Privacy Policy

This Privacy Policy describes how Psicoespacio ("Psicoespacio", "we", "us", or "our") collects, uses, stores, and shares personal information when you use the Psicoespacio mobile and web application (the "Service"). By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

We collect the following categories of information:

• Account information. Email address and a hashed password when you register, or your name, email, and profile picture if you sign in with Google.
• Profile information. Display name, username (handle), bio, avatar, cover image, and programs you have taken.
• User content. Threads, comments, likes, reactions, and any media (images, videos) you upload to the community.
• Location data (optional). Approximate latitude and longitude (precision ~100 meters), only when you explicitly enable "Share my location" in the Map. You can disable this at any time.
• Activity and gamification data. Lesson completions, points earned, level, achievements, event RSVPs, and ranking.
• Device and notification data. Push notification token, device model, operating system, and language, used to deliver notifications.
• Technical data. Authentication session tokens stored in your browser's local storage and basic log data (IP address, timestamps) for security and abuse prevention.

We do not knowingly collect special categories of personal data (health, religion, biometrics) and we do not require you to share clinical or therapeutic information through the Service.

• To create and operate your account and profile.
• To enable community features (threads, comments, messaging, map, ranking).
• To deliver lessons, events, and gamification (points, levels, achievements).
• To send push notifications you have opted into.
• To moderate content, prevent abuse, and enforce our terms.
• To improve, secure, and troubleshoot the Service.
• To comply with legal obligations.

If you are in the European Economic Area, United Kingdom, or Switzerland, we process your personal data under the following legal bases: (i) contract, to provide the Service you signed up for; (ii) consent, for optional features like location sharing and push notifications; (iii) legitimate interests, to keep the Service secure and improve it; and (iv) legal obligation, when required by law.

We do not sell your personal information. We share data only with service providers that help us operate the Service, under contractual obligations to protect your data:

• Supabase — database, authentication, file storage. See supabase.com/privacy.
• Google — Google Sign-In and Google Maps (when the Map screen is used). See policies.google.com/privacy.
• OneSignal — push notification delivery. See onesignal.com/privacy_policy.
• Lovable Cloud — application hosting and infrastructure.
• Despia — mobile app wrapper used to deliver the Service on iOS and Android.

We may also disclose information when required by law, to enforce our terms, or to protect the rights, safety, and property of Psicoespacio, our users, or the public.

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, security, or fraud-prevention purposes. Public content you posted (threads, comments) may remain visible in anonymized form after deletion.

Depending on where you live, you may have the right to: access, correct, update, port, restrict, or delete your personal data; object to certain processing; and withdraw consent at any time. California residents have additional rights under the CCPA/CPRA, including the right to know and to opt out of the "sale" or "sharing" of personal information (we do neither).

To exercise any of these rights, email us at carlosperezpsicoespacio@gmail.com. We will respond within 30 days.

You can request deletion of your account and personal data at any time. There are two ways to do this:

See our dedicated account deletion page for step-by-step instructions.

• In the app, go to Settings → Sign out and email us at carlosperezpsicoespacio@gmail.com from your account email to request deletion.
• Email carlosperezpsicoespacio@gmail.com with the subject "Delete my account".

We will permanently delete your account, profile, uploaded media, and location data within 30 days of receiving a verified request. Some records (e.g., security logs, or data required to comply with legal obligations) may be retained for a limited period.

The Service is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

We use industry-standard safeguards to protect your data, including TLS encryption in transit, encryption at rest, hashed passwords, and row-level security rules on our database. No system is 100% secure; you use the Service at your own risk.

Your data may be stored and processed in countries other than your own, including the United States and the European Union. Where required, we rely on appropriate transfer mechanisms such as Standard Contractual Clauses.

If you allow notifications, we send you updates about community activity, lessons, and events. You can disable push notifications at any time from your device settings (iOS: Settings → Notifications → Psicoespacio; Android: Settings → Apps → Psicoespacio → Notifications).

Location sharing is opt-in. We only access your location when you enable "Share my location" in the Map. We store an approximate position (~100m precision) so other community members can see who is nearby. You can revoke permission at any time from the app or from your device's system settings.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app or by email. Continued use of the Service after changes take effect means you accept the updated Policy.

If you have questions about this Policy or how we handle your data, contact us at carlosperezpsicoespacio@gmail.com.