1. Introduction

Calculamedica is committed to protecting the privacy and data of its users. This Privacy Policy describes how we collect, process, store and protect information when you access our site and use our clinical tools. This document is single and universal: it applies identically to all users, regardless of language or geographical location. Data processing practices are the same worldwide; what varies is the set of rights and competent supervisory authorities applicable to each user, according to the law of their country — detailed in consolidated form in Section 11.

2. Data We Collect

Calculamedica collects only browsing data. Important: we do not collect personal health data or sensitive user information. Values entered in the calculators are processed locally in your browser and are not transmitted, stored or recorded on our servers.

Data collected automatically includes:

• IP address: for security, traffic analysis and abuse prevention purposes;
• Browser type and operating system: to optimize site compatibility;
• Device type: to provide a better experience on desktop, tablet or mobile;
• Pages visited and time spent: to understand which tools are most used;
• Language preference cookie: to remember the selected language on subsequent visits;
• Advertising cookies (Google AdSense): as described in Section 12 (Cookies).

3. What We Do Not Collect

We explicitly state that Calculamedica does not collect:

• Personally identifiable data (name, email, address, telephone) — unless voluntarily provided via direct contact;
• Clinical values entered in calculators (processed only in the user's browser);
• The user's health data or personal medical history;
• Sensitive data (racial or ethnic origin, religious beliefs, political opinions, trade union membership, genetic, biometric, health or sexual orientation information);
• Payment card or financial data;
• Precise geolocation data (only IP-based approximations for language purposes).

4. Purpose of Data Collection

Browsing data is processed for the following purposes:

• Service provision: to keep the site running and make the calculators available;
• Continuous improvement: to optimize features, layout and performance based on usage patterns;
• Security: to identify and prevent abuse, unauthorized access or malicious behavior;
• Aggregated analysis: to understand (anonymous) usage trends to guide the development of new features;
• Advertising: to enable Google AdSense to display relevant ads, in accordance with its privacy policy;
• Compliance with legal obligations: to satisfy legal obligations or court orders where applicable.

5. Legal Basis for Processing

Calculamedica's data processing relies on the following legal bases, according to the legislation applicable to the user:

European Economic Area and United Kingdom — General Data Protection Regulation (GDPR) and United Kingdom General Data Protection Regulation (UK GDPR):

• Performance of contract [Art. 6(1)(b)]: to provide the service of access to the site and calculators;
• Legitimate interests [Art. 6(1)(f)]: to improve the security, performance and quality of the service;
• Consent [Art. 6(1)(a)]: for non-essential cookies, via the consent banner;
• Legal obligation [Art. 6(1)(c)]: when required by law or a competent authority.

Brazil — Lei Geral de Proteção de Dados (General Personal Data Protection Law — LGPD), Law No. 13,709/2018:

• Performance of contract (Art. 7, I): to provide the service of access to the site and calculators;
• Legitimate interest (Art. 7, IX): to improve the security, performance and quality of the service;
• Consent (Art. 7, III): for non-essential cookies, via the consent banner;
• Legal obligation (Art. 7, II): when required by law or a competent authority.

United States — California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), and other State Laws:

Processing is based on prior notice to the user and the right to opt out of the sale or sharing of data, as detailed in Section 11.

Other jurisdictions:

Legitimate interest, consent and legal obligation, in accordance with applicable local data protection legislation.

6. Data Sharing

Calculamedica does not sell browsing data to third parties for financial consideration. However:

• Google AdSense: advertising cookies are managed by Google and subject to its Privacy Policy;
• Hosting provider: technical browsing data is processed on our infrastructure provider's servers, subject to contractual confidentiality and security obligations;
• Force of law: data may be disclosed if required by a court order or competent authority;
• Protection of rights: data may be shared to protect our legal rights, the security or wellbeing of users.

Notice for US users: under the California CCPA/CPRA and similar State laws, the use of Google AdSense advertising cookies for personalized advertising may be classified as the "sale" or "sharing" of personal data. Users covered by these laws may exercise the right to opt out in accordance with Section 11.

7. International Data Transfers

Calculamedica is operated from Brazil and uses infrastructure and advertising providers that may process data on servers located in other countries. Where data of users in the European Economic Area or United Kingdom is transferred outside those regions, such transfers are carried out on the basis of mechanisms recognized by the GDPR and UK GDPR — such as adequacy decisions or standard contractual clauses. For users in other jurisdictions, any international transfers comply with the mechanisms required by their local legislation. By using the site, the user understands that their browsing data may be processed internationally for the purposes described in this Policy.

8. Data Retention

Browsing data is retained for as long as necessary for the purposes described. Server logs are generally retained for up to 90 days. Essential cookies are retained for as long as necessary for the site to function. You can delete cookies at any time via your browser. For requests to delete personal data (if you have provided it voluntarily), contact contato@calculamedica.com.

9. Data Security

We implement technical and organizational measures to protect your data against unauthorized access, modification, loss or destruction. These include the use of HTTPS, secure server configurations, firewalls and internal restricted access policies. However, no data transmission over the Internet is 100% secure. We communicate transparently about any relevant security incidents, in accordance with applicable legislation.

