Privacy Policy
Governed by Ecuador's Personal Data Protection Act
Data we collect
Name and email address (required for registration).
Password, stored as an Argon2 hash — never in plain text.
Phone number and bio, only if the user chooses to add them to their profile (optional).
Profile photo (avatar), only if the user chooses to upload one (optional).
Device location, only if the user grants permission (optional) — used to show your position on the map and calculate distances to nearby places, routes, and services. The app works without this permission; the map still displays all points of interest.
Data we do NOT collect
Payment data — donations are processed directly through DeUna or PayPal, outside the app.
Biometric data.
Device contacts.
How we use your data
Authentication and user profile management.
Continuous service improvement.
Retention and deletion
You can delete your account directly in the Vilcapp app (Profile → Settings → Delete account), or request deletion of all or part of your data by writing to danilo.mendoza@condorsoft.dev.
Deletion removes all personal data: name, email address, phone number, bio, profile photo and password hash. No copies are retained after deletion.
Third parties
Cloudflare R2 — image storage for places and trails.
Fly.io — backend server hosting infrastructure.
We do not sell personal data to third parties or share it for advertising purposes.
Jurisdiction
This policy is governed by the Ecuadorian Personal Data Protection Act (LOPDP).