Gott Technologies LATAM ("Company," "we," "us," or "our") is committed to protecting the privacy and personal data of users of the Gott SafeCall mobile application ("the App"). This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your personal data. This policy applies to all users of Gott SafeCall and complies with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and the General Data Protection Regulation (GDPR) where applicable.

The data controller responsible for your personal data is:

• Company: Gott Technologies LATAM
• Email: emiliano.aguilar@gottlatam.com
• Website: https://gottlatam.com

We collect the following categories of information to provide and improve the Gott SafeCall service:

2.1 Information You Provide

• Account information: first name, last name, and phone number (collected during registration via phone number verification with OTP).
• Year of birth: requested during registration. We use it for two purposes: to confirm that you meet the minimum age required to use the App (18 years), and to understand the age profile of our users so we can improve the service. We store the year of birth in your account record; for analytics we only ever use a broad age range (for example "60-69"), never your exact age or year of birth.
• Emergency contacts: names and phone numbers of up to 3 emergency contacts you designate within the App. You must obtain their consent before adding them.
• Cancellation feedback: if you cancel your subscription, the reasons you select (and any free-text comment you choose to write) are stored together with your user ID, your plan and the date. Providing this feedback is part of the cancellation screen; the comment field is optional.

2.2 Information Collected Automatically

• Call event data: phone state changes (ringing, off-hook, idle), timestamps, and whether the number is saved in your contact list. This applies to incoming calls only. We do not record call content or audio.
• Registration date: a server-generated timestamp recording when your account was created.
• Subscription state: your plan, trial/subscription status, and related billing metadata (e.g., expiration and auto-renewal), verified against Google Play.
• Contact list access: the App reads your device's contact list locally to determine the whitelist of known callers. Contact names and numbers are not uploaded to our servers — this comparison is performed entirely on-device.
• Alert history: records of alerts sent (timestamps, notification tier, and call duration) stored in Firebase Cloud Firestore.
• Device and usage data: device model, operating system version, app version, crash logs, and analytics data collected through Firebase Crashlytics and Firebase Analytics.
• In-app activity: which screens of the App you open, and your interaction with the educational videos (when a video starts, how much of it you watch, and whether you finish it, together with the episode title and season). This tells us which content and sections are actually useful so we can improve them. It is usage measurement only — we do not record audio, video, or anything you type.

2.3 Information from Third-Party Services

• Firebase services: authentication tokens, anonymized analytics identifiers, and push notification tokens (FCM).

We use the collected information for the following purposes:

• Core functionality: detecting incoming calls from unknown numbers, sending escalating alert notifications via WhatsApp to your designated emergency contacts, and letting you block or unblock suspicious numbers.
• Account management: creating, authenticating, and maintaining your user account.
• Service improvement: analyzing usage patterns, screen and video activity, age ranges, crash reports and cancellation feedback to improve the App's performance, reliability, and user experience. All of this is reviewed in aggregate and is never used to contact you or to make automated decisions about you.
• Age verification: confirming that you meet the minimum age of 18 required by our Terms of Service.
• Communication: sending you important service-related notices, such as security alerts, updates, and changes to these policies.
• Subscription management: processing payments, verifying your purchase server-side, keeping your subscription status up to date, and — when you request it from within the App — submitting the cancellation to Google Play on your behalf.
• Legal compliance: fulfilling legal obligations and responding to lawful requests from authorities.

We process your personal data based on the following legal grounds:

• Consent: you provide explicit consent when you accept these terms and grant device permissions during the onboarding process.
• Contractual necessity: processing is necessary to deliver the service you subscribed to.
• Legitimate interest: we have a legitimate interest in improving our services and ensuring application stability.

We do not sell, rent, or trade your personal data. We share information only with the following third-party service providers that are necessary to deliver our service:

• Google / Firebase: authentication (phone OTP), cloud database (Firestore), push notifications (FCM), analytics, and crash reporting (Crashlytics).
• WhatsApp Business API (Meta): to send alert notifications to your emergency contacts via WhatsApp. Phone numbers of your emergency contacts are transmitted to Meta's servers solely for message delivery. No call content or audio is shared.
• Google Play Billing & Google Play Developer API: to process subscription payments, to verify your purchase from our servers, and to cancel your subscription when you request it inside the App. For these operations we send your purchase token and product identifier to Google; we never receive or store your card or payment details.
• Bunny CDN: to deliver educational video content within the App.

Each third-party provider operates under their own privacy policies. We recommend reviewing the privacy policies of Google and WhatsApp (Meta).

Your data is stored in Google Firebase Cloud Firestore servers. We implement industry-standard security measures to protect your personal data, including:

• Encryption in transit (TLS/SSL) and at rest on Firebase servers.
• On-device encryption: sensitive personal data (name, phone number, and emergency contact information) is encrypted on your device using AES-256-GCM backed by the Android Keystore before being written to local storage.
• Firebase Security Rules to restrict unauthorized database access.
• Firebase Authentication to verify user identity.
• Firebase App Check to verify the integrity of requests from the App.
• Minimal data collection principle — we only collect what is strictly necessary.

Despite our efforts, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

We retain your personal data for as long as your account is active or as needed to provide you with the service. Specifically:

• Account data: retained until you delete your account.
• Alert history: retained for up to 12 months for service improvement and user reference, then automatically deleted.
• Analytics and crash data: retained according to Firebase's default retention policies (up to 14 months for analytics).
• Cancellation feedback: retained for up to 24 months for product analysis, then deleted or anonymized.
• Year of birth: retained with your account record until you delete your account. The derived age range held in analytics follows Firebase's retention policy.

When you delete your account, we will delete or anonymize your personal data within 30 days, unless retention is required by law.

Under Mexican data protection law (LFPDPPP) and, where applicable, the GDPR, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Cancellation (Deletion): request deletion of your personal data.
• Opposition: object to the processing of your data for specific purposes.
• Portability: request your data in a structured, machine-readable format (where applicable under GDPR).
• Withdrawal of consent: withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at emiliano.aguilar@gottlatam.com. We will respond to your request within 20 business days as required by Mexican law.

Gott SafeCall is not intended for use by children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such data promptly. If you believe a minor has provided us with personal data, please contact us at emiliano.aguilar@gottlatam.com.

Your data may be processed and stored on servers located outside of Mexico (including Google Cloud servers in the United States). When data is transferred internationally, we ensure that appropriate safeguards are in place, including compliance with applicable data protection regulations and the use of service providers that adhere to recognized privacy frameworks.

The Gott SafeCall mobile application does not use browser cookies. However, Firebase Analytics and Crashlytics may use device identifiers and anonymous tracking technologies to collect usage and performance data — including which screens you open, your activity with the educational videos, and your age range. This data is used to measure and improve the App; it is not used for advertising and is not sold or shared with advertisers. You can opt out of Firebase Analytics data collection through your device settings.

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of Gott SafeCall after changes are posted constitutes your acceptance of the updated Privacy Policy.

This Privacy Policy is published in English and in Spanish. The English version is the governing version. The Spanish text is provided as a courtesy translation for our users in Mexico; in the event of any discrepancy, ambiguity or conflict between the two versions, this English text prevails.

If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact us at:

• Email: emiliano.aguilar@gottlatam.com
• Website: https://gottlatam.com