Termos e Condições

1. Informação Geral

A App destina-se a promover o bem-estar e a literacia em saúde mental dos jovens. Disponibiliza sugestões selecionadas de filmes, séries, livros e outros conteúdos relacionados com a juventude e a saúde mental, informação geral sobre bem-estar psicológico e uma funcionalidade de chat privado para orientação informativa, esclarecimento de dúvidas e partilha de opiniões sobre os conteúdos.

A MÔÇES não presta serviços de psicoterapia, avaliação psicológica, intervenção em crise ou quaisquer serviços clínicos através da App. O chat destina-se exclusivamente a fins informativos gerais e não constitui aconselhamento psicológico, médico, jurídico ou de emergência. Em situações de emergência, os utilizadores devem contactar os serviços de emergência competentes.

A App destina-se a pessoas com idades entre os 12 e os 18 anos. A utilização da App está sujeita aos Termos e Condições disponíveis na App.

2. Responsável pelo tratamento

Responsável pelo tratamento: Associação MÔÇES, NIPC 516126032, sede na Rua da Escola Primária, Edifício Administrativo da Fundação Manuel Viegas Guerreiro, 8100-129 Querença, Loulé.

Email: ola@moces.pt

Encarregado de Proteção de Dados (EPD): a MÔÇES não designou EPD, por considerar não se verificarem os critérios de designação obrigatória previstos no artigo 37.º, n.º 1, do RGPD. Para o exercício de direitos ou esclarecimentos sobre o tratamento de dados pessoais, os utilizadores podem contactar-nos através dos contactos acima.

3. Finalidade e Fundamento do Tratamento de Dados

Tratamos dados pessoais dos utilizadores para as seguintes finalidades, correspondendo a cada finalidade um fundamento nos termos em que se seguem:

• Criação, gestão e autenticação da conta - execução de contrato [artigo 6.º, n.º 1, alínea b), do RGPD].
• Disponibilização dos conteúdos e funcionalidades da App, incluindo recomendações de conteúdos e acesso ao chat - execução de contrato [artigo 6.º, n.º 1, alínea b), do RGPD].
• Operação do chat e tratamento das mensagens submetidas, que podem conter dados relativos à saúde - consentimento explícito do utilizador [artigo 6.º, n.º 1, alínea a), e artigo 9.º, n.º 2, alínea a), do RGPD] e, tratando-se de utilizador com menos de 13 anos, consentimento do titular das responsabilidades parentais. Em situações de risco grave para a vida ou integridade física do utilizador ou de terceiro, o tratamento pode fundar-se ainda na proteção de interesses vitais [artigo 6.º, n.º 1, alínea d), e artigo 9.º, n.º 2, alínea c), do RGPD].
• Verificação da idade e recolha e gestão do consentimento parental - cumprimento de obrigação legal [artigo 6.º, n.º 1, alínea c), do RGPD] e execução de contrato.
• Garantia da segurança, estabilidade e funcionamento adequado da App - interesse legítimo [artigo 6.º, n.º 1, alínea f), do RGPD].
• Melhoria da App e análise de padrões de utilização - consentimento [artigo 6.º, n.º 1, alínea a), do RGPD].
• Proteção dos direitos e interesses legítimos da MÔÇES e dos utilizadores, incluindo resposta a atividades ilícitas, não autorizadas ou lesivas - interesse legítimo [artigo 6.º, n.º 1, alínea f), do RGPD].
• Cumprimento de obrigações legais, ordens judiciais ou requisitos regulamentares - cumprimento de obrigação legal [artigo 6.º, n.º 1, alínea c), do RGPD].

4. Categorias de dados recolhidos

As categorias recolhidas relativamente a cada utilizador dependem da sua idade, das funcionalidades que utiliza e das escolhas feitas pelo adulto responsável, quando aplicável.

O utilizador (ou o adulto, quando aplicável) pode optar por não fornecer determinados dados pessoais, o que poderá limitar o acesso a funcionalidades da App.

Podemos também recolher, utilizar e divulgar dados agregados ou anonimizados que não permitam identificar uma pessoa singular, para quaisquer finalidades. Tais dados não são considerados dados pessoais.

5. Tratamento de dados pessoais de menores

5.1 Consentimento

A idade mínima para um menor prestar consentimento válido ao tratamento de dados pessoais no contexto de serviços da sociedade da informação é, em Portugal, de 13 anos (artigo 16.º da Lei n.º 58/2019). Sendo o utilizador menor de 13 anos, o tratamento dos seus dados apenas é lícito com o consentimento do titular das responsabilidades parentais, que recolhemos e verificamos através de confirmação por email enviada ao adulto no momento do registo.

Sendo o utilizador maior de 13 anos, pode prestar o seu próprio consentimento; contudo, como condição contratual de acesso à App nos termos dos nossos Termos e Condições, todos os utilizadores menores de 18 anos devem utilizar a App com o conhecimento e o consentimento de um dos progenitores ou representante legal, verificado através do mesmo processo de confirmação por email.

