Privacy policy

1. Introduction

SinExcusas (“we”, “our” or “the Company”) is committed to protecting the privacy of the users of our mobile app and our website (together, the “Service”). This Privacy Policy describes our practices regarding the collection, use and disclosure of personal information.

2. Information we collect

2.1 Information you provide

2.2 Information collected automatically

• Device data: device type, operating system, unique identifiers.
• Usage data: features used, time in the app, navigation patterns.
• Location data: only if you explicitly allow it; it is not required.
• Log data: IP address, browser type, pages visited.

2.3 Third-party information

• App stores: Apple and Google confirm the status of your subscription to us; they do not send us your payment method.
• Analytics services: Firebase Analytics and Google Analytics 4, to understand how the service is used.

2.4 Forms on this website

This website has no sign-in and takes no payments. It only collects data through its forms:

• Contact and support form. We collect your name, email address, subject and message. The purpose is to reply to you. Legal basis: your consent and our legitimate interest in answering enquiries.
• Gyms and creators form. We collect your name, business or brand, project type, country, email address, phone number if you provide one, the size of your community and your message. The purpose is to assess the proposal and get in touch.
• Associated technical data. We record the submission date and a one-way encrypted identifier derived from your IP address, for the sole purpose of limiting bulk submissions and form abuse.
• Retention. We keep form messages for 24 months from the last contact, and then delete them.
• No sharing. We do not sell or share this data with third parties, and we do not use it for advertising. Only the team that answers can see it.

3. How we use your information

• Provide, maintain and improve the Service
• Create personalized nutrition and exercise plans
• Manage your subscription and your access to premium features
• Send service-related notifications
• Answer your enquiries and provide support
• Analyze service usage to improve it
• Detect and prevent fraud or abuse
• Comply with legal obligations

Artificial intelligence. We use AI to generate personalized plans and to estimate nutritional information from food photos. Your data may be processed by external AI providers for that purpose. These services process data securely and do not use it to identify you.

4. How we share your information

We do not sell your personal information. We may share it with:

4.1 Service providers

• Firebase and Google Cloud (Google): data storage, authentication and infrastructure.
• Apple App Store and Google Play: in-app purchases and subscription management.
• RevenueCat: technical management of mobile subscriptions.
• AI providers: personalized content generation and food photo analysis.
• Google Analytics 4: website usage measurement.

4.2 For legal reasons

We may disclose information if we believe in good faith that it is necessary to comply with a legal obligation, protect the rights of SinExcusas, prevent illegal activity, or protect the safety of users or the public.

5. Data security

• Encryption: data travels encrypted (HTTPS/TLS) and is stored encrypted at rest on Google Cloud infrastructure.
• Authentication: passwords are stored using secure hashing functions.
• Access control: access limited to authorized personnel.
• Monitoring: detection of unauthorized access.

5.1 Biometric authentication (Face ID, Touch ID, fingerprint)

Important: biometric data never leaves your device and is never stored on our servers.

• Verification happens exclusively on your device, through the operating system’s native APIs (LocalAuthentication on iOS, BiometricPrompt on Android).
• We do not access, store or transmit your biometric data.
• Only a reference to your account is kept on your device, to make signing in faster.
• You can turn the feature on or off at any time in the security settings.
• Biometric session data is deleted when you sign out.

6. Data retention

We keep your information while your account is active, while it is needed to provide the service, and while we have legal retention obligations.

• Account and app data: deleted when you delete your account from the app. See how to delete your account and your data.
• Website form messages: 24 months from the last contact.
• Billing records: for the period required by applicable tax law.
• After your account is deleted we may keep aggregated or anonymized data, which can no longer identify you, for statistical purposes.

7. Your rights

Depending on where you live, you may have the right to:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request the deletion of your data
• Portability: receive your data in a structured format
• Objection: object to the processing of your data
• Restriction: limit how we use your data

You can delete your account and your data yourself from the app, under Profile > Settings > Account > Delete account. For everything else, write to soporte@sinexcusas.app.

8. Cookies and analytics

This website has no sign-in and uses no first-party advertising cookies. We use:

• Google Analytics 4 (measurement ID G-BHTF1W5582), which sets first-party cookies to measure, in aggregate, which pages are visited and where visitors come from. We never send Google your email address or any data that identifies you.
• Browser local storage to remember minimal preferences, such as your chosen language.

You can decline analytics from the notice shown the first time you visit, and manage cookies from your browser settings. Inside the app we use Firebase Analytics for the same aggregate measurement purpose.

9. International transfers

Your data may be transferred to and processed in countries other than your own, including the United States, where the servers of Google Cloud and our providers are located. We ensure these transfers comply with applicable data protection law.

10. Children’s privacy

Our Service is not directed at people under 18. We do not knowingly collect information from minors. If we discover that we have collected a minor’s data, we will delete it immediately.

11. Third-party services

Our Service may contain links to third-party websites or services. We are not responsible for their privacy practices. We recommend reading their policies.

12. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes through an in-app notice, by email, or by updating the “last updated” date.

13. Rights by region

13.1 European Union residents (GDPR)

If you live in the EU, you have additional rights under the GDPR, including the right to lodge a complaint with a data protection authority.

13.2 California residents (CCPA)

If you live in California, you have the right to know what personal information we collect, to request its deletion, and not to be discriminated against for exercising your rights.

13.3 Latin America residents

If you live in Mexico, your data is protected by the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). If you live elsewhere in Latin America, we respect the data protection law applicable in your jurisdiction. You can exercise your rights of access, rectification, cancellation and objection by writing to us.

14. Contact

For any question about this policy, or to exercise your rights:

• Email: soporte@sinexcusas.app
• Website: https://sinexcusas.app

Data controller: BCG Technology, Inc. (Delaware, United States)