Privacy Policy

This Privacy Policy explains how BITACT SOCIEDAD DE RESPONSABILIDAD LIMITADA (“Company”) collects, uses, stores, and protects personal information when you use the Bitact mobile application (“Service”).

The Company complies with the applicable laws, Google Play Developer Program Policies, and global privacy standards.

1. Company Information

Company Name: BITACT SOCIEDAD DE RESPONSABILIDAD LIMITADA
Representative: GENESIS MIDALIS MUNOZ MORENO
Address: Provincia 01 San José, Cantón 02 Escazú, San Rafael, del Centro Comercial La Paco, trescientos metros norte, Plaza Florencia, Local Diez, Código Postal 10203
Business Registration Number: 3-102-920820
App Name: Bitact

2. Personal Data We Collect

■ Information provided by the user (Required)

Email address
Phone number
Password (encrypted)

■ Information collected automatically

Device information (model, OS version, device identifiers)
IP address, access logs, timestamps
App usage logs
Error logs and crash reports

■ Information collected via third-party services

Firebase Analytics & Crashlytics (log and performance data)

The Service does not collect sensitive personal data.

3. Purpose of Processing Personal Data

We use the collected information for the following purposes:

Account management

Account creation, login, authentication
Password recovery

Wallet & Trading Operations

Cryptocurrency wallet creation and management
Deposit and withdrawal processing
Order placement and transaction processing

Security & Service Improvement

Fraud and unauthorized access detection
Technical troubleshooting and error resolution

Customer Support & Notifications

4. Retention Period

Personal data is retained based on the following:

Immediately deleted upon account deletion (except where retention is required by applicable law)
Transaction records: retained for up to 5 years
Log data: retained for up to 1 year

Data is safely deleted after the retention period.

5. Sharing of Personal Data

We do not sell or share personal data with third parties.

Personal data may be shared only:

When required by law
When requested by authorities through lawful procedures
When the user provides explicit consent

6. Outsourcing of Personal Data Processing

The Company may outsource certain tasks to external service providers to ensure stable service operation and performance analysis. When outsourcing personal data processing, the Company complies with applicable privacy laws and Google Play policies and ensures that adequate technical and organizational safeguards are in place.

The Company currently entrusts personal data processing to the following provider:

Google Firebase (Google LLC)

7. International Transfer of Data

Firebase may store data in the United States or other regions depending on Google’s infrastructure.

Destination: United States (or Google data centers globally)
Purpose: Data storage and service operation
Protection Measures: Encryption during transfer and storage

8. User Rights

Users may exercise the following rights at any time:

Access and correction of personal data
Request to suspend processing
Request deletion of personal data
Account deletion

Requests will be processed through email or the in-app support center.

9. Security Measures

We implement the following security measures:

Encrypted storage of passwords
Encrypted network communication (SSL/TLS)
Access control for servers and databases
Regular monitoring of logs and security events
Data backup and disaster recovery systems
Protection against unauthorized access and attacks

10. Children’s Privacy

The Service is not intended for individuals under the age of 18, and we do not knowingly collect data from children.

11. Cookies & Tracking Technologies

Firebase Analytics may collect anonymized usage data.

Users may restrict tracking via device settings.

12. Data Protection Officer

For privacy-related inquiries:

Officer: GENESIS MIDALIS MUNOZ MORENO

13. Changes to This Policy

If this Privacy Policy is updated, changes will be announced through the app or the official website.