SAM7 Training

SAM7 Company

Privacy policy

How SAM7 handles your data on the website, in the Lifted and Defined app (Empinada e Definida), in the SAM7 World apps and in online coaching. Short sentences, no fine print.

Version of October 12, 2026

In this document
  1. Who looks after your data
  2. Where this policy applies
  3. What stays on your device only
  4. What we collect and why
  5. Health data
  6. Use of your image
  7. Legal bases (Brazil)
  8. Who we share with
  9. Pixel, cookies and storage
  10. International transfers
  11. How long we keep data
  12. How we protect data
  13. Your rights
  14. Automatic suggestions
  15. Minors
  16. Changes to this policy
  17. Contact

In short

  • The app's health screening, pain check and cardio test stay on your device only.
  • Check-in photos and measurements go to Matheus, who follows your progress. They sit behind a password.
  • We do not sell data. Health data is never used for ads.
  • The Meta Pixel runs only on sales pages. Never inside the app.
  • You can ask for a copy, a correction or deletion of your data at any time.

Who looks after your data

SAM7 Performance LLC, doing business as SAM7 Company, is responsible for your data (the "controller"). It is a company registered in the United States. When this policy says "we" or "SAM7", it means this company.

[Attorney: full legal name, state of registration of the LLC, notice address and, if required, a representative in Brazil.]

For privacy questions, write to s7co@outlook.com. [Attorney: name the data protection officer (LGPD, art. 41) or record the small business exemption. Suggestion to confirm with Matheus: create privacidade@sam7co.com.]

Where this policy applies

On sam7co.com, in the app at my.sam7co.com, on sam7co.io, on sales pages, in SAM7 World, in online coaching, in student portals and on check-in pages.

It does not apply to other companies' sites you open from here, such as the checkout page, Instagram and WhatsApp. Each has its own policy.

What stays on your device only

The app keeps much of what you fill in inside your phone's or computer's browser. We cannot see this data. If you clear your browser data or switch devices, it is gone from there.

  • Health screening: pregnancy, recent surgery, injury and other conditions. Never leaves the device.
  • Pain check and cardio test. Never leave the device.
  • Menstrual cycle you log in the app. It only leaves if you send a check-in (see below).
  • Photo used by the body shape tool. The analysis runs on the device. The photo is never sent.
  • Preferences, language, avatar, reminders and the app's form memory.
  • A random device code that does not say who you are. It links your progress to your device.

When the app moves to its new address (from sam7co.com to my.sam7co.com), your progress goes from one to the other through your own browser, without passing through our server. Health, pain and check-ins do not move. The old address is cleared right after.

What we collect and why

When you visit the website

  • Page visited, where you came from, link campaign, language, whether you are on a phone, and a random visit code. To count visits and learn what works.
  • Country, from your internet address (IP). To show the right currency and language.
  • Server logs: IP, browser, date and page. To keep the site running and block abuse.

VIP list, waitlist and contact

Name, email, WhatsApp, goal and where you came from, when you fill them in. To tell you when a product opens and to reply to you.

Coaching application

Country, name, WhatsApp, email, age, Instagram, job, goal, main difficulty, current situation, past coaching, the service you want, readiness and budget range. Matheus reads every answer to assess your case and contact you.

Purchase

You pay on the payment platform (Greenn, Hotmart, Shopify or the platform for US dollar checkout). It sends us your name, email, product, order number, amount and payment status. We never see your card number. The platform's notice may carry other data, such as phone or ID number. [Attorney: decide whether we keep the full platform notice (last 3000 records, as today) or only the fields above. Confirm whether the US dollar platform is Stripe.]

Account and login

  • Email, name, plan, access end date, language and access dates.
  • Password stored only in hashed form. Not even we can read it.
  • Email login code: we keep only a hashed version. It lasts 10 minutes and is deleted within 1 day.
  • IP, browser and a device code at each sign in. To keep the account on 1 device and stop password sharing.

App training log

So Matheus can follow you, the app sends your progress on its own: week and workout, loads, reps, sets, cardio, body shape, goal, level, training days and consistency. If you use the diet calculator, it also sends age, weight, height, wrist size and body fat percentage. With each send, the server notes the country and the IP.

The log is used for coaching, for the weekly summary Matheus receives and to restore your progress on a new device after you sign in. Health screening, pain and cycle are not in the log. [Attorney: the log carries weight and body fat without a notice at that moment. Decide whether this policy is enough or the app asks for consent before the first send. Pending technical change: store a mark of the IP instead of the IP.]

Check-in

When you check in, you send up to 4 body photos, measurements (weight, body fat percentage, waist, hips, thigh and others), notes, answers (including about pain or injury) and, in Lifted and Defined, your menstrual cycle data.

  • To follow your progress and adjust your plan.
  • Only Matheus sees them, in a password protected dashboard.
  • In Lifted and Defined, the alert email he receives has no photo or measurement. In coaching, the photos reach his email as attachments.
  • In coaching, the server removes camera location data from the photos.
  • Photos leave your device after the server confirms it saved them.

Online coaching

Training plan, nutrition plan, body assessment, blood tests you send, progress and your conversations with Matheus. To deliver the service you hired. Each student has a personal portal with individual access.

Reminders

In coaching, an email reminds you of the check-in every 30 days. Phone notifications only arrive if you allow them on your device, and you can turn them off at any time.

Health data

Weight, body fat, measurements, body photos, menstrual cycle, pain, injury, pregnancy and blood tests are health data. The law protects this data with stricter rules, and so do we.

  • We use it only for your coaching, with your consent, given when you send it.
  • We never use it for ads, never sell it and never send it to Meta or Google.
  • You can withdraw your consent at any time. If you ask, we delete what was sent.