Tratando-se de dados relativos à saúde eventualmente partilhados no chat, o tratamento assenta em consentimento explícito, prestado pelo utilizador com idade igual ou superior a 13 anos e/ou pelo titular das responsabilidades parentais, conforme aplicável.

5.2 Verificação de idade

No registo, é solicitada ao utilizador a indicação da data de nascimento. Esta informação é utilizada para determinar os requisitos de consentimento aplicáveis e para restringir o acesso a conteúdos e funcionalidades adequados à idade. Os utilizadores com idades entre os 16 e os 18 anos podem aceder a conteúdos ou funcionalidades não disponíveis para utilizadores entre os 12 e os 15 anos.

5.3 Direitos Parentais

Se for progenitor ou representante legal de um menor que tenha fornecido dados pessoais sem o consentimento adequado, pode contactar-nos através dos contactos indicados no ponto 2 para solicitar a sua eliminação.

6. Cookies e/ou outras tecnologias semelhantes

A App utiliza cookies e tecnologias semelhantes, incluindo identificadores de dispositivo e mecanismos de armazenamento ou leitura de informação no dispositivo (como SDKs). Estas tecnologias permitem o funcionamento adequado da App e, mediante o seu consentimento, a análise da utilização e a melhoria da experiência.

Categorias:

• Estritamente necessárias: essenciais ao funcionamento adequado da App e à prestação dos serviços solicitados. Não requerem consentimento;
• De análise e funcionalidade: utilizadas para compreender a interação dos utilizadores com a App e recordar preferências. Apenas são ativadas após o consentimento do utilizador.

Mecanismo de consentimento: na primeira utilização da App, é apresentado ao utilizador um mecanismo que permite aceitar ou recusar as tecnologias não essenciais, com ambas as opções em igualdade de destaque. Nenhuma tecnologia não essencial é ativada antes de o utilizador efetuar a sua escolha. O utilizador pode retirar ou alterar o consentimento a qualquer momento através das definições disponíveis na App.

O utilizador pode ainda gerir estas tecnologias através das definições do dispositivo. A desativação de determinadas tecnologias pode afetar o funcionamento adequado da App.

7. Utilização do Chat

O chat é uma funcionalidade privada e individual (entre o utilizador e a MÔÇES), disponível a utilizadores registados para orientação informativa geral, esclarecimento de dúvidas sobre os conteúdos e partilha de opiniões. Não é operado como serviço clínico e não presta serviços psicológicos, médicos ou de emergência.

As mensagens submetidas através do chat podem conter dados relativos à saúde e são tratadas com base no consentimento explícito do utilizador (e do titular das responsabilidades parentais, quando aplicável). Podem ser conservadas por um período limitado para efeitos de garantia de qualidade, monitorização de segurança e registo, salvo se o utilizador solicitar antes a sua eliminação.

A MÔÇES pode remover mensagens que violem os Termos e Condições ou contactar utilizadores para esclarecimentos relacionados com a utilização do chat.

O chat não deve ser utilizado em situações de emergência. Se o utilizador ou alguém que conheça se encontrar em crise, deve contactar os serviços de emergência ou de saúde mental competentes.

Contacto com profissional

O chat pode envolver interação com um profissional de psicologia credenciado, colaborador da MÔÇES ao abrigo de contrato de trabalho, atuando no âmbito das suas funções e por conta da associação. Não são prestados serviços clínicos, terapêuticos ou de intervenção em crise através do chat.

Sempre que o contacto digital envolva a troca de informação pessoal ou sensível com um profissional de psicologia, a MÔÇES solicitará consentimento informado prévio, abrangendo: a finalidade da comunicação; as categorias de dados recolhidos; os meios e o período de conservação; as medidas de segurança adotadas; os riscos associados à comunicação digital; e os direitos do utilizador ao abrigo do RGPD. Sendo o utilizador menor de 13 anos, o consentimento deve ser prestado pelo adulto.

Pode ser exigida a verificação de identidade para assegurar a segurança e a adequação do apoio prestado.

Situações de risco: caso, no âmbito do chat, se identifique risco grave para a vida ou integridade física do utilizador ou de terceiro, a MÔÇES pode contactar os serviços competentes, com fundamento na proteção de interesses vitais [artigo 9.º, n.º 2, alínea c), do RGPD].

