Privacy Policy

1. Data controller

Diego Armando Ardila Vargas, an individual domiciled in Bucaramanga, Santander, Colombia. Email for anything about your data: [SUPPORT EMAIL].

2. What data we keep

From your account: your name, your email and your password. The password is stored encrypted by our sign-in provider; we never see it. If you sign in with Google or Apple, they give us your name, your email and an identifier. For security, the provider also records your sessions, the device and the IP address you sign in from.

From the couple: each person’s name (including the name you invite your partner with before they join), the avatar, the currency, the default split and the invite code.

What you record: each expense (amount, description, category, date, who paid and how it is split), each payment between you (amount, method and date) and the budgets.

A history of changes: who created, edited or deleted each expense or payment, and when. We also keep attempts to join with a code, to prevent abuse.

If the couple buys Premium: the store (Apple or Google) processes the payment, and we never see your card or payment details. Through RevenueCat, we receive the subscription’s status linked to your account: the product, the store, whether it is a trial, the purchase, renewal and end dates, and the store’s notices about that purchase.

Your phone keeps your session, in the system’s secure storage, and your language and appearance preferences.

We don’t ask for sensitive data. We don’t keep bank or card details, your location, your contacts or your photos. Please don’t write sensitive data in expense descriptions.

3. What we use it for

To create and protect your account; to show you and your partner what you record and calculate the balance; to keep both phones in sync; to prevent fraud and abuse; to answer your questions; to tell you about changes to the app or these texts; and to meet legal obligations.

If you buy Premium, we use the subscription’s status to know whether the couple has it, to show it to both of you in Settings and to open the features it includes.

We don’t sell your data, don’t use it for advertising and don’t build profiles of you for third parties.

4. Your authorization

By creating your account and accepting this policy, you authorize us to process your data for the purposes above. You can withdraw that authorization at any time by deleting your account or writing to us.

If you enter your partner’s name before they join, you confirm they allowed you to. When they join, they accept this policy with their own account.

5. Who we share it with

With your partner: they see everything shared in your space, including your name and avatar.

With the providers that help us run the service, who only use your data for that and under our instructions: Clerk (sign-in, United States) and Supabase (database, hosted in Ireland, European Union). If you sign in with Google or Apple, they take part in signing in too.

If you buy Premium: RevenueCat (subscription management, United States) receives your account identifier and the purchase’s status, and Apple or Google process the payment as controllers of their own store, under their policies.

With authorities, only when the law requires it.

6. International transfer

Your data is stored outside Colombia: in Ireland (European Union) and in the United States. These are countries that Colombia’s Superintendence of Industry and Commerce recognizes as having an adequate level of data protection, and we choose providers with contractual security and confidentiality commitments.

7. How we protect it

Connections are encrypted. In the database, every row is protected so that only the two people in a couple can read or change it. Your session is kept in the phone’s secure storage, and every change is recorded.

No system is infallible. If an incident affects your data, we’ll tell you and report it to the authority when required.

8. How long we keep it

As long as you have an account. An expense or payment you delete is no longer shown, but is kept marked as deleted while its couple exists, so the history of changes is complete.

If you delete your account, we delete your sign-in account, your profile and the whole couple space: its expenses, payments, budgets and history, for your partner too. The app warns you before you confirm.

The purchase notices we keep about you are deleted with your account. RevenueCat, Apple and Google keep their own records of the purchase under their policies and any legal obligations they have (for example, accounting).

Our providers’ backups may keep that data for up to 30 more days, until they are replaced. We only keep anything longer if the law requires it.

9. Your rights

Under Colombian Law 1581 of 2012 you can: know, update and correct your data; ask for proof of your authorization; find out how we use it; withdraw your authorization and ask us to delete it; file complaints with the Superintendence of Industry and Commerce after contacting us; and access your data free of charge.

If you live in the European Union, you also have the rights of the General Data Protection Regulation: access, portability, objection and restriction of processing, and to lodge a complaint with your country’s data protection authority.

10. How to exercise them

You can do much of it in the app: in Settings you change your name and avatar, and from Settings › Account you can delete your account. For anything else, write to us from your account’s email, so we can confirm it’s you.

We answer requests within 10 business days and complaints within 15 business days at most. If we need more time we’ll tell you why, and it will never be more than 5 extra business days for a request or 8 for a complaint.

11. Minors

MitiMiti is only for people over 18. We don’t knowingly keep data of minors; if we find out we do, we delete it.

12. Changes to this policy

If we change this policy, we’ll update the date above and tell you in the app before important changes apply. If we want to use your data for a new purpose, we’ll ask for a new authorization.

This policy is offered in Spanish, English and German. If the versions differ, the Spanish version prevails.