Privacy Policy

My Star ("we", "our", or "the platform") respects your privacy and is committed to protecting the personal data of parents, guardians, and athletes. This Privacy Policy explains what information we collect, how we use, store, and protect it, in compliance with applicable data protection laws, including GDPR, CCPA, and Brazil's LGPD.

We collect only the data necessary to operate the platform: • Account data: name, email, encrypted password, and phone number (optional). • Athlete data: name, date of birth, position, photo (uploaded by the guardian), and performance statistics (goals, assists, matches). • Usage data: access logs, interactions with the platform, and language preferences. • Technical data: IP address, device type, operating system, and browser/app identifiers.

We use your data exclusively to: • Enable account registration and authentication. • Store and display athlete statistics and history. • Communicate updates, payment reminders, and service news. • Ensure account security and prevent fraud. • Improve the user experience and fix technical issues. We do not sell, rent, or share personal data with third parties for marketing purposes.

We do not sell or share personal data with third parties for marketing purposes. We may share data only in the following situations: • With associated teams and clubs: when the guardian authorizes linking the athlete to a team, the athlete's data becomes visible to that team's administrators. • With service providers (processors): hosting and database (Supabase), payment processing (Stripe and, where applicable, the Apple App Store / Google Play). All under confidentiality and data-protection agreements. • Legal obligation: when required by a judicial authority or competent regulatory body.

We adopt technical and administrative measures to protect your data: • SSL/TLS encryption on all data transmissions. • Passwords stored with secure hashing (bcrypt). • Multi-factor authentication via OAuth (Google and Apple). • Role-based access control (RBAC) at the database level. • Row-level security (RLS) policies ensuring each user only accesses their own data. Despite our efforts, no system is 100% secure. If you identify any vulnerability, please notify us immediately.

We retain your data while your account is active or as needed to comply with legal obligations. You may request account and data deletion at any time by contacting our support email. Deletion will be processed within 30 days, except for legal retention obligations.

Under applicable data protection laws, you have the right to: • Confirm whether your data is being processed. • Access your personal data. • Correct incomplete, inaccurate, or outdated data. • Anonymize, block, or delete unnecessary or excessive data. • Port your data to another service. • Withdraw consent at any time. • Request review of automated decisions. To exercise your rights, email support@mystarsp.com with the subject "Data Rights Request".

If you have questions about this Privacy Policy or wish to exercise your rights, contact us: • Email: support@mystarsp.com • Response SLA: within 48 business hours