8. Prazos de Conservação

Conservamos os dados pessoais apenas durante o período necessário às finalidades descritas nesta Política:

• Dados de conta e registo: enquanto a conta se mantiver ativa e por período não superior a 1 ano após a eliminação da conta ou inatividade.
• Mensagens de chat (incluindo eventuais dados de saúde): pelo período necessário às finalidades de garantia de qualidade, segurança e registo e, em qualquer caso, por período não superior a 1 ano, salvo obrigação legal ou deontológica que imponha prazo superior. O utilizador pode solicitar a eliminação das suas mensagens a qualquer momento, sem prejuízo de obrigação prevalecente.
• Registos de consentimento parental: enquanto a conta do utilizador estiver ativa, acrescido do período necessário à demonstração do cumprimento da lei aplicável.
• Dados técnicos e de utilização: pelo período necessário à finalidade do tratamento e, em qualquer caso, por período não superior a 1 ano, salvo prazo superior exigido ou permitido por lei.
• Dados sujeitos a obrigações legais de conservação (por exemplo, registos contabilísticos ou fiscais, quando aplicável): pelo período previsto na legislação aplicável, que pode exceder os prazos acima.

9. Direitos dos titulares

Nos termos do RGPD, os utilizadores (e, tratando-se de menor, o respetivo progenitor ou representante legal) têm os seguintes direitos:

• Ser informados sobre a origem, finalidades e fundamentos do tratamento e a identidade do responsável;
• Aceder aos dados pessoais e obter cópia;
• Retificar dados inexatos;
• Apagar os dados, quando não exista obrigação prevalecente de os conservar;
• Limitar ou opor-se ao tratamento;
• Portabilidade dos dados, quando o tratamento se baseie em consentimento ou contrato e seja efetuado por meios automatizados;
• Retirar o consentimento a qualquer momento, sem afetar a licitude do tratamento efetuado antes da retirada;
• Reclamar junto da Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt, ou da autoridade de controlo do local de residência habitual, de trabalho ou da alegada infração.

Alguns destes direitos podem ser limitados sempre que exista interesse legítimo ou obrigação legal de continuar o tratamento, ou quando os dados estejam abrangidos por sigilo ou segredo profissional.

10. Transferências internacionais de dados

Para a prestação dos serviços da App, recorremos aos seguintes subcontratantes, alguns dos quais tratam dados pessoais fora do Espaço Económico Europeu (EEE):

• Supabase (base de dados e autenticação), com servidores localizados no Reino Unido;
• Resend (envio de emails transacionais), com sede nos Estados Unidos;
• Firebase / Google (análise de utilização), que pode implicar tratamento de dados pessoais nos Estados Unidos.

Nesses casos, asseguramos que a transferência é acompanhada de garantias adequadas nos termos do Capítulo V do RGPD (artigos 44.º a 49.º), designadamente decisão de adequação da Comissão Europeia, Cláusulas Contratuais-Tipo ou, tratando-se de fornecedores certificados nos Estados Unidos, o EU-U.S. Data Privacy Framework, designadamente:

• Relativamente ao Reino Unido (Supabase): a transferência é amparada pela decisão de adequação da Comissão Europeia relativa ao Reino Unido, renovada em 19 de dezembro de 2025 e válida até 27 de dezembro de 2031, pelo que não é necessária a adoção de garantias suplementares;
• Relativamente aos Estados Unidos (Resend e, quando aplicável, Firebase/Google): a transferência assenta na certificação dos respetivos fornecedores no âmbito do EU-U.S. Data Privacy Framework (DPF).

Os utilizadores podem solicitar informação adicional sobre as garantias aplicáveis através dos contactos indicados no ponto 2.

11. Divulgação de dados a terceiros

Não transferimos dados pessoais a terceiros, salvo quando exigido por lei aplicável, a pedido do titular, ou nos demais casos previstos nesta Política. Divulgamos dados pessoais a terceiros apenas quando necessário às finalidades aqui descritas ou quando exigido por lei, designadamente a:

• Prestadores de serviços que atuam como subcontratantes por nossa conta (por exemplo, alojamento, infraestrutura da App), ao abrigo de contrato de subcontratação nos termos do artigo 28.º do RGPD, designadamente:
  • Dengun, responsável pelo desenvolvimento e manutenção técnica da App, com acesso à base de dados e ao backoffice no âmbito dessa prestação de serviços;
  • Supabase, para alojamento da base de dados e autenticação;
  • Resend, para envio de emails transacionais;
  • Firebase/Google, para análise de utilização da App;
• Autoridades competentes, quando exigido por lei aplicável ou em resposta a pedidos legítimos de autoridades judiciais, policiais ou regulatórias.

Todas as entidades com acesso a dados pessoais dos utilizadores estão obrigadas ao cumprimento da legislação aplicável em matéria de proteção de dados e à sua confidencialidade.

A App pode conter ligações para outros sítios (apenas para fins informativos). Ao navegar para outros sítios através dessas ligações, a presente Política deixa de se aplicar, pelo que recomendamos a consulta das respetivas políticas de privacidade antes de fornecer quaisquer dados pessoais.

12. Segurança dos dados pessoais

Utilizamos padrões amplamente aceites de proteção tecnológica e operacional para prevenir a perda, uso indevido, alteração ou destruição de dados. Não garantimos, contudo, proteção absoluta contra ameaças que escapem ao nosso controlo. Recomendamos que os utilizadores não utilizem canais não protegidos para nos transmitir informação confidencial.

