Privacy policy

• Controller: Ecommerce Business Intelligence, S.L.
• Tax ID (CIF): B01635143
• Address: Campus Universitario de Espinardo, 7 – Edificio CEEIM, 30100 Espinardo (Murcia), Spain
• Contact e-mail: info@meetronda.com

Ecommerce Business Intelligence, S.L. is not required to appoint a Data Protection Officer. Any privacy enquiry can be sent to the e-mail address above.

Ronda works without a user account or sign-up. The information you enter in the app (subscriptions, amounts, currencies, dates, categories, notes and payment status) is stored in a local database on your device, together with your app preferences, and, only if Premium iCloud sync is on, in your own private iCloud (section 3.4). Ecommerce Business Intelligence, S.L. does not receive, access, store or otherwise have any way to view that information.

The app contains no usage-analytics, advertising, tracking, crash-reporting or device-fingerprinting tools, and does not share or sell data to third parties.

3.1 Browsing the website. This site is hosted on the platform of Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, United States), which acts as a data processor. When you visit https://www.meetronda.com, Vercel's infrastructure processes technical connection data (IP address, date and time, requested page, browser type and language) in order to deliver the pages through its content delivery network and keep the service secure. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in operating and protecting the site. Request logs are kept for a short period and are neither combined with other data nor used for profiling. The site uses no analytics (including Vercel's own) and no third-party cookies; fonts and images (including the service logos) are served from our own domain, so browsing the site makes no requests to third-party servers. See the Vercel privacy policy.

3.2 E-mail contact. If you write to info@meetronda.com, we process your address, your name if you provide it and the content of your message in order to answer your enquiry or support request. Legal basis: legitimate interest in replying to communications or, where the enquiry concerns a purchase, performance of a contract (Art. 6(1)(b) GDPR). Retention: for as long as the enquiry is handled and thereafter for the limitation periods of any liability.

3.3 Data entered in the app. Stored locally on your device (in the app's database and settings) and protected by iOS security mechanisms. Ecommerce Business Intelligence, S.L. performs no processing on it. You can delete it by removing subscriptions (each one is deleted together with its payments) or uninstalling the app.

3.4 iCloud sync (optional Premium feature). Sync is turned on automatically when you buy or restore Premium, and you can turn it off at any time in the app's Settings. While it is on, the app keeps a copy of your subscriptions, payments and categories in the private CloudKit database of your Apple Account (iCloud container iCloud.com.meetronda.ronda), stored and encrypted by Apple and accessible only through your Apple Account. If the same item is changed on more than one device, the most recent change prevails. Ecommerce Business Intelligence, S.L. has no access to that private database. This processing is carried out by Apple Inc. as the iCloud service provider under its own terms and privacy policy. Turning sync off does not delete the copy already stored in iCloud; you can delete it from iOS Settings › [your name] › iCloud › Manage Storage. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

3.5 Premium purchase and status check. Payment is made through the App Store and handled by Apple, which processes your payment data under its own terms; Ecommerce Business Intelligence, S.L. never receives your card or bank details. To validate purchases and check whether Premium is active, the app uses the RevenueCat service, provided by RevenueCat, Inc. (United States) as a data processor. The app contacts RevenueCat each time it starts, for every user whether or not they have bought Premium, and when you buy or restore. The data shared are an anonymous app user ID generated by RevenueCat, the App Store transaction and product identifiers (if you have made a purchase), the identifier for vendor (IDFV) that iOS assigns on your device, the device model, iOS and app version, preferred languages and App Store country, as well as the IP address inherent in any connection. RevenueCat does not receive your name, your e-mail or the subscriptions you record in the app. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and, for users who have not bought Premium, legitimate interest in showing the Premium offer and checking whether Premium is active (Art. 6(1)(f) GDPR). Retention: for as long as the entitlement exists and for the statutory limitation periods. See the RevenueCat privacy policy.

3.6 Exchange rates. To convert amounts between currencies, the app downloads a public table of euro-based exchange rates, without any API key, from currency-api (delivered by jsDelivr and its Cloudflare Pages mirror) and, only if that fails, from open.er-api.com (ExchangeRate-API). It does so automatically at most once every 24 hours (checked when the app starts or returns to the foreground) and whenever you tap Update now in Settings. The request is anonymous: it carries no subscription data and no user identifier; as with any Internet connection, the server technically receives your IP address in order to respond. Legal basis: performance of the feature you requested (Art. 6(1)(b) GDPR) and legitimate interest in offering it. The last downloaded rates are kept on your device and used when there is no connection; if rates have never been downloaded, amounts in other currencies are shown unconverted, with a warning.

3.7 Notifications. Payment reminders are local notifications generated and scheduled on the device itself, with no push server and no Ecommerce Business Intelligence, S.L. servers involved. They are off by default: you turn them on for each subscription, choosing 1 to 7 days before the due date, and they are delivered at 9:00 local time. A general switch in Settings turns them all on or off. If you use iCloud sync, Apple may send silent notifications to your devices to signal changes to your data; they contain no personal information and are not shown to the user.

• Apple Inc. (App Store and in-app purchases, iCloud and the silent notifications used by iCloud sync): distribution platform and iCloud provider, under its own terms.
• RevenueCat, Inc.: processor for purchase validation and Premium status checks, under a data-processing agreement compliant with Art. 28 GDPR.
• Exchange-rate providers (currency-api via jsDelivr and Cloudflare Pages; ExchangeRate-API): receive only an anonymous technical request.
• Vercel Inc. (website hosting): processor of the technical connection data described in section 3.1, under a data-processing agreement compliant with Art. 28 GDPR.

No data is disclosed to other third parties, except where required by law or by a competent authority.

RevenueCat, Inc. and Vercel Inc. are established in the United States. Transfers are covered by the Standard Contractual Clauses approved by the European Commission, incorporated in the respective data-processing agreements, and, where applicable, by each provider's certification under the EU-U.S. Data Privacy Framework. Apple Inc. applies the safeguards described in its own terms. Technical data from exchange-rate requests may be served by servers outside the European Economic Area, without any identifying data being sent beyond the IP address.

• App data: remains on your device until you delete it or uninstall the app; the copy in your iCloud, if sync has been on, remains until you delete it from iOS Settings (see section 3.4).
• Purchase data at RevenueCat: for as long as the Premium entitlement exists and for the statutory limitation periods.
• E-mail communications: for the duration of the enquiry and thereafter as long as needed to address potential liabilities.
• Website technical logs: a short period set by Vercel for request logs.

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw consent at any time where processing is based on it, by writing to info@meetronda.com and stating the right you wish to exercise. We may ask for additional information to verify your identity. We will reply within one month, extendable in the cases provided for by the GDPR.

Note that the data stored on your device and in your iCloud is under your direct control: you can view, edit and delete it from the app itself and from iOS settings.

If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), C/ Jorge Juan 6, 28001 Madrid, Spain, www.aepd.es, or with the supervisory authority of your EU country of residence.

Ronda is not directed at children under 14 and does not knowingly collect data from them. If you are under 14, use the app only with the permission and supervision of a parent or guardian.

Ecommerce Business Intelligence, S.L. applies technical and organisational measures appropriate to the risk of each processing activity. The app stores data in its own private container protected by iOS encryption, and all network communication uses HTTPS.

This policy may be updated to reflect legal changes or new app features. The current version is always available at https://www.meetronda.com/privacy with its last-updated date; significant changes will also be announced within the app.