Privacy Policy

1. Data controller

The controller of the personal data collected through this website is Juan Torres Navarro, with registered address at Albacete, 02003, España. Contact email: JuanTorresNavarro93@gmail.com. Website: https://cimientos.app.

2. What personal data do we process?

We may process the following categories of personal data:

• Identification and contact data, such as name, email address, and account data.
• Service usage data, such as meal, recipe, ingredient, weight, and workout records.
• Subscription and payment data managed through Stripe.
• Technical and browsing data, such as IP address, device, browser, and analytics cookies when accepted.

3. How do we obtain the data?

Personal data may be obtained when the user creates an account, uses the service, completes forms, contacts support, purchases a subscription, or browses the website.

4. Purposes of processing

Personal data is processed for the following purposes:

• Managing registration, authentication, and the user account.
• Providing nutrition and workout tracking features.
• Managing subscriptions, payments, billing, and tax obligations.
• Responding to inquiries, support requests, and service-related communications.
• Analyzing website usage to detect errors and improve content and services, only with analytics consent.
• Protecting service security and preventing fraudulent use.

5. Legal basis

Processing is based on the user's consent, the performance of a contract or pre-contractual measures, compliance with legal obligations, and the controller's legitimate interest where applicable.

6. Data retention

Data is retained while the account is active and for the time necessary to fulfill the described purposes. It may subsequently be kept blocked for the applicable legal periods.

7. Data recipients

Data may be disclosed to providers that supply services necessary for the operation of the website, as data processors:

• Vercel: web hosting.
• MongoDB: database.
• Cloudinary: image storage and processing.
• Stripe: payment and subscription processing.
• Resend: transactional email delivery.
• Google Analytics and Microsoft Clarity: web analytics, only with consent.

8. International transfers

Some providers may process data outside the European Economic Area. In those cases, the safeguards provided by data protection law apply, such as standard contractual clauses or other legally recognized mechanisms.

9. User rights

The user may exercise the rights of access, rectification, erasure, restriction, objection, and portability, as well as withdraw consent at any time, by writing to JuanTorresNavarro93@gmail.com.

The user may also file a complaint with the Spanish Data Protection Agency.

10. Security

The controller applies reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or alteration.

11. Cookies

The website uses technical cookies and, only with consent, analytics cookies. Detailed information is available in the Cookie Policy.

12. Policy changes

This Privacy Policy may be updated when the services used or applicable regulations change. The current version will be available on this page.

This policy complements the service Terms and Conditions.