13. Alterações à Política de Privacidade

Podemos atualizar esta Política periodicamente, publicando a versão revista na App. Sempre que as alterações afetem materialmente o tratamento de dados pessoais, informaremos os utilizadores por meios razoáveis. Quando a lei exija consentimento renovado, solicitá-lo-emos separadamente. A data de «Última atualização» indica a data da última revisão.

14. Contactos

Para comentários, questões ou reclamações relativas a esta Política, pode contactar-nos:

Ao contactar-nos, poderemos solicitar informação necessária à confirmação da sua identidade.

Definitions

In this document, the definitions listed below are used interchangeably in the singular and plural (unless otherwise specified in the term and/or definition) in the following meanings:

• App - the mobile application developed and operated by Associação MÔÇES;
• Visitor - any person who accesses the App without using the chat or sending messages;
• User - any person aged between 12 to 18 that accesses the App, including the chat functionality and its content;
• Adult - a person who is 18 years of age or older, who has legal capacity and who provides consent for, supervises, and assumes responsibility for the minor’s access to and use of the App and its chat functionality;
• Content - suggestions of films, series, books, and other media materials related to youth and mental health made available within the App;
• Chat - the communication tool that allows Users to ask questions, request clarifications, or share opinions regarding the Content;
• Institution – Associação MÔÇES, the entity responsible for managing the App and its functionalities;
• Anonymity: the APP allows users to access and use its services anonymously and does not require the disclosure of the personal data unless when it is hereby indicated.

App Description

The core mission of the institution designated as Associação MÔÇES is to promote youth well-being and mental health literacy.

The App provides curated suggestions of films, series, books and other media related to youth and mental health, general information on psychological well-being and a chat for informational guidance, clarification of doubts, and sharing of opinions.

The Institution does not provide psychotherapy, psychological assessment, crisis intervention nor clinical services through the App. The Content may include fictional works or materials based on realities from other countries (i.e., other than Portugal).

Although the Institution reviews materials to avoid misinformation, it shall not be held liable for the perspectives, interpretations nor opinions expressed in the suggested Content.

User Registration

Eligibility and Age Requirements

The App is intended for individuals aged 12 to 18 years old. By registering or using the App, You confirm that You fall within this age range.

Certain Content and features may be restricted based on age. Users aged 16 to 18 may have access to additional materials or functionalities that are not available to Users aged 12 to 15.

Parental or Guardian Consent

If You are under the age of 18, You must use the App with the knowledge and consent of Your parent or legal guardian. The supervising Adult is responsible for approving the User’s access and overseeing their use of the App and its features, including the chat functionality.

Account Creation

The App requires the creation of a User account for general access to its Content.

Certain optional features, such as chat or personalized interactions, may require the User to provide basic information (such as a name or e-mail address) solely for communication, identification, and service purposes.

Third-Party Authentication

If authentication or login options are offered through third-party providers (such as Google, Facebook, or Apple), the User is responsible for maintaining the confidentiality of their login credentials and for all activities carried out through their account.

Institution Rights

The Institution reserves the right to:

• refuse registration;
• limit access to certain Content or features based on age;
• restrict features or suspend access in cases of misuse, violation of these Terms, or security concerns.

Anonymity

The APP is to be interacted under anonymous profile. The Institution reserves the right to access personal information in case of extreme emergency. For these purposes extreme emergency shall be considered, but not limited to, threats of suicide, violence and any other that the Institution may identify as potentially harmful.

Chat

The chat is intended exclusively for general clarification of doubts, informational guidance, referral to appropriate resources, encouraging critical reflection on the Content.

The chat shall not be used in emergencies and does not replace psychological, medical, or crisis services. The Institution may request additional information when necessary to ensure safety, appropriateness and compliance with ethical guidelines.

Provision of Psychological Services Mediated by Information and Communication Technologies (ICT)

A) Guideline 10

Psychologists shall understand the principles underlying their professional practice so that, whenever relevant, they request signed informed consent for the use of digital means during the provision of services — for example, the delivery of online therapy, but also any form of contact carried out through digital media (e.g., email). Obtaining informed consent always requires that the psychologist is aware of the legal and ethical frameworks governing such practice, including, at present, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), as well as the Code of Ethics of the Portuguese Psychologists’ Institution.

B) Guideline 11

The use of digital means when contacting clients frequently entails additional, specific risks that must be considered when obtaining informed consent. For example, verifying a person’s identity may be more difficult, which in turn may create challenges in determining whether the individual is of an appropriate age to provide consent or whether they are in a condition that limits their capacity to do so (e.g., intellectual functioning impairments that restrict their understanding of the consent process). Appropriate measures must therefore be taken to determine whether third-party consent is required — such as from parents or other individuals or entities legally representing the client — in order for the work to proceed; and, if so, to ensure that such consent is properly obtained. This may require additional identity-verification procedures, as mentioned in Guideline 5.

