Privacy Policy under GDPR regulation (for Europe and companies doing business towards European area users) - PapalClic

Last Updated: [05/12/2025

1. Introduction

PapalClic ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

2. Information We Collect

2.1 Personal Information

We collect the following personal data when you use PapalClic:

Full name
Email address
Phone number
Physical address (for beneficiary verification)
Payment information (processed securely through third-party providers)
Names and identification details of up to 3 beneficiaries
Profile picture (optional)

2.2 Usage Data

We automatically collect:

Device information (model, OS version)
IP address
Geolocation data (if enabled)
App usage patterns
Transaction history

2.3 Third-Party Data Sources

We may receive data from:

Firebase Analytics (https://firebase.google.com)
Google Analytics (https://analytics.google.com)
Payment processors (Stripe, PayPal, etc.)
Authentication providers (Google Sign-In, Apple ID)

3. How We Use Your Information

We use your data to:

Process membership subscriptions ($20/month)
Enable beneficiary fruit/vegetable redemptions at Feria SUPERVEGETALES
Provide customer support
Improve app functionality
Prevent fraud
Comply with legal obligations

4. Data Sharing and Disclosure

4.1 Service Providers

We share data with:

Payment processors
Cloud storage providers
Analytics platforms
Local partners in Venezuela for beneficiary verification

4.2 Legal Requirements

We may disclose information when required by law.

5. Data Storage and Security

5.1 Storage Locations

Data is stored in:

United States (primary)
Venezuela (beneficiary information)

5.2 Retention Period

We retain data:

Active accounts: Until deletion request
Payment records: 7 years for tax compliance
Inactive accounts: 2 years before deletion

6. Your Rights (GDPR Compliance)

You have the right to:

Access your personal data
Request correction
Request deletion
Restrict processing
Data portability
Object to processing

To exercise these rights, contact: privacy@papalclic.com

7. International Transfers

Data may be transferred internationally, including to Venezuela. We use Standard Contractual Clauses for EU-US transfers.

8. Marketing Communications

You may opt-out of marketing emails by:

Clicking "unsubscribe" in emails
Adjusting app notification settings
Contacting support@papalclic.com

9. Cookies and Tracking Technologies

We use:

Essential cookies (app functionality)
Analytics cookies (Google Analytics)
Advertising cookies (Facebook Pixel)

9.1 How to Manage Cookies

Browser settings can be adjusted to refuse cookies. See:

10. Children's Privacy

PapalClic is not intended for users under 18. We do not knowingly collect data from children.

11. Third-Party Links

Our app may contain links to:

Payment processors
Local Venezuelan partners
Social media platforms

12. Security Measures

We implement:

Encryption (SSL/TLS)
Regular security audits
Access controls
Fraud monitoring

13. Policy Updates

We will notify users of material changes via:

In-app notifications
Email (for account holders)
Updated "Last Updated" date

14. Contact Information

For privacy concerns: Email: privacy@papalclic.com Mailing Address: [Company Physical Address]

15. Data Protection Authority

EU residents may contact:

Your local DPA
CNIL (France): https://www.cnil.fr

16. Non-GDPR Provisions

For non-EU users:

We still protect your data per this policy
Some GDPR rights may not apply
Disputes governed by [Jurisdiction] law

17. Cookie Policy Details

17.1 Essential Cookies

Session management
Authentication

17.2 Analytics Cookies

Google Analytics (_ga)
Firebase (_fid)

17.3 Advertising Cookies

Facebook Pixel (if used)

17.4 Opt-Out Options

18. Mobile Device Tracking

For app users:

Advertising ID controls:
- iOS: Settings > Privacy > Tracking
- Android: Settings > Google > Ads

¡Queremos escucharte!