Privacy Policy

1. Who is responsible and how to contact us

Super Beach is developed and operated under the KD Labs brand by Douglas Elias Mota Cardoso, an individual, who is responsible for the data processing carried out directly by the service. For support and privacy requests, contact [email protected]. This contact is not designated as a data protection officer (DPO).

2. Scope and purposes

This Policy covers the Android and iOS app, the website and the Live Link viewer. We use the data needed to organize competitions, carry out requested actions, verify PRO access, provide support and protect the service against abuse. Optional diagnostics have the specific purpose of investigating migration failures for future fixes.

The organizer decides which participant data to enter and publish and must have an appropriate legal basis, including when the data belongs to someone else. Accepting the Terms does not replace this responsibility or authorize unrestricted use of data. App stores and services chosen by the user also process data for their own purposes.

Depending on the circumstances, processing relies on providing the requested service, specific consent, compliance with legal obligations or the establishment, exercise or defense of legal claims. Abuse prevention relies on the legitimate interest in security, limited to what is necessary and subject to people’s rights.

3. On-device data and migration

Your competition data may include participant and team names and identifiers; tournament names, formats, categories and dates; reported skill levels; rounds, matches, scores, walkovers, withdrawals and tiebreaks; standings and ranking criteria; Circuits, stages, links, points and history; and organizer, venue, court and sponsor details when provided. Drafts, language, theme, preferences and technical integrity and recovery information are also stored.

The current storage is local. When updating from an earlier version, the app may need to move your data to a new structure on the same device. This migration is not cloud synchronization and does not, by itself, send the content to Super Beach.

If migration fails, the available options depend on the state of the data. When the source is compatible, the app may offer continued use of the previous storage and an explicit retry in Settings later. In that mode, an abrupt shutdown may lose the latest change. Changes that have been retained will be included in a new attempt.

The app may also offer to start without the previous data, after you confirm which data is affected. The affected data will no longer be available in the app; recovery is not guaranteed. The source is kept separately when technically possible. An internal copy on the same device is not an external, restorable backup. Two data stores are not available for editing at the same time.

We do not provide automatic backups or synchronization of your competition data to our own cloud. Do not rely on reinstallation or device transfer to recover your data.

4. Live Links and public access

When the organizer enables a Live Link, the app sends Supabase the data needed for viewing: the tournament’s identifier, name, format and status; participants or teams and divisions; rounds, matches, court calls, scores, walkovers, progress, published standings and criteria; and the organizer, venue and sponsor information shown. The service also keeps the public code, expiry information and technical metadata used to update and protect the publication. This action does not send the full collection of Circuits or drafts.

The viewer is read-only and does not require an account. Anyone with the URL or code can view, forward or capture the content while it is available. The link is not a private invitation. Keep identity documents, contact details, addresses, health information and other unnecessary data out of published fields.

Private control of the link is separate from its public code and is associated with the organizer’s device. It authorizes updates, renewal and closure. Do not share it. A standard backup or an import as a copy does not transfer this control.

On the free plan, links last 24 hours and the viewer checks for updates every 30 seconds. With valid PRO access, links can last up to seven days, with checks every ten seconds. These intervals do not guarantee instant delivery. Closure or expiry prevents further public retrieval once confirmed by the service, but does not erase screenshots or content already received by others; a disconnected screen may retain the last information received.

5. Backups, restoration and recovery

In version 1.5.0 for Android and iOS, the Create backup screen generates a standard .sbbackup file. It is not encrypted, may contain names, results and other personal data, and does not include private Live Link control. This screen has no option to generate a new administrative backup.

Password-protected administrative files generated by earlier versions can be opened to import compatible content. Restoration through the current storage does not reinstate any private controls included in those files. The old file may still contain that information: protect it and its password and do not give it to anyone who should not have access to it. KD Labs does not receive or recover the password.

You choose where to save the file through the system and should check that saving has completed. The provider you choose — local storage, cloud storage, email or another app — applies its own rules. Restoration offers Merge, Replace or Import as a copy, as shown in the preview. Replace may make your current collection unavailable; importing as a copy creates independent identities and does not grant control over the original links. Invalid or incompatible files, or files without verifiable relationships, may be rejected.

