Privacy Policy

Last updated: October 9, 2026

In short: we only keep what's needed for your account, your saved picks and your favorites. We don't sell your data, we don't use it for advertising, and you can delete your account at any time from the app.

This is a translation for convenience; the Spanish version (Aviso de Privacidad Integral) prevails.

1. Who is responsible

Mateo González Esquivel (“Forma Stats”, “we”), with address at Del Río 20, Int. B301, Col. San Mateo Nopala, C.P. 53220, Naucalpan de Juárez, Estado de México, México, is responsible for processing your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

Privacy contact: [email protected].

2. Personal data we process

Account data: email address; password, only if you choose to sign in with one (stored hashed — nobody, including us, can read it); your device language, to email you in your language; and sign-up and last sign-in dates.
If you sign in with Google or Apple: your email, your name if the provider shares it, and an identifier from that provider.
What you save in the app: your saved picks and favorite players.
Technical and security data: IP address, device and browser type, and access logs generated when you use the app, including bot protection.
Payments: if you subscribe, payment is processed by Apple (App Store) or Google (Google Play). We never receive or store your card details; we only know whether your subscription is active.

We do not process sensitive personal data or financial data.

3. Why we use your data

Necessary purposes (required to provide the service you ask for):

Create, manage and protect your account, and sign you in.
Send you verification codes and emails about your account.
Save and sync your picks and favorites across your devices.
Manage your subscription, when available.
Prevent fraud, abuse and unauthorized access, and keep the service secure.
Comply with legal obligations and requests from competent authorities.

Secondary purposes: none. We don't use your data for advertising, we don't sell it and we don't build marketing profiles. If we ever want to use it for another purpose (for example, sending you news), we will ask for your consent first.

4. Who we share your data with

We use providers that process your data only on our behalf to deliver their service:

Supabase: accounts and database (servers in the United States).
Resend: email delivery (United States).
Cloudflare: app hosting, security and bot protection (global network).
Apple and Google: sign-in with their accounts and in-app payments, when you use them.

Your data is stored outside Mexico, mainly in the United States. We don't sell or rent your data. We would only disclose it to an authority when legally required.

5. How long we keep it

For as long as you have an account. When you delete it, we immediately delete your account, picks and favorites. Security logs kept by our providers are deleted automatically on their schedules, usually within a few days.

6. Your rights and how to exercise them

You have the right to access, rectify, cancel (delete) and object to the use of your data, as well as to withdraw consent and limit its use or disclosure.

Delete your account in the app: Settings (⚙️) → Account → Delete my account. Your data is deleted immediately.
By email: write to [email protected] from your account's email, stating your name, the specific right you want to exercise, a clear description of your request and how to reply to you. We may ask you to verify your identity. We will respond within the time limits set by law.

7. Cookies and on-device storage

We don't use advertising or tracking cookies. The app stores on your device your session, your preferences (such as light or dark mode) and a copy of your picks and favorites so it can work. Cloudflare may use strictly necessary cookies for security and bot protection.

8. Minors

Forma Stats is only for people 18 and older. We don't knowingly collect data from minors; if we find an account belonging to a minor, we will delete it.

9. Security

We protect your data with encryption in transit (HTTPS), hashed passwords, rules that prevent any user from seeing another user's data, two-factor authentication on admin accounts and bot protection. No system is infallible; if a security breach affecting your rights ever occurs, we will notify you without undue delay.

10. If you live outside Mexico

If you live in the European Union, the United Kingdom or another place with its own privacy laws (including U.S. states such as California), you may have additional rights, such as data portability or filing a complaint with your local authority. We process your data to perform our contract with you (providing the service) and based on our legitimate interest in keeping it secure. You can exercise your rights by writing to [email protected]. We do not sell or share your personal information for advertising.

11. Changes to this policy

We will post any changes on this page with the update date. If a change is significant, we will also let you know in the app or by email.

12. Authority

If you believe your right to the protection of your personal data has been violated, you may contact Mexico's Secretaría Anticorrupción y Buen Gobierno, the competent authority.