Privacy Policy — Papirio

Last updated: July 30, 2026

1. Who is responsible

The controller of your data is Agustín Carbajal(the "Developer"). For any privacy question, email agustin.carbajal.dev@gmail.com.

2. What information we collect

2.1 Account data

You can create your account and sign in with your email, your Google account or your Apple account("Sign in with Apple"). Depending on the method you use, we collect and store:

• —Your email address. If you sign in with Apple and choose "Hide My Email", we'll receive a private relay address generated by Apple instead of your real email, and we'll use it the same way.
• —Your display name (if you provide it or the provider shares it).
• —A profile photo (optional, only if your authentication provider supplies it).
• —Account creation and last sign-in dates.

When you authenticate with Google or Apple, those providers manage the sign-in and share with us only the basic profile data needed to create your account (for example, an identifier, your email and, if applicable, your name). We do not receive your password.

2.2 Guest mode

You can use the app without registering, as a guest. In that case an anonymousaccount is created, linked to your device via a technical identifier. We don't collect your email or name until you decide to convert the guest account into a registered one, at which point your progress is preserved.

2.3 Learning and progress data

To make the app work and save your progress, we store:

• —The categories you choose.
• —The facts learned, your current level and your progress in each level.
• —Game stats: quiz attempts, perfect quizzes, active-day streak, gems and medals earned.
• —Your preferences within the app (language, notification settings).

2.4 Device data and notifications

• —If you enable remote notifications, we store a push notification token (FCM) along with your device platform (iOS/Android) so we can send you alerts. You can register more than one device; tokens that stop being valid are removed automatically.
• —We detect the device language to show the app in Spanish or English.

2.5 Content you send us

If you use the send feedback or report a fact features, we store the text and the category/reason you provide, so we can improve the app and review content.

2.6 Usage and analytics data

We collect app interaction events (for example, completing a level, finishing a review, or enabling reminders) through Google Analytics for Firebase. We use this information in aggregate to understand how the app is used and to improve it. These events describe actions within the app and may be associated with a technical user identifier; they do not include the content of your feedback or any data from outside the app. We do not use this information for advertising or cross-app tracking.

2.7 Data stored locally on your device

Some information is stored only on your device(via the app's local storage) and is not sent to our servers, for example:

• —A cacheof the facts you're viewing, for faster use with less data.
• —Your daily reminders (local notifications) and certain settings and UI flags.

We do not collect precise location, contacts, gallery photos, or biometric data.

3. How we use your information

• —Create and maintain your account and your progress.
• —Provide the core features: deliver facts, evaluate quizzes, compute levels, streaks, gems and achievements.
• —Sync your progress across sessions and devices.
• —Send you reminders and notifications (if you enable them).
• —Handle your feedback and reports and improve content and experience.
• —Understand how the app is used through aggregate usage analytics, to prioritize improvements.
• —Prevent misuse and protect the security of the app.

4. Legal basis for processing

Where applicable (for example, for users in the European Union), we process your data on the basis of: the performance of the service you request (providing the app and your account), your consent (for example, for push notifications), and our legitimate interest in maintaining, securing and improving the app (including usage analytics).

5. Who we share your information with (providers)

We don't sell your personal data. We share it only with providers that help us operate the app:

• —Google Firebase / Google Cloud (Google LLC): we use Firebase Authentication (account and sign-in management), Cloud Firestore (the database where your progress and account are stored), Firebase Cloud Messaging (sending push notifications) and Google Analytics for Firebase(usage analytics, as described in section 2.6). Google's processing is governed by its own privacy policy: policies.google.com/privacy.
• —Sign in with Google (Google LLC) and "Sign in with Apple"(Apple Inc.): if you choose to authenticate with either of these providers, they process your sign-in securely and share with us the basic profile data described in section 2.1. Each provider's processing is governed by its own privacy policy: Google — policies.google.com/privacy · Apple — apple.com/legal/privacy.

Local notifications (reminders) are generated on your own deviceand don't involve sending data to third parties.

6. Advertising

The app currently does not show ads. If ads are added in the future (for example, via Google AdMob), we'll update this Policy and inform you what data is processed for that purpose and how to exercise your consent options.

7. Purchases and subscriptions

The app currently does not offer in-app purchases. If premium features or subscriptions are offered in the future, payment processing would be handled by the relevant stores (Apple App Store or Google Play) and we would not receive your full payment details.

8. Data retention

We keep your data while your account remains active. If you delete your account or ask us to delete it, we erase or anonymize your information within a reasonable time, unless we must retain something for legal obligations.

9. International transfers

Our providers (Google Firebase/Cloud) may store and process information on servers located outside your country of residence. In those cases, the transfer is carried out with the safeguards required by applicable law.

10. Security

We apply reasonable technical and organizational measures to protect your information: authentication managed by Firebase, data access only through our server (the admin panel does not access the database directly), and encrypted transport (HTTPS). No system is 100% secure, but we work to minimize risks.

11. Your rights

Depending on your jurisdiction, you may have the right to access, rectify, update, delete or port your data, as well as to withdraw your consent or object to certain processing.

• —You can edit much of your information from the profile within the app.
• —To delete your account and all associated data, use the in-app option (Profile → Delete account, also available for guest accounts) or email agustin.carbajal.dev@gmail.com. Deletion is permanent and removes your account, progress, feedback and reports.

In Argentina, the data protection authority is the Agency for Access to Public Information (AAIP). If you are in the EU, you may lodge a complaint with your country's supervisory authority.

12. Children

The app is intended for a general audience and is not directed to children under 13. We do not knowingly collect data from children under that age. If you believe a minor has provided us data, email us and we will delete it.

13. Changes to this Policy

We may update this Privacy Policy from time to time. We'll post the current version with its update date and, if changes are significant, we'll try to notify you within the app.

14. Contact

For any privacy question: agustin.carbajal.dev@gmail.com