Technical materials offered in a recovery flow are different from a standard backup. They may preserve source data and private controls and are not necessarily restorable through the normal backup flow. Follow the notices and protection instructions shown on screen; do not treat them as a guarantee of recovery. The full diagnostic exporter used in laboratory testing is not an enabled feature of this production version.

Backups do not include or grant a subscription or PRO entitlement. Earlier exports stay as generated; changing the language does not change them.

6. Sharing and temporary files

Images, PDFs, CSV files, text and links may contain the names and results shown in the preview. They are generated in the language selected for the export. You decide whether to save the content or send it to another app. Generating a file does not automatically publish a Circuit or tournament online.

The app and operating system may keep temporary files to prepare the transfer. Local cleanup routines apply, but copies saved, sent or captured by recipients are outside that control. Check the content and destination before sharing.

7. Optional technical diagnostics

When this option is available after a migration failure, you can view, copy or share a technical summary. Sending it from the app to Super Beach through Supabase requires checking the consent box and choosing Send diagnostic. Nothing is sent automatically, and consent is not required to use the alternatives available in the app.

The report contains error codes and the stage of failure, app and operating system versions when available, migration status and structural findings. It may include counts of tournaments, Circuits, drafts and formats, structure versions and categories of inconsistency. The service also records a random report identifier, the time of receipt and the consent version.

It does not include names, scores, tournament or backup content, credentials or Live Link controls. This limitation is not a guarantee of anonymity: technical information and connection records may allow association in some contexts. Sending a report helps investigate a future update; it does not fix the failure or guarantee recovery.

You can decline or cancel sending. Cancelling a request may not prevent receipt if it has already reached the service. To request deletion or withdraw consent after sending, use the contact in this Policy and provide the report identifier if available. Do not send backups, passwords or Live Link controls to identify a diagnostic report.

8. Purchases and PRO

Google Play processes Android purchases; the App Store and StoreKit process iOS purchases. The app retrieves products, formatted prices, purchase status and information needed to verify PRO access, such as validity periods and technical transaction identifiers or purchase records. It does not receive full payment card details.

The stores handle account information, payment, billing, renewal, cancellation, offer redemption and refunds under their own rules. Valid monthly and annual subscriptions unlock the same PRO features. iOS also recognizes the legacy permanent-access product when valid. There is no checkout on the website or in the viewer. Restoring purchases checks the store; it is different from restoring your competition data from a file.

9. Providers and connections

• Supabase: hosting Live Link publications, technical service controls and consent-based diagnostics.
• Cloudflare: delivering, protecting and measuring navigation and performance on the website and viewer.
• Google Play and Apple/App Store: purchases, subscriptions and platform services.
• The operating system and providers you choose: saving, opening and sharing files.
• Email service: sender details, messages and attachments voluntarily sent to support.

Connections may expose your IP address, request time, browser and technical headers to a provider for delivery, operation and service protection. Version 1.5.0 contains no advertising, advertising identifier or app-operated cross-app tracking feature. The website and viewer use browser storage for preferences, such as language, and operational caching; this does not synchronize the organizer’s collection.

Pages served by the domain also load Cloudflare’s technical measurement service, which uses page-view and loading-performance information for website statistics. This navigation processing is separate from optional migration diagnostics and does not depend on the Send diagnostic button. See the measurement service description. We do not treat this measurement as a guarantee that every connection is anonymous.

Online data may be processed outside Brazil. The service’s data in Supabase is hosted in the United States. Cloudflare and other providers operate international infrastructure. Applicable processing and protection terms depend on each service and the law; this Policy does not state that all data stays in Brazil or guarantee anonymization or the absence of technical logs.

See the providers’ information: Supabase data processing, Cloudflare privacy, Google privacy and Apple privacy. Using providers does not remove KD Labs’ legal responsibilities.

