Privacy Policy

01 Scope and applicable rules

1.1. This Policy applies to the Copa Fácil app, website, public tournament pages, and related features offered by JOSE AUGUSTO N COSTA LTDA.

1.2. We process personal data in accordance with applicable privacy, internet, consumer, and child-safety laws and regulations.

1.3. “Personal data” means information relating to an identified or identifiable person. “Processing” includes collecting, accessing, using, sharing, storing, correcting, and deleting that data.

02 Who processes data and in what role

Copa Fácil as data controller

2.1. Copa Fácil determines how and why account, authentication, security, support, platform operation, subscription, advertising, communication, and usage-analysis data is processed. The controller is:

The Organizer as data controller

2.2. When a person, team, league, school, association, company, or other entity creates and manages a tournament, that party decides what information will be entered or requested from athletes, guardians, team staff, referees, and participants. For that data and the Organizer’s sporting, administrative, documentary, and publication purposes, the Organizer is the controller and Copa Fácil generally acts as the service provider or processor operating the contracted infrastructure.

2.3. The Organizer must provide its own privacy notice when appropriate, limit fields to what is relevant, configure visibility, respond to data subjects, and obtain and retain any required permission or other lawful authorization. This includes parental or guardian authorization for the use of children’s personal data and images when required.

03 Personal data we process

3.1. The categories depend on the features you use:

3.2. Copa Fácil does not intentionally request sensitive personal data through its standard fields. However, free-text, uploaded documents, and custom fields created by Organizers may reveal health information, biometrics, racial or ethnic origin, religion, political opinions, trade-union membership, sexual life, or other sensitive information. Organizers should avoid collecting this data unless it is strictly necessary and lawfully authorized.

04 How we obtain data

4.1. Personal data may be:

• provided directly by you when you create an account, edit your profile, register, publish content, purchase a plan, or contact support;
• provided by an Organizer, moderator, guardian, team, or other authorized user who adds participants or tournament information;
• collected automatically through the app, website, cookies, local storage, server logs, and equivalent technologies;
• received from login providers, app stores, payment services, and other partners you choose to use; or
• obtained from public sources or information made public by the individual, subject to purpose limitation, fairness, and individual rights.

4.2. If you provide another person’s data, you must be authorized to do so and must make this Policy or the relevant privacy notice available to that person.

05 Why we use data and our legal grounds

5.1. When we rely on legitimate interests, we consider necessity, impact, and reasonable expectations, implement safeguards, and respect applicable objection rights. When we rely on consent, you may refuse or withdraw it without affecting prior lawful processing or processing based on another valid ground.

5.2. Children’s and teenagers’ data is always processed with their best interests as a primary consideration and with the additional safeguards described below.

06 Advertising, notifications, and emails

6.1. The free version may display ads delivered by advertising networks. Adult users receive personalized advertising only where a valid legal ground and choice exist. Users under 18 and users whose age is unknown must receive contextual or non-personalized ads, without behavioral advertising profiles.

6.2. Operational notifications may provide account and tournament updates, including messages, matches, results, registrations, administrative changes, and security events. They may be adjusted in the app or device settings.

6.3. Emails containing news, tips, offers, or promotional information are sent only after a separate, optional sign-up and consent. Consent is not bundled with account creation or acceptance of this Policy. You may unsubscribe at any time through the message or our contact channel.

6.4. Opting out of optional communications does not prevent messages that are strictly necessary for security, service delivery, billing, or responding to a request.

07 Protecting children and teenagers

7.1. Copa Fácil applies the child’s best interests, privacy by default, data minimization, age-appropriate design, and appropriate guardian involvement. The experience depends on confirmed age:

7.2. The Organizer must obtain and retain any authorization required to register, enroll, or publish a minor’s data or image. The Organizer must also take reasonable steps to confirm the guardian’s identity and authority, explain purpose and visibility, provide a revocation channel, and keep identification documents, phone numbers, precise location, and dates of birth away from public areas.

7.3. Copa Fácil may request evidence of age, guardian relationship, or authorization; reduce visibility; block contact or purchases; suspend an account; or remove data when reasonably necessary to protect a minor or comply with applicable law.

7.4. Parents and legal guardians may request access, correction, restriction, or deletion of a minor’s data through our contact channel. We assess requests with regard to identity, legal authority, the teenager’s maturity, their best interests, and applicable rights.

7.5. We do not sell minors’ personal data, allow behavioral advertising directed at them, or condition participation on personal data beyond what is strictly necessary.

08 Who receives personal data

8.1. We may share data only as needed with:

• Organizers and authorized people, for registration, team management, refereeing, matches, moderation, and tournament operations;
• the public and followers, when profiles, teams, results, statistics, news, media, or tournament pages are configured as public;
• Google and Firebase, for authentication, databases, file storage, notifications, metrics, maps, sign-in, and advertising;
• Apple, for sign-in and purchases within the Apple ecosystem;
• Google Play, for Android distribution, purchases, and subscriptions;
• Stripe and Asaas, for payments offered through the website;
• DigitalOcean and Bunny.net, for infrastructure, storage, distribution, and display of content;
• network and IP-geolocation providers, for connectivity, protection, and regional features;
• professional advisers, auditors, and authorities, to comply with applicable law, respond to valid orders, protect rights, or investigate incidents; and
• a business successor, in connection with a reorganization, merger, acquisition, or asset transfer, subject to continued protection of the data.

