Privacy Policy

1. Who we are

Barcelona para Latinos (hereinafter, "the App") is developed and operated by Ingeniería.dev, led by Chris Flores (hereinafter, "we", "the Developer").

• Contact: [email protected]
• Address: Av. Javier Barros Sierra 495, Santa Fe Lomas de Santa Fe Zedec Santa Fé, Álvaro Obregón 01219, Mexico City, CDMX, Mexico

2. What data we collect

The App is designed to work without knowing who you are. It:

• Does not require registration or an account, and has no login of any kind
• Never asks for your name, email, phone number, or any other personally identifiable information
• Never sends your location to any server (see Section 3)
• Contains no advertising, no ad networks and no third-party tracking or attribution SDKs
• Does not use the advertising identifier (IDFA) and does not ask for App Tracking Transparency permission, because it does not track you across apps or websites
• Does not access your contacts, camera, microphone, photos, calendar, or health data

What the App does collect is limited to usage and diagnostics data that is not linked to your identity, through our own first-party analytics. Section 5 lists exactly what that includes and why.

3. Location access

The App optionally requests access to your device's location for two purposes. Both are processed exclusively on your device:

• When In Use (optional): used to sort places by distance and to show how far each one is from you, on foot or by car. If you deny this permission the App works normally — distances simply are not shown.
• Always (optional, off by default): used only if you turn on Nearby place alerts in the Profile tab. The App then registers geofences with iOS (about 400 m around hand-picked places) so you get a local notification when you are near one, even with the App closed. iOS manages these geofences natively; the App never polls or records your position in the background.

Your coordinates are never transmitted — not to our catalog server, not to our analytics, and not to any third party. They are never logged and never attached to an identifier. They are evaluated on the device and discarded. Revoking the permission at any time from iOS Settings has no effect other than turning off distances and nearby alerts.

4. What is stored on your device

The App stores locally only what it needs to run and to work offline:

Your favorites, My Plan, alert history and preferences are never sent to us. They live inside the App's sandbox on your iPhone, and deleting the App removes all of them permanently and irreversibly.

5. First-party analytics

We use our own first-party analytics to understand how Barcelona para Latinos is used: screens visited, interactions, performance and technical errors, plus technical device data, language and approximate city-level location (we do not store your IP address). The App has no sign-in, so this information is never linked to an account or to your identity. We do not sell or share this data with third parties or use it for advertising. Data is kept for up to 13 months. You can request deletion by writing to [email protected].

5.1 What exactly is measured

• Product interaction: the screens you open and the actions you take — for example opening a place, opening a category, opening directions in Apple Maps or Google Maps, saving a favorite, adding a stop to My Plan, opening a section of the practical guide, opening an event, tapping a consulate's phone number (which consulate, not the call itself) and changing the language.
• Sessions: when the App opens and closes, and how long it stays in use.
• Technical data: App version, iOS version, device model, language, time zone and screen size.
• Approximate location: country, region and city, derived by our server from the network connection. Your IP address is not stored, and your device's GPS location is never part of this data.
• Diagnostics: performance data (such as launch time) and crash and hang reports provided by Apple's MetricKit.
• A random installation identifier generated by the App. It is not derived from your hardware, it is not the advertising identifier, and it is deleted when you delete the App.

It never includes your name, email, phone number, contacts, photos, GPS coordinates, favorites or the contents of My Plan.

5.2 Who runs it and why

The analytics service runs at analytics.ingenieria.dev, on a server operated by the Developer. No third-party analytics company receives this data. We use it only to improve the App — for example, to learn which sections travelers actually use and to find and fix crashes. For users in the European Union, the United Kingdom and Switzerland, the legal basis is our legitimate interest in keeping the App working and improving it; you can object at any time by emailing us.

5.3 This website

The pages at legal.ingenieria.dev/barcelona/ use the same first-party analytics to count visits and clicks on the download button. They set no cookies; a random identifier is kept in your browser's local storage, which you can clear at any time from your browser settings.

6. External services used

The App makes read-only requests to our catalog server at https://barcelona.ingenieria.dev to download places, restaurants, events, reviews and photos. This is a one-way download of public content. Specifically, the server:

• Requires no authentication and issues no user identifier, token, or cookie
• Receives only the language you chose (lang, e.g. en, es, pt) and, where applicable, a timestamp (since) used to download only what changed since your last sync
• Never receives your location. No coordinates are included in any request the App makes

The App never uploads your favorites, your plan, or any other content you create. The only data the App sends out is the analytics described in Section 5.

