1. Data Controller
ChutAÍ is the data controller responsible for your personal data. For any questions or requests regarding your data, contact us at admin@chutai.net.
2. Data We Collect
2.1 Information from Google Sign-In
When you sign in with Google, we receive:
- Display name
- Email address
- Profile picture URL
- Google account identifier
2.2 Information You Provide
- Match score predictions
- League memberships and league names you create
- Display name and member tag (if customized)
- Avatar selection (flag preset choice)
2.3 Technical Data
- Session cookie (required for authentication)
- Locale preference cookie (language choice)
2.4 Data We Do Not Collect
We do not collect payment information, precise geolocation, device fingerprints, browsing history, or any data through third-party analytics or tracking tools.
3. Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent (GDPR Art. 6(1)(a) / LGPD Art. 7, I): By signing in with Google, you consent to the collection and use of your profile information.
- Legitimate Interest (GDPR Art. 6(1)(f) / LGPD Art. 7, IX): Operating the Service, maintaining leaderboards, and ensuring fair play.
- Performance of Contract (GDPR Art. 6(1)(b) / LGPD Art. 7, V): Providing the prediction game features you signed up for.
4. How We Use Your Data
- Authenticate your identity and manage your account.
- Store and display your predictions.
- Calculate scores and maintain leaderboards.
- Enable league creation, membership, and competition.
- Display your profile to other users within leagues and leaderboards.
- Show your match predictions to other members of any private league you belong to, once those predictions are locked (5 minutes before kick-off). Predictions remain private until lockout.
5. Cookies
ChutAÍ uses only essential cookies:
- Session cookie (set by NextAuth.js): Required for authentication. Expires after 30 days of inactivity.
- Locale cookie: Stores your language preference (English or Portuguese). Expires after 1 year.
We do not use analytics cookies, advertising cookies, or any third-party tracking technologies.
6. Data Sharing
Google: We use Google OAuth for authentication. Google receives confirmation that you authorized sign-in. We do not share your prediction data or activity with Google.
We do not sell, rent, or share your personal data with any other third parties for marketing or commercial purposes.
7. Your Rights
Under the GDPR (Art. 15–22) and LGPD (Art. 18), you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Correct inaccurate data (you can edit your display name, member tag, and avatar directly in the app).
- Deletion:Delete your account, which anonymizes your data (email is removed, display name is replaced, league memberships are deleted). Use the "Delete account" option in profile settings.
- Data Portability: Request your data in a structured, machine-readable format.
- Withdraw Consent: You may withdraw consent at any time by deleting your account.
- Object to Processing: You may object to processing based on legitimate interest.
- Anonymization (LGPD Art. 18, IV): Request anonymization of unnecessary or excessive data.
- Information on Sharing (LGPD Art. 18, VII): Request information about public and private entities with which your data has been shared.
To exercise any of these rights, email us at admin@chutai.net or use the in-app account deletion feature.
8. Data Retention
We retain your personal data for as long as your account is active. When you delete your account, we anonymize your data: your email is removed, your display name is replaced with a generic label, and your league memberships are deleted. Anonymized prediction records are retained for leaderboard integrity.
9. International Data Transfers
Your data may be processed on servers located outside your country of residence. When transfers occur outside the European Economic Area or Brazil, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
10. Children's Privacy
ChutAÍ is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us at admin@chutai.net and we will delete it promptly.
11. Supervisory Authorities
If you are in the European Union, you have the right to lodge a complaint with your local data protection authority.
If you are in Brazil, you may contact the Autoridade Nacional de Proteção de Dados (ANPD) at www.gov.br/anpd.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Service after changes constitutes acceptance of the revised policy.
13. Contact
For any questions about this Privacy Policy or your personal data, contact us at admin@chutai.net.