Privacy Notice

Last updated: September 9, 2026

At Puntto we look after your data with the same calm we design the product with. This notice explains, plainly, what information we collect, what we use it for, who we share it with, and how you can exercise your rights.

Puntto is run from Mexico, so your data may be processed outside your country, on the servers of the providers listed below. This English version describes the rights available to readers in the United States and Canada; the notice for Mexico is at /privacidad and the one for Brazil at /pt/privacidade.

Who is responsible for your data

The person responsible for processing your personal information is Antonio Alejandro Díaz Zúñiga, based in San Juan del Río, Querétaro, Mexico, who runs the product Puntto. For anything to do with your privacy you can write to dirotech.apps@gmail.com.

What we collect

• Account and identity: name, email address and phone number, collected when you create or use your account (through Firebase Authentication).
• Your business operations: the appointments, clients and agenda data your business enters in the app, stored securely in Firebase Firestore.
• Subscription: the status of your Pro subscription, managed with RevenueCat. The charge is made by Google Play inside the app. Puntto never receives or stores payment details: we never see your card.
• Deposits: Puntto does not process payments between a business and its clients. If a service asks for a deposit, the booking page only says so; the business and its client agree the amount and the method on their own, outside Puntto.
• Technical and usage: device identifiers and usage metrics for the site and the app, collected with analytics tools (Google Analytics 4 and Microsoft Clarity) to understand how the product is used and improve it.

What we use it for

We process your information only for the following purposes:

• Running your account and letting your business receive and manage appointments.
• Managing your Pro subscription.
• Supporting you and answering your requests.
• Keeping the service secure and preventing fraud or abuse.
• Measuring product usage in order to improve it.

Who we share it with

We do not sell or share your personal information, and we have not done so in the past twelve months. We share it only with the providers that make the service possible, each under its own privacy policy:

• Google / Firebase — authentication and database. (notice)
• RevenueCat — subscription management. (notice)
• Google Play — charging the Pro subscription. (notice)
• Google Analytics 4 and Microsoft Clarity — usage analytics.

The app does not collect your location: we use no geolocation APIs and no Google Maps. When you open an address, your device's own maps app opens through a link, outside Puntto.

Your rights

Wherever you are, you can ask us to:

• tell you what personal information we hold about you, and give you access to it;
• correct it when it is wrong, incomplete or out of date;
• delete it;
• stop using it for a given purpose, or withdraw a consent you had given us.

If you are in California, the CCPA as amended by the CPRA also gives you the right to know what we collect and why, to have it deleted or corrected, to opt out of the sale or sharing of your personal information — which does not apply here, because we do neither — and not to be treated differently for exercising any of these rights.

If you are in Canada, PIPEDA gives you the right to access the information we hold about you and to have it corrected. If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada.

To exercise any of these, write to dirotech.apps@gmail.com telling us which right you want to exercise; we answer within the time limits the applicable law sets. You can also delete your account from the app itself, which removes your business and its history.

Retention and security

We keep your data while your account is active, or for as long as it is needed to fulfil the purposes described here and our legal obligations. We apply reasonable security measures — technical, administrative and physical — to protect your information against unauthorised access or use.

Changes to this notice

We may update this Privacy Notice when the way we handle data changes, or when the law requires it. The version in force will always be on this page, with its update date.

Contact

If you have questions about this notice or about how we handle your data, write to dirotech.apps@gmail.com.