C) Guideline 12

Given the nature of the data that may be digitally recorded, informed consent must include clear and comprehensible information for the client. In addition to the usual elements required in face-to-face settings, informed consent must also include detailed information regarding the recording and handling of the data obtained. At a minimum, this shall include: the content of the information recorded; the purpose(s) for which it is collected; the means and forms of storage; the security, protection and destruction procedures adopted; the period for which the data will be retained; the client’s right to access the data and/or request its deletion and the procedures to be followed in the event of a data-security breach, including the obligation to notify the client or their legal representative.

The level of security and the risks that may arise in specific situations due to the use of these technologies - whether by the psychologist or by the client - must also be clearly explained. The price and invoicing of the services provided must always be clarified prior to their delivery. Accordingly, informed consent must also specify, in a clear and itemized manner, the services to be provided and the corresponding fees, including the type of online communication used, the services delivered, the cost of each service, and the method of payment.

Fee

The Institution does not charge any commission or any other fees from Users for accessing the App.

However, We plan to introduce paid features for our Users. This will help Us to improve our services and interaction with You. Before introducing paid tariffs, We will provide additional notification about this.

Warranties and Liability

We provide the App and its Content on an “As is” and “As available” basis. The Institution does not guarantee that the App will always be secure, error-free, free of disruptions or delays.

Use of the App is at your own risk with due consent of the ADULT.

The User and the ADULT acknowledge and agree that the Institution is not responsible for any information provided by third parties, including Employers or Professionals, nor does it take responsibility for (not) providing services, (not) conducting transactions, or any damage caused as a result of actions or inaction, or improper conduct of the User or third parties.

The Institution is not responsible for the accuracy, completeness, interpretation, or impact of any Content suggested within the App, including films, series, books, or other media. These materials may include fictional elements or reflect cultural, legal, or social contexts different from those of Portugal. The Institution does not endorse the perspectives presented in such Content.

The Institution is not responsible for any decisions, actions, or outcomes resulting from the use of the App, including reliance on information provided through the chat. The chat is intended solely for informational guidance and does not constitute psychological, medical, legal or emergency advice.

The Institution is not liable for any damages arising from the use or misuse of the App, including but not limited to: loss of data, device malfunction, reputational harm, emotional distress, or any indirect, incidental, or consequential damages. The Institution is also not responsible for unauthorized access to communications or data transmitted through the App.

The Institution, including its management, employees, contractors, agents and affiliated individuals with the Institution, under no circumstances, shall be liable to the User nor the ADULT or any third parties for any damages, including loss of profit and imposed penalties, or lost data, damage to honor, dignity, or business reputation incurred in connection with the use or misuse of the Site by them, or the inability to use it, or unauthorized access to the User's communications by third parties, including, without limitation, cases of damage caused to the User's electronic devices or other persons, any other equipment, or software related to the use or misuse of the App.

We reserve the right to report any activity that the Institution considers illegal or otherwise contrary to these Terms, and We will respond to any confirmed requests related to investigations (such as a court summons, court order, or other legal process) from local and foreign law enforcement or regulatory authorities, other government officials, or authorized third parties.

The App may contain links to external websites or platforms that are not operated or controlled by the Institution. The inclusion of such links does not imply endorsement. The Institution is not responsible for the content, accuracy, or privacy practices of external websites. Users access third-party websites at their own risk and should review their respective terms and privacy policies.

The User guarantees that the information obtained by them on the App will be used personally and in a manner that does not violate any rights and legal interests, including intellectual property rights, and will not be transferred to third parties. In case of claims against the Institution by third parties regarding the information posted by the User on the App, the User is obliged to independently and at their own expense settle and resolve all disputes with the parties that filed the claims and compensate the Institution for all incurred damages in full.

The Institution reserves the right to report any activity it considers unlawful or contrary to these Terms and to cooperate with law enforcement or regulatory authorities when legally required.

Visitor and/or User guarantees that all sections of these Terms are clear to them, and they accept them in full. In case of positive feedback or claims from the Visitor and/or User, they should contact Us at the e-mail address specified in these Terms.

Parties Rights and Obligations

The Institution has the right to:

• modify the App at any time;
• suspend or limit access for technical or security reasons;
• remove messages that violate these Terms;
• contact individuals for clarifications related to chat usage.

The Institution is obligated to:

• comply with these Terms;
• protect personal data in accordance with the GDPR;
• not use data for unauthorized purposes.

The User has the right to:

• access the Content available in the App;
• use the chat for informational purposes;
• contact the Institution with suggestions, questions, or complaints.

