Privacy Policy

1. Data Controller

JoGo.Team is the data controller responsible for the processing of personal data described in this Privacy Policy. You can contact us through the contact form on the website.

2. Information We Collect

a. Personal Data You Provide

When you register or interact with JoGo.Team, we may collect:

• Name
• Email address
• Phone number (for SMS and WhatsApp game confirmations)
• Profile information (preferred position, skill level, city)
• Any other information you voluntarily provide

b. Data via Facebook and Instagram Login

If you choose to sign up or log in with Facebook or Instagram, we may receive your name, profile picture, email, and public profile information from that platform.

c. Payment and Transaction Information

When you make payments or use financial services on the Platform, we collect:

• Credit/debit card information (processed by Stripe, not stored by us)
• Transaction and payment history
• JoGo Wallet information (balances, top-ups, payments, refunds)
• Stripe Connect data for Hosts (when applicable)

d. Jogxz Tokens Activity

We collect activity data to award Jogxz Tokens, including RSVP and participation history, referral activity, and wallet top-ups. If you switch on health tracking in the mobile app we also collect steps and heart rate for the games you play — see section 9.

e. Technical and Device Data

We collect IP address, device type, browser type, language, referring URL, pages viewed, and approximate location derived from IP at the city level. We do not use precise GPS location and do not use IP-based country detection to gate features.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process payments and manage financial transactions
• Manage your JoGo Wallet and process top-ups and refunds
• Calculate and award Jogxz Tokens based on your activity
• Facilitate Host payouts through Stripe Connect
• Send transactional and informational messages (email, SMS, WhatsApp) about game confirmations, waitlists, cancellations, refunds, and account alerts
• Facilitate your participation in soccer games and events
• Improve the Platform and prevent fraud, abuse, and security incidents
• Comply with legal, tax, and accounting obligations

4. Legal Basis for Processing (GDPR / LGPD)

Where GDPR, LGPD, or similar laws apply, we rely on one or more of the following legal bases:

• Performance of a contract: to create your account, process payments, and facilitate your RSVP and participation.
• Consent: for marketing communications and for connecting optional third-party services such as fitness trackers.
• Legitimate interests: to operate, secure, and improve the Platform, and to prevent fraud and abuse.
• Legal obligation: to comply with tax, accounting, and other legal requirements.

5. How We Share Your Information

We do not sell or rent your personal information. We share data only as follows:

• Stripe and Stripe Connect: payment information is processed and stored by Stripe under Stripe's own privacy policy.
• Hosts: when you RSVP for a game, the Host can see your name and the contact information necessary to organize the event.
• Service providers: hosting (Render, Cloudflare), email (SendGrid), messaging (WhatsApp Business, SMS providers), analytics (Google Analytics 4), and error monitoring (Sentry).
• Legal authorities: when required by law, subpoena, court order, or to protect rights, property, or safety.
• Business transfers: if JoGo.Team is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction.

6. Payment Services and Stripe Connect

We use Stripe and Stripe Connect to process payments. Card data is processed directly by Stripe and never stored on our servers. Stripe Connect allows Hosts to receive payments directly into their connected accounts. We share transaction information with Stripe as necessary to process payments and meet legal requirements. For more information, see Stripe's Privacy Policy.

7. JoGo Wallet

The JoGo Wallet stores prepaid funds for game payments. Top-ups are processed through Stripe Checkout. We store your wallet balance and transaction history. Refunds are credited to your wallet by default; Hosts may at their discretion issue refunds to the original payment method. Wallet funds do not accrue interest.

8. Jogxz Tokens

Jogxz Tokens are non-monetary engagement rewards with no cash value. We track your activity to calculate and award them. Tokens are JoGo.Team property and may be modified or revoked under our Terms.

9. Health and Fitness Data

If you turn on health tracking in the JoGo.Team mobile app, the app reads two things from your phone's health store — Apple Health on iPhone, Health Connect on Android: steps and heart rate. It does not read your distance or calories. Your heart rate is used only to work out which minutes of your game you were actually playing, so that warming up beforehand and walking back to your car afterwards are not counted as part of it. We do not keep it. To do that the app looks at a window of up to half an hour either side of the time your game was booked for. This is optional, it is off unless you switch it on, and the rest of JoGo.Team works normally without it. We keep these readings for six months and then delete them automatically.

We read those figures around a game you booked and attended through JoGo.Team: from up to half an hour before the booked start until up to half an hour after the booked end. That wider window exists because the time shown on a game is when to arrive rather than when play begins, and games often run past their booked finish; your heart rate is what tells us which minutes inside it were the game, and only those minutes are counted. We do not read anything between games, with one exception we would rather state than hide: while tracking is on, when you open your games or your profile, we check whether your phone is sharing each kind of data at all over the last seven days, so we can tell you which switch is still off. Nothing from that check is stored or shown.

The figures are stored on our servers, attached to that booking, and shown back to you. Other people see nothing unless you also turn on sharing. With sharing on, the players in that same game see your name and your step count in that game's ranking, and you appear on your city's board. With sharing off you still see your own position; your name simply does not appear to anyone else.

Health data is never sold, never used for advertising or profiling, and never shared with third parties. It is not used to set prices, to decide who may join a game, or for any purpose beyond showing you and, at your choice, other players how far you ran.

