Coloquio Privacy Policy

Last updated: June 10, 2026

Introduction

Emilio Zdenko Abarca Cruz ("We", "Our", "Coloquio") operates the Coloquio mobile application (the "App" or "Service"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our App.

This Privacy Policy is designed to comply with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) of Mexico, the Apple App Store Privacy Guidelines, and the Google Play Developer Policy.

1. Data Controller

2. Information We Collect

2.1 Information Provided Directly by the User

Upon registering and using Coloquio, you voluntarily provide:

  • Full name and email address.
  • Date of birth.
  • City and country of residence.
  • Personal biography and selected interests.
  • Instagram handle (optional).
  • Tax information such as RFC and standard bank key (CLABE) (exclusively for Event Organizers).

2.2 Justification for Device Permissions

For the proper functioning of certain features, Coloquio requests access to device components under the following strict justifications:

  • Photo Gallery / Media Library: Coloquio requests permission to save images to your device when you use the event sharing feature as a visual story card (Story card). The generated images are saved exclusively to your local gallery and are not uploaded to any Coloquio server. Additionally, gallery access is requested to allow you to select existing photos when customizing your profile picture or uploading visual content to events.
  • Camera: Coloquio requests camera access for event creation (cover photo capture) and for the Memories feature (post-event experience capture). Camera data is used solely for the specified purpose and is not shared with third parties.
  • Location (GPS): Access to your precise or approximate location is requested strictly to show you "events near you" and calculate the relevance ranking in your geographical area. You can revoke this permission at any time from your operating system settings.

2.3 Automatically Collected Information

  • IP address, device type, model, and operating system.
  • Push notification tokens (FCM for Android, APNS for iOS).
  • General usage data (events visited, searches, in-app actions tracked via Firebase Analytics).

3. Information Sharing and Payment Processing

Coloquio DOES NOT sell personal data to third parties, advertisers, or data brokers. We share information only with essential service providers required for the platform's operation:

  • Express Handling of Payments and Cards (Stripe): For ticket purchase processing, Coloquio partners with Stripe. Coloquio does not store, process, or transmit credit or debit card numbers. The entire payment flow is tokenized and managed exclusively and directly by Stripe, complying with the PCI-DSS Level 1 security standard. All financial and transaction information entered by the user or organizer is subject to Stripe's Privacy Policy.
  • Google: Authentication (Sign-In), Maps API, Analytics, and advertising services (AdMob).
  • Firebase: Push notification delivery (FCM), crash and error reporting (Crashlytics), and performance metrics (without cross-app tracking).
  • Supabase: Cloud database for user profiles, events, and app data. Supabase Storage is used for encrypted file storage (profile images, event media, and Memories).

4. Data Retention and Deletion (Right to be Forgotten)

We retain your personal data only for as long as your account is active or as necessary to comply with our legal obligations (e.g., Organizers' tax records retained for up to 5 years by law).

Path for Permanent Account Deletion: Users have the absolute right to delete their account and all associated data at any time. You can do it in two ways: (1) directly within the application, via Profile Screen -> Settings -> Delete Account; or (2) from the web, even without the app installed, using our self-service page at coloquio.space/delete-account.

Upon executing this action, profile data, Memories, and activity traces will be permanently deleted from our databases within a maximum period of 30 business days.

5. ARCO Rights (LFPDPPP)

As a user, you have the right to Access your data, Rectify inaccurate information, Cancel your account and information (deletion), and Oppose certain uses of your data.

To exercise your ARCO rights, send a clear request to zdenkoabarca@coloquio.space including your full name, registered email, and a detailed description of your request. We will respond within a maximum of 20 business days.

6. Children's Privacy

The minimum age to create an account on Coloquio is 13 years old. Users under the age of 13 are strictly prohibited from using the platform, and we do not intentionally collect personal information from them. If we discover an account belongs to a user under 13, it will be immediately deleted.

For users between the ages of 13 and 17, verifiable parental or legal guardian consent is required to create an account and process their data. However, the purchase of event tickets is strictly limited to users who are 18 years of age or older.

7. Publicidad

Coloquio utiliza Google AdMob para mostrar anuncios dentro de la aplicación. Google AdMob puede recolectar y procesar datos sobre tu dispositivo y tus interacciones para mostrarte anuncios personalizados.

Los datos recolectados por Google pueden incluir: identificadores de dispositivo, datos de uso de la app, y ubicación aproximada.

En iOS, se te solicitará permiso explícito antes de que Google acceda al identificador de seguimiento (ATT — App Tracking Transparency). Puedes cambiar esta preferencia en cualquier momento desde Ajustes > Privacidad > Seguimiento.

En Android, puedes gestionar tus preferencias de personalización de anuncios desde los ajustes de tu cuenta de Google.

Para más información sobre cómo Google utiliza estos datos, consulta la Política de Privacidad de Google.

8. Applicable Jurisdiction

For the interpretation, compliance, and execution of this Privacy Policy, the parties expressly submit to the current laws and the jurisdiction of the competent courts in the city of Toluca, State of Mexico, Mexico, waiving any other jurisdiction that may correspond to them by reason of their present or future domiciles.

9. Contact

Si tienes preguntas, comentarios o solicitudes relacionadas con esta Política de Privacidad, puedes contactarnos a través de: