1. Data we collect
We may collect the following categories of personal data:
- Identification: first name, last name, username.
- Contact: email, phone number.
- Account: encrypted credentials, preferences and settings.
- App usage: activity logs, usage metrics, device and browser.
- Billing (if applicable): tax ID, billing address, tokenized payment methods.
- Support: messages you send to our support channels.
*We do not routinely request sensitive data. If needed, we will inform you and request explicit consent.
2. Purposes of processing
- Provide and maintain the service (registration, authentication, and platform operation).
- Manage notifications, reminders, and operational communications.
- Improve the experience through usage analytics and technical support.
- Comply with legal, tax, and contractual obligations.
- Fraud prevention and platform security.
- Marketing (optional): send updates when authorized. You can unsubscribe at any time.
3. Legal bases
We process your data based on: (i) your consent; (ii) performance of a contract; (iii) legal obligations; and (iv) our legitimate interest in improving and protecting the service without undermining your rights.
4. Retention periods
We retain your data only for as long as necessary to fulfill the stated purposes and applicable legal requirements. Afterwards, we securely delete or anonymize it.
5. Transfers and third parties
We may share data with providers who help us operate the platform (hosting, transactional email, analytics, payments), under contracts that ensure confidentiality and security. We do not sell your personal data.
If we make international transfers, we ensure appropriate safeguards (standard contractual clauses or other recognized mechanisms).
7. Data subject rights (GDPR)
You have the right to access, rectify, erase, or object, as well as portability, restriction of processing, and to withdraw consent where applicable.
To exercise your rights, write to privacy@pujulapp.com including: (a) full name; (b) contact method; (c) right to exercise; and (d) a copy of your ID. We will respond within the timeframes required by law.
8. Security measures
We implement reasonable technical and organizational measures to protect your data. No method is 100% foolproof.
9. Minors
Our services are not directed to minors. If you believe a minor provided data to us, contact us to remove it.
10. Changes to this notice
We may update this notice to reflect legal, technical, or business changes. We will post the current version with its date.