting the respective Personal Data.

2.7 – The confidentiality and compliance with this Clause apply to all employees, agents, representatives, and third parties involved in executing this document, and this obligation must remain even after the expiration of this document.

2.8 – The PARTIES shall be exclusively responsible for the Personal Data, obligating themselves to keep the other PARTY harmless from any obligation and responsibility for any omissions or errors that may occur in the processing of Personal Data, mainly if obtained without the appropriate consent or authorization from its holder, as well as for consequential losses or arising from the usage, directly or indirectly.

2.9 – If one or both PARTIES are summoned as a defendant in a lawsuit due to the violation of Personal Data in this document, the infringing PARTY must bear all fines, costs, penalties, attorney fees, legal consequences incurred, and other amounts that the aggrieved PARTY, by virtue of joint or subsidiary liability, may pay to third parties.

2.10 – Without prejudice to notifying the competent authority, one PARTY will immediately notify the other in case of: (i) identification or suspicion of any data incident (events of unauthorized access or disclosure of Personal Data and accidental or illicit situations of destruction, loss, alteration, communication, or any form of inadequate or illicit treatment of Personal Data); (ii) any complaints regarding the processing of Personal Data, including allegations that the processing violates the rights of a data subject according to applicable law; or (iii) any order issued by a judicial or administrative authority requesting the disclosure or blockage of Personal Data.

2.11 – The PARTIES are prohibited from subcontracting their processing operations on behalf of one another without prior written consent, which must necessarily be carried out through a written contract, imposing the same conditions, obligations, and responsibilities set forth herein to the subcontractor. If the subcontractor fails to comply with the conditions, obligations, and responsibilities assumed in that contract, the contracting PARTY shall be jointly responsible for fulfilling such obligations as well as for any consequences arising from the non-compliance.

2.12 – The PARTIES also commit to, at a minimum: a. Maintain internal data security policies and procedures, extensible to authorized third parties that may process Personal Data on behalf of the other PARTY; b. Maintain appropriate access controls, including, among others, limitation of access to personal data to the minimum number of agents, employees, and collaborators required; c. Maintain access logs, showing date, time, and computer responsible for accessing said data, as well as a record of the activities performed; d. Provide agents, employees, associates, and all other collaborators with appropriate training on information security and personal data protection.

2.13 – The PARTIES shall be exclusively responsible for the Personal Data they collect for their own purposes, obligating themselves to keep the other PARTY harmless from any obligation and responsibility.

2.14 – As provided for in article 393 of the Civil Code, no PARTY shall be liable for failures in the fulfillment of their respective obligations when the fulfillment of such obligations has been prevented or delayed due to events characterized as force majeure or fortuitous occurrence.

2.15 – A fortuitous case or force majeure is understood as an unavoidable fact whose effects or results could not be avoided by the PARTY alleging it.

2.16 – Once a force majeure or fortuitous case occurs, the obligations that the PARTIES are unable to fulfill shall be suspended as long as it lasts.

2.17 – Each PARTY shall be solely responsible for assuming its own losses and damages suffered during the period of the force majeure or fortuitous case and its consequences, under the terms of this document.

3. Application
This Privacy Policy applies to all users and health professionals who use Pump's platform in Brazil.

4. Collection of Personal Data
We collect your personal data whenever you:

• Use Pump's app or website;

• Request the contracting of our services or products;

• Browse our website;

• Contact us through our support channels;

• Participate in surveys or promotions conducted by Pump.

5. What Data Do We Collect and For Which Purposes
The personal data we collect includes:

• Registration Data: Full name, identification documents, nationality, address, date of birth, gender, among others.

• Contact Data: Phone and email.

• Health Data: Information about medical specialties of interest, service history, and preferences for health professionals.

• Browsing Data: IP address, browser type, pages accessed and time spent.

• Financial Data: Information necessary for processing payments, such as credit card details or bank account.

• Integration Data: Authorization for accessing Google Calendar to carry out integration and synchronization of Google Calendar events with the professional's schedule in our system. We do not use the data obtained from Google Workspace APIs to train generative AI models and/or ML models.

We use this data for the following purposes:

• Provision of Services: Connecting users to health professionals, enabling scheduling, payments, and direct communication through the platform, user registration, access to the created profile, completion and operationalization of product purchases on the website, as well as billing, charging, and compliance with fiscal issues related to the purchase. Verifying the identity and legitimacy of the user.

• Personalization: Evaluating and offering recommendations of health professionals based on user preferences and needs, and sending targeted advertising.

• Communication: Sending relevant information about our services, updates, technical support, and automated notifications related to appointments and user health. General communication via WhatsApp and email.

• Service Improvement: Analyzing data to enhance our products and tailor the user experience.

• Legal Compliance: Complying with applicable legal and regulatory obligations, as well as any defense of Pump in administrative, judicial, or arbitral processes. Conducting and documenting audits by Pump to verify compliance with its rules, policies, and prevailing legislation in general.

6. Data Sharing

Pump does not share personal data with third parties, except when necessary for:

• Health Professionals: Sharing relevant information for the provision of health services contracted by the user.

• Service Providers: Companies hired to assist in executing our activities, which are subject to obligations of confidentiality and data protection.

• Legal Obligations: Compliance with legal, judicial, or administrative requirements.

7. Rights of Data Subjects

Data subjects have the following rights according to the LGPD:

• Confirmation and Access: Right to confirm the existence of treatment and access their personal data.

• Correction: Request the correction of incomplete, inaccurate, or outdated data.

• Anonymization, Blocking, or Elimination: Request anonymization, blocking, or elimination of unnecessary or unlawfully processed data.

• Portability: Request the transfer of your data to another service or product provider.

• Information about Sharing: Be informed about the public and private entities with which the data are shared.