6.1 Photos and credits

Photos in the App come from Wikimedia Commons and Openverse under free licenses (CC BY, CC BY-SA, CC0 and public domain). They are served to the App by our catalog server, and each photo shows its author and license inside the App. Tapping a credit opens the photo's original page on the source website in your browser.

6.2 Third-party maps and links you choose to open

Some actions hand off to another app or website. These are always initiated by you, by tapping a button, and are governed by that provider's own privacy policy — not ours:

• Apple Maps (MapKit): used for the in-app map and for "Open in Apple Maps," including routes from My Plan. Governed by Apple's Privacy Policy.
• Google Maps (external link): opened only when you tap "Open in Google Maps." The App does not embed the Google Maps SDK; it simply opens a link to the destination.
• Web and social searches: if you tap a button to look up a place on Google or TikTok, the App opens your browser with a search for that place's name. Only the place name travels in that search — never your identity or your location.
• Phone calls: tapping a consulate's phone number in the practical guide hands the number to your iPhone's Phone app.

7. System permissions

The App requests only what it needs, and works without any of them:

• Location When In Use — optional. Sorts places by distance and shows walking or driving distances.
• Location Always — optional and disabled by default. Powers Nearby place alerts. When active, iOS shows its standard location indicator.
• Notifications — optional. Used only for local alerts generated on your device. The App has no push notification service, no device token is ever sent to a server, and we cannot send you a message remotely.

The App does not request access to: camera, microphone, contacts, calendar, reminders, photos, media library, Bluetooth, HealthKit, motion, or biometric data.

8. Marketing and advertising

The App displays no ads. We do not use data for remarketing, profiling, or advertising. We do not participate in ad networks, and we do not sell, rent, or share information with third parties.

9. Minors

The App is a general-audience travel guide and is not directed at children under 13. It requires no registration and collects no personal information that identifies a person, which keeps it consistent with COPPA (United States), LGPD (Brazil) and GDPR (European Union) requirements for minors.

10. User rights (GDPR, CCPA, LFPDPPP, LGPD)

You have the right to access, rectify, delete, and object to the processing of your data. Here is how each one works in this App:

• Right to access: Everything stored on your device (favorites, My Plan, cache, alert history, preferences) is visible to you directly inside the App. For analytics data, email us.
• Right to rectification: You can edit or remove any favorite or My Plan stop at any time.
• Right to erasure: Uninstalling the App permanently deletes everything stored on your device, including the installation identifier. Analytics data is deleted automatically after 13 months, and you can ask us to delete it sooner by email. Because it is not linked to your identity, we may ask for details (such as the approximate dates you used the App and your iPhone model) to find it.
• Right to object and to restrict processing: Email us to object to analytics processing. You can also revoke location or notification permissions in iOS Settings at any time; the App continues to work.
• Right to portability: We hold no personal data that identifies you on any server, so there is nothing to export.
• Right not to be subject to automated decisions: No decision affecting your legal rights, employment, credit, or insurance is made from any data the App handles.

For any question about your rights, email [email protected]. We reply within 30 days.

11. Security

Local data is stored inside the iOS sandbox, protected by the operating system and by device-level disk encryption (Apple's Data Protection API). No other app can read it. All network requests — to the catalog server and to the analytics service — travel over HTTPS. Cached photo files may be purged by iOS under storage pressure; the App handles that gracefully and downloads them again the next time you are online.

12. International transfers

The catalog server and the analytics service are operated by the Developer and hosted in the United States, and their traffic passes through Cloudflare's network. Analytics data is therefore processed in the United States. It is not linked to your identity, it is protected in transit with HTTPS, and it is never shared with third parties.

13. Changes to this policy

We may update this Privacy Policy to reflect changes to the App or to applicable law. The current version will always be published at this URL along with the date of the last update. Material changes will also be announced inside the App.

14. Governing law

This Policy is governed by the laws of the United Mexican States, in particular the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), without prejudice to the mandatory rights you have under the data protection laws of your country of residence. Any dispute will be submitted to the competent courts of Mexico City.

15. Contact

Privacy Officer: Chris Flores
Email: [email protected]
Postal address: Av. Javier Barros Sierra 495, Santa Fe Lomas de Santa Fe Zedec Santa Fé, Álvaro Obregón 01219, Mexico City, CDMX, Mexico