You can withdraw at any time. Turning off tracking in the app stops all further reading and also turns off sharing. Deleting your stats in the app erases every reading we hold for you. Deleting your account erases them too. You can also revoke our access directly in Apple Health or Health Connect, which stops the reading regardless of any setting in our app.

Where the law treats this information as a special category of personal data, our legal basis is your explicit consent, given by switching the feature on, and withdrawn by switching it off.

10. Cookies and Tracking Technologies

We use cookies and similar technologies for session management, security, analytics, and remembering your city or language preference. You can manage cookies through your browser settings. We do not use cookies for cross-site advertising.

11. Electronic Communications (SMS, WhatsApp, Email)

By providing your phone number or RSVPing to a game, you consent to receive transactional and informational messages from JoGo.Team and the Host of any activity you join, via email, SMS, and WhatsApp. Message and data rates may apply. You can opt out of SMS by replying STOP, opt out of WhatsApp by blocking the sender, and unsubscribe from marketing email through the unsubscribe link. Transactional messages necessary to complete a transaction may continue after opt-out. See Terms of Service Section 12 for full details.

12. International Data Transfers

JoGo.Team is operated from the United States. If you access the Platform from outside the U.S., your personal data may be transferred to, stored, and processed in the U.S. and other countries that may not have the same data-protection laws as your country. Where required, we rely on Standard Contractual Clauses or equivalent transfer mechanisms to provide an adequate level of protection.

13. Your Rights — European Union, UK, and Switzerland (GDPR / UK GDPR)

If you are in the EU, the UK, or Switzerland, you have the right to:

• Access your personal data and request a copy
• Rectify inaccurate or incomplete data
• Request erasure (subject to legal-retention exceptions)
• Restrict or object to processing
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time (without affecting prior lawful processing)
• Lodge a complaint with your national data-protection authority

To exercise these rights, contact us through the website. We respond within 30 days.

14. Your Rights — California (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what categories of personal information we collect, the sources, the purposes, and the categories of third parties with whom we share it
• Access and receive a copy of your personal information
• Correct inaccurate personal information
• Delete your personal information (subject to legal exceptions)
• Opt out of the "sale" or "sharing" of personal information. JoGo.Team does not sell personal information and does not share personal information for cross-context behavioral advertising.
• Limit the use and disclosure of sensitive personal information. We do not use sensitive personal information for purposes that require offering this right.
• Non-discrimination — we will not deny service, charge different prices, or provide a lower quality of service because you exercised your rights.

To exercise these rights, contact us through the website. You may also designate an authorized agent to act on your behalf. We do not knowingly collect or sell the personal information of minors under 16.

15. Your Rights — Brazil (LGPD), Argentina, and Other Regions

Residents of Brazil under the LGPD have similar rights to access, correct, anonymize, port, and delete personal data, and to obtain information about the entities with whom we share data. Residents of Argentina (Ley 25.326) and other jurisdictions have rights of access, rectification, and deletion. To exercise these rights, contact us through the website. Where local law provides additional or stricter protections, those protections apply.

16. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your personal data, including TLS encryption in transit, encrypted storage at rest, restricted access, and audit logging. No method of transmission over the internet is 100% secure, so we cannot guarantee absolute security.

17. Data Retention

We retain your personal data while your account is active and for as long as needed to:

• Comply with legal, tax, and accounting obligations (typically up to 7 years for financial records)
• Resolve disputes and enforce our agreements
• Maintain security and prevent fraud

When data is no longer required, we delete or anonymize it.

Account deletion

You can delete your account at any time from Profile → Settings → Delete my account, or by contacting us. We confirm your request by email. Your account is then deactivated and permanently deleted after a 30-day grace period; if you log back in within those 30 days, the deletion is cancelled and your account is restored. After the grace period, deletion is permanent and cannot be undone.

When deletion completes, we permanently delete the personal information that identifies you (such as your name, email address, phone number, date of birth, and profile details) and remove identifying information from the records we are permitted or required to keep, so that those records no longer identify you. We retain such de-identified transaction, booking, and wallet records only as long as necessary for the purposes described above — including our tax, accounting, and financial-recordkeeping obligations (generally up to 7 years), fraud prevention, and the establishment, exercise, or defence of legal claims — after which we delete or further de-identify them.

Deleting your JoGo.Team account does not delete information held by our payment processor, Stripe, which retains payment and transaction data under its own privacy policy and legal obligations. Your personal information may also persist in our encrypted backups for a limited period until those backups are routinely overwritten, after which it is no longer recoverable. We will not use any retained, de-identified records to re-create your profile or to contact you for marketing. See our Data Deletion page for details.

18. Children's Privacy

JoGo.Team is not intended for children under 13 (or under 16 in the EU/UK), and we do not knowingly collect data from them. If we learn we have collected such information, we will delete it. Participation in listed activities by minors requires a paper guardian waiver collected by the Host (see Waiver Section 9).

19. Third-Party Authentication

If you log in via Facebook or Instagram, you authorize JoGo.Team to access certain information from your social-media account. We collect only what is needed for authentication. For Facebook/Instagram data deletion requests, please visit our data-deletion page.

20. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will post the updated policy on this page and update the "Last Updated" date. Significant changes will be announced on the Platform.

21. Contact

For questions about this Privacy Policy or to exercise your rights, contact us through the website or visit our data-deletion page for specific deletion requests.