SCOUT PRIVACY POLICY

Version 1.0 • Last updated: October 2, 2026

🇧🇷 Ler em Português

1. About this Policy

This Privacy Policy explains how Scout, referred to as the Application, handles information related to your use. The Application is free and has an informative purpose: it presents matches, teams, players, tournaments, and esports statistics.

The Application is developed and maintained by Ana Clara Fornazier Rocha, Igor Teixeira Carrasco, João Duque Nardelli Wandermuren, Lucas Pinheiro da Costa Pedrosa, and Pedro Cristiano Batista Canute, referred to as the Responsible Team.

2. User Information

Scout does not require registration, an account, or a profile to consult its content. It does not request your name, email, phone number, CPF (Brazilian taxpayer registry), address, date of birth, device location, contacts, personal photographs, or payment data for this consultation.

The Application does not feature in-app purchases, subscriptions, advertising, behavior analysis tools used by the Team, or cross-app advertising tracking mechanisms. It does not request sensitive personal data for its functionalities.

The absence of registration does not mean an absence of data processing. There are preferences kept on the device, technical communications with providers, identifiable information about professional players, and messages voluntarily sent to contact channels, as explained below.

The Team does not maintain a central user registry or an individual usage history on its own server. Since Scout does not create accounts, there is no Scout account to delete; this does not preclude the right to request the deletion of other personal data effectively processed.

3. Favorites and On-Device Storage

Your choices of favorite teams, players, or tournaments are kept solely on the device. Scout does not implement iCloud synchronization for these favorites, nor does it transmit a favorites list to form a registry or profile on the Team's server.

The Application also keeps copies of content obtained from PandaScore on the device, such as team and player information and logs of updates to these copies. This storage allows for reduced loading times and consultation of already obtained content when a new connection is unavailable. These copies are not a personal user registry.

Favorites are kept as long as necessary to preserve the user's choices. Copies of content containing identifiable information about players must be limited to what is necessary for consultation and updating; once this need ends, they must be removed or anonymized, when applicable. Updating a copy does not, by itself, mean the deletion of all previous records.

To eliminate Scout's local storage, you can use the iOS Delete App option. The option to remove or offload the application while preserving documents and data is not equivalent to deleting them. The Team cannot remotely consult or delete preferences kept exclusively on the device; guidance can be requested through the privacy channel.

Depending on device settings, the Apple system may include Application data in backups. This is different from Scout's favorites synchronization. Deleting the Application does not guarantee the elimination of previous backups, which must be managed within Apple's settings and services and may restore data during a recovery.

4. PandaScore Queries and Image Loading

In the current configuration, the device directly queries the PandaScore API and the addresses that provide the content images. These connections allow us to obtain statistics, names, badges, and player images.

The services handling the connections receive technical information necessary for communication, such as the IP address used in the connection and the requested resource; they may also know the access time and basic communication characteristics. Receiving these elements to handle a connection does not prove that all of them are recorded or retained afterward.

The Team does not operate, in this configuration, an intermediary server that receives the technical data of these queries. If another connection method is adopted, this Policy will be updated to identify the responsible parties and the data involved in the new flow.

Providing the content requires communication with the services involved. The details of any recording, retention, and additional use of technical data by the API or image services depend on the practices of the respective providers.

PandaScore public information and contact: https://www.pandascore.co/privacy and hello@pandascore.co. The Team receives privacy-related requests regarding these connections and assists in clarifying or forwarding them to the provider, without promising to delete records it does not control.

5. Information about Players and Competitions

The content is provided by PandaScore. Source: PandaScore.

Scout may display names, competitive pseudonyms, images, teams, matches played, and statistics related to the professional or competitive activity of players. This information is different from the data provided by Application users; when it allows identifying a person, it remains subject to applicable data protection laws.

The purpose is to inform about esports. The Team limits the content to information relevant to this purpose and does not use it for behavioral advertising, private life evaluation, or automated decisions affecting players' rights. It does not intend to disclose residential addresses, phone numbers, documents, precise locations, financial information, or other private life data.

Requests for correction, updating, opposition, or removal of content that involves personal data can be sent to the privacy channel. Content corrections can also be forwarded to scoutapp.dev@gmail.com. The Team will evaluate the request and, when necessary, request actions from PandaScore, considering the person's rights and applicable legislation.

6. Voluntary Contact and Email Services

When a person sends a message to a Team channel, their email address, eventually provided name, message content, and any attachments they choose to send are received. This data is used to respond, resolve problems, correct content, fulfill rights, or comply with legal duties. They are not used for advertising or user profiling.

Send only the information necessary for the support. Do not send documents, passwords, or sensitive data unnecessarily. If it is indispensable to confirm identity or obtain additional information, the Team will explain the purpose and limit the request to what is necessary.

The channel scoutapp.dev@gmail.com uses Apple's iCloud Mail service. The respective services process the receipt, storage, and sending of messages. Team members may access or receive the necessary information to handle the request; when forwarding to another provider is necessary, the sharing will be limited to the applicable purpose and legal basis.

Service information: Apple Privacy Policy and Google Privacy Policy . Data may also be provided to authorities when there is a legal obligation or valid determination, or processing necessary for the regular exercise of rights, within the limits of the legislation.

7. Purposes and Legal Bases

The essential processing to offer the service requested by the user, maintain their local choices, and handle ordinary support requests is based, when it involves personal data and is covered by the service provision, on the execution of a contract or preliminary procedures related to a contract, at the request of the data subject, pursuant to Article 7, V, of the LGPD (Brazilian General Data Protection Law).

