Privacy Policy

This Policy explains how Flow (Flow by PWER IO), operated by PWER IO LTDA (CNPJ 65.132.165/0001-62, with registered office at Rua País Leme, 215, Conj. 1713, Pinheiros, São Paulo/SP, 05.424-150, Brazil), handles personal data, in accordance with the Brazilian General Data Protection Law (Law no. 13.709/2018 — LGPD).

1. Controller and Data Protection Officer (DPO)

Controller: PWER IO LTDA (CNPJ 65.132.165/0001-62). Data Protection Officer (DPO): contact by email at pwerioflow@gmail.com.

2. Data we collect

• Registration: name, e-mail, mobile number, date of birth (requested at sign-up or on your next visit, to validate your age bracket), username and, when you sign in with Google, your profile picture.
• Athlete profile (optional): nationality, dominant hand, height, weight, racket make/model, club, Instagram handle and athlete photo. Provided by you, this data makes up your virtual player card and may be displayed on the broadcast screens and on the scoreboards of your matches. The height and weight of people under 18 are kept private and are not displayed publicly.
• Matches: recorded results and metrics (game-by-game score, duration of each game, rally time, total match duration and, in refereed matches, the record of the referee's calls and decisions) and the names of the participants entered on the scoresheet.
• Use of the service: minimal technical data for operation and security (e.g. access logs). Flow uses local storage on your device (so it works offline) and essential session cookies to keep you signed in; we do not use advertising cookies or third-party trackers.

3. What we use it for, and on what legal basis

• Providing the service (creating an account, saving history, building your profile) — basis: performance of a contract.
• Security, fraud prevention and service improvement — basis: legitimate interest.
• Sending news by email — basis: consent (a separate, optional opt-in, revocable at any time at /perfil).
• Compliance with legal obligations — basis: legal obligation.
• Sending the results of official matches to partner ranking platforms and to sports bodies — basis: legitimate interest (art. 7, IX of the LGPD), with the right to object at any time in your profile settings.

4. How Flow sustains itself, and who we share data with

Using Flow is free for players. The service is sustained by partner clubs and academies and by sponsors, whose brands may be displayed on the scoreboard, broadcast and sharing screens.

Sponsorship content is defined by Flow and by partner clubs based on the context of the match — the club, the court, the sport — never from your personal profile. We do not sell your personal data, nor do we provide it to advertisers.

We share data with processors necessary to provide the service — cloud infrastructure, authentication, database and hosting providers, engaged under confidentiality obligations — or where required by law.

We also share, with partner sports ranking platforms and with sports bodies, the results of matches declared official and confirmed by both players, as described in clause 5 of the Terms of Use. The current partner is SquashLevels (United Kingdom). Results of matches involving people under 18 are only sent with specific consent from the legal guardian.

5. Historical sporting record

Match results are historical sporting records, and the names of participants are preserved even after the account of the person who recorded the match is deleted, in order to ensure the integrity of the record and the rights of the other participants. Deleting an account removes the association with your profile, but the sporting result remains.

6. Public exposure and search engines

Results sent to partner ranking platforms may be displayed publicly on those platforms' websites, including name, club and age category, according to each platform's policies. Public third-party pages may be indexed by search engines such as Google, which is outside Flow's control.

Requests to hide your name or to de-index from search engines must be made directly to the partner platform, using the tools it provides. The removal of results already indexed depends on the search engine and may take some time after the information has been hidden.

Results of people under 18 are not sent without the legal guardian's consent, precisely so that this exposure does not occur by default.

7. Your rights (LGPD)

You may confirm the existence of processing, access, correct, port and request the deletion of personal data, as well as withdraw consents. Many of these rights are exercised directly at /perfil (editing your details, toggling marketing, deleting your account). For the others, or for access, correction and deletion, contact the DPO at pwerioflow@gmail.com.

8. Account deletion

When you delete your account at /perfil, we erase your personal registration data (name, email, mobile number, username and picture) and unlink your matches from your profile. We preserve the scores and the names already recorded on the scoresheets, as described in section 5.

9. Retention and security

We keep registration data for as long as your account exists; when you delete it, your personal data is erased (as described in section 8), except for records the law requires us to keep and for sporting results preserved as a historical record (section 5). We adopt technical and organisational measures to protect the data.

10. Sharing with federations and international transfer

The results of official matches may be shared with federations and sports bodies, in Brazil and abroad, for the purposes of ranking, classification and recognition of results.

Our infrastructure providers may process and store data on servers outside Brazil, and some partner ranking platforms are based abroad — in the case of SquashLevels, in the United Kingdom.

In all cases, transfers take place with the safeguards provided for in the LGPD.

11. Changes to this Policy

We may update this Policy; material changes will be signalled in the app and reflected in the version in force shown above. Contact: pwerioflow@gmail.com.