Privacy policy

Privacy Policy under GDPR regulation (for Europe and companies doing business towards European area users) - PapalClic

Last Updated: [05/12/2025

1. Introduction

PapalClic ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

2. Information We Collect

2.1 Personal Information

We collect the following personal data when you use PapalClic:

  • Full name
  • Email address
  • Phone number
  • Physical address (for beneficiary verification)
  • Payment information (processed securely through third-party providers)
  • Names and identification details of up to 3 beneficiaries
  • Profile picture (optional)

2.2 Usage Data

We automatically collect:

  • Device information (model, OS version)
  • IP address
  • Geolocation data (if enabled)
  • App usage patterns
  • Transaction history

2.3 Third-Party Data Sources

We may receive data from:

3. How We Use Your Information

We use your data to:

  • Process membership subscriptions ($20/month)
  • Enable beneficiary fruit/vegetable redemptions at Feria SUPERVEGETALES
  • Provide customer support
  • Improve app functionality
  • Prevent fraud
  • Comply with legal obligations

4. Data Sharing and Disclosure

4.1 Service Providers

We share data with:

  • Payment processors
  • Cloud storage providers
  • Analytics platforms
  • Local partners in Venezuela for beneficiary verification

4.2 Legal Requirements

We may disclose information when required by law.

5. Data Storage and Security

5.1 Storage Locations

Data is stored in:

  • United States (primary)
  • Venezuela (beneficiary information)

5.2 Retention Period

We retain data:

  • Active accounts: Until deletion request
  • Payment records: 7 years for tax compliance
  • Inactive accounts: 2 years before deletion

6. Your Rights (GDPR Compliance)

You have the right to:

  • Access your personal data
  • Request correction
  • Request deletion
  • Restrict processing
  • Data portability
  • Object to processing

To exercise these rights, contact: privacy@papalclic.com

7. International Transfers

Data may be transferred internationally, including to Venezuela. We use Standard Contractual Clauses for EU-US transfers.

8. Marketing Communications

You may opt-out of marketing emails by:

9. Cookies and Tracking Technologies

We use:

  • Essential cookies (app functionality)
  • Analytics cookies (Google Analytics)
  • Advertising cookies (Facebook Pixel)

9.1 How to Manage Cookies

Browser settings can be adjusted to refuse cookies. See:

10. Children's Privacy

PapalClic is not intended for users under 18. We do not knowingly collect data from children.

11. Third-Party Links

Our app may contain links to:

  • Payment processors
  • Local Venezuelan partners
  • Social media platforms

12. Security Measures

We implement:

  • Encryption (SSL/TLS)
  • Regular security audits
  • Access controls
  • Fraud monitoring

13. Policy Updates

We will notify users of material changes via:

  • In-app notifications
  • Email (for account holders)
  • Updated "Last Updated" date

14. Contact Information

For privacy concerns: Email: privacy@papalclic.com Mailing Address: [Company Physical Address]

15. Data Protection Authority

EU residents may contact:

16. Non-GDPR Provisions

For non-EU users:

  • We still protect your data per this policy
  • Some GDPR rights may not apply
  • Disputes governed by [Jurisdiction] law

17. Cookie Policy Details

17.1 Essential Cookies

  • Session management
  • Authentication

17.2 Analytics Cookies

  • Google Analytics (_ga)
  • Firebase (_fid)

17.3 Advertising Cookies

  • Facebook Pixel (if used)

17.4 Opt-Out Options

18. Mobile Device Tracking

For app users:

  • Advertising ID controls:
    • iOS: Settings > Privacy > Tracking
    • Android: Settings > Google > Ads