Privacy Policy

1. DATA CONTROLLER & IDENTIFICATION

The entity responsible for the processing of your personal data is Arandu Labs LLC, a limited liability company organized and existing under the laws of the State of Wyoming, United States of America.

As the Data Controller, we determine the purposes and means of the processing of personal data for our various digital products, including mobile applications, websites, and cloud-based services.

2. CATEGORIES OF DATA COLLECTED

We process data based on the principle of data minimization. We only collect information that is strictly necessary for the technical operation and improvement of our Services.

2.1 Device Information

When you access our Services, we may collect technical information about the device you use. This include:

• Hardware Model: Such as the manufacturer and model name of your smartphone or tablet.
• Operating System: Version and platform (iOS, Android, Windows).
• Unique Identifiers: Advertising IDs (IDFA for iOS or AAID for Android) and unique device tokens used for push notifications or analytics.
• Network Information: General geographical location (country level) derived from IP address, and connection type (e.g., Wi-Fi or LTE).

2.2 Usage Data & Performance Metrics

To maintain the stability and quality of our Services, we collect anonymous metrics through third-party SDKs (Software Development Kits), specifically Firebase:

• Technical Logs: Detailed crash reports (Firebase Crashlytics) to identify and fix bugs.
• Interaction Metrics: Frequency of use, features accessed, and session duration.
• Performance Events: Application load times and resource utilization.

3. LEGAL BASIS FOR PROCESSING

Under global regulations (GDPR/CCPA), we rely on the following legal bases to process your information:

• Contractual Necessity: Processing is required to provide the Services you have requested (e.g., scanning a document or managing your account).
• Legitimate Interest: To improve our products, maintain technical security, and prevent fraud. This includes the use of anonymous analytics to understand user behavior.
• Consent: In specific cases, such as personalized advertising through our partners, we rely on the consent you provide through the system-level prompts (e.g., App Tracking Transparency on iOS).

4. DETAILED THIRD-PARTY DISCLOSURE

Arandu Labs LLC does not sell your personal data. However, we integrate specialized services from trusted third-party partners to provide essential functionalities and support our free model through advertising.

4.1 Google Cloud & Firebase Ecosystem

4.2 Advertising Partners

Our advertising partners may collect anonymized data through their SDKs to serve and measure ads:

5. DATA RETENTION & PURGE POLICY

We retain information only for as long as it is necessary to fulfill the purposes described in this Policy:

• Technical Logs: Anonymized crash reports are typically purged after 90 days.
• Aggregated Analytics: Retention depends on the third-party provider's policy, usually between 14 to 26 months.
• Direct Communication: If you contact us via email, we retain the correspondence as long as needed to resolve your query and for a reasonable period thereafter to comply with legal audit requirements.

6. YOUR RIGHTS (GDPR / CCPA)

Regardless of your location, Arandu Labs LLC respects your privacy rights. Depending on your jurisdiction (such as California or the European Union), you may have the following rights:

• Right of Access: You can request a copy of the technical data we hold about you.
• Right to Rectification: You can request the correction of inaccurate data.
• Right to Erasure (Right to be Forgotten): You can request the deletion of your data, provided it is not required for legal compliance.
• Right to Portability: You can request your data in a structured, commonly used, and machine-readable format.
• Right to Object/Opt-Out: You have the right to opt-out of personalized advertising through your device settings.

To exercise any of these rights, please contact us at soporte@arandulabs.dev. We will respond to your request within the timeframe required by applicable law.

7. SECURITY MEASURES

We implement robust technical and organizational measures to protect your information:

• Encryption: All data transmitted to our few cloud services is protected using TLS/SSL protocols.
• Access Control: Only authorized personnel with a "need-to-know" basis can access administrative tools.
• Security Audits: We periodically review our third-party integrations to ensure they meet our privacy standards.

8. MODIFICATIONS

Arandu Labs LLC reserves the right to update this Privacy Policy to reflect changes in our practices or for other operational, legal, or regulatory reasons. Significant changes will be notified through the Services or our website.