10. Privacy of Minors

Calculamedica is intended for healthcare professionals and students and is not intended for minors. We do not intentionally collect personal data from children or young people. If we become aware that data of a minor has been inadvertently collected without the consent required by applicable legislation, we will take steps to delete it. Legal representatives who become aware of such a situation may contact us for appropriate deletion.

11. Your Rights and Supervisory Authorities

The rights available depend on the legislation applicable to the user. This section consolidates, identically across all languages, the frameworks for each jurisdiction. We respond to any request within 15 days, a period that may be extended where applicable law permits and the request is complex, in which case we will inform you. To exercise any right — or to lodge a complaint with the competent data protection supervisory authority in your jurisdiction — contact: contato@calculamedica.com.

Users in Brazil (LGPD):

• Access: request what data is being processed;
• Correction: correct inaccurate or incomplete data;
• Deletion: request removal of data, except where there is a legal obligation to retain;
• Portability: receive your data in a structured, portable format;
• Revocation of consent: at any time, without affecting the lawfulness of prior processing;
• Objection: object to processing based on legitimate interests;
• Not subject to automated decisions: right to human review of significant decisions.

The supervisory authority is the Autoridade Nacional de Proteção de Dados (National Data Protection Authority — ANPD) — gov.br/anpd.

Users in the European Economic Area (GDPR):

• Access: request what data is being processed;
• Rectification: correct inaccurate or incomplete data;
• Erasure: request deletion of data ("right to be forgotten"), except where there is a legal obligation to retain;
• Portability: receive your data in a structured, portable format;
• Withdrawal of consent: at any time, without affecting the lawfulness of prior processing;
• Objection: object to processing based on legitimate interests;
• Not subject to automated decisions: right to human review of decisions with significant effects.

A complaint may be lodged with the national data protection supervisory authority in your country.

Users in the United Kingdom (UK GDPR and Data Protection Act 2018):

The same rights as under the GDPR apply (access, rectification, erasure, portability, objection, withdrawal of consent and human review of automated decisions), exercisable before the national supervisory authority.

Users in the United States (CCPA/CPRA and other State Laws):

• Know: which categories of personal data are collected and for what purposes;
• Access: request a copy of the personal data collected;
• Correction: correct inaccurate personal data;
• Deletion: request deletion of personal data, subject to legal exceptions;
• Opt-out of sale/sharing: refuse the "sale" or "sharing" of data for behavioral advertising;
• Non-discrimination: not be subject to discriminatory treatment for exercising your rights.

To exercise the opt-out, use the "Cookie Preferences" button in the site footer (or see Section 12 (Cookies)) and decline advertising cookies — this constitutes the opt-out of sale or sharing; we also automatically recognize and honor Global Privacy Control (GPC) signals sent by the browser. Oversight lies with the competent authorities in your state.

Other jurisdictions with data protection legislation:

The rights provided under the respective legislation apply — which generally include access, correction and deletion of data — exercisable before the competent national authority in your country.

Universal floor of rights (all users):

Regardless of location or whether data protection legislation exists in your country, Calculamedica grants all users a minimum set of rights over the browsing data it holds: (a) confirmation and access to data being processed; (b) correction of inaccurate data; (c) deletion of data, except where there is a legal obligation to retain; (d) objection to processing and withdrawal of consent; (e) a contact channel through which to exercise these rights. Where local legislation confers additional rights, those prevail. In jurisdictions whose law imposes restrictions or conflicts with these principles, access to and use of the site remains subject to compliance with local law, without this implying any waiver of the privacy commitments made here to other users.

12. Cookies

Cookies are small text files stored on your device when you visit a website, which allow your preferences to be remembered and make navigation more efficient. In themselves, they do not contain personally identifiable information and do not execute any code on your device. Calculamedica uses two categories:

Essential cookies

Indispensable to the basic operation of the site. They do not collect data for tracking or advertising purposes.

• Language preference: stores the language chosen to avoid unwanted redirects on subsequent visits. Duration: 1 year.
• Cookie consent: records your choice (accept/decline) so the banner is not shown again. Duration: 1 year.

Advertising cookies (third party)

To keep the site free, we display ads from Google AdSense, which may use its own cookies to personalize ads based on previous visits to this and other sites. These cookies are managed exclusively by Google, and Calculamedica has neither access to nor control over them. See Google's Privacy Policy and manage your advertising preferences at adssettings.google.com.

How to manage them: on your first visit, a banner lets you accept or decline non-essential cookies, and your choice is recorded. You can review your choice at any time using the manage cookie preferences button (also available in the site footer as "Cookie Preferences"). You can also control cookies directly through your browser: Chrome, Firefox, Safari and Edge. Disabling essential cookies may impair functionality such as language selection.

US users: declining advertising cookies constitutes the exercise of the right to opt out of the sale or sharing of personal data under the CCPA/CPRA; we also automatically recognize and honor the Global Privacy Control (GPC) signal sent by your browser.

13. Changes to This Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in data processing, legal changes or operational improvements. Material changes will be published on this page with the revised update date. Continued use of the site after changes are published constitutes acceptance of those changes.

14. Contact and Data Controller

For any questions regarding this Privacy Policy or to exercise your rights, contact:

• Data Controller: Danton Jobim Pereira Dantas;
• Contact and rights exercise channel: contato@calculamedica.com.