10. Retention and deletion

On your device: tournaments, Circuits and drafts remain until deleted or replaced. Internal migration and recovery materials may remain separate from the active collection. Deleting a competition does not necessarily remove all such preserved material. Clearing app data or uninstalling may erase local data and is not a recovery method. On Android, system automatic backup and transfer of the collection are disabled. On iOS, any system backups follow Apple’s settings and rules; they are not synchronization provided by Super Beach.

Live Links: closing or disabling a link, or letting it expire, stops public access once confirmed by the service, but does not erase the record immediately. An expired publication that has not been closed or disabled becomes eligible for deletion from the operational database after 30 full days from its expiry time. A closed or disabled publication becomes eligible after seven full days from closure or disabling. A renewal accepted before deletion starts the expiry-based period from the new expiry time.

Cleanup runs daily, in batches. Reaching the retention threshold does not guarantee deletion at that exact moment: processing queues or operational failures may delay it. Records with an inconsistent status are preserved for review rather than deleted automatically. Once deleted from the operational database, the link can no longer be retrieved or renewed; this does not erase the tournament saved on the organizer’s device or copies already received by others. Applicable deletion requests can be sent using the contact below.

Operational backup copies: KD Labs may create one-off copies to allow recovery from maintenance operations. Access to these copies is restricted, and they are discarded within 30 full days of creation. Data deleted from the operational database may remain in these copies until disposal; the copies are not used for public viewing. Recovery preserves the closed or expired state and does not automatically make those links public again. This period applies to the copies KD Labs creates for these operations, not to providers’ own log and backup cycles. These copies do not replace user-created backups or provide synchronization of the app’s competition data.

Diagnostics: received reports are deleted by the daily cleanup once they are more than 30 days old. Operational failures may delay cleanup; deletion does not necessarily occur at the exact moment the period expires. This criterion does not cover providers’ logs or operational copies.

Files and support: backups and exports remain at the chosen destination until removed by whoever controls it, under that destination’s rules. Messages and attachments sent to support stay in the support channel. You can request their deletion; requests are handled considering the need to complete the support request and any legal retention obligations or establishment, exercise or defense of legal claims. This channel has no single automatic deletion period.

Technical abuse-prevention records and providers’ operational records follow their own operational and retention criteria. For a link request, preferably provide the public code and approximate date; for diagnostics, provide the report identifier if available. Do not send private link authorization. KD Labs may need to verify the request and locate the record. It cannot erase copies held by others or remotely access data stored only on your device.

11. Your rights and choices

Where applicable, you may request confirmation and access, correction, anonymization, blocking or deletion of unnecessary or unlawfully processed data, portability as regulated, information about sharing, objection and review of automated decisions as provided by law. You may request deletion of data processed on the basis of consent, subject to lawful retention exceptions, and withdraw consent without affecting the lawfulness of earlier processing.

Send requests to [email protected]. We will ask only for what is necessary to verify your entitlement and locate the data. If information is held exclusively by an organizer, store or other provider, we will direct you to the relevant party. You may also contact the competent data protection authority. Declining diagnostics does not affect your PRO entitlement or authorize deletion of your collection.

12. Children and teenagers

Accepting the Terms independently and purchasing PRO requires being at least 18 or having full legal capacity. Minors should use the app only with a parent’s or legal guardian’s permission and supervision. The app does not automatically verify age, parental relationships or permission.

Competitions may include minors. Before entering or publishing their data, especially through a Live Link, the organizer must consider their best interests, the appropriate legal basis or permission, and whether the data is necessary.

13. Protection and precautions

Controls include HTTPS for online services, separation of private link control, structure and integrity validation, restricted access to diagnostics and protection of native channels. These controls do not guarantee absolute security or encrypt every shared file.

Protect your device, backup file and password, limit published data and check recipients. A lost device, insufficient space, write failures or damaged files may prevent use or recovery.

14. Updates and languages

This revision reflects the features of version 1.5.0. The document date and version identify changes. Material changes in processing will be communicated appropriately and, when required, consent will be requested again. This revision takes effect on November 1, 2026.

The Brazilian Portuguese and English versions have the same scope. Choosing a language does not change entered data, competition rules or permissions. See also the Terms of Use.