Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account via Google Sign-In or Apple Sign-In, we collect:

• Display name provided by the authentication provider.
• Profile photo (URL provided by the provider).
• Unique user identifier (UID).
• Authentication provider (Google or Apple).

We do not store passwords. Authentication is managed by identity providers (Google, Apple) through Supabase Auth.

1.2 User-Generated Content

If you publish decks to the catalog, we store:

• Images and audio of the cards you upload.
• Name, description, and category of the deck.
• Your author name associated with the publication.

1.3 Device Data

We collect technical device information, including:

• Device model and operating system.
• Push notification token (Firebase Cloud Messaging).
• Advertising identifiers (for ad personalization).

1.4 Usage Data

• Analytics events (Firebase Analytics) about App usage.
• Crash reports (Firebase Crashlytics).

1.5 Locally Stored Data

The App stores on your device:

• Custom decks (images and audio).
• Game boards in PDF format.
• Configuration preferences (image style, voice, colors, etc.).

This local data is not transmitted to our servers unless you publish a deck to the catalog.

2. How We Use Your Information

We use your information to:

• Provide the service: Manage your account, enable publishing and downloading of decks, and operate the community catalog.
• Notifications: Send push notifications about App or catalog updates (with your consent).
• Moderation: Review published content and manage user reports.
• Service improvement: Analyze usage patterns to improve the App experience.
• Advertising: Display personalized ads to free version users.
• Support: Respond to user inquiries and requests.

3. Third-Party Services

The App uses the following third-party services that may collect information:

4. Storage and Security

• Account and catalog data are stored on Supabase servers with encryption at rest and in transit.
• We use Row-Level Security (RLS) in the database to ensure each user can only access their own data.
• Deck files are stored in Supabase Storage with controlled access policies.
• Local device data is stored in SQLite and the device file system.

5. Data Retention

• Account data: Retained while the account is active.
• Published decks: Retained while active in the catalog or until the user deletes them.
• Analytics data: Retained according to Firebase policies (typically up to 14 months).
• Local data: Remains on the device until the user deletes it or uninstalls the App.

6. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Rectify incorrect or outdated information.
• Delete your account and all associated data directly from the App (see section 7).
• Withdraw consent for push notifications at any time from your device settings.
• Request portability of your data by contacting us via email.

7. Data Deletion

You can request complete deletion of your account and data from the App. This includes:

• Your account and user profile.
• All decks you have published to the catalog.
• Your files stored on our servers.
• Local data on your device (custom decks, boards, preferences).

Deletion is permanent and irreversible. Data cannot be recovered once deleted.

Note: Copies of decks that other users have previously downloaded will remain on their devices as local data.

8. Children

The App is not directed at children under 13 years of age. We do not knowingly collect information from children under 13. If we discover that we have collected information from a minor, we will delete it immediately.

9. International Transfers

Your data may be processed on servers located outside your country of residence. By using the App, you consent to this transfer. We ensure that service providers comply with adequate data protection standards.

10. Changes to This Policy

We reserve the right to update this Privacy Policy. Significant changes will be notified through the App. The last update date is indicated at the beginning of this document.

11. Contact

To exercise your privacy rights or make inquiries:

• Email: soporte@baraja.com.mx
• Website: baraja.com.mx