Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how Pipoll S.A. ("we," "us," "our") collects, uses, discloses, and protects your personal information when you use the Pipoll mobile application ("the App"). This policy applies to all users worldwide, regardless of age or location.

Age Limit: The App is accessible to users aged 13 and older. Users under 13 are strictly prohibited from using the App. Users between 13 and 17 must obtain verifiable parental consent.

2. Data Controller

Company: Pipoll S.A.
Address: BMW Plaza, Piso 9, Calle 50, Panama City, Republic of Panama
Email: lifeline@pipoll.live, privacy@pipoll.live, dpo@pipoll.live
Website: https://pipoll.live

3. Data Collection

We collect the following categories of personal data:

• Account Information: Name, email address, password (bcrypt hashed), profile picture
• Goal Data: Goals you create, progress updates, completion status
• Device Information: Device model, operating system, unique device identifiers
• Location Data: Approximate location for local peer matching (with your consent)
• Usage Analytics: App interactions, session duration, feature usage

Exclusion: Pipoll does NOT collect payment card numbers, bank account details, Social Security or government ID numbers, or any sensitive financial information.

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contractual Necessity: To provide the App and its features
• Legitimate Interests: To improve the App, prevent fraud, and communicate with you
• Consent: For location services and optional third-party API integrations
• Legal Obligation: To comply with applicable laws

5. How We Use Your Data

We use your personal data to:

• Create and manage your account
• Publish your goals to the social feed
• Operate the virtual token system
• Match you with local peers for accountability
• Analyze usage patterns to improve the App
• Send system notifications about your goals

6. Third-Party APIs

Pipoll offers optional integration with third-party APIs (e.g., fitness apps, health platforms) for goal verification purposes. Connecting a third-party API is always voluntary. When you choose to connect an API, you authorize Pipoll to access data necessary for goal verification. Your use of third-party APIs is subject to their respective privacy policies.

7. Sensitive Data Protection

Goals you create may contain sensitive personal information. All goal data is encrypted in transit (TLS 1.3) and at rest (AES-256). Pipoll employees do not have access to your goal data without your explicit consent or a valid legal order.

8. Public Goals — Critical Notice

By default, all goals you create on Pipoll are visible to all Pipoll users globally. Do not include sensitive personal information (financial data, health information, precise location, contact details) in your goals. Once published, your goals can be viewed, copied, and shared by other users. You are solely responsible for the content you choose to share publicly.

9. Protection of Minors

Under 13: Pipoll does not knowingly collect personal information from children under 13. If we learn that a user is under 13, we will immediately delete their account and data.

Teens 13-17: Users between 13 and 17 years of age must obtain verifiable parental or guardian consent before using the App. Parents or guardians who believe their child has provided personal information without consent should contact us at privacy@pipoll.live.

10. Data Sharing

We share your personal data only with:

• Service Providers: Firebase (hosting, analytics), API providers for goal verification, Apple App Store and Google Play Store
• Legal Authorities: When required by law or to protect safety

We never sell your personal data to any third party.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs), UK International Data Transfer Agreements (IDTAs), and encryption.

12. Your Rights

Depending on your location, you may have the following rights:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Data portability
• Withdraw consent (where processing is based on consent)

To exercise your rights, contact us at privacy@pipoll.live. We will respond within 30 days.

13. Data Retention

We retain your personal data for as long as your account is active plus 30 days. After account deletion, we retain:

• Goal data: 7 days (for recovery purposes)
• Analytics data: 14 months (aggregated and anonymized)
• Token transaction records: 3 years (for fraud prevention)

14. Security Measures

We implement industry-standard security measures including encryption, access controls, and regular security audits. In the event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours as required by GDPR.

15. Cookies and Tracking

Pipoll does not use cookies. We use Firebase SDK and Firebase Analytics to collect usage data. We do not use advertising IDs for targeted advertising—only for analytics purposes.

16. Virtual Tokens

Virtual tokens have no real-world monetary value. Token records are maintained for fraud prevention and dispute resolution purposes only.

17. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the App. Your continued use of the App after the effective date constitutes acceptance of the updated policy.

18. Contact Information

Entity: Pipoll S.A. — Data Protection Officer
Address: BMW Plaza, Piso 9, Calle 50, Panama City, Republic of Panama
Email: lifeline@pipoll.live, privacy@pipoll.live, dpo@pipoll.live
Web: https://pipoll.live

For EU users: You may lodge a complaint with your local data protection authority.