Privacy Policy

Updated at: September 30, 2026

1. Introduction Welcome to iFute! Your privacy is important to us. This Privacy Policy explains how we collect, use, share, and protect your information when you use our platform for booking time slots at sports venues, in compliance with Brazil's General Data Protection Law (LGPD).

2. Data controller The controller of your personal data is SAFIRA TECHNOLOGY LTDA, registered under CNPJ 67.523.095/0001-07, headquartered at R. Estilac Leal, 1295, Pascotini, Santo Ângelo/RS, ZIP 98.803-190, Brazil. Data Protection Officer (DPO): ifuteoficialbrasil@gmail.com.

3. Information we collect

• Account information: name, email, and profile image, obtained from the authentication

provider you choose (Google or Apple). iFute neither creates nor stores a password of its own — sign-in always goes through the provider.

• CPF or CNPJ (Brazilian tax ID): required by Asaas to issue the PIX charge. We ask for

it when you make your first booking, not at sign-up, and keep it for subsequent charges.

• Location: used to show courts near you. It is only read with your operating system

permission, which you can revoke at any time in your device settings.

• Payment information: processed securely through Asaas (our payment provider).

Payment is made via PIX, so iFute neither collects nor stores card data.

• Notification token: an identifier assigned to your device by **Firebase Cloud

Messaging**, linked to your account so we can notify you about your bookings. It stops being valid if you uninstall the app.

• Usage and booking data: booking history, favorites, reviews, and information about how

you interact with the platform.

• Technical access data: for each request we record IP address, date and time, the route

accessed, the outcome and the response time, plus your location rounded to roughly 1 km — precise enough to diagnose failures and understand which regions have demand, not enough to locate you. These records are automatically discarded within a few days.

• Usage statistics (Firebase Analytics): events such as screens viewed, searches

performed and bookings completed, tied to an internal identifier for your account. We never send your name, email, or tax ID to Analytics.

• For venue administrators: data required for payouts, including PIX key(s).

4. How we use your information (legal bases — LGPD Art. 7)

• Contract performance: to provide and operate the booking service, process payments,

and notify you about your bookings.

• Legal/regulatory obligation: to comply with tax and legal requirements.
• Legitimate interest: to improve the platform, measure its use, prevent fraud, keep the

operation secure, and display reviews publicly on venue pages.

• Consent: where applicable, for access to your location, for notifications, and for

communications that depend on your authorization.

5. Data sharing and third parties We do not sell your personal data. We may share it with:

• Payment processor: Asaas, which receives your name, email and tax ID to issue PIX

charges and process payouts to venue administrators.

• Authentication providers: Google and Apple, when you sign in with one of those

accounts. They are the source of your name, email, and profile picture.

• Google (Firebase): notification delivery (Cloud Messaging), usage statistics

(Analytics), and remote configuration of the app.

• Venue administrators: receive the data required to manage your bookings.
• Legal authorities: when required by law or court order.

6. International data transfers Asaas and our server infrastructure operate in Brazil. Google (Firebase) and Apple, however, process data on servers located outside the country. In those cases the international transfer takes place under Art. 33 of the LGPD, grounded in the performance of our contract with you and in the contractual protection guarantees offered by those providers.

7. User-generated content Any reviews you post on iFute are public. You are responsible for ensuring your content complies with our Terms of Use.

8. Data retention We retain your data for as long as your account exists and for as long as necessary for the purposes described. After account deletion:

• technical access data already expires on its own within a few days;
• transaction records (bookings and payments) are retained for the legally required

period, due to tax and accounting obligations, even after account deletion;

• remaining account data is removed or anonymized.

You may request deletion at any time (see section 10 and the Account Deletion page).

9. Use by children and teenagers iFute can be browsed by people of any age: searching for venues and checking courts, time slots and prices does not require an account. While browsing this way we collect no name, email, tax ID, or any other data that identifies you — only the technical access data described in section 3, which is not tied to an identity.

Creating an account and booking time slots is restricted to people aged 18 or over, because it means entering into a service contract and making a payment. Only at that point do we begin collecting account data. We therefore do not knowingly collect account data from children or teenagers; if we identify such an account, it will be deleted along with its associated data.

If you are the parent or guardian of a minor who created an account, write to ifuteoficialbrasil@gmail.com and we will remove it.

10. Your rights (LGPD Art. 18) You may request: confirmation that processing exists; access to your data; correction; anonymization or deletion; portability; and information about data sharing. To exercise these rights, contact our Data Protection Officer at ifuteoficialbrasil@gmail.com.

11. Security measures We implement security measures to protect your data, but no method is 100% secure.

12. Changes to this policy We may update this Privacy Policy; any changes will be posted here with a revised update date.

13. Contact Privacy questions: ifuteoficialbrasil@gmail.com.