The User is obligated to:

• strictly adhere to these Terms with the ADULT approval, use the App only for legal purposes in compliance with applicable laws;
• use the App only for lawful purposes;
• not engage in actions aimed at destabilizing the App's operation, attempting unauthorized access to the App, disrupting, blocking, or otherwise causing harm to any security means of the App, and not perform any other actions that violate the rights of the Institution and/or third parties;
• not use the App to commit actions aimed at undermining network security and disrupting the operation of any software and technical means connected to the Internet, as well as committing network attacks on any resources available through the Internet, including the Institution's software and technical means, but not limited to them;
• not publish content that violates the rights of third parties;
• notify the Institution of any errors, failures, or security issues detected;
• not post on the App inaccurate information, any information that may harm reputation, dignity, business reputation, that contains spam or information about financial pyramids, propagates violence, hatred, discrimination, contains links to external Internet resources, violates the rights of third parties, including their contact information, or otherwise violates applicable law.
• get acquainted with the information on the App related to the provision of services, including changes and additions to these Terms.

Disputes Resolution

Disputes arising from the performance of these Terms are resolved through a claims' procedure. Claims and complaints should be sent to the Institution at the following e-mail address: ola@moces.pt.

In case an agreement cannot be reached, disputes are considered in accordance with the legislation of Portugal. For all other matters not covered by these Terms, the Parties are guided by the current legislation of Portugal.

Use of the App by Under Aged

The App is intended to be accessed by individuals aged 12 to 18 years old.

If You are under 18 years of age, the App may be accessed only with the knowledge, consent, and supervision of Your parent or legal guardian. The supervising Adult is responsible for approving and overseeing the User’s access to and use of the App, including its Content and chat functionality.

Certain Content, features, or services may be restricted based on age. Some materials or functionalities may only be accessed by Users aged 16 to 18, and will not be available to Users aged 12 to 15.

While the Institution may implement reasonable technical and organizational measures to ensure age-appropriate use, it cannot guarantee that all Content will be suitable for every individual User. Parents and legal guardians are encouraged to actively supervise the minor’s use of the App and to determine whether the Content accessed is appropriate.

The Institution reserves the right to restrict or limit access to any part of the App where necessary for safety, legal compliance, or the protection of Users.

Intellectual Property

All information contained on the App is, by default, the exclusive intellectual property of the Associação MÔÇES. Trademarks, brands, logos registered according to the current legislation, as well as copyright-protected objects (texts, visual images, and otherwise) posted on the App by the Institution, are the property of the Institution.

No content can be interpreted as a right or permission to use any trademarks or any other materials posted on the App by the Institution without the consent of the Institution as the owner of the copyright.

Informed Consent for Digital Contact

Whenever digital contact involves the exchange of personal or sensitive information, the Institution may request informed consent, which will include the purpose of the communication; the type of data collected; how and for how long the data will be stored; security measures adopted; risks associated with digital communication; the individual’s rights under the GDPR; the need for consent from legal guardians when applicable.

Identity verification may be required to ensure safety and appropriateness of the support provided.

Data Security and Protection

The App may process limited personal data, including messages voluntarily submitted through the chat, optional contact information provided by the individual, and technical data strictly necessary for the functioning and security of the App. The App does not collect unnecessary or excessive personal data.

Personal data may be processed under different legal bases depending on the interaction. These include consent and legitimate interest for ensuring the security, stability, and proper functioning of the App.

Personal data is stored securely and retained only for the period strictly necessary for the purposes for which it was collected. Messages exchanged through the chat may be retained for internal quality assurance, safety, or record-keeping, unless the individual requests their deletion. Data is not kept longer than required and is deleted or anonymized once no longer needed.

Individuals have the right to access their personal data, request its correction or deletion, withdraw consent at any time, request the limitation of processing. Requests regarding personal data may be submitted to ola@moces.pt.

The Institution implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Personal data is not shared with third parties unless legally required or explicitly authorized by the individual.

Changes to the Terms

The Institution reserves the right at its discretion, at any time, and without prior notice, to modify, delete, or amend the services or the Terms and/or any page of this App.

The “Last Updated” date above will indicate when the Terms were last reviewed. By continuing to use this App after this date, You agree to the changes.

If any provision of these Terms is deemed invalid or unenforceable under any circumstances, it does not affect its application under any other circumstances and the other provisions of these Terms remain valid and enforceable.

Contact Us

Suggestions, complaints, questions, and other messages from the User regarding the operation of the Site or the Service should be sent to the Institution at the following e-mail address: ola@moces.pt.

Messages from the User to the Institution that do not allow the User to be identified will not be considered by the Institution.

1. General information

The App is designed to promote youth wellbeing and mental health literacy. It provides curated suggestions of films, series, books and other media related to youth and mental health, general information on psychological wellbeing, and a private chat feature for informational guidance, clarification of doubts and sharing of opinions about the content.

MÔÇES does not provide psychotherapy, psychological assessment, crisis intervention or any clinical services through the App. The chat is intended exclusively for general informational purposes and does not constitute psychological, medical, legal or emergency advice. In an emergency, users should contact the relevant emergency services.

The App is intended for individuals aged 12 to 18. Use of the App is subject to the Terms & Conditions available within the App.

