PRIVACY POLICY – LEMEHUB
LemeHub is a digital platform focused on sports management, training tracking, performance analysis, and club administration, including modalities such as Hawaiian canoe and other endurance sports.
This Privacy Policy is maintained by:
HR OLIVEIRA ADMINISTRAÇÃO DE CARTÕES LTDA
CNPJ: 63.820.396/0001-33
This policy describes how we handle personal data in compliance with Brazil's General Data Protection Law (LGPD – Law No. 13.709/2018) and international best practices.
🎯Sports Data Usage
LemeHub uses sports data exclusively for sports and performance purposes, including:
- Training records and check-in history
- Individual athlete progression over time
- Statistical performance analysis
- Internal rankings and gamification
- Sports planning and crew organization
Data is accessed only with user consent and through official APIs from platforms like Garmin, Strava, and others.
1. Principles of Data Processing
LemeHub observes the principles of purpose, necessity, adequacy, transparency, security, prevention, and accountability.
2. Data Collected
2.1 Registration Data
We collect the following personal data for identification and contact:
- Full name and nickname/social name
- Email and phone number
- CPF (identification document)
- Date of birth and gender
- Profile photo
- Complete address (ZIP code, street, number, complement, neighborhood, city, state)
- Internal identifiers linked to clubs or teams
2.2 Sports and Physical Activity Data
With explicit consent, we may receive data from integrated platforms, including:
- Type of sports activity
- Date, duration, and distance
- Movement time and performance metrics
- Aggregated and statistical data
- Positions on vessels and crew history
2.3 Financial Data
LemeHub does not store complete credit card data or sensitive banking information.
Payments are processed by certified financial institutions (Mercado Pago, Asaas, PagSeguro, Stripe). We store:
- Transaction identifier and gateway used
- Payment status (pending, paid, canceled)
- Due dates and amounts
- Last digits of the card (when provided)
- Encrypted tokens for recurring billing (card-on-file)
- PIX codes and generated payment slips
- Invoice and payment history
2.4 Emergency and Health Data
For your safety during sports activities, we collect:
- Emergency contact name and phone number
- Blood type
- Medical notes (allergies, health conditions, medications in use)
- Swimming aptitude declaration
3. Purpose of Data Use
- Sports and administrative management of clubs
- Performance tracking and athletic progression
- Statistics, internal rankings, and training planning
- Financial control (invoices, billing, receipts)
- Communication via push notifications, email, and WhatsApp
- Compliance with legal and contractual obligations
- Continuous platform improvement
4. Third-Party Integrations
LemeHub integrates with the following services:
Sports platforms (with consent)
- Garmin Connect
- Strava
- Other sports monitoring platforms
Payment gateways
- Mercado Pago
- Asaas
- PagSeguro
- Stripe
Infrastructure and services
- Supabase (database and authentication)
- Supabase Storage (file storage)
- Email and notification services
Users can activate or revoke sports integrations at any time in the settings.
5. Sharing with Partners
Data may be shared only when necessary, with technology, sports, or financial partners, respecting the stated purpose and ensuring adequate levels of protection.
6. Legal Bases (LGPD)
- Consent of the data subject
- Contract execution or preliminary procedures
- Compliance with legal or regulatory obligation
- Legitimate interest of the controller, when applicable
- Protection of life or physical safety of the data subject
7. Data Subject Rights
Under the LGPD, you may request at any time:
- Confirmation and access to your personal data
- Correction of incomplete or outdated data
- Anonymization, blocking, or deletion of unnecessary data
- Data portability to another provider
- Information about sharing with third parties
- Revocation of consent
8. Security
We implement technical and organizational measures to protect your data:
- Encryption in transit (HTTPS/TLS) and at rest
- Role-based access control (RBAC)
- Environment segregation (production, development)
- Secure authentication with JWT tokens
- Monitoring and access logs
- Regular backups and recovery plan
9. Retention and Deletion
Data is kept for the period necessary for the described purposes or as required by law. Data of inactive athletes may be anonymized or deleted after a period defined by the club, respecting legal document retention obligations.
10. International Transfer
Cloud infrastructure outside Brazil may be used (e.g., AWS servers, Supabase), always with adequate levels of protection and contractual clauses that ensure data security according to international standards.
11. Cookies and Local Storage
LemeHub uses local storage technologies to improve your experience:
- Authentication tokens (user session)
- User preferences (light/dark theme, language)
- Data cache for better performance
- Temporary form data
12. Contact
🌐 https://www.lemehub.com.br/privacy