Privacy Policy

This policy explains what personal data Bate Bola collects, why, who it is shared with, and what rights you have over it. If anything is unclear, write to us.

1. Who is responsible for your data

Responsibility for your data is split between two parties, depending on who decides what is done with it:

• [RAZÃO SOCIAL], [MORADA], VAT [NIF] (“Bate Bola”) is the controller for the platform: your account, your profile, conversations, posts and photos, sporting results, notifications and moderation.
• Each club you belong to is the controller for what it decides on its own: court bookings, the payments it collects, membership fees, facility access codes, and coach records.

In practice: for anything about your account, contact us. For a booking, a membership fee or a payment, your club is the point of contact — but you can always write to us and we will pass it on.

Privacy contact: privacidade@batebola.pt

2. What data we collect

Data you give us

• Account: name, email address, password (stored encrypted, never in plain text), date of birth.
• Profile: photo, self-declared playing level, availability, bio, preferred sports.
• Communication: private messages, wall posts, comments and reactions.
• Media: photos and videos you publish.
• Sport: registrations, results, sets, training sessions and, if you use it, your match journal (mood, energy, statistics).
• Club: memberships, membership fees, court bookings.
• Moderation: the reports you file and their reason.

Data collected automatically

• Notification identifier for your device, so we can send you push alerts.
• Device time zone, so times display correctly.
• Server technical logs (including IP address), required for operation and security.

What we do NOT collect

The app may ask for your location to show you nearby clubs. That position is used at the moment of the search and is never stored: we keep no history of your movements. The coordinates the app does store are club addresses, not yours.

We also do not collect health data, do not run behavioural advertising, do not sell data to anyone, and make no automated decisions producing legal effects concerning you.

3. Why, and on what legal basis

4. Who has access

Other users

Your name, photo, level and availability are visible to members of the clubs you belong to. Your sporting results appear in draws and standings. Your messages are visible to their recipients.

Your club

Administrators of the club you join have access, for club management purposes, to its member list — including your email address, your level, your join date, and the status and amount of your membership fee. Outside that list, your email is not visible to any other user.

Processors

We use providers who process data on our behalf, under contract:

• Supabase — database, authentication and file storage (European Union region).
• Google (Firebase Cloud Messaging) — sending push notifications.
• Google (sign-in) — if you choose to sign in with your Google account.
• Apple (Sign in with Apple) — if you choose to sign in with your Apple ID (iOS only). You may hide your email: we then receive a @privaterelay.appleid.com relay address and never your real one.
• Google Maps — maps and club address search.
• Stripe — payments for bookings, registrations and membership fees. Your card details are entered directly with Stripe and never pass through our servers.
• Sentry — technical error detection for the app (European Union region).
• Hostinger — website hosting.

Some of these providers are US companies. Transfers rely on the European Commission's standard contractual clauses and, where applicable, on Data Privacy Framework certification.

5. How long we keep it

• Account and profile: for as long as the account exists.
• Messages, posts and media: for as long as the account exists, or until you delete them.
• Notifications: 90 days.
• Notification dispatch logs: 30 days.
• Facility access logs (connected locks): 90 days.
• Sporting results: kept long-term so standings are not distorted — but anonymised if you delete your account.
• Payment records (bookings, registrations, membership fees): 10 years, under Portuguese accounting obligations. This is the only category that survives account deletion, and it is dissociated from your profile.

6. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. Two of them are built into the app, in the Conta screen:

• Download my data — full export in JSON format.
• Delete account — erases your personal content and anonymises your sporting results.

For the other rights, write to privacidade@batebola.pt. We reply within one month. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

If you believe your rights have not been respected, you may lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.

7. Minors

You must be 16 or older to create a Bate Bola account. You confirm your age when signing up. If we learn that an account belongs to someone under 16, we delete it.

If you are between 16 and 18, by creating your account you confirm that your legal guardian authorises you to use the app, including bookings and payments.

If you are a parent or guardian and want to report an account to us, write to privacidade@batebola.pt.

8. Security

Access to data is enforced in the database itself: each row is readable only by those entitled to see it. Photos and videos are in private storage, reachable only through temporary links. Your email is not readable by other users. Communications are encrypted in transit.

9. Changes to this policy

If we change this policy significantly, we will ask for your agreement again in the app. The version and date in force are shown at the top of this page.