Privacy Notice

Last updated: August 16, 2026

This is an English translation for convenience. Ludefix is operated from Mexico and processes personal data under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

1. Identity and address of the controller

Jorge Luis Farías Lampart (“Ludefix”, “we”), with address at [FULL ADDRESS — street, number, neighborhood, city, state, postal code, Mexico] and contact email ludefixapp@gmail.com, is responsible for the use and protection of your personal data.

2. Personal data we process

• Identification and contact: name (optional) and email. If you sign in with Apple, Apple may give us a private relay email instead of your real one.
• Study profile (optional): institution or hospital, if you provide it.
• Usage and academic performance: your answers, progress, experience (XP), streaks, spaced-repetition data, and favorites. These reflect your study activity within the app.
• Subscription: your Premium status (active/inactive and validity), via Apple and our subscription provider. We do not collect or store your card details; Apple processes payment.
• Technical and diagnostic: device identifiers, IP address, device type, and usage or error data, to operate, secure, and improve the Service.

3. Purposes

3.1 Primary purposes (necessary to provide the Service)

• Create, authenticate, and manage your account.
• Provide the Service: serve content, save your progress, apply spaced repetition, and manage the free plan’s daily limit.
• Process and verify your Premium subscription.
• Provide support and respond to your requests.
• Ensure the Service’s security and prevent fraud or abuse.
• Comply with applicable legal obligations.

3.2 Secondary purposes (optional — you may opt out)

• Improve and develop the product through usage analytics.
• Send you communications about news, features, or benefits of Ludefix.
• In the future, offer you our own study products or materials, only if you accept.

You may refuse the secondary purposes without affecting the Service. Email us at ludefixapp@gmail.com with the subject “Limit use.”

4. Transfers and providers (processors)

To operate the Service we rely on providers that process data on our behalf and under our instructions (processors), including:

• Apple — sign-in and payment/subscription processing.
• Supabase — database, authentication, and hosting.
• RevenueCat — subscription management and status verification.
• Analytics and error-monitoring providers, when used.

These providers may store or process data on servers outside Mexico (e.g., in the United States). We do not sell your personal data, nor do we share it for others’ commercial purposes without your consent, except as required by law (e.g., to authorities with a valid request).

5. ARCO rights and withdrawal of consent

You have the right to Access, Rectify, Cancel, and Object to the processing of your data (ARCO rights), and to withdraw your consent. To exercise them, email ludefixapp@gmail.com with: (i) your name and a contact method, (ii) documents proving your identity, (iii) a clear description of the data and the right you wish to exercise. Exercising these rights is free, and we will respond within the legal timeframes.

You can delete your account from the app or by requesting it at the email above (see also Support). If you believe your rights were violated, you may contact the competent authority in Mexico, the Secretaría Anticorrupción y Buen Gobierno (which assumed the former INAI’s data-protection functions for the private sector).

6. Means to limit use or disclosure

Besides ARCO rights, you can limit the use or disclosure of your data by emailing ludefixapp@gmail.com, and by turning off optional communications where those options are available.

7. Storage technologies

The app uses identifiers and local storage on your device (e.g., to keep your session and preferences). We do not use them to track you for third-party advertising.

8. Data retention

We retain your data while your account is active and for as long as needed to fulfill the purposes and legal obligations. When you delete your account, we delete or anonymize your data, except what we must keep by law.

9. Security

We apply reasonable administrative, technical, and physical safeguards (e.g., database-level access control and encryption in transit). No system is infallible; in the event of a significant breach, we will notify you as required by law.

10. Minors

The Service is intended for people 18 or older. We do not knowingly collect data from minors. If you believe a minor provided us data, contact us to delete it.

11. Users in the United States and other jurisdictions

California (US) residents may have the right to know, access, and request deletion of their personal information, and not to have it “sold” — we do not sell personal data. Use the same contact: ludefixapp@gmail.com.

12. Changes to this Privacy Notice

We may update it. We will post the current version at https://ludefix.app/privacy and, when material, notify you by reasonable means. The “Last updated” date indicates the effective version.