Privacy Policy

1. Data We Collect

1.1. Personal Data

We may collect:

• Account and authentication data: when you sign in with Google or Apple, we receive basic provider data (e.g., name, email, provider identifier, and, if authorized, profile picture). In the case of Apple, the email may be a privacy/relay address.
• Profile and preferences: preferred language, bio/profile options you complete.
• Support communications: messages you send us (support, reports, feedback).

We do not record data you do not provide to us or that is not necessary to provide the service.

1.2. Content and Activity on Mashapp

• Blogs and resources (CRUD): text, titles, tags, images, videos, links, drafts, publications, comments, reactions ("likes"), saves, and associated metadata.
• Camp schedules: activities, areas, schedules, roles, and groups you upload to calendars/plans. Avoid uploading sensitive data or data of minors unless you have the corresponding authorizations.

1.3. Non-Personal and Technical Data

• Minimum technical data: user/session identifiers, push notification tokens, app version, operating system and device model, diagnostics, and error/crash logs.
• Aggregated/anonymous usage data: usage events to maintain, protect, and improve the service.
• Cookies/local storage (Web): only those necessary for session, security, and preferences. We do not use third-party advertising cookies.

2. How We Use Your Data

2.1. Personal Data

We use your data to:

• Provide the service: login with Google/Apple, maintain your account and profile.
• Key features: creation/reading/updating/deletion (CRUD) of blogs and resources; management of camp schedules; search, saves, and notifications.
• Support and security: respond to inquiries, resolve incidents, prevent abuse and fraud.
• Operational communications: changes to terms/policies, security and service notices.

2.2. Non-Personal Data

• Platform improvement: aggregated/anonymous analysis to identify patterns, stability, and performance.
• Feature development: anonymous metrics to train and adjust recommendations/experiences (without identifying you).

3. Sharing Your Data

3.1. With Third Parties (Processors)

We do not sell your data or share it for third-party marketing.

We may share information on a limited basis with providers acting as processors (e.g., hosting, database, authentication with Google/Apple, sending notifications, crash reporting) solely to operate Mashapp and under confidentiality and security obligations equivalent to this policy.

3.2. Legal Requirements and Protection

We may disclose information if required by valid law or order, or to protect rights, security, and compliance.

3.3. Visible Content

The content you publish (blogs, resources, comments, public profile) may be visible to other users and, where applicable, on public surfaces of Mashapp (e.g., listings or public pages).

4. Legal Basis for Processing

We process data based on:

• Contract execution: providing the service you request.
• Legitimate interest: security, abuse prevention, product improvement with aggregated metrics.
• Your consent: when necessary (e.g., certain communications).

5. Retention

• Account and profile: as long as the account is active.
• Published content: as long as you keep it visible or until you delete it; some backup/cache copies may persist for a reasonable period.
• Logs and diagnostics: for the time necessary for security, support, and improvement.

6. Your Rights

Depending on your jurisdiction (e.g., Law 25.326 – Argentina; GDPR – EU; LGPD – Brazil), you can exercise:

• Access to your data
• Rectification
• Deletion
• Objection or limitation of processing
• Portability
• Withdrawal of consent (when applicable)

7. Published Content and License (UGC)

You own the rights to the content you publish on Mashapp. By publishing it, you grant us a worldwide, royalty-free, non-exclusive, transferable, and sublicensable license, for an indefinite period, to use, reproduce, modify, adapt, publish, translate, create derivative works, distribute, and display that content within Mashapp and related materials.

The license applies only to the content you choose to publish (not your non-public account data).

You can delete your content; we will make reasonable efforts to stop it from being visible. Cached/backup copies or reshared content may persist for a reasonable time.

8. Security

We apply reasonable technical and organizational measures (encryption in transit, access controls, monitoring). No system is 100% secure; we also suggest good practices (strong passwords, updated devices).

9. International Transfers

We may process data outside your country of residence. In such cases, we apply adequate safeguards (e.g., standard contractual clauses) and reasonable technical/organizational measures.

10. Minors

Mashapp is aimed at madrijim and educational teams. If you are under the minimum applicable age in your country (e.g., 13/16 years old according to regulations), you need the consent of your parents/guardians to create an account and use the app.

11. Cookies and Similar Technologies (Web)

We use strictly necessary cookies for session, security, and preferences. We do not use third-party advertising cookies. You can manage cookies from your browser settings.

12. Notifications and Communications

We may send you push notifications (iOS/Android) and operational emails (security, relevant changes). For non-essential communications, we will ask for your consent when required, and you can unsubscribe.

13. Changes to this Policy

We may update this policy to reflect service improvements or regulatory changes. If the change is substantial, we will notify you through reasonable channels (in-app, email, or banner) before it takes effect.

14. Contact