Privacy Policy

1. Introduction and Commitment to Privacy

This Privacy Policy describes how Kypace (“Kypace”) collects, uses, processes, stores, shares and protects users’ personal data and sensitive personal data, in accordance with Brazil’s General Data Protection Law (LGPD). By using Kypace, the user acknowledges and agrees to the data processing practices described in this Policy.

2. Data Collected

Kypace may collect personal data provided directly by the user, such as name, email, date of birth, weight, height, gender, profile information and login credentials. Kypace may also automatically collect usage data, activity metrics, sensor information, geolocation data, heart rate, estimated calories and performance-related information, which may be considered sensitive data under the LGPD.

Additional data may include device identifiers, IP address, cookies, interactions with the app and integrations with third-party services.

3. Purposes of Data Processing

Data is processed for the performance of the contract, technical operation of the platform, personalisation of the user experience, statistical analysis, generation of metrics, fraud detection, communication with the user, improvement of the services, compliance with legal obligations and handling of requests relating to the rights of data subjects.

Sensitive data is processed strictly within the limits authorised by the user and only to the extent necessary for the proper functioning of Kypace’s sports features.

4. Data Sharing

Kypace may share information with technology partners, cloud service providers, payment processors, data analytics providers, authentication services and public authorities, where necessary.

All sharing activities observe the appropriate legal bases, the principles of the LGPD and the contractual safeguards required to ensure the protection of the data.

5. Storage, Security and Retention

Data is stored on secure servers, protected by technical safeguards, encryption, access controls and administrative practices appropriate to the level of risk and the type of information processed.

Kypace retains data for as long as necessary to fulfil the purposes described in this Policy and may keep it for additional periods in order to comply with legal obligations, audits, defence in litigation and fraud prevention.

6. User Rights under the LGPD

Users may exercise all the rights provided for in the LGPD, including access, confirmation that processing is taking place, correction, anonymisation, portability, deletion, information about data sharing and withdrawal of consent.

Data Protection Officer (DPO) contact@kypace.com

7. Legal Bases Used

Processing may take place on the basis of consent, performance of a contract, the legitimate interest of the controller, compliance with legal obligations, credit protection or other applicable legal bases, always observing the principles of proportionality, transparency and necessity.

8. International Transfers

Should international transfers of data take place, Kypace will ensure that they comply with the LGPD through appropriate safeguards, contractual clauses or adherence to recognised international standards.

9. Updates to this Policy

This Policy may be updated from time to time. Continued use of the platform after such updates constitutes full acceptance of the new version.