PRIVACY POLICY

Last updated: 02/26/2026

1. Identity of the Data Controller

In compliance with the General Data Protection Regulation (GDPR) and current Spanish regulations, we inform you that the personal data collected through this application (hereinafter, the "App") and its associated website are processed by:

2. What Data We Collect

To ensure the App functions correctly, we collect and process the following categories of data:

2.1. Identification and Access Data

We use Firebase Authentication (Google). To log in and create your account, we collect your unique user ID, email address, and, if available in your Google account, your name and profile picture.

2.2. User Content (Inputs and Outputs)

We collect and store the texts you input for rewriting ("Inputs") and the results generated by the Artificial Intelligence ("Outputs").

Secure Storage: These texts are stored in our databases in an encrypted format.

Purpose of Storage:

• To provide the "History" feature, allowing you to retrieve past rewrites at any time.
• Anonymous Quality Control: The Developer may internally access these texts to evaluate the quality of AI responses and improve the application logic. It is important to note that these analyses are always performed on anonymized data, without linking the text content to your personal identity or email.
• No Re-training: We explicitly guarantee that we do NOT use your texts to train third-party Artificial Intelligence models or public models. Their use is strictly for App functionality and internal quality analysis.

2.3. Usage, Device, and Subscription Data

We may collect technical information about your device (model, OS, language) and App interaction data (crash reports). We also manage your subscription status (Free/Pro) via anonymous purchase identifiers.

3. Purpose of Processing

We process your data to:

• Service Provision: Allow access, manage identity, and process rewrites via AI.
• Subscription Management: Verify payments and grant Premium access via official stores (Google Play Store / Apple App Store).
• Service Improvement: Analyze texts (confidentially and anonymously) to optimize results.
• Legal and Fiscal Compliance: Retain minimal transaction data to comply with tax obligations before the Spanish Tax Authorities.

4. Third Parties and International Transfers

To provide the service, we share strictly necessary data with external technology providers. We do not sell your data to third parties. By using the App, you acknowledge and accept the following transfers necessary for technical operations:

• Artificial Intelligence Providers: We use external natural language processing services (LLMs) from top-tier providers to generate rewrites. Your texts (Inputs) are sent to these providers solely to generate the response and not to train their public models.
• Infrastructure and Hosting: Our servers and databases are hosted with reputable cloud infrastructure providers, located preferably within the European Economic Area (EEA).
• Authentication and Analytics: We use third-party services to manage secure login and technical error management of the application.
• Payment Management: Transactions are processed directly through the payment gateways of official app stores (Store). We do not have access to your complete banking data.

Transfer Guarantee: In cases where our technology providers are located outside the European Economic Area (as is common with AI or authentication services located in the USA), we ensure they operate under recognized data protection frameworks or through Standard Contractual Clauses approved by the European Commission.

5. Data Retention and Account Deletion

5.1. While your account is active

We will retain your personal data and text history as long as you keep your account active and do not request its deletion.

5.2. Account Deletion (Right to be Forgotten)

You may delete your account at any time via two methods:

• In-App: In Preferences > Delete Account.
• Web: By accessing the public form at https://saidrightapp.com/delete-account.

5.3. What happens upon account deletion?

We apply an irreversible anonymization process:

• Personal Data: Your name, email, and personal identifiers are removed from our active database.
• Texts (Inputs/Outputs): They are not physically deleted but are anonymized. They are completely unlinked from your identity (the link to your user is broken), becoming part of a set of anonymous statistical data for quality analysis. Once anonymized, it is impossible to associate them with you.
• Fiscal Data: If you have made payments, the law requires us to keep the transaction record (blocked) for the legal period established by tax regulations (generally 4 or 5 years), after which they will be permanently deleted.

6. Your Rights

As a user, you have the right to Access, Rectify, Erase (Delete), Restrict, and Object to the processing of your data. To exercise any right that cannot be managed directly within the App, you may contact us at: palmappsstudio@gmail.com.

7. Security

We take your privacy seriously. We have implemented technical security measures (such as text encryption in the database and HTTPS communications) to protect your information against unauthorized access, loss, or alteration.

8. Changes to Policy

We reserve the right to modify this policy to adapt to new AI providers, legislative changes, or functional improvements. The updated version will always be available in the App and on the website.