PRIVACY POLICY - JOGAKI

1. GENERAL INFORMATION

This Privacy Policy describes how Jogaki ("we", "our" or "App") collects, uses, stores and protects your personal information when you use our mobile application.

2. INFORMATION WE COLLECT

2.1 Information You Provide

• Registration Data: Full name, email, date of birth, phone number
• Profile Information: Profile picture, sports interests, optional Instagram, Facebook and Strava links, and whether to show your email and phone number on your public profile
• Location Data: Geographic coordinates and location visibility preferences (when enabled)
• Messages and Reports: Content sent in group conversations for activities, in one-to-one conversations between an organizer and a participant, and in message reports
• Settings: Notification, visibility and conversation mute preferences
• Social Media Profiles: The handle of your Instagram, Facebook and Strava profiles, when you choose to provide them. We store only the public handle, never your credentials, and we do not access your account or read your posts or activities on those platforms

2.2 Information Collected Automatically

• Usage Data: How you interact with the App, features used
• Device Information: Device type, operating system, App version
• Location Data: GPS coordinates (when allowed), approximate region and estimated city derived from location when you allow others to find you
• Technical Logs: Error, performance and security information
• Conversation Metadata: For each user and conversation, we record whether the conversation was muted, the last message sequence read (lastReadSeq), and the date and time it was last read, to calculate unread messages and decide whether to send notifications
• Notification Records: Operational delivery records for message notifications
• Advertising Data: Records of ad views (impressions) and interactions (clicks) with ads displayed in the App, associated with your account identifier
• Demand Data: Sports interests, search filters, aggregated opportunity counts and technical events used to measure demand by sport and region, without showing your exact location to other users

2.3 Third-Party Information

• Google Sign-In: Basic Google account data (when used)
• Apple Sign-In: Basic Apple account data (when used)
• Firebase/Google: Technical data used for authentication, analytics, crashlytics and push notification delivery
• Geocoding and Map Providers: When the feature is enabled, we may use map or geocoding providers, such as OpenStreetMap/Nominatim or contracted providers, to convert coordinates into city, state or approximate region. We do not send name, email or phone number to these providers
• External Advertisers: When you click an ad, you are redirected to the advertiser's external website. Jogaki does not share your personal data with advertisers on an individual basis
• Strava (link resolution): When you provide your Strava profile through a share link, our server queries that link once to find which strava.com profile it points to. We send only the link you provided, identifying ourselves as Jogaki; no data from your account is sent or received

3. HOW WE USE YOUR INFORMATION

3.1 Providing the Service

• Create and manage your user account
• Enable creating and joining matches, training sessions, routes and other activities
• Show nearby activities, game opportunities and aggregated demand signals by sport and region
• Provide group conversations between an activity organizer and approved participants, and one-to-one conversations between an organizer and a participant
• Calculate unread message counts and decide when to send new-message notifications
• Send relevant notifications

3.2 Service Improvements

• Analyze usage patterns to improve features
• Understand demand by sport and region in aggregate, with technical limits to reduce reidentification risk
• Identify and fix technical issues
• Develop new features based on user feedback

3.3 Security and Fraud Prevention

• Verify users' identities
• Detect suspicious or inappropriate activity
• Protect against misuse of the App
• Forward message reports to the activity organizer or, when the message is theirs, to Jogaki's moderation team
• Apply user blocks and prevent communication, registrations and approvals between blocked users
• Apply usage limits, quotas and controls against scraping, differential queries and reidentification attempts

3.4 Advertising

We display ads from commercial partners within the App. Ad interaction data (impressions and clicks) is used exclusively to:

• Measure advertising campaign performance in aggregate
• Ensure balanced ad rotation across users
• Generate internal analytical reports

This data is not used for tracking across third-party apps or websites.

4. INFORMATION SHARING

4.1 Public Information and Information Visible to Other Users

The following information may be visible to other users, depending on the context and applicable permissions:

• Name, profile picture (optional), age (never your date of birth) and how long you have been a member
• Email and phone number, only if you turn on their display and only to the organizer and approved participants of an activity you share (or to someone viewing an organizer's profile from that organizer's activity)
• Location of the activities you organize, or only the approximate region when the location is private
• How many activities you created, joined and played with the person viewing your profile
• Messages in an activity, visible only to the organizer and approved participants who have access to that conversation; one-to-one conversations are visible only to the organizer and participant involved
• Links to your Instagram, Facebook and Strava profiles, when you choose to provide them

4.2 Service Providers

We share information with:

• Firebase/Google and APNs/Apple: For authentication, analytics, push notifications and crashlytics. Visible chat alerts send the sender's name and up to five recent excerpts to Firebase Cloud Messaging and, on iOS, APNs. These details may appear on the lock screen according to device settings
• Cloud Services: For secure data storage, including message content and metadata
• Geocoding and Map Providers: To transform coordinates into city, state or approximate region and display maps or regional data. When we use OpenStreetMap data, we display visible attribution according to the applicable license
• Payment Providers: For transaction processing (when applicable)
• Advertisers: We share only aggregated and anonymized performance data (total impressions and clicks). No personally identifiable data is shared with advertisers

4.3 Aggregated Data and Administration

We may display city or approximate region, opportunity states and aggregated counts by sport or area internally in administrative dashboards. This information is used for operations, support, security and service improvement, with controls to prevent exports or queries that improperly reveal individual location.

