Privacy Policy

1. DATA CONTROLLER & IDENTIFICATION

The entity responsible for the processing of your personal data is Arandu Labs LLC, a limited liability company organized and existing under the laws of the United States of America.

As the Data Controller, we determine the purposes and means of the processing of personal data for our various digital products, including mobile applications, websites, and cloud-based services.

2. CATEGORIES OF DATA COLLECTED

We process data based on the principle of data minimization. We only collect and process information that is strictly necessary for technical operation, security, and improvement of our Services.

2.1 Automatic Collection via Advertising SDK Infrastructure

To ensure accessibility and keep our Services free (such as Prisma Noticias and free tiers of FirmApp), Arandu Labs LLC integrates the Google Mobile Ads SDK (AdMob) and third-party mediation platforms. By default and inherent to their technical operation, these systems collect, encrypt in transit (via TLS/HTTPS), and automatically share with Google and authorized partners the following telemetry data points for ad delivery, behavioral analytics, and systemic fraud prevention:

• IP Addresses: Invariably collected to estimate the device's general geographic location (country/city granularity), measure ad performance, and, subject to applicable user consent, orchestrate ad campaign personalization.
• User Interaction Metrics: Collection of user interface events, including app launch/exit logs, touch interaction coordinates (taps) on advertising elements, and video view retention metrics.
• Diagnostic & System Telemetry: Extraction of data related to app performance and third-party SDK stability, including load latencies, interface hang rates, and device energy consumption footprints, used in aggregate for bug mitigation.
• Unique Device and Account Identifiers: Systematic extraction of the Android Advertising ID (AAID), the iOS Identifier for Advertisers (IDFA), the App Set ID structured for developer ecosystem tracking, and, where applicable, cryptographic session identifiers for accounts signed in on the device.

2.2 Usage Data & Performance Metrics

To maintain the stability and quality of our Services, we collect anonymous metrics through third-party SDKs, specifically Firebase:

• Technical Logs: Detailed crash reports (Firebase Crashlytics) to identify and fix bugs.
• Interaction Metrics: Frequency of use, features accessed, and session duration.
• Performance Events: Application load times and resource utilization.

3. COOKIES AND TRACKING TECHNOLOGIES

Arandu Labs LLC and our advertising technology partners use various technologies to collect and process information as part of our Services. These technologies include:

• Cookies: Small text files stored on your device that help us recognize you and remember your preferences.
• Web Beacons: Small electronic images embedded in web pages and emails that allow us to track usage and deliver content.
• IP Addresses: Numerical identifiers assigned to your device when connecting to the internet, used for analytics, security, ad serving, and performance measurement.
• Device Identifiers: Unique identifiers such as Advertising IDs (IDFA for iOS, AAID for Android) used for advertising and analytics.
• SDKs: Software Development Kits integrated into our mobile applications to enable third-party services.

4. LEGAL BASIS FOR PROCESSING

Under global regulations (GDPR/CCPA), we rely on the following legal bases to process your information:

• Contractual Necessity: Processing is required to provide the Services you have requested (e.g., scanning a document or managing your account).
• Legitimate Interest: To improve our products, maintain technical security, and prevent fraud. This includes the use of anonymous analytics to understand user behavior.
• Consent: In specific cases, such as personalized advertising through our partners, we rely on the consent you provide through the system-level prompts (e.g., App Tracking Transparency on iOS).

5. CHILDREN'S PRIVACY (COPPA)

Arandu Labs LLC's Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will take steps to delete such information.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not use interest-based advertising (including remarketing) to target:

• Past or current activity by users known by us to be under the age of 13 years; or
• Past or current activity on sites or apps directed at users under the age of 13 years.

If any of our Services are determined to be covered by COPPA, we will notify Google through the appropriate channels and tag ad requests for child-directed treatment in accordance with AdMob requirements.

6. COMPREHENSIVE THIRD-PARTY TAXONOMY & PROVIDERS

When you interact with Arandu Labs LLC Services, our software architecture facilitates the concurrent collection of telemetry information (Third-Party Data) by external corporate data controllers integrated via SDKs. These third parties operate under their own independent privacy policies, acting as distinct data controllers responsible for aggregation, monetization, and network intelligence processing.

6.1 Primary Infrastructure Providers

6.2 Advertising Mediation & Network Partners

Our current mediation partners, subject to periodic compliance audits, include:

Arandu Labs LLC exercises commercially reasonable efforts to contractually require that these operators comply with GDPR and applicable U.S. privacy laws. However, Arandu Labs expressly disclaims liability for secondary processing, cross-selling, or deep profile aggregation performed by these third-party networks outside our application environment. We encourage proactive review of their respective policies.

7. PERSONALIZED ADVERTISING

Arandu Labs LLC and our advertising partners may use cookies, device identifiers, and other technologies to deliver personalized advertisements based on your interests and browsing behavior. This practice is commonly known as "interest-based advertising" or "behavioral advertising."

AdChoices Icon: When you see personalized advertisements, you may notice an "AdChoices" icon (typically a small triangle with the letters "Ad" or "i"). This icon indicates that the ad is personalized based on your interests. Clicking on this icon will provide you with information about the advertising and options to opt out.

Opt-Out Options: You have the right to opt out of personalized advertising. You can exercise this right through:

• Google Ads Settings: You can opt out of personalized advertising served by Google by visiting Google Ads Settings.
• Device Settings: On mobile devices, you can limit ad tracking through system settings (e.g., "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android).
• Browser Settings: On web browsers, you can manage cookie preferences and use browser extensions that block third-party cookies.
• Industry Programs: You can opt out of interest-based advertising from participating companies through programs such as the Digital Advertising Alliance (DAA) or the Network Advertising Initiative (NAI), or by visiting AboutAds Choices.

Please note that opting out of personalized advertising does not mean you will no longer see advertisements. You will continue to see ads, but they may be less relevant to your interests.

8. DATA RETENTION & PURGE POLICY

We retain information only for as long as it is necessary to fulfill the purposes described in this Policy:

• Technical Logs: Anonymized crash reports are typically purged after 90 days.
• Aggregated Analytics: Retention depends on the third-party provider's policy, usually between 14 to 26 months.
• Direct Communication: If you contact us via email, we retain the correspondence as long as needed to resolve your query and for a reasonable period thereafter to comply with legal audit requirements.

9. USER RIGHTS & DYNAMIC CONSENT REVOCATION

Regardless of your location, Arandu Labs LLC respects your privacy rights. Depending on your jurisdiction (such as California or the European Union), you hold the following statutory rights:

• Right of Access: You can request a copy of the technical data we hold about you.
• Right to Rectification: You can request the correction of inaccurate data.
• Right to Erasure (Right to be Forgotten): You can request the deletion of your data, provided it is not required for legal compliance.
• Right to Portability: You can request your data in a structured, commonly used, and machine-readable format.
• Right to Object/Opt-Out: You hold the inalienable right to opt out of personalized advertising.

To exercise any of these rights, please contact us at [email protected]. We will respond within the timeframe required by applicable law.

10. SECURITY MEASURES

We implement robust technical and organizational measures to protect your information:

• Encryption: All data transmitted to our few cloud services is protected using TLS/SSL protocols.
• Access Control: Only authorized personnel with a "need-to-know" basis can access administrative tools.
• Security Audits: We periodically review our third-party integrations to ensure they meet our privacy standards.

11. MODIFICATIONS

Arandu Labs LLC reserves the right to update this Privacy Policy to reflect changes in our practices or for other operational, legal, or regulatory reasons. Significant changes will be notified through the Services or our website.