U.S. Privacy Notice

EnTuBolsillo (https://entubolsillo.app) is distributed by ByTech, based in Colombia. This notice supplements our main Privacy Policy for residents of the United States. Depending on our size and activities, some U.S. state privacy laws (such as the California Consumer Privacy Act as amended by the CPRA, and comprehensive privacy laws in Virginia, Colorado, Connecticut, Utah, Texas and other states) may not apply to us yet. We still offer the rights described below to every U.S. user.

We do not collect card numbers, bank passwords, government IDs, precise geolocation, contacts, biometrics or health data. The financial information you enter may be considered sensitive under some state laws; we use it only to provide the service you request.

• Provide and secure the app, your account and your shared groups.
• Send account emails only (sign-up confirmation, password reset, important service notices). No marketing emails.
• Produce aggregated, de-identified statistics to improve the app.
• Comply with legal obligations.

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We do not use third-party trackers or advertising cookies. Because of this, there is nothing to opt out of; we also honor browser privacy signals such as Global Privacy Control by default.

We disclose personal information only to service providers that process it on our behalf under contract:

• Access: know what personal information we hold about you.
• Correction: fix inaccurate information (most of it you can edit directly in the app).
• Deletion: delete your account and data from Settings → “Eliminar mi cuenta”, or ask us.
• Portability: receive a copy of your data on request.
• Non-discrimination: we will not treat you differently for exercising these rights.
• Appeal: if we deny a request, you can appeal by replying to our decision; if you remain unsatisfied, you may contact your state Attorney General.

To exercise them, email privacidad@entubolsillo.app from the address linked to your account (this is how we verify your identity). An authorized agent may submit a request with your written permission. We respond within 45 days, extendable once by 45 days when reasonably necessary. More details: Tus datos.

We keep your data while your account exists and delete it immediately when you delete your account, except shared-group records (kept for the other members, with your name replaced by “Cuenta eliminada”) and limited security logs kept for short periods. See the retention table in the main policy.

Data is encrypted in transit (TLS) and at rest (AES-256 at the storage level); passwords are hashed; each account is isolated with row-level security; administrator access requires two-factor authentication and is logged. If a breach affects your personal information, we will notify you and the authorities as required by applicable state and federal law.

The app is intended only for adults (18+). We do not knowingly collect information from children under 13 (COPPA) or from anyone under 18. If you believe a minor has created an account, contact privacidad@entubolsillo.app and we will delete it.

Your data is stored primarily in the United States. We will post any changes to this notice on this page and ask you to accept material changes in the app.