4.4 Legal Requirements

We may share information when:

• Required by law or court order
• Necessary to protect rights and safety
• To investigate illegal activities

4.5 Reports and Conversation Management

The organizer manages the conversation and resolves reports about messages sent by participants. Reports about the organizer's own messages are decided by Jogaki administrators, who may delete the reported message when they accept the report. Administrators cannot browse conversations freely: they access the reported message and, for context, up to 10 preceding and up to 10 following messages from the same conversation.

• Every access by Jogaki administrators to a report is logged
• Jogaki administrators do not browse conversations, and there is no conversation-reading tool outside the report flow
• Jogaki administrators may delete an organizer's message only when accepting a report against it; the organizer and author may also delete messages under the App's rules

5. STORAGE AND SECURITY

5.1 Storage

• Data, including message content, is stored on Jogaki's servers
• We use encryption to protect sensitive information, including in transit and at rest; messages are not end-to-end encrypted
• We implement technical and organizational security measures
• To open conversations quickly and allow offline use, the App may keep a copy limited to recent messages on the device. This copy is deleted at logout, and conversations that have not been used are removed from the device after approximately 30 days

5.2 Data Retention

• We keep your data while your account is active
• After account closure, other data may be retained for a limited period, depending on its nature and the applicable purposes
• Message content is retained permanently on Jogaki's servers and is not deleted when an activity ends or when a user leaves or is removed from the activity. After the activity ends, the conversation becomes read-only
• Leaving an activity or being removed revokes access to the conversation but does not delete messages already sent
• You can delete your own messages at any time, and the organizer can delete messages in the activity they organize. A deleted message is no longer shown to anyone; a record of it may be kept on our servers for security and to investigate reports
• Operational notification-delivery records are retained for up to 7 days, and preferences related to closed conversations are retained for up to 30 days
• When you disable being found by location, we remove the derived region linked to your active profile and stop using it for user-based demand maps
• Technical region caches may be retained by approximate area, without direct link to your account, to reduce calls to external providers
• Anonymized data may be retained for analysis purposes

5.3 Security

• Data encryption in transit and at rest
• Strict access control to data
• Access to conversations limited to participating users and, only when there is a report, to Jogaki administrators within the context described in this Policy
• Logging of access performed to review reports
• Continuous security monitoring
• Regular security updates

6. YOUR RIGHTS

6.1 Access and Control

You have the right to:

• Access your personal information
• Correct inaccurate or incomplete data
• Request deletion of your account
• Export your personal data (request via email)

6.2 Privacy and Safety Preferences

You can:

• Disable location sharing
• Disable being found by location, removing the derived region from your active profile
• Control push notifications and mute a conversation to stop new-message notifications from that conversation. Alerts from the same conversation are grouped; the Mark as read action marks messages through the sequence shown in the alert without opening the App. Later messages remain unread. Previews appear by default, including on the lock screen when device settings allow it
• Block another user. A block is global and reciprocal in effect: the blocked user's messages and profile are no longer visible to the user who applied the block, direct communication is disabled in both directions, and new registrations or approvals between the pair are rejected
• Report a message. The organizer decides reports about participants; Jogaki administrators decide reports about the organizer's messages
• Adjust profile visibility
• Manage App permissions
• Remove the handle of any social network from your profile at any time by clearing the field

6.3 Exercising Your Rights

To exercise your rights, contact us through the App's official channels. We will respond within 30 days. This period applies to data protection rights requests and does not establish a response deadline for message reports.

7. COOKIES AND SIMILAR TECHNOLOGIES

7.1 Use of Cookies

• We use cookies to improve the user experience
• Cookies are used for authentication and preferences
• You can control cookies through your device settings

7.2 Analytics

• We use Firebase Analytics to understand App usage
• Usage statistics are only collected after your consent: in the App, through the question shown after your first access (changeable anytime in your profile); on the website, through the statistics notice (Accept/Decline). The campaign origin (utm parameters and the domain you came from) is stored in your browser without identifiers, only to attribute installs and sign-ups.
• Regardless of that consent, the App sends anonymous usage counters (for example, how many times the App was opened, searches performed or conversations opened), accompanied only by the platform (Android or iOS) and, in some cases, the sport. These counters contain no user or device identifier, IP address or exact time, are summed per day upon receipt and cannot identify anyone, so they are not personal data (art. 12 of the LGPD). The admin panel also shows daily totals derived from the service's records (such as number of messages sent or of active people), always aggregated and hiding very low values.
• Opportunity events may include sport and the type of count displayed, but do not include exact coordinates, activity identifier or direct user identifier
• Analytics data is handled in aggregate or pseudonymized form when possible; we do not promise irreversible anonymization when technical device or installation identifiers exist

8. INTERNATIONAL TRANSFERS

8.1 Global Storage

• Data may be processed on servers located outside Brazil
• We use providers that comply with international protection standards
• Transfers follow Brazilian data protection laws

9. MINORS

9.1 Protection of Minors

• The App is not intended for children under 12
• We do not knowingly collect data from minors
• If we identify data from minors, we remove it immediately

10. CHANGES TO THE POLICY

10.1 Updates

• This policy may be updated periodically
• We will notify you of significant changes
• Continued use after updates constitutes acceptance

10.2 Notifications

• Important changes will be communicated via the App
• You will be notified of changes that affect your rights

11. CONTACT

11.1 Questions and Requests

For questions about this policy or to exercise your rights:

• Contact us through the App
• Use the official support channels
• Send an email to the official support address

11.2 Data Protection Authority

If you have complaints about how your data is handled, you may contact the Brazilian National Data Protection Authority (ANPD).