Privacy Notice

Last updated: September 10, 2026

This is an English translation for convenience. Ludefix is operated from Mexico and processes personal data under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

1. Identity and address of the controller

Jorge Luis Farías Lampart (“Ludefix”, “we”), with address at [FULL ADDRESS — street, number, neighborhood, city, state, postal code, Mexico] and contact email ludefixapp@gmail.com, is responsible for the use and protection of your personal data.

2. Personal data we process

• Identification and contact: name (optional) and email. If you sign in with Apple, Apple may give us a private relay email instead of your real one.
• Study profile (optional): institution or hospital, if you provide it.
• Usage and academic performance: your answers, progress, experience (XP), streaks, spaced-repetition data, and favorites. These reflect your study activity within the app.
• Subscription: your Premium status (active/inactive and validity), via Apple and our subscription provider. We do not collect or store your card details; Apple processes payment.
• Technical and diagnostic: device identifiers, IP address, device type, and usage or error data, to operate, secure, and improve the Service.
• Waiting list (website only): if you leave your email at https://ludefix.app, we store that email, the specialty you select (optional), the ad or link you arrived from, and the date and version of this notice you were shown. This does not create an account and does not charge you anything.
• Website measurement (website only): pages you visit on https://ludefix.app, where you came from, device and browser type, your IP address, and the cookie identifiers set by Google and Meta.

3. Purposes

3.1 Primary purposes (necessary to provide the Service)

• Create, authenticate, and manage your account.
• Provide the Service: serve content, save your progress, apply spaced repetition, and manage the free plan’s daily limit.
• Process and verify your Premium subscription.
• Provide support and respond to your requests.
• Ensure the Service’s security and prevent fraud or abuse.
• Comply with applicable legal obligations.

3.2 Secondary purposes (optional — you may opt out)

• Improve and develop the product through usage analytics.
• Send you communications about news, features, or benefits of Ludefix.
• In the future, offer you our own study products or materials, only if you accept.
• Tell you about launches, if you joined the waiting list on our website. You give this consent by submitting the form, after we show you the short notice next to the button. Every email includes a one-click way to unsubscribe, and unsubscribing affects nothing else.
• Measure our website and the performance of our advertising, using the tools described in section 7. You can block them in your browser and the site works the same.

You may refuse the secondary purposes without affecting the Service. Email us at ludefixapp@gmail.com with the subject “Limit use.”

4. Transfers and providers (processors)

To operate the Service we rely on providers that process data on our behalf and under our instructions (processors), including:

• Apple — sign-in and payment/subscription processing.
• Supabase — database, authentication, and hosting.
• RevenueCat — subscription management and status verification.
• Google AdMob — serves the rewarded ad you choose to watch and confirms to us, with a signature, that you watched it. We send it your account identifier so the reward can be credited to you. For the data it collects to serve the ad and prevent fraud, Google acts as its own controller, not only as our processor.

These providers may store or process data on servers outside Mexico (e.g., in the United States). We do not sell your personal data, nor do we share it for others’ commercial purposes without your consent, except as required by law (e.g., to authorities with a valid request).

5. ARCO rights and withdrawal of consent

You have the right to Access, Rectify, Cancel, and Object to the processing of your data (ARCO rights), and to withdraw your consent. To exercise them, email ludefixapp@gmail.com with: (i) your name and a contact method, (ii) documents proving your identity, (iii) a clear description of the data and the right you wish to exercise. Exercising these rights is free, and we will respond within the legal timeframes.

You can delete your account from the app or by requesting it at the email above (see also Support). If you believe your rights were violated, you may contact the competent authority in Mexico, the Secretaría Anticorrupción y Buen Gobierno (which assumed the former INAI’s data-protection functions for the private sector).

6. Means to limit use or disclosure

Besides ARCO rights, you can limit the use or disclosure of your data by emailing ludefixapp@gmail.com, and by turning off optional communications where those options are available.

7. Storage technologies

7.1 In the app

The app uses identifiers and local storage on your device (e.g., to keep your session and preferences). We do not use them to track you for third-party advertising. The app contains no advertising cookies and no analytics or tracking SDKs.

Ads. If you run out of your free daily questions, you may choose to watch a rewarded ad to keep playing. Ads never appear while you study or anywhere else, and they are never required. We always request non-personalized ads: they are not selected based on your behavior or on a profile of you. We do not use Apple's advertising identifier (IDFA) and the app does not track you across apps or websites — which is why the app never shows you a tracking permission prompt.

7.2 On the website (https://ludefix.app)

The website does measure. To know how many people arrive and whether our advertising works, the site uses Google Analytics and the Meta pixel (Facebook and Instagram). These tools set cookies and send Google and Meta data about your visit — pages viewed, which ad you came from, device type, and your IP address — and those companies may relate that data to your activity on their own platforms.

These are not strictly necessary cookies, so you can block them in your browser or with a blocking extension: the site works the same, including the waiting-list form.

7.3 What we do not do: mix them

What the website measures is not joined to your app account or your study activity, and your study activity — your answers, your progress — never leaves toward Google Analytics or Meta.

8. Data retention

We retain your data while your account is active and for as long as needed to fulfill the purposes and legal obligations. When you delete your account, we delete or anonymize your data, except what we must keep by law.

9. Security

We apply reasonable administrative, technical, and physical safeguards (e.g., database-level access control and encryption in transit). No system is infallible; in the event of a significant breach, we will notify you as required by law.

10. Minors

The Service is intended for people 18 or older. We do not knowingly collect data from minors. If you believe a minor provided us data, contact us to delete it.

11. Users in the United States and other jurisdictions

California (US) residents may have the right to know, access, and request deletion of their personal information, and not to have it “sold” — we do not sell personal data. Use the same contact: ludefixapp@gmail.com.

12. Changes to this Privacy Notice

We may update it. We will post the current version at https://legal.ludefix.app/privacy and, when material, notify you by reasonable means. The “Last updated” date indicates the effective version.