8.2. Providers operate under appropriate agreements, their own terms where applicable, and security measures relevant to their services. Copa Fácil does not sell personal data.

8.3. Public content may be accessed, indexed, copied, or shared by third parties outside Copa Fácil’s control. Check visibility before publishing, especially when minors are involved.

09 International data transfers

9.1. Some providers maintain infrastructure or teams outside Brazil. Personal data may therefore be processed in the United States and other countries where those providers operate.

9.2. Where required, we rely on legally recognized transfer mechanisms and appropriate safeguards, which may include adequacy decisions, contractual protections, binding corporate rules, or other lawful safeguards, together with technical and organizational measures.

10 How long we retain data and how we delete it

10.1. Inactivity alone does not trigger automatic deletion. While an account, tournament, or item of content is maintained, related data remains stored so we can provide the service, preserve sporting history, and keep information available to the relevant user or Organizer.

10.2. Data is removed when a user or Organizer uses a deletion feature, when we receive a valid request, when it is no longer needed following an operational decision, or when applicable law requires deletion. Before deleting a tournament, its administrator should transfer administrative access or export any information they wish to keep.

10.3. Copa Fácil aims to complete deletion from active systems within 24 hours after a valid request is confirmed. If volume, complexity, the need to preserve another person’s data, or another legitimate circumstance requires additional time, we will inform the requester.

10.4. Residual copies may remain in protected backups for up to 30 days after deletion from active systems. During that period, backup data is isolated from ordinary use and will be deleted or overwritten through the backup cycle.

10.5. We may retain strictly necessary data for a longer period where required to comply with legal, tax, or regulatory obligations; resolve disputes; prevent fraud; protect minors; or establish, exercise, or defend legal claims. The data will be deleted or anonymized when that purpose expires.

10.6. Deleting a Copa Fácil account does not automatically cancel a subscription managed by the App Store or Google Play. The user must cancel renewal through the relevant store.

11 Your privacy rights

11.1. Depending on your location and subject to applicable law, you may have the right to:

• confirm whether we process your personal data and obtain access to it;
• correct incomplete, inaccurate, or outdated data;
• request deletion, anonymization, restriction, or blocking of unnecessary, excessive, or unlawfully processed data;
• request data portability, subject to applicable rules and the protection of trade secrets;
• receive information about recipients and the consequences of withholding consent;
• withdraw consent and request deletion of data processed on that basis, subject to lawful retention;
• object to certain processing based on legitimate interests or direct marketing;
• request human review of certain decisions made solely through automated processing; and
• submit a complaint to a competent privacy, consumer-protection, or supervisory authority.

11.2. You can correct or remove certain data directly in the app. For other requests, email contato@copafacil.com with the subject “Privacy rights request.”

11.3. To protect you and others, we may request proportionate information to verify identity, legal authority, and the scope of a request. Requests are handled free of charge, subject to any exceptions permitted by applicable law.

11.4. If an Organizer collected the data, we may forward or help with the request, but the relevant controller is responsible for the final decision. We will explain this where applicable.

12 Security and data incidents

12.1. We use administrative, technical, and organizational measures designed to protect personal data against unauthorized access and accidental or unlawful destruction, loss, alteration, disclosure, or dissemination. Measures include access controls, authentication, infrastructure protection, backups, security logs, and provider reviews.

12.2. No system is completely risk-free. Users should keep the app updated, use a strong and unique password, protect their devices, and report suspected unauthorized access.

12.3. Incidents that may create a relevant risk or harm will be assessed, contained, documented, and reported to affected individuals and competent authorities within the time and in the manner required by applicable law.

13 Cookies, local storage, and device permissions

13.1. The website and app may use cookies, local storage, and similar technologies to maintain sessions, remember preferences, authenticate users, measure use, prevent fraud, and, where permitted, deliver advertising. Non-essential technologies that require consent should remain disabled until the user makes a choice.

13.2. The app may request access to:

• notifications, for account and tournament updates;
• location, for regional search and nearby tournaments; and
• camera, photos, videos, and files, for profiles, teams, tournaments, chats, media, registrations, and documents.

13.3. You can manage permissions in your device settings and cookies through your browser. Refusing permission may limit only the feature that depends on that access.

14 Changes to this Policy

14.1. We may update this Policy to reflect changes to the service, providers, data practices, or applicable rules. The current version and update date will remain available on this page.

14.2. We will provide reasonable notice of material changes through the app, website, or email. Where required, we will request new consent before beginning the changed processing.

15 Privacy contact

For questions, complaints, reports, or privacy-rights requests, contact:

If you are not satisfied with our response, you may contact the competent privacy, consumer-protection, or supervisory authority in your jurisdiction.