Privacy Policy

1. Who we are

Futebolize is an app for managing amateur soccer teams and pickup games, developed and operated by MW Tecnologia, the controller of the personal data processed in the app. For any privacy matter, including to contact our data protection officer, write to contato@futebolize.app.

2. Data we collect

We collect what is needed for the app to work, for us to communicate with you, and to improve the product:

• Account: name, email address, phone number, password (stored in encrypted form by our authentication provider, without us having access to it), profile photo (optional), language, and time zone.
• Sign in with Google or Apple: when you choose this option, we receive the name and email address that these services pass on to us. With Apple, you can hide your real email address.
• Teams and soccer: the teams you create or belong to (name, crest, city, and format), squad, matches, scores, lineups, attendance, statistics, rankings, and highlights.
• Data about other people you add: when you add opponents or players who don't have an account, you provide data such as name, position and, if you wish, phone number. Only do this with those people's permission.
• Team finances: monthly fees, income, and expenses recorded by the organizer. Futebolize does not receive or transfer payments between players; it only records payments and helps collect them.
• Subscription: the plan you signed up for and your purchase history. Payment is made through the App Store, Google Play, or Stripe, and we do not receive your card number.
• Communications: the messages you exchange with us via WhatsApp or email.
• Usage and diagnostics: screens opened, taps, usage events, session recording (explained in section 4), app errors, platform, app version, and approximate location (city and country) estimated from your IP address.
• Device identifiers: the device's notification token and, to measure marketing campaigns, the advertising identifier (on iPhone and iPad, only if you allow it).

We do not collect your precise location (GPS) or your contacts. Images are only uploaded when you choose a photo, for example, for your profile or your team's crest.

3. How we use data and on what legal basis

• Creating and maintaining your account and providing the app's features (teams, matches, invitations, rankings, and finances): performance of the contract with you.
• Sending match alerts, invitations, and payment requests by notification, email, or WhatsApp: performance of the contract and legitimate interest. You can turn off notifications on your device and ask not to receive messages via WhatsApp.
• Processing your subscription and meeting tax and legal obligations: performance of the contract and compliance with a legal obligation.
• Understanding how the app is used, finding out where people get stuck, and fixing errors: legitimate interest.
• Measuring the results of our marketing campaigns (Meta): consent on iPhone and iPad, through the iOS tracking permission, and legitimate interest on Android, where you can reset or delete the advertising ID in your device settings.
• Responding to support requests, preventing fraud, and protecting the security of the service: legitimate interest.

We do not sell personal data.

4. Session recording and usage metrics (PostHog)

We use PostHog to understand where people get stuck in the app and to fix errors. PostHog's servers are located in the United States. A recording is a replay of the screen rebuilt from the page's code: it is not a video or a photo, and it only works in the app and on the production website.

• Nothing you type is recorded: every form field is masked.
• Passwords, the admin area, the phone number and message of anyone asking to join a team, your email address, and search text are left out of recordings.
• Your email address is not sent to PostHog. The only thing that links a recording to you is your account's internal identifier, and that link is removed when you sign out.
• We do not use heatmaps, and we do not record network data or the app console.
• Invitation and confirmation codes are removed from the URLs sent in events.

What appears on screen and is not typed into a field, such as player names, the team name, and amounts, is visible in the replay. This data is used only for product analysis and fixing errors: it is not used for advertising or combined with third-party data.

5. Who we share data with

We share data only with:

• Other users: what you record in a team is visible to the members of that team. The team's name, crest, city, and record appear in search and on the team's public profile.
• Supabase (US): database, authentication, and file storage.
• Vercel (US): hosting for the web app and this website.
• PostHog (US): usage metrics and session recording.
• Meta Platforms: campaign measurement through the Facebook SDK in the app, and sending messages through the WhatsApp platform.
• Google: notifications (Firebase Cloud Messaging), Sign in with Google, Google Play, and Google Tag Manager on this website.
• Apple: Sign in with Apple, the App Store, and notifications on iPhone and iPad.
• Stripe and RevenueCat: subscription processing and management.
• Anthropic: artificial intelligence that helps us reply to messages sent to our WhatsApp support line.
• Public authorities, when required by law.

Infrastructure providers process data on our behalf and for the purposes set out in this policy. Meta, Google, and Apple also follow their own privacy policies.

6. International transfers

Some of our providers, including the one that hosts the Futebolize database, are located outside Brazil, mainly in the United States. For these transfers, we use providers that offer data protection safeguards compatible with the LGPD, such as contractual clauses and security measures.

7. Security

Data is transmitted with encryption (HTTPS), access to the database is restricted by per-user and per-team permission rules, and only the staff in charge can access the admin panel. No system is completely secure: if an incident occurs that poses a significant risk to you, we will notify you and the Brazilian National Data Protection Authority (ANPD), as required by law.

8. How long we keep data

We keep data for as long as your account is active. When you delete your account, we erase your registration data, the teams you created, and your membership in other people's teams.

• Your name may remain in the squad of other people's teams, as the organizer entered it, with no link to your account.
• Payment records that Apple, Google, or Stripe are required by law to keep remain with them.
• Usage data in PostHog is deleted when you request it by email.
• Database backups are replaced periodically.

9. Your rights

Under the LGPD, you can request:

• Confirmation that we process your data, and access to that data.
• Correction of incomplete, inaccurate, or outdated data.
• Anonymization, blocking, or deletion of unnecessary data or data processed in breach of the law.
• Portability of your data.
• Deletion of data processed with your consent, and withdrawal of that consent.
• Information about who we share your data with.
• Objection to processing carried out on the basis of legitimate interest.

To exercise any of these rights, write to contato@futebolize.app; we respond within 15 days. To delete your account, go to Profile → Delete My Account in the app or follow the steps at mobile.futebolize.app/excluir-conta. You can also file a complaint with the ANPD.

10. Children and adolescents

Futebolize is not directed at children. If you are the parent or legal guardian of a child or adolescent and believe they have given us data without your authorization, contact us so we can delete it.

11. This website and cookies

The futebolize.app website uses Google Tag Manager to measure visits and campaign results, which may store cookies in your browser. You can block or delete cookies in your browser settings.

12. Changes to this policy

We may update this policy. When a change is significant, we will let you know through the app or by email. The date at the top of this page always indicates the version in effect.

13. Contact

Questions about this policy or requests about your data: contato@futebolize.app