Privacy Policy
This policy explains what data the Super Trunfo Garagem app collects, why, and what you can do about it. The app is operated by Gabriel Leite Moreira (individual developer), contact gabrielleitemoreira@gmail.com.
1. Who can use it
The app is intended for people aged 12 and over. We do not knowingly collect data from children under 12. If you know of such an account, email us and we will delete it.
2. What we collect
| Data | When | Why |
|---|---|---|
| Email address (and name, if you sign in with Google or Apple) | When you create an account or sign in | Identify your account and store your deck in the cloud |
| Photos you take or pick from your library | When you create a card | Generate the card artwork and illustrate your deck |
| Game content (cards, stats, fuel, wins, losses, matches) | While you play | Make the game work |
| Content reports | When you report a card | Moderate inappropriate content |
We do not collect location, contacts, calendar, health, financial data or browsing history. There are no ads, no cross-app tracking, and we never sell data.
3. How your photos are used
The photo of your toy car is sent to OpenAI, which (a) automatically checks whether the image is inappropriate and (b) generates the stylised card artwork. OpenAI acts as a processor on our behalf. The original photo and the generated artwork are stored in your account on Supabase (our database and file infrastructure). Your photo is not used to train AI models.
4. Who we share with
- Supabase Inc. — database, authentication and image storage.
- OpenAI, L.L.C. — moderation and card artwork generation.
- Google / Apple — only if you choose to sign in with those accounts.
Beyond that, we only share data if legally required.
5. Global ranking (opt-in only)
Your score is yours and is not published by default. The global ranking only shows your username, points and win/loss record if you agree to take part — the app asks first, and you can join or leave any time under Profile → Appear in the global ranking. Until you accept, no other player can see your profile.
6. User-generated content and moderation
Cards are created from photos uploaded by players. Every photo goes through an automated content check before becoming a card, and any player can report a card using the Report button. Reports are reviewed within 24 hours; violating content is removed and may lead to the account being closed.
7. How long we keep it
As long as your account exists. When you delete your account, your profile, cards, photos and match history are erased immediately; routine backups are overwritten within 30 days.
8. Your rights (GDPR/LGPD)
- Delete everything: in the app, under Profile → Delete my account. It is permanent, immediate, and needs no email exchange.
- Access, correction and portability: write to gabrielleitemoreira@gmail.com — we reply within 15 days.
9. Security
All traffic uses HTTPS. Database access is protected by row-level security: each player can only write their own data. No system is 100% secure, but we notify affected users of any relevant incident.
10. Changes
If something relevant changes we update this page and the date at the top. Significant changes are announced inside the app.