2. Data controller

Data controller: Associação MÔÇES, NIPC 516126032, headquarters in Rua da Escola Primária, Edifício Administrativo da Fundação Manuel Viegas Guerreiro, 8100-129 Querença, Loulé.

Email: ola@moces.pt

Data Protection Officer (DPO): MÔÇES has not appointed a DPO, as it considers that the mandatory appointment criteria under Article 37(1) GDPR are not met. To exercise rights or for clarifications regarding the processing of personal data, users may contact us using the details above.

3. Purposes

We process users' personal data for the following purposes, with one legal basis corresponding to each purpose:

• Account creation, management and authentication - performance of a contract [Article 6(1)(b) GDPR].
• Provision of the App's content and features, including curated media recommendations and access to the chat - performance of a contract [Article 6(1)(b) GDPR].
• Operation of the chat and processing of submitted messages, which may contain data concerning health — the user's explicit consent [Article 6(1)(a) and Article 9(2)(a) GDPR] and, where the user is under 13, the consent of the holder of parental responsibility. In situations of serious risk to the life or physical integrity of the user or a third party, processing may also rely on the protection of vital interests [Article 6(1)(d) and Article 9(2)(c) GDPR].
• Age verification and collection and management of parental consent - compliance with a legal obligation [Article 6(1)(c) GDPR] and performance of a contract.
• Ensuring the security, stability and proper functioning of the App - legitimate interest [Article 6(1)(f) GDPR].
• Improvement of the App and analysis of usage patterns - consent [Article 6(1)(a) GDPR].
• Protecting the rights and legitimate interests of MÔÇES and users, including responding to unlawful, unauthorized or harmful activities - legitimate interest [Article 6(1)(f) GDPR].
• Compliance with legal obligations, court orders or regulatory requirements - compliance with a legal obligation [Article 6(1)(c) GDPR].

4. Categories of data collected

The categories collected in respect of a particular user depend on their age, the features they use, and the choices made by the responsible adult where applicable.

The user (or the adult, where applicable) may choose not to provide certain personal data, which may limit access to features of the App.

We may also collect, use and disclose aggregate or de-identified data that cannot identify an individual, for any purpose. Such data is not considered personal data.

5. Processing of minors' personal data

5.1. Age of consent

In Portugal, the minimum age for a minor to give valid consent to the processing of personal data in connection with information society services is 13 years (Article 16 of Law No. 58/2019). Where a user is under 13, processing of their personal data is only lawful with the consent of the holder of parental responsibility, which We collect and verify through email confirmation sent to the adult at the time of registration.

Where a user is 13 or older, they may give consent themselves; however, as a contractual condition of access to the App under our Terms & Conditions, all users under 18 must use the App with the knowledge and consent of a parent or legal guardian, verified through the same email confirmation process.

Where data concerning health is shared through the chat, processing is based on explicit consent, given by the user aged 13 or over and/or by the holder of parental responsibility, as applicable.

5.2. Age verification

At registration, users are required to provide their date of birth. This information is used to determine the applicable consent requirements and to restrict access to age-appropriate content and features. Users aged 16 to 18 may have access to content or features not available to users aged 12 to 15.

5.3. Parental rights

If You are the parent or legal guardian of a minor who has provided personal data without proper consent, You may contact us using the details in Section 2 to request its removal.

6. Cookies and similar technologies

The App uses cookies and similar technologies, including device identifiers and mechanisms that store or read information on the device (such as SDKs). These technologies allow the App to function properly and, where You consent, to analyze usage and improve Your experience.

Categories:

• Strictly necessary: essential for the proper functioning of the App and for providing the services You request. These do not require consent.
• Analytics and functional: used to understand how users interact with the App and to remember preferences. These are only set after You have given Your consent.

Consent mechanism: on Your first use of the App, You are presented with a mechanism allowing You to accept or reject non-essential technologies, with both options given equal prominence. No non-essential technology is set before You make a choice. You may withdraw or change Your consent at any time through the settings available within the App.

You can also manage these technologies through Your device settings. Disabling certain technologies may affect the proper functioning of the App.

7. Use of the chat

The chat is a private, one-to-one feature (between the user and MÔÇES), available to registered users for general informational guidance, clarification of doubts about the content, and sharing of opinions. It is not operated as a clinical service and does not provide psychological, medical or emergency services.

Messages submitted through the chat may contain data concerning health and are processed on the basis of the user's explicit consent (and that of the holder of parental responsibility, where applicable). They may be retained for a limited period for quality assurance, safety monitoring and recordkeeping purposes, unless the user requests their deletion earlier. MÔÇES may remove messages that violate the Terms & Conditions or contact users for clarifications related to chat usage.

The chat must not be used in emergencies. If You or someone You know is in crisis, please contact the relevant emergency or mental health services.

Contact with a professional

The chat may involve interaction with a psychology professional, a member of staff employed by MÔÇES under a contract of employment, acting within the scope of their duties and on behalf of the association. No clinical, therapeutic or crisis services are provided through the chat.

