Privacy policy

1. Who is responsible

Guse LTDA, CNPJ 47.758.713/0001-82, Brazil, is responsible for Embaixadinha and the processing described here. This policy covers the app, embaixadinha.com and services at api.embaixadinha.com. For privacy questions and requests, contact embaixadinhaapp@gmail.com.

2. Videos, permissions and on-device data

The app requests camera and microphone access to record training, and Photos access to save exports. You can import a video you select. Change permissions in iOS Settings; declining a permission limits the corresponding feature.

Videos, session history and personal records stay on your device. Touch counting and movement estimates are processed locally. We do not send your video to the backend to analyse it or publish scores. Ball and pose tracking estimates training activity; it does not identify you through facial recognition.

You choose where to export or share a video. The destination service has its own privacy policy. Copies in Photos, device backups and videos already shared are not removed by deleting an online account. Respect the privacy of others in your recordings.

3. Accounts, groups and leaderboards

Local recording and analysis do not require an Embaixadinha account. For private groups, Sign in with Apple provides an account identifier and, when you allow it, your name and email, which may be an Apple private relay address. The backend processes authentication credentials, nicknames, memberships, invitations, scores, dates and analysis versions to provide these features.

Shared scores and nicknames are visible to group members. Apple operates Game Center leaderboards and may use your profile and Game Center friends according to your permissions. This does not grant access to your device contacts. Manage participation and sharing in the app. Imported videos are not eligible for leaderboards.

Apple processes purchases and subscriptions. We use RevenueCat to verify entitlements and manage subscriptions. It processes technical app identifiers, purchase and transaction information and plan status. We do not receive your full payment card number.

4. App diagnostics and usage analytics (Sentry and PostHog)

We use Sentry in the app and backend to investigate errors, measure performance and understand usage events such as recording, analysis, exporting and leaderboard views. Records may include device type and version, operating system, app version, timestamps, technical identifiers, errors, clip duration, touch counts and operation status.

In the app, the SDK’s default personal-information collection, screenshot capture and view-hierarchy capture are disabled. This does not make every diagnostic anonymous: logs, technical data and backend requests can contain personal information, including IP addresses. Video files are not sent to Sentry as part of the analysis flow. Embaixadinha does not use Firebase.

We use PostHog, with servers in the United States, to understand how the app is used and improve it. The app sends events we define, such as starting or finishing a recording, an analysis finishing, exporting or sharing a video and viewing the plans screen or leaderboards, plus the app opening and closing. Events may include clip duration, touch counts, operation status and technical details such as device model, operating system, app version, language and time zone. We do not send videos, photos or group content to PostHog.

PostHog uses a random identifier stored on your device. We do not link it to your Sign in with Apple account, name or email. We use this identifier to create usage profiles in PostHog that group app activity and technical details over time. Automatic tap capture is turned off; the app only records which screens you open. Your IP address is used only to estimate the country or region of each event and is not stored. We do not use PostHog for advertising or to track you across other companies’ apps or websites. Deleting the app removes the identifier and stops events from being sent.

For a sample of sessions, PostHog also records how the app’s screens are used, such as taps and moving between screens, so we can find confusing parts of the app. These recordings never include your videos, the camera, photos or thumbnails: those areas and text fields are covered on your device before anything is sent, and recording stops while the camera screen is open. Recordings are linked only to the same random identifier.

5. Website analytics and advertising

Cloudflare hosting processes technical request information, including IP address, browser, requested URL and security information, to deliver and protect the website and API. If you contact us through the form or by email, we process your name, address, message and any email attachments to respond. The form uses Cloudflare Turnstile to prevent abuse, processing browser and network information and the verification outcome.

With your website permission, Google Analytics 4 measures visits and interactions. Google Tag Manager delivers tags; it does not replace your consent choice. Advertising includes TikTok Pixel and Meta Pixel for campaign attribution, conversion measurement, audiences and personalised ads on TikTok, Facebook and Instagram.

These tools may receive cookie identifiers, pages and interactions, referral information, browser and device data and IP addresses. Platforms may combine events with their own account information under their policies. We do not intentionally send training videos, private group information or support-message content to advertising pixels.

Analytics and advertising are optional and blocked before your permission. Providers are activated only when configured. Your cookie choices apply to this browser and website; they do not change iPhone permissions or control Sentry diagnostics and PostHog usage analytics in the app. See the Cookie policy and Cookie preferences in the footer.

6. Purposes and legal bases

We process necessary account, group and purchase data to provide the service you request. Technical security, reliability, support and app usage analytics rely on legitimate interests, taking your rights into account, or on contractual necessity. Legal obligations and establishing or defending rights may require other processing.

Consent is the basis for optional website analytics and advertising. You can withdraw it without losing access to the site. Where law requires specific permission for another activity, it must be obtained before that processing. Camera permission is not consent to advertising.

7. Recipients

Recipients include Apple (authentication, Game Center and purchases), Cloudflare (hosting, infrastructure and service-email delivery), Sentry (diagnostics), PostHog (app usage analytics), RevenueCat (subscription management), Google (analytics and tag delivery when authorised), TikTok and Meta (advertising when authorised). Group members see information you share with the group. We may also disclose information when required by law or to protect rights and service security.

We do not sell your videos or group data. Sharing website identifiers and activity with advertising platforms may constitute a sale or sharing for cross-context behavioural advertising under some laws, even without payment. Reject Advertising to opt out. We also honour your browser’s Global Privacy Control signal by blocking that category.

8. International processing and security

Providers may process information outside Brazil, including the United States and other countries. International transfers are subject to the mechanisms and safeguards required by applicable law and each provider’s terms. Contact our privacy channel for information about a specific transfer.

We apply access controls and encrypted communication to protect information. No system eliminates every risk. Avoid sensitive information in nicknames, group names or shared messages.

9. Retention and deletion

Local data remains until removed from the app or device; exported copies and backups follow their own settings. Account and group data is retained while needed for the requested features. Request account deletion in the app or through our privacy channel. Withdrawing a score does not remove copies other people have made.

Technical records, support messages and information needed for security, legal obligations or defending rights may be kept as necessary for those purposes. Backups may remain until their replacement cycle. Retention depends on the record and provider settings; contact us for details. Cookie periods are described in the Cookie policy.

10. Your rights and choices

Depending on applicable law, you may request confirmation of processing, access, correction, information about sharing, portability where applicable, anonymisation, restriction or deletion, object to processing and withdraw consent. We may need to verify your identity using only information necessary for your request.

Email embaixadinhaapp@gmail.com and explain your connection to the app or site, without sending passwords or payment card details. You may complain to Brazil’s ANPD or the relevant authority in your region. Change iOS permissions in Settings, manage sharing in the app and withdraw cookie consent from the footer.

11. Children and teenagers

Use by minors must comply with applicable law and involve a parent or guardian where required. Guardians should supervise recording and sharing and avoid publishing children’s data in groups or leaderboards without legally required permission. Do not authorise advertising cookies on behalf of a child.

If you believe we received a child’s data without legally required permission, contact us for assessment, restriction or deletion. Children’s and teenagers’ best interests guide the processing of their data.

12. Updates

We will publish changes here with an updated date. Material changes will be communicated through the service where applicable, and we will request new permission for changes in purpose that require consent.