• Revocation of Consent: Withdraw the previously granted consent in cases where treatment is based on that assumption.

8. Data Security

We adopt technical and administrative measures to protect personal data against unauthorized access, losses, alterations, or improper disclosures.

9. Data Retention

Personal data are stored for the period necessary to fulfill the purposes for which they were collected or as required by applicable laws.

10. Changes to this Policy

This Privacy Policy may be updated periodically. We recommend regular review of this document to stay informed about our data protection practices.

11. Contact

If you have any questions, requests, or want to exercise your rights, please contact us through our support channels in the "Help" section of the app.

TERMS OF USE

Pump was created to facilitate access to health services, connecting you to the best professionals quickly, safely, and efficiently. By using our platform, you entrust us with your personal data to schedule appointments and other services. This document contains the Terms of Use and the Privacy Policy that govern the use of Pump.

By accessing and using Pump, you declare that you agree to the terms described herein. Therefore, please read carefully; if you have any questions, contact us via the "Help" section in the app.

1. TERMS OF USE

1.1. Definitions

• Client: An individual who uses Pump to schedule services and access health care.

• Health Professional: A doctor, therapist, dentist, personal trainer, nutritionist, or other professional registered with Pump.

• Platform: Pump's app and website through which mediation services are offered.

• Service: Connection between clients and health professionals to facilitate scheduling, payments, and support.

• Appointment: A type of service where the provision of service occurs only once per contracting.

• Subscription: A type of service where the client contracts the professional with a predefined recurrence set by the professional during service registration.

1.2. User Registration and Account

1.2.1. Registration Requirements

To use Pump, you need to:

• Create an account providing full name, phone, and email.

• Agree to the Terms of Use and the Privacy Policy.

1.2.2. User Responsibilities

• Provide correct and updated information.

• Keep your credentials secure and not share them.

• Use Pump ethically, respectfully, and within the intended purposes.

Pump is not responsible for incorrect data provided by the user.

1.3. Services Offered

Pump does not directly provide health services, it only mediates the connection between clients and health professionals.

• Intelligent Search: Allows you to find professionals by illness, specialty, service name, location, availability, and other categories.

• Online Scheduling: You can choose a professional and schedule an appointment on the available date and time, whether it is a single appointment or a subscription.

• Payments: You confirm the appointment by making the payment directly through the options available on the platform. (For more information, refer to the Payment Policy.)

• Notifications and Reminders: To avoid forgetfulness, we send notifications before appointments.

1.4. Scheduling, Cancellation, and Rescheduling

• Cancellations and rescheduling must be done within the period established by the health professional.

• Appointments canceled outside the period may incur partial or total charges.

• Pump is not responsible for cancellations made by health professionals.

• For more information, refer to the Payment Policy.

1.5. Responsibilities and Limitation of Warranty

Pump is not responsible for:

• The quality of service provided by health professionals.

• Delays, cancellations, or unavailability of time slots.

• Damages or losses resulting from care.

Pump does not provide diagnosis, medical treatment, or clinical recommendations. The care is the total responsibility of the health professionals.

1.6. Modifications to the Terms of Use

Pump may modify these Terms at any time. Changes will be communicated via email.

1.7. Contact and Support

For questions or support, please contact us through the "Help" section in the app.

2. PRIVACY POLICY

2.1. Introduction

Pump values the privacy and protection of your personal data. This Policy explains how we collect, use, protect, and share your data, in accordance with the General Data Protection Law (LGPD) – Law No. 13.709/2018.

If you have questions, please contact us through the "Help" section in the app.

2.2. What Data Do We Collect and For Which Purposes?

We collect your data whenever you:

• Register on the Platform.

• Schedule appointments with health professionals.

• Contact our support team.

• Access our website or app.

The collected data includes:

2.2.1. Personal Data

• Full name, CPF, phone, email, address, date of birth, and gender.

• Purpose: Identification, authentication, and personalization of care.

2.2.2. Health Data

• Specialties of interest in the health field.

• Care history and preferences for professionals.

• Purpose: Facilitate the scheduling of appointments and recommend professionals best suited to your needs.

2.2.3. Financial Data

• Information for processing payments, which may include credit card and PIX data, for example.

• Purpose: Ensure and automate the payment process for contracted services and appointments.

2.2.4. Browsing Data

• IP address, device type, and usage data of the Platform.

• Purpose: To continuously improve user experience.

2.3. How Do We Use Your Data?

We use your data for:

• Enabling the intermediation of hiring between clients and health professionals.

• Managing payments and confirmations of appointments.

• Sending notifications about appointments and reminders.

• Ensuring the security and protection of your account.

• Complying with legal and regulatory obligations.

2.4. Data Sharing

Pump DOES NOT sell your personal data. Sharing occurs only when necessary for:

• Health Professionals: Your registration data may be shared with professionals with whom you contract a service.

• Service Providers: Companies contracted for technical support, payment processing, and security audits.

• Regulatory Bodies: To meet legal requirements or respond to administrative processes.

2.5. Data Security

We adopt technical and organizational measures to protect your data from unauthorized access, loss, or improper alterations.

2.6. Data Retention

Your data will be retained for as long as necessary to achieve the purposes described in this Policy, as required by law. If you wish to delete your account, please fill out our account deletion form.

2.7. Your Rights

According to the LGPD, you have the right to:

• Access your data and know how they are processed.

• Correct incomplete or outdated information.

• Request the deletion of unnecessary data.

• Revoke consent for the use of your data.

To exercise your rights, please contact us.

2.8. Changes to this Policy

This Privacy Policy may be updated at any time. We recommend that you consult this document regularly.

2.9. Contact

If you have any questions or requests, please contact us through the "Help" section in the app.