[Attorney: check state consumer health data laws that require separate consent to collect and to share, the FTC rule on health data in apps, and the LGPD art. 11, I basis for Brazilian users.]

Use of your image

Your photos never appear in public without your permission. In the coaching check-in you choose: use with face, use without face, or progress tracking only. You can change your mind at any time, and the new choice applies from then on.

[Attorney: separate image release for testimonials (student photos, screenshots and results), with term and how to revoke. The Lifted and Defined check-in does not ask this yet: today it means "tracking only".]

Legal bases (Brazil)

For users in Brazil, the LGPD requires a legal basis for each use:

  • Contract: account, app access, coaching delivery, payment and support.
  • Legal duty: tax records and access logs required by law.
  • Legitimate interest: site protection, fraud and account sharing prevention, visit counting.
  • Consent: health data, photos, VIP list and ad cookies.

Who we share with

Only with companies that make the service work, and only what is needed. We do not sell or rent your data.

  • HostingerHosting for the site, the app, the database and the alert emails.
  • Hosting delivery network (CDN)Delivers pages faster and tells us the visitor's country.
  • ResendSends the login code email.
  • Microsoft (Outlook)Matheus's inbox, which receives alerts, contacts and the coaching check-in photos.
  • Greenn, Hotmart, Shopify and the US dollar payment platformTake your payment and tell us about purchases, refunds and chargebacks.
  • MetaPixel and Conversions API only on sales pages, to measure ads. Instagram posts embedded on the coaching page. WhatsApp, when you talk to us there.
  • GooglePage font (Google Fonts) and files for the body shape tool. They receive your IP, not your photo.
  • jsDelivrDelivers the files for the body shape tool.
  • YouTube and VimeoExercise videos, when the video is hosted there. YouTube opens in no cookie mode.

We may also hand data to an authority when the law or a court requires it.

Pixel, cookies and storage

The app at my.sam7co.com has no Pixel and no ad cookie. Sales pages and SAM7 World pages carry the Meta Pixel from October 2026.

  • ed_sKeeps you signed in to the app. Lasts 60 days.
  • ed_dDevice code for the 1 device per account limit. Lasts 5 years.
  • edcdTies the login code to the browser that asked for it. Lasts 12 minutes.
  • sam7_portalAccess to the coaching student portal. Lasts 1 year.
  • s7tzKeeps your device time zone, so the sales and World pages show prices in reais or in dollars. Lasts 30 days.
  • _fbp and other Meta cookiesMeasure ads. Only on sales and World pages. Last up to 90 days.
  • Instagram cookiesOnly on the coaching page, when the posts load.
  • Local storageThe app data kept on your device (see above). Clear it by deleting the site data in your browser.

You can block or delete cookies in your browser settings. Without the app cookies, sign in does not work.

[Attorney: how to offer the opt out of targeted advertising in the US (including the Global Privacy Control signal) and whether the Pixel needs a consent prompt for visitors in Brazil. Matheus: keep the Pixel's "automatic advanced matching" off in Events Manager, so the Pixel does not read form fields.]

International transfers

SAM7 is a US company, and several tools we use are outside Brazil. So your data may be stored and processed in the United States and other countries, always under the protection of this policy.

[Attorney: LGPD art. 33 mechanism (ANPD standard clauses) and confirm the server region in hPanel.]

How long we keep data

  • Account and ordersWhile the account exists and then for the period tax law requires. [Attorney: period.]
  • Training log and check-insWhile your access is active and for a period after, so you can pick up where you left off. [Attorney: period after access ends.]
  • VIP list, contacts and applicationsUntil you ask to leave or until the set period ends. [Attorney: period, suggested 12 months without purchase.]
  • Access logs6 months. [Attorney: confirm Brazil's Marco Civil art. 15.]
  • Login codeDeleted within 1 day.
  • Payment platform noticesThe 3000 most recent.

After that, we delete the data or make it anonymous.

How we protect data

  • Encrypted connection (HTTPS) on every page.
  • Hashed passwords. Session kept in a cookie the page's code cannot read.
  • Check-ins, training log and database in folders closed to the public, reachable only through the password protected dashboard.
  • Every photo is checked before it is stored.
  • Limits on login attempts and on sends.

No system is free of failures. If an incident puts you at risk, we tell you and the authorities within the time the law sets. [Attorney: US state breach notice rules and ANPD notice period.]

Your rights

In the United States

Depending on your state's law, you can learn what data we hold, ask for a copy, a correction or deletion, opt out of targeted advertising, and not be treated differently for using these rights. We do not sell personal data. [Attorney: list the state laws that apply and the appeal channel when a request is denied.]

In Brazil (LGPD, art. 18)

  • Confirm that we process your data and access it.
  • Correct wrong or outdated data.
  • Ask for anonymization, blocking or deletion of data that is unnecessary or unlawful.
  • Take your data to another service (portability).
  • Know who we share with.
  • Withdraw consent and ask to delete what was processed with it.
  • Complain to the national data protection authority (ANPD).

How to ask

Write to s7co@outlook.com from the email on your account and tell us what you want. We reply within 15 days. [Attorney: period.] To delete what is only on your device, clear the site data in your browser.

Automatic suggestions

The app suggests a level, body shape and plan from your answers, using fixed rules. These suggestions do not decide access, price or credit. If you disagree, ask Matheus to review.

Minors

SAM7 services are for people 18 and older. If we learn we received data from someone under 18, we delete it.

Changes to this policy

The version date is at the top. If a change is important, we tell you by email or in the app before it applies.

Contact

Privacy questions, requests and complaints: s7co@outlook.com.

Also read the Terms of use.

Back to top