Privacy notice
What we hold about you, why, and how to get it back or get rid of it.
Who is responsible
Project O2 is operated by Trabalhinho, and we are the controller of the personal data described here. Contact: support@trabalhinho.pt.
What we hold
Your email address, your date of birth, the country and timezone you sign up with, a display name if you set one, and a record of this device so a race can be scored without you opening the app. If you stake, we hold the money movements that follow: deposits, stakes, payouts and withdrawals.
We also hold health data, which is a special category under the GDPR and gets its own consent and its own section below.
Notifications
If you allow notifications, your phone gives the app a push token: a code that lets us reach this app on this phone, and nothing else. We keep it with your device record and use it only to send the notifications you allowed; today that is one message, when a race you joined has enough entrants to start. Apple (on iPhone, through the Apple Push Notification service) and Google (on Android, through Firebase Cloud Messaging) carry each notification to your phone for us. They receive the token and the notification's text, never your health data, your stakes or your balance, and our notifications never show money amounts or health figures. Google handles this as our processor and may do so in the United States, under the EU-US Data Privacy Framework and the EU standard contractual clauses. On Android, the Firebase messaging component also sends Google an installation identifier and the app version, which delivery needs. You can turn notifications off in your phone's settings at any time, and the app keeps working. We delete the token when you turn notifications off, sign out, remove the device or erase your account, and when Apple or Google tell us it no longer works. We keep a record of each notification sent, with its text and the last six characters of the token, for 180 days, to answer questions about a race.
Why we hold it
To run your account and to run the races: to check you are 18, to check your country is one we operate in, to compute your daily target, to judge whether you met it, and to move the money that follows. The money records exist because we are required to keep them, not because we want them.
Our lawful bases
Performance of the contract for running your account and your races. Your explicit consent for processing health data. Legal obligation for accounting and anti-fraud records. Our legitimate interest in stopping cheating, which is what makes a staked race worth entering for everybody else. Performance of the contract for the race notifications you allow.
Who else sees it
Our payment provider, for deposits, payouts and the identity check that lifts the withdrawal cap. They receive what a payment needs and no health data. Apple and Google, to deliver the notifications you allow. Resend, which sends our emails. Hetzner Online GmbH, Germany, which runs our servers. Nobody buys this data from us and we do not sell it, because there is no version of that we could explain to you here.
Your rights
Get a copy of everything we hold (Settings, then Account and data, then Export). Erase your account, in the app, without emailing anybody. Withdraw a consent at any time, as easily as you gave it. Object, correct and complain to your data protection authority.
What erasure actually does
Erasing removes the things that identify you: your address, your name, your date of birth, your devices, your sessions and your health data. Financial records survive, anonymised: they stay as amounts and dates with no person attached, because we are legally required to be able to account for money that moved. We show you the counts of both when it is done.
How long we keep things
Account data for as long as the account exists. Health data until you withdraw the health consent or erase the account. Anonymised financial records for as long as accounting law requires.