Privacy Policy

Last updated: July 31, 2026

This Privacy Policy describes how Big Eye Scout ("the app", "we"), operated by Big Eye Scout, collects, uses, shares, and protects the personal data of the people who use the app, in accordance with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018) and the requirements of Google Play and the Apple App Store.

1. What data we collect

We only collect the data necessary for the app to function. Nothing is collected through advertising, analytics, or tracking SDKs — Big Eye Scout does not use tools of that kind.

1.1 Account and profile data

• Full name and username
• Email and password (the password is securely managed by our authentication provider)
• Phone number (optional)
• Date of birth
• City and state (optional)
• Role in the app: athlete, professional (e.g. coach, scout), club, or administrator
• Profile photo
• When the user is under 18: a legal guardian's email, collected at sign-up for minor-safeguarding purposes

1.2 Athlete-specific data

• Height, weight, and dominant foot
• Field positions and strengths
• Current category and market status (availability)
• Club history
• Videos and thumbnails submitted for evaluation

1.3 Professional-specific data

• Specialty, institution, and professional registration number
• Credential documents (PDF or image) submitted to verify professional activity

1.4 Health and physical performance data (sensitive category)

Professionals registered on the app can record evaluations about an athlete, which may include sensitive health data under Article 5, II of the LGPD:

• Body composition (bioimpedance, body fat %, muscle mass)
• Biochemical tests (e.g. glucose, cholesterol, blood count)
• Physical performance tests (strength, speed, endurance, VO2 max)
• Dental evaluations
• Psychological evaluations (mood, anxiety, and motivation scales)

This data is entered by the professional responsible for the evaluation and is visible only to the evaluated athlete and to whoever has permission to access that professional's profile within the app. It is not used for any purpose beyond the athlete's sports evaluation.

1.5 Usage data

Counts of approved videos, received validations, and accepted contact requests, used only to display statistics on the athlete's profile. Clubs can also keep a list of favorited athletes (shortlist).

2. How we use the data

• Create and authenticate the user's account
• Display the athlete, professional, or club profile to other authorized users
• Enable professional evaluations and validations of athletes
• Allow clubs and professionals to contact athletes
• Moderate submitted content (videos and documents go through approval)
• Comply with legal and security obligations

3. Who we share data with

We do not sell personal data. We share data only with:

• Supabase — our database, authentication, and file storage provider, which processes data on our behalf under a confidentiality agreement
• Google — only if the user chooses to sign in with Google (OAuth), for authentication purposes
• Other users of the app, within each role's visibility limits (for example, a club can see the profile and phone number of an athlete who accepted a contact request)

We do not use advertising SDKs, third-party analytics, or cross-app/site tracking.

4. Data retention and deletion

We keep personal data for as long as the account is active. Users can delete their account and all associated data at any time from within the app, at Settings → Delete account, or by requesting it via email at casafortefc@gmail.com. See details on the Account & Data Deletion page.

5. Security

Session tokens are stored encrypted on the device (Keychain/Keystore, via Secure Store). Communication with our servers uses HTTPS, and access to database records is restricted by Row Level Security policies, ensuring each user can only access the data they are permitted to.

6. Data subject rights (LGPD)

You may, at any time, request:

• Confirmation of the existence of processing and access to the data
• Correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion of unnecessary data
• Portability of data to another service provider
• Deletion of data processed with consent
• Revocation of consent

To exercise any of these rights, contact us at casafortefc@gmail.com. We will respond within 15 days.

7. Children's and teenagers' data

Big Eye Scout is not intended for children. Users under 18 must provide a legal guardian's email at sign-up, in accordance with Article 14 of the LGPD, which requires specific consent from at least one parent or legal guardian for processing the data of children and teenagers.

8. Changes to this policy

We may update this policy periodically. Material changes will be communicated inside the app. The last-updated date is always shown at the top of this page.

9. Contact

Questions about this policy or about how your data is processed: casafortefc@gmail.com.