Privacy Policy — The Playground
1. Who We Are
The Playground ("the App", "we", "us", "our") is a mobile application developed by Pedro Ferreira Azevedo as part of a Master's dissertation project at Universidade de Aveiro. The App is currently in a pilot testing phase.
Data Controller:
Pedro Ferreira Azevedo
Email: help@theplaygroundapp.pt
Institution: Universidade de Aveiro, Portugal
2. What Data We Collect
2.1 Data You Provide Directly
- Name and username — when creating an account
- Email address — for account creation and communications
- Profile photo — optional
- Basketball court information — name, address, description, and any details you submit when adding or editing a court
- Photos of courts — images you upload to the App
- Game details — location, date, time, and number of players when you create or join a game
2.2 Data Collected Automatically
- Device information — device type, operating system version, app version
- Usage data — screens visited, features used, actions taken, timestamps
- IP address — collected at time of connection for security purposes
- Crash reports — technical error data if the App crashes
2.3 Location Data
We request access to your device's location only while the App is open and in use (foreground location). We do not collect your location in the background. Location is used to display nearby courts and, if you choose to do so, to confirm that you are physically present at a court (check-in).
You can withdraw location permission at any time through your device settings. The App will continue to function, but nearby court suggestions and court check-ins will not be available.
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Create and manage your account | Contract (Art. 6(1)(b)) |
| Display courts and games on the map | Contract (Art. 6(1)(b)) |
| Allow you to organise and join games | Contract (Art. 6(1)(b)) |
| Confirm your presence at a court (check-in) | Contract (Art. 6(1)(b)) |
| Improve the App based on usage patterns | Legitimate Interests (Art. 6(1)(f)) |
| Academic research and dissertation reporting (anonymised data only) | Legitimate Interests / Research (Art. 6(1)(f) + Recital 159) |
| Send you service-related communications | Contract (Art. 6(1)(b)) |
| Ensure security and prevent misuse | Legitimate Interests (Art. 6(1)(f)) |
| Send you optional updates or newsletters | Consent (Art. 6(1)(a)) |
4. Legal Basis for Processing (GDPR)
We process your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Portuguese Law No. 58/2019.
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
Where processing is based on legitimate interests, we have assessed that our interests do not override your fundamental rights and freedoms.
5. Data Sharing and Third Parties
We do not sell your personal data. We may share data with the following trusted service providers:
| Provider | Purpose | Location |
|---|---|---|
| Supabase (supabase.com) | Database, storage, and backend infrastructure | EU / USA* |
| Resend (resend.com) | Transactional email delivery | USA* |
| Apple Inc. | iOS app distribution via TestFlight and App Store | USA* |
| Google LLC | Android app distribution and optional analytics | USA* |
*Transfers outside the EEA rely on Standard Contractual Clauses (SCCs) under GDPR Article 46.
6. International Data Transfers
Where service providers process data outside the EEA, we ensure either an adequacy decision applies, or appropriate safeguards (SCCs or equivalent) are in place.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data (name, email, profile) | Until you delete your account, or until the project concludes |
| Court and game data you submitted | Until you request deletion or the project concludes |
| Usage and analytics data | Maximum 12 months, then anonymised or deleted |
| Crash reports | Maximum 6 months |
| Anonymised, aggregated research data | May be retained beyond project end for academic purposes |
Following the conclusion of the dissertation project, all personal data will be permanently deleted.
8. Your Rights Under GDPR
- Right of Access — Request a copy of your personal data we hold
- Right to Rectification — Request correction of inaccurate or incomplete data
- Right to Erasure — Request deletion of your data ("right to be forgotten")
- Right to Data Portability — Receive your data in a structured, machine-readable format
- Right to Restriction — Ask us to pause processing of your data
- Right to Object — Object to processing based on legitimate interests
- Right to Withdraw Consent — At any time, without affecting past processing
Contact us at help@theplaygroundapp.pt. We will respond within 30 days. You may also delete your account via Profile → Settings → Delete Account.
CNPD — Comissão Nacional de Proteção de Dados
Rua de São Bento, 148–3.º, 1200-821 Lisboa
www.cnpd.pt | geral@cnpd.pt
9. Age Restriction
The Playground is intended for users aged 16 and above. We do not knowingly collect personal data from individuals under 16. Contact us at help@theplaygroundapp.pt if you believe we may have collected data from a minor.
10. User-Generated Content
You retain ownership of content you upload. By uploading, you grant us a non-exclusive, royalty-free, worldwide licence to store and display it within the App and use anonymised insights for research.
- Photos you upload must not include identifiable individuals without their explicit consent
- Content must not violate any third-party intellectual property or privacy rights
11. Security
- Encrypted data transmission (HTTPS/TLS)
- Secure, access-controlled database storage via Supabase
- Limited access to personal data on a need-to-know basis
We cannot guarantee absolute security, but we are committed to notifying you promptly of any breach in accordance with GDPR Article 33.
12. Cookies
The App itself does not use cookies. Our website may use strictly necessary cookies for basic functionality. We do not use advertising or analytics cookies without your consent.
13. Changes to This Policy
Where changes are material, we will notify you by email or in-app notice before they take effect. The "Last Updated" date at the top reflects the most recent revision.
14. Contact
Pedro Ferreira Azevedo
Email: help@theplaygroundapp.pt
Institution: Universidade de Aveiro
Address: Lisbon, Portugal