Privacy policy

1. Data controller

Controller: the operator of Crece Conmigo (Colombia). Habeas data and privacy channel: [email protected].

Website of the Service: https://crececonmigo.app.

2. Scope

This Policy applies to the personal data we process through the Service (web/PWA, APIs, push notifications when you turn them on, and support channels associated with [email protected]).

3. Data we process

Depending on how you use the Service, we may process:

• Account / authentication: data provided by Google OAuth (e.g. name, email, account identifier).
• Profile: date of birth (your age is worked out from it), gender, city, congregation, intention (friendship / dating / marriage), contact WhatsApp, photos, voice capsule and introduction texts.
• Interactions: posts, hearts and echoes on the Muro; audio from Crece conmigo / Directo / Contigo / Camino; shared readings; Crece proposals and statuses; reports and blocks.
• Approximate location: if you turn on Directo / “Aparecer,” to show proximity in Directo (this is not third-party advertising tracking).
• Technical data: session (cookies), device / push identifiers, security logs, IP address, client type and error/performance metrics.
• Support: whatever you write to us at [email protected].

We do not ask for sensitive health data, advanced biometrics or data about minors. If a user voluntarily includes sensitive data in an audio message or text, we will process it only to the extent necessary to provide the Service and to moderate.

4. Purposes

• To provide, maintain and improve the Service of connections with purpose.
• Authentication, session integrity, security, fraud/abuse prevention and moderation (including reports).
• To show content to other users according to the product's logic (e.g. the Muro with an opposite-gender filter; Contigo; Directo).
• To analyze and, where appropriate, keep User Content (including voice notes and texts) for security, moderation, quality and improvement of the application, in accordance with the Terms of service. Voice notes are converted to text on our own server (without sending them to third parties) so they can be read and to detect insults, harassment or threats.
• To send push notifications or in-app notices related to the Service, if you allow them on your device.
• Operational contact (e.g. the contact WhatsApp you declared; this is not strong identity verification by OTP).
• To comply with legal obligations and respond to data subjects' rights requests.
• Aggregated or pseudonymized statistics on product use.

5. Legal bases and authorization

We process data with your authorization when you sign up, accept the Terms/Privacy policy/Rules and use specific features (e.g. microphone, location, push), and, where the law allows it, to perform the Service, for legitimate security interests or to meet a legal duty.

Continued use of the Service implies acceptance of the purposes described here, without prejudice to your ARCO rights. WhatsApp is recorded as a contact number; the box you check at sign-up to confirm it is not equivalent to verification by code (OTP).

6. Cookies and similar technologies

We use httpOnly session cookies (access and refresh) to keep you signed in. Local browser storage may be used for UI preferences and PWA state. We do not run third-party advertising based on invasive “ad network” style tracking. We count visits with our own tool, hosted on our server (Umami): it uses no cookies and identifies no one; it keeps the page viewed, the approximate country and city, the language, the kind of device and the page you came from, without your IP address.

7. Processors, providers and transfers

We may rely on infrastructure providers (hosting, database, CDN, email, push) as processors or under appropriate contracts/measures. Google OAuth involves processing under Google's policies when you sign in.

If there is an international transfer of data (e.g. cloud infrastructure), we will seek mechanisms compatible with the applicable Colombian rules.

8. Retention

We keep data while your account is active and for the additional time needed for: security and moderation; improving the Service; disputes; legal obligations; and backups/continuity.

A chat no longer showing on your screen does not mean that all technical copies used for those purposes are deleted immediately. Specific periods may vary depending on the type of data and the risk.

9. ARCO / habeas data rights

As a data subject you may request, under Law 1581: access, updating, correction, deletion, proof of authorization and objection/revocation where applicable, by writing to [email protected] from the email associated with your account (or providing details that allow us to identify it).

Without writing to us, in the app (Me → Privacy and help) you can download your data with “Download my data” and delete your account with “Delete my account”. Deleting it erases your profile, photos, voice, notes, study, posts and the voice notes you sent, and closes anything you have open with other people.

We will respond within the legal time limits. You may also file an inquiry or a complaint with the Superintendencia de Industria y Comercio (SIC), Colombia's Superintendence of Industry and Commerce.

Deletion may be limited where there is a legal duty to keep data, evidence of abuse, or a need to bring or defend claims.

10. Security

We apply reasonable technical and organizational measures (access control, encryption in transit via HTTPS, separation of environments, etc.). No system is 100% secure. Report incidents to [email protected].

11. Minors

The Service is not directed at people under 18. We do not knowingly collect data from minors. If we detect an account belonging to a minor, we will delete it and erase the associated data to a reasonable extent.

12. Automated decisions

We use product rules (e.g. gender filters, posting limits, discovery states) and security tools. We do not make solely automated decisions with significant legal effects in the manner of credit scoring. Moderation may combine automatic signals and human review.

13. Changes

We may update this Policy. The effective date appears above. If the change is material, we will seek to give reasonable notice in the Service. If you keep using the Service, you are deemed to accept the published version, unless the law requires new consent.

14. Contact

Privacy and habeas data: [email protected].