Privacy Policy
This policy describes how FRC Consultores Associados LTDA (FRC), customer institutions, and the Precepte product process personal data of users (residents, preceptors, coordinators, and other institutional roles) in the app and on the web. Precepte is an educational and administrative management tool for medical residency programs and does not process patient clinical data.
1. Data-processing roles
- FRC as controller: FRC controls the data required for account creation and security, support, and compliance with its own legal obligations.
- Customer institution as controller: the institution defines the purposes and governance of academic and administrative data, including schedules, attendance, evaluations, policies, and program communications.
- FRC as processor: FRC processes academic and administrative data on behalf of the customer institution, under the applicable contract, institutional instructions, and access controls.
2. Categories of data collected
- Identity and contact: name, email, phone, profile photo (optional), account identifiers.
- Academic/professional data: medical license ID (CRM), enrollment, specialty, program, unit, role (RBAC).
- Product usage: schedules, attendance/time clock (including location when the user checks in), pedagogical evaluations, messages, and technical metadata required to operate the service.
- Device and notifications: push tokens (FCM), session data, and security audit trails.
3. Purposes
- Authenticate users and enforce multi-institution isolation (multi-tenancy).
- Operate schedules, attendance, evaluations, and communications for the residency program.
- Meet institutional, security, and audit obligations.
- Improve product stability and technical support.
4. Legal basis (LGPD)
FRC processes data under its responsibility to perform contracts, provide security and support, and comply with its own legal obligations. The customer institution defines the legal bases applicable to academic and administrative data under its governance. Data minimization and role-based access controls (RBAC) apply in all cases.
5. Sharing
- With the institution the user is linked to (coordination and authorized roles).
- With infrastructure providers (e.g. Google Firebase/Auth/Firestore/Hosting/Cloud Functions) under data-processing terms.
- We do not sell personal data. We do not share data with advertisers for third-party marketing.
6. Retention
- Active profile data: while the account remains linked to the program.
- Operational audit logs: typically 2 years.
- Critical institutional audit events (e.g. account deletion, role changes): up to 10 years, for accountability.
- Educational artifacts (schedules, evaluations, attendance) may remain with the institution under program policy, without profile PII after account deletion.
7. Account deletion
You may request deletion of your own account by emailing suporte@precepte.com.br (include the account email and institution). When self-service is available in your app version, also use Perfil → Excluir minha conta (current in-app label; product UI is Portuguese). After confirmation, FRC closes access, revokes tokens, and removes or anonymizes personal profile data. Records the controller institution must retain remain under its governance, without personal profile data where possible, for the purposes and periods described in this policy.
8. Data subject rights
For account, security, and support data controlled by FRC, request access, correction, portability (where applicable), information about sharing, or deletion via suporte@precepte.com.br or the in-app flow. For academic and administrative data, also contact the controller institution. If the responsible party is unclear, FRC will route the request to the appropriate channel.
9. Security
We apply Firebase authentication, institution/role access rules, backend input validation, and audit trails. No system is risk-free; we report relevant incidents as required by law.
10. Controller and processor contacts
FRC Consultores Associados LTDA — Brazilian Tax ID (CNPJ) 22.052.463/0001-30 — Recife-PE, Brazil
Product: Precepte — precepte.com.br
FRC email for account, security, support, and rights: suporte@precepte.com.br
Legal notice: frcconsultores.com.br/en/impressum
Academic/administrative data: the customer institution linked to the user.
Support page: precepte.com.br/en/support/
11. Changes
We may update this policy. The effective date at the top indicates the current version. Material changes will be communicated in the product or by email when appropriate.