Privacy Policy

1. Introduction

At Punto, we take very seriously how your personal data is stored, processed, and protected. This Privacy Policy describes how Punto ("we", "our" or "the application") collects, uses, and protects your personal information when you use our mobile study tracking application.

2. Information We Collect

We collect the following information:

• Username: to personalize your experience
• Daily study goal: hours and minutes of your daily study goal
• Streak: number of consecutive days you have reached your established daily goal
• Last streak update: date of last streak update
• Time zone
• Account creation date
• Last modification date of your account data: for proper personal data management
• Device UUID: unique identifier randomly generated for each device using the application
• Set of created tags, along with their associated color identifier and creation date

Regarding study sessions, we collect the following data:

• Session start date: to correctly place the study session on the day it was performed
• Session start time: to order study sessions chronologically
• Title and description: personal notes about the session (encrypted based on a private key that only your device knows. This way, your data is protected and not even Punto can read it).
• Tags: tags about the session
• Session duration in minutes: to show its duration and use time in statistics calculations
• Concentration level: to show concentration level and use it in statistics calculations
• Session creation date: for error prevention and future implementations related to device synchronization
• Indicator of whether the session is synchronized or not with Punto's server

3. How We Use Your Information

The main functionality of the application is to record and display your study sessions, as well as offer you personal statistics: evolution of the number of hours studied daily or monthly during a time interval, evolution of your daily or monthly concentration level during a time interval, or evolution of your effective daily or monthly study hours during a time interval. Another key functionality is calculating your concentration percentage in a study session: through five questions, Punto determines this parameter. The application does not store your answers to each question on Punto's servers, but it does store the concentration percentage of each session. Punto also allows you to adapt the interface language, remember your daily study goals, and tag your study sessions with labels. Likewise, the application allows you to add a title and description to each study session, data that is stored encrypted in Punto's database.

4. Data Storage and Security

Data is stored:

• Locally on your iOS device using UserDefaults and Keychain
• In the cloud: On Supabase servers (secure infrastructure)

Study session titles and descriptions are encrypted using AES-GCM before storage. The private key is stored securely in your iOS Keychain. Regarding connections, all communications are encrypted using the HTTPS protocol.

Data access security is guaranteed through Row Level Security (RLS) policies: only you can access your data through your unique UUID, a personal identifier that is not shared. Furthermore, the Punto developer cannot see your encrypted content, as the private key is stored only on your device, locally.

5. Information Sharing

We do not share your personal data, we do not sell your information to third parties, we do not share data with advertisers, and we do not use your data for marketing purposes. Punto is sustained by selling subscriptions to Punto Pro, not by selling your personal data.

As legal exceptions, we may disclose information if required by law, if necessary to protect our legal rights, or if required to prevent harm.

6. Your Rights

• Access: you can view all your data in the application
• Modification: you can edit sessions, goals, and settings
• Deletion: you can delete titles, descriptions, and tags, as well as delete all your data using the "Delete all my data" function in the Settings menu. This action is irreversible and permanent, and deletes all your data from the server and device.

7. Data Retention

Your active data is maintained while you use the application. After data deletion, it is permanently removed from our servers. In case of the existence of a backup containing deleted data, it will be deleted within a maximum of 30 days after deletion.

8. Minors

Punto is a safe application for minors, although it requires parental supervision for children under 13 and parental consent according to local regulations. Parents can request deletion of minors' data.

9. Policy Changes

We may update this Privacy Policy from time to time. We will notify of any changes by posting the new Privacy Policy on this page and updating the last updated date at the top of this page.

10. Technologies Used

We use Supabase for the database (remote server) and authentication. We use iOS Keychain to provide secure local storage, as well as UserDefaults for storing local configurations.

We do not use tracking cookies, third-party analytics, or targeted advertising.

11. Geography and Jurisdiction

Servers are located in secure data centers. We comply with local regulations and respect GDPR. Jurisdiction applies according to your location and applicable laws.

12. Contact

For questions about this policy or about the treatment and protection of your data, contact us at support@getpunto.app. If you wish to delete your data, use the "Delete my data" button in the application Settings.

13. Privacy Commitment

We commit to:

• Keep your data safe and private
• Be transparent about our data usage
• Give you complete control over your information
• Not monetize your personal data
• Respect your privacy rights