Privacy Notice

This Comprehensive Privacy Notice describes how Ricardo David Martínez Hernández (hereinafter, "Caudara", "we") processes the personal data you provide to us through this website (caudara.app), in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties in force in Mexico (published in the Official Gazette of the Federation on March 20, 2025). By providing us with your email address you grant your consent for the processing described in this notice.

1. Data controller

The party responsible for processing your personal data is Ricardo David Martínez Hernández, with address at Blvd. José Musa de León 3040 Office 17-08, Residencial San José, 25204 Saltillo, Coah.. Our Personal Data Department handles any matter related to your privacy at hola@caudara.app.

2. What data we collect

This site no longer collects personal data through any form. The waitlist was closed on the app's launch date and the email-capture form was removed from the site.

Historical waitlist emails. Prior to launch, we collected only the email address of those who requested to be notified. We did not collect names, phone numbers, financial, asset or payment data, nor sensitive personal data. Those historical records remain in the controller's possession until they are deleted in accordance with section 9 of this Notice.

3. What we use it for (purposes)

We process historical waitlist emails for the following purpose, which has already been fulfilled:

• Notifying you of the app's launch. The availability notice was sent to registered holders. No further messages are sent for this purpose.

Data is retained only during the period set out in section 9 until its final deletion. We do not process your data for secondary purposes such as advertising, commercial prospecting or profiling. We do not sell, rent or share your email with third parties for commercial purposes.

4. Options to limit use or disclosure

You may request that we limit the use or disclosure of your email, or the deletion of your address from the historical waitlist records, by writing to hola@caudara.app. We will handle your request free of charge.

5. Data handling in the Caudara app

The Caudara app is available on the App Store and is designed local-first: all the financial information you record (accounts, transactions, categories, recurring rules, etc.) is stored solely on your device. The app does not send that information to Caudara's servers or to third parties. This is how its privacy works:

• We do not collect personal data through the app. The app does not send your financial information to Caudara's servers or to third parties.
• No analytics or tracking. The app does not include analytics tools, advertising, trackers, or usage profiling.
• Works offline. It operates fully offline; it does not require internet to record or review your information.
• Biometrics. The optional Face ID / Touch ID lock is managed by your device's operating system (Apple). Caudara does not access or store your biometric data.
• In-app purchases (Caudara Plus). If you purchase Caudara Plus, the payment is processed by Apple through the App Store. Caudara does not receive or store your payment method or card data.
• iCloud backup (future feature). iCloud sync or backup is an optional feature that, when available, will use your own iCloud account managed by Apple; your data will remain under your control and Caudara will not have access to a server containing it.
• ARCO rights regarding the app. Because the app does not collect or store personal data in our systems, there is no data held by Caudara to act upon regarding the app; you control and can delete your information directly on the device. Rights over the waitlist email on the site are governed by the previous sections of this Notice.

If in the future we add features that involve processing data outside the device (for example, bank synchronization), we will update this Notice before enabling them and, where applicable, obtain your consent.

6. Cookies and security technologies

This site does not use tracking cookies, analytics, or advertising trackers, and we do not build profiles from your browsing.

To protect it from bots and attacks, our hosting provider, Cloudflare (acting as data processor, see section 7), uses a technical security cookie (__cf_bm, lasting about 30 minutes) and may analyze basic signals from your browser. This is for security purposes only: it is not advertising or analytics, and that data is not shared with third parties for commercial purposes.

7. Transfers and processors

Your email is stored on the infrastructure of our hosting provider, Cloudflare, Inc., which acts solely as a data processor, following our instructions and for the same purpose described in this notice. We do not carry out transfers of your data to third parties that would require your consent under the law.

8. Your rights and revocation of consent

You have the right to Access, Rectify, Cancel or Object to the processing of your personal data, as well as to revoke your consent at any time.

To exercise them, send your request to hola@caudara.app including: your name and a means to communicate the response to you, and a clear description of the right you wish to exercise or of the data involved. Exercising these rights is free of charge. We will respond within a maximum of 20 business days and, if applicable, will make it effective within the following 15 business days.

9. Retention

Historical waitlist emails will be retained for a maximum period of 90 calendar days from the app's launch date, after which they will be permanently deleted, unless the holder requests cancellation before that deadline (whichever comes first).

You may request early deletion of your email at any time by writing to hola@caudara.app.

10. Security

We apply reasonable administrative, technical and physical security measures to protect your email against unauthorized access, loss, alteration or use.

11. Changes to this notice

We may update this Privacy Notice. We will publish any change on this same page, indicating the date of the last update.

12. Authority and applicable law

This notice is governed by the Federal Law on the Protection of Personal Data Held by Private Parties in force in Mexico. If you believe your right to data protection has not been addressed, you may turn to the competent authority on the matter, the Secretaría Anticorrupción y Buen Gobierno.