Privacy Policy

1. Data Controller

The data controller responsible for your personal data is Jorge Galván González, an individual, located in Monterrey, Mexico. To exercise your rights or ask privacy-related questions, contact us at legal@quecomi.com.

2. Information We Collect

We collect information you provide directly when you:

This information may include: name, email, phone number, nutritional information you log (foods, calories, macros), meal images you share, transcribed voice messages, and payment data processed securely through Stripe. We do not store full card numbers.

Profile and goal data (Cami): To personalize your tracking, Cami also collects data you share during onboarding or when setting up your profile: current weight, weight history, age, height, gender, physical activity level, nutritional goal (lose, maintain, or gain weight), target weight, and the timeframe in which you wish to reach it. This data is used exclusively to calculate your calorie and nutritional targets and to offer personalized recommendations.

• Register on our platform
• Use our nutritional tracking service
• Communicate with us through WhatsApp
• Subscribe or make a payment

3. Legal Bases and Purposes

We process your data on the following legal bases:

• Consent: By registering and accepting this policy, you consent to the processing described herein.
• Contract performance: To provide the service, process payments, and manage your account.
• Legitimate interest: To improve the service, ensure security, analyze usage, and comply with legal obligations.

4. How We Use Your Information

We use the information collected to:

• Provide and improve our services
• Process your payments and manage subscriptions
• Send you service-related notifications
• Analyze service usage to improve it (in aggregated and anonymized form when possible)
• Comply with legal obligations
• Process images and messages through AI systems for nutritional analysis

5. Information Sharing and Service Providers

We do not sell your personal information. We share data only with providers that help us operate the service, under confidentiality agreements:

Some of these providers may be located outside your country (for example, the United States or the European Union). In those cases, we use standard contractual clauses (SCCs), adequacy decisions, or other recognized safeguards to protect your data in international transfers. We may also share information when required by law or to protect our legitimate rights.

• Supabase: Database and authentication
• Stripe: Payment processing
• Meta/WhatsApp: Service communication channel
• OpenAI: Natural language processing, image analysis, and audio transcription (see AI Notice)
• Perplexity: Nutritional information search (see AI Notice)

5.1 Users in the European Union (GDPR)

If you reside in the European Union, the General Data Protection Regulation (GDPR) grants you additional rights. In addition to the rights described in Section 8, you have the right to: restrict processing in certain cases, object to processing based on legitimate interest, and not be subject to automated decisions with legal effects. The legal basis for most of our processing is consent or contract performance. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

For transfers outside the European Economic Area, we use the safeguards provided in Chapter V of the GDPR. If you have a complaint, you may contact the data protection authority in your country of residence.

5.2 Users in California (CCPA/CPRA)

If you reside in California, the California Consumer Privacy Act (CCPA) grants you additional rights: the right to know what data we collect, the right to delete, the right to correct, the right to opt out of sale (we do not sell personal data), and the right not to be discriminated against for exercising your rights. To exercise these rights, contact us at legal@quecomi.com. We do not sell or share personal data for cross-context behavioral advertising.

6. Data Retention

We retain your data while you maintain an active account and for as long as necessary to fulfill legal obligations, resolve disputes, or enforce our agreements. After you request account deletion, we will delete or anonymize your personal data within a reasonable period (typically up to 30 days), unless we must retain it due to a legal obligation. Backup copies may retain data for additional periods before being overwritten.

7. Data Security

We implement technical and organizational security measures to protect your information (encryption, access controls, etc.). However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. We recommend using strong passwords and not sharing your account.

8. Your Rights

You have the right to:

To exercise these rights, contact us at legal@quecomi.com. We will respond within a reasonable period (typically within 15–30 days). If you reside in the EU, you have the right to lodge a complaint with the data protection authority in your country.

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Object to the processing of your data in certain cases
• Request data portability
• Withdraw your consent when processing is based on it

9. Minors

The service is not directed at anyone under 18 years of age. We do not knowingly collect data from minors. If you become aware that a minor has provided us with personal data, contact legal@quecomi.com so we can delete it.

10. Cookies and Similar Technologies

We use a cookie consent banner that lets you choose which cookies to accept before non-essential cookies are installed. When visiting the site, you may select "Essential only" or "Accept all".

We use cookies and similar technologies to:

You can configure your browser to reject non-essential cookies. If you accepted analytics cookies and wish to revoke consent, delete cookies in your browser settings or contact us at legal@quecomi.com. Rejecting analytics cookies does not affect the essential functionality of the site.

• Essential: Maintain your session, security, and basic functionality. These are necessary for the service and do not require consent.
• Analytics: Understand how the site is used to improve it. We use PostHog or similar tools. These are activated only if you choose "Accept all" in the banner.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email to the address associated with your account or through the application. The "Last updated" date at the top indicates the current version. We recommend reviewing this policy periodically.

12. Contact

For questions about this privacy policy, to exercise your rights, or for inquiries about how we process your data, contact us at legal@quecomi.com.