Where digital contact involves the exchange of personal or sensitive information with a psychology professional, MÔÇES will request prior informed consent, covering: the purpose of the communication; the categories of data collected; the means and period of storage; the security measures adopted; the risks associated with digital communication; and the user's rights under the GDPR. Where the user is under 13, consent must be given by the adult.

Identity verification may be required to ensure the safety and appropriateness of the support provided.

Risk situations: if, in the context of the chat, a serious risk to the life or physical integrity of the user or a third party is identified, MÔÇES may contact the competent services on the basis of the protection of vital interests [Article 9(2)(c) GDPR].

8. Data retention periods

We retain personal data only for as long as necessary to fulfil the purposes described in this Notice:

• Account and registration data: for as long as the account remains active and for no longer than 1 year following account deletion or inactivity.
• Chat messages (including any health data): for as long as necessary for quality assurance, safety and recordkeeping purposes and, in any event, for no longer than 1 year, unless a longer retention period is required by legal or professional obligation. The user may request deletion of their messages at any time, subject to any overriding obligation.
• Parental consent records: for as long as the user's account is active, plus the period required to demonstrate compliance with applicable law.
• Technical and usage data: for as long as necessary for the purpose of processing and, in any event, for no longer than 1 year, except where a longer period is required or permitted by law.
• Data subject to legal retention obligations (e.g., accounting or tax records, where applicable): for the period prescribed by applicable law, which may exceed the periods above.

9. Data subject rights

Under the GDPR, users (and, where the user is a minor, their parent or legal guardian) have the following rights:

• To be informed about the source, purposes and legal bases of processing and the identity of the controller;
• To access personal data and obtain a copy;
• To rectify inaccurate personal data;
• To erase personal data, where no overriding obligation to retain it exists;
• To restrict or object to processing;
• To data portability, where processing is based on consent or contract and carried out by automated means;
• To withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• To lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt, or with the supervisory authority of the user's habitual residence, place of work, or place of the alleged infringement.

Some of these rights may be restricted where We have a legitimate interest or a legal obligation to continue processing, or where the data is covered by confidentiality or professional secrecy.

10. International data transfers

To provide the App's services, We rely on the following processors, some of which process personal data outside the European Economic Area (EEA):

• Supabase (database and authentication), with servers located in the United Kingdom;
• Resend (transactional email delivery), based in the United States;
• Firebase / Google (usage analytics), which may involve the processing of personal data in the United States.

In such cases, We ensure that the transfer is subject to appropriate safeguards under Chapter V of the GDPR (Articles 44 to 49), namely a European Commission adequacy decision, Standard Contractual Clauses or, for certified providers in the United States, the EU-U.S. Data Privacy Framework, namely:

• With respect to the United Kingdom (Supabase): the transfer is covered by the European Commission's adequacy decision concerning the United Kingdom, renewed on 19 December 2025 and valid until 27 December 2031, meaning no supplementary safeguards are required;
• With respect to the United States (Resend and, where applicable, Firebase/Google): the transfer relies on the respective providers' certification under the EU-U.S. Data Privacy Framework (DPF).

Users may request further information about the applicable safeguards using the details in Section 2.

11. Disclosure of data to third parties

We do not transfer personal data to third parties unless required by applicable law, at the request of the data subject, or in the other cases set out in this Notice. We disclose personal data to third parties only where necessary for the purposes described here or where required by law, namely to:

• Service providers acting as processors on our behalf (e.g., hosting, App infrastructure), under a data processing agreement in accordance with Article 28 GDPR, namely to:
  • Dengun, responsible for the technical development and maintenance of the App, with access to the database and backoffice in connection with that service;
  • Supabase, for database hosting and authentication;
  • Resend, for transactional email delivery;
  • Firebase/Google, for App usage analytics;
• Competent authorities, where required by applicable law or in response to lawful requests by judicial, law enforcement or regulatory bodies.

All parties with access to users' personal data are bound to comply with applicable data protection legislation and to maintain confidentiality.

The App may contain links to other websites (for informational purposes only). When navigating to other websites through these links, this Notice no longer applies, and We recommend reviewing their privacy policies before providing any personal data.

12. Security of personal data

We use widely accepted standards of technological and operational protection to prevent the loss, misuse, alteration or destruction of data. However, We do not guarantee absolute protection against threats beyond our control. We recommend that users do not use unprotected channels to transmit confidential information to us.

13. Changes to this Privacy Notice

We may update this Notice from time to time by publishing a revised version within the App. Where changes materially affect how We process personal data, We will notify users by reasonable means. Where renewed consent is required by law, We will request it separately. The "Last updated" date indicates when this Notice was last revised.

14. Contact us

For comments, questions or complaints regarding this Notice, You may contact us:

When You contact us, We may ask You to provide information necessary to confirm Your identity.