Fulfilling data protection rights and legal or regulatory obligations is based on Article 7, II. Processing necessary for judicial, administrative, or arbitral proceedings is based on Article 7, VI.

The processing of players' personal information related to their public or professional activity is based on the legitimate informative interest, pursuant to Articles 7, IX, and 10 of the LGPD, conditioned on the documented evaluation of the purpose, necessity, expectations of the person, possible impacts, and safeguards. The public availability of the data and the API contracting do not waive this evaluation nor authorize unrestricted use.

The simple use of Scout is not considered generic consent for any processing. If an activity depends on consent, it must be requested in a specific, informed, and free manner, with the possibility of revocation through the privacy channel. The Team cannot condition the consultation of content on the provision of data that is not necessary for the service.

8. Retention and Deletion

For data under the Team's control, a single timeframe is not adopted for all situations. Messages and support information are retained for the period necessary to receive, analyze, and respond to the request and monitor its resolution. The criteria consider the purpose, the nature of the request, and the need for support documentation.

Once this need ends, the data will be deleted or anonymized, when applicable. Additional retention will occur only in the cases permitted by legislation, such as compliance with a legal or regulatory obligation and the regular exercise of rights, limited to the data and period necessary for the concrete purpose. Indefinite retention without justification is not foreseen.

The criteria for retaining and removing local information and backups are described in Section 3. The deletion of a message under the Team's control does not automatically imply the elimination of every technical copy maintained by the email services.

The retention of any technical records by PandaScore and the image services is governed by the policies and legal obligations applicable to the respective responsible parties. The Team can be contacted to obtain information about the retention criteria and to assist in forwarding access or deletion requests. The Team does not define nor execute the deletion of records maintained exclusively by these providers.

9. Processing Outside Brazil

The use of external providers, including PandaScore and email services, may involve data processing outside Brazil. PandaScore reports its headquarters in France; this, in isolation, does not prove the location of all operations of the API, images, or its providers.

When an operation constitutes an international data transfer, there must be a legal basis for the processing and a valid mechanism under the terms of the LGPD and the ANPD norms. The direct sending of data by the user themselves to a service abroad is not automatically a transfer carried out by the Team; the classification depends on the responsible parties and the actual flow.

10. Betting and Protection of Children and Adolescents

Scout does not offer, receive, or intermediate bets and does not operate games of chance. It does not present odds, quotes, betting recommendations, promotional codes, affiliate links, or advertising for betting platforms. The information has an informative and statistical purpose and does not guarantee future results.

The Team must observe the best interests, privacy, and safety of children and adolescents, in accordance with the LGPD, the Child and Adolescent Statute (ECA), and the Digital ECA. The App Store age rating and parental or guardian guidance are usage references and do not replace the legal obligations of the service.

The Application does not request age or documents to consult content. Measures to protect minors, including age verification or legal hypotheses of exemption, must observe the classification and obligations applicable to the service.

Parents or guardians can use the privacy channel for questions and requests regarding the personal data of children or adolescents. When consent from a guardian is legally required, the Team must apply the corresponding procedure before processing.

11. People's Rights

In situations where your personal data is processed, you may request, subject to the requirements and limits of the legislation:

Requests are free and must be sent to scoutapp.dev@gmail.com. The Team may only request proportional and necessary elements to confirm identity and protect the requester's data. Fulfillment will observe the deadlines of applicable legislation; when a request cannot be fulfilled, the reasons and, when possible, the appropriate measures will be informed.

The absence of an account or data on the Team's server does not eliminate your rights. When the information is exclusively on the device or under the control of another responsible party, the Team will explain this situation and provide guidance or assistance in forwarding it. You can also file a petition with the ANPD and appeal to consumer protection agencies, when applicable.

12. Security and Incidents

The Team will adopt technical and organizational measures proportional to the data processed and the risks of the service, including credential protection, restricted access to support messages, component updates, and secure communication. Queries to the PandaScore API use HTTPS.

Providers with access to personal data must be evaluated regarding security measures and protection compatible with this Policy, applicable legislation, and Apple's requirements. Contracting a provider does not waive the responsibilities that fall upon the Team.

No transmission over the internet is completely risk-free. In the event of a personal data incident that may cause significant risk or damage, containment measures will be adopted, along with communications to the ANPD and data subjects as required by legislation and applicable regulations.

13. Changes and Access to the Policy

This Policy will be updated whenever there is a relevant change in operations, providers, or processing purposes. Relevant changes must be communicated in an accessible manner. New features involving data processing, such as registration, usage analysis, advertising, personalized notifications, location, synchronization, or an intermediary server, require updating the information prior to their activation and obtaining the appropriate permissions or legal bases.

The Team will make the current version of this Policy available at a publicly accessible address and via an easily found link within the Application. The same address will be provided in App Store Connect. Privacy declarations on the App Store must match the actual practices of Scout and its providers, according to Apple's criteria.

The version and update date are indicated at the beginning of this Policy. References for its application include the LGPD (Law No. 13,709/2018), the Civil Rights Framework for the Internet (Law No. 12,965/2014), the Consumer Defense Code (Law No. 8,078/1990), the Child and Adolescent Statute (Law No. 8,069/1990), and the Digital ECA (Law No. 15,211/2025), in addition to the pertinent ANPD norms.

14. Legal Review

Version 1.0 of this Privacy Policy was legally reviewed by Giovana Lavezzo Stenico, lawyer registered with OAB/SP under No. 471229, on September 21, 2026.

Changes made after this date are not covered by the review, unless there is a new indication of version and date.

15. Contact

Responsible Team for Scout

Content corrections and requests: scoutapp.dev@gmail.com