Privacy Policy — Você Na Copa

Last updated: June 12, 2026

This Privacy Policy describes how Você Na Copa (the "Service") — available both as an Android app and as a public website at vocenacopa.app.br —, operated by EGC Services, collects, uses, stores and protects its users' information. By installing and using the app or visiting the website, you agree to the practices described below.

Quick summary: the Service requires no sign-up or login and does not sell information to third parties. We collect technical device data (needed for notifications and statistics) and, only when you use specific features — such as the World Cup Simulator or sending suggestions — the name (and email, if you provide one) that you type yourself. The live scores are simply public match data shown to you — they collect nothing about you. Details in section 1.8.

1. Information we collect

1.1. Device data

When the app is first opened, we automatically record:

Device identifier (Android ID or an analogous identifier)
Model, manufacturer and operating system version
Language and region configured on the device
Installed app version

This data is tied to the device identifier, not to you as a person.

1.2. Push notification token (Firebase Cloud Messaging)

To send alerts about match kickoffs, goals and other World Cup events, we generate a notification token through Firebase Cloud Messaging (FCM), by Google LLC. This token is unique to the device and can be revoked at any time by disabling notifications in your system settings.

1.3. Usage data (anonymous statistics)

We collect aggregated metrics — such as number of opens, screens visited and session time — through Firebase Analytics. This data is anonymous and used only to understand usage patterns and improve the Service.

1.4. Advertising identifier (AdMob)

The app shows ads through Google AdMob, which uses the Android Advertising ID (AAID). You can disable ad personalization under Settings → Google → Ads → Opt out of Ads Personalization, or reset the AAID whenever you want.

1.5. What we do NOT collect

Mandatory registration, password, phone number, national ID or documents (the name/email in the optional features — Simulator and Suggestions — are typed by you; see section 1.8)
Precise location (GPS) — the Service does not request location permission
Contact list, photos, messages or device history
Financial, payment or banking data

1.6. Pix payments (optional)

The app offers the option of voluntary financial support via Pix (the Brazilian instant-payment system). The QR Code shown is static and the payment is processed exclusively by the user's financial institution. We do not receive, process or store banking data, credit cards or any identifiable financial information. We only receive the name chosen by the payer (when provided in their banking app) and the transfer amount, in line with the standard Pix mechanics defined by the Central Bank of Brazil.

1.7. External links and sponsors

The Service may display banners from sponsors or institutional partners. When you tap these banners, you are directed to the partner's external website, where that third party's own privacy policy applies. We do not share your data with sponsors — the relationship is limited to displaying the brand within the Service.

1.8. Name and email in optional features (Simulator and Suggestions)

Some features ask for a name — always typed by you, and it may be a nickname:

World Cup Simulator: to build and share your prediction, we ask for a display name, used only to identify the prediction (including when opened from a shared link). It is tied to the device/prediction identifier, not to an account.
Suggestions: when sending a suggestion through the app, you may optionally provide a name and email so we can understand and, where appropriate, reply to you.

This data is provided voluntarily by you, is not used for marketing nor sold, and can be deleted upon request via the contact email (section 9).

2. How we use the information

Service operation: deliver relevant match notifications, keep content and scores up to date and offer the correct language
Continuous improvement: identify bugs, slower screens and underused features
Advertising: allow AdMob to show ads compatible with the Service's audience (which keeps the Service free for everyone)
Security: detect abuse, fraud attempts and protect our infrastructure

3. Sharing with third parties

We share data only with providers essential to operating the Service, subject to their own privacy policies:

Google LLC — Firebase (Analytics, Cloud Messaging, Crashlytics) and AdMob
policies.google.com/privacy
Google Play Services — installation, updates and advertising ID
google.com/policies/privacy

We do not sell, rent or share data with third parties for commercial purposes unrelated to operating the Service.

4. Storage and security

All traffic between the Service and our servers is encrypted via HTTPS (TLS 1.2+)
The backend is hosted on a professional server with a firewall and continuous security updates
Administrative access is protected by OAuth2 authentication (Laravel Passport) with short-lived tokens
We follow OWASP-recommended practices to mitigate SQL injection, XSS and API abuse

5. Data retention and deletion

Device data and notification tokens are kept while the app is installed. When you uninstall the app, the push token is invalidated automatically. You may request full deletion of the records associated with your device by sending the identifier to the contact email below — deletion will be completed within 15 business days.

6. Your rights

In compliance with Brazil's General Data Protection Law (LGPD — Law No. 13.709/2018) and, where applicable, the GDPR (EU 2016/679), you have the right to:

Confirm whether your data is being processed
Request access, correction or deletion
Request portability of your data to another provider
Withdraw consent at any time (by disabling notifications or uninstalling the app)
File a complaint with the National Data Protection Authority (ANPD)

To exercise any of these rights, contact us at the email below.

7. Children and minors

The Service is rated for everyone and aimed at a general audience interested in the World Cup. We do not knowingly collect data from children under 13. If we identify inadvertent collection, the data will be removed immediately. Parents or guardians may request deletion via the email below.

8. Changes to this Policy

This Policy may be updated periodically to reflect changes in the Service or in legislation. The "last updated" date at the top of this page will always indicate the current version. Material changes will be communicated within the app.

9. Contact

Questions, LGPD-related requests or data deletion requests:

Data controller: EGC Services
Email: [email protected]