Privacy Policy
This policy explains what data the Amigo Secreto app (app.amigo.secreto) and its
web version handle, what they are used for, how long they last and who they are shared with.
The essentials in three lines. There are no accounts and no sign-up: the app never asks for your email, phone number or a password. The only things stored are what you type in to organize the exchange (names, wish lists and event details). Everything deletes itself: 24 hours in live mode and 30 days in classic mode.
1. Who is responsible
The data controller is the individual developer of Amigo Secreto, reachable at ja.juarez.cruz@gmail.com. Write to that address with any question or to exercise the rights described in section 9.
2. What data is collected
Data you type in
This is the only personal data in the system. You enter it when creating or joining a draw:
- Each participant's name or nickname. The app does not verify whether it is a real name; you decide whether to use full names, nicknames or just initials.
- An avatar, which is an emoji picked from a list. No photographs are uploaded or processed.
- Each participant's wish list: free text that you write.
- The exchange details: event name, budget, date and location.
- Exclusion rules, that is, which pairs of participants must not draw each other.
- The result of the draw: who was assigned to give a gift to whom.
- The guardian relationship, when someone plays on another person's behalf (see section 4).
Technical data
- The room identifier, a random 10-digit number generated by the app.
- Session tokens used to recognize your device within a room without requiring you to register.
- A temporary connection identifier while the room is open, used to show who is online.
- Server logs: the IP address and time of each request are recorded in the infrastructure's technical logs, as with any internet service. They are used to diagnose failures and detect abuse.
Data stored on your own phone
The app stores locally, on your device, things like the nickname you claimed, your language and your interface preferences. That information is not sent to any server and disappears if you clear the app's data or uninstall it.
Advertising
The app displays ads served by Google AdMob. To do so, Google may access your device's Android advertising identifier and technical data such as your IP address, device model and your interaction with the ads, subject to its own policies. You can reset or delete that identifier in the Android privacy settings. Where applicable in your region, the app will ask for your consent before showing personalized ads.
What the app does NOT collect
The following are never requested or stored: email address, phone number, passwords, contact list, geographic location, photographs, camera, microphone, or payment data. The app has no account system and cannot identify you across different rooms.
3. What it is used for
The data you type in is used solely to make the exchange work: assigning names without repeats, honoring exclusions, showing each person their assignment and displaying wish lists to whoever needs them. It is not used to build profiles, is not analyzed for commercial purposes and does not feed any recommendation system. Technical data is used to operate the service and diagnose failures. The advertising identifier is used by Google to serve and measure ads.
4. Playing on someone else's behalf
The app lets you play on behalf of someone who does not have a phone at hand. Whoever does so enters that person's name and wish list and sees their assignment for them.
If you use that feature, keep in mind that you are entering another person's data and that you must have their authorization. We recommend entering only a first name or a nickname, never a full name or any other detail that could identify them outside the group. That data expires and is deleted on the same schedule as everything else.
Amigo Secreto is intended for a general audience, not for children, and does not knowingly collect data from minors. If you believe a minor's information was entered and you want it removed before it expires, write to the contact address with the room identifier.
5. How long data lasts
Each draw's data deletes itself. The countdown starts when the room is created and does not reset even if the room keeps being used:
| Mode | Retention | Why |
|---|---|---|
| Live | 24 hours | Played on the spot, with everyone together. After a day there is nothing left worth keeping. |
| Classic | 30 days | The link is shared and each person opens their box whenever they can, over several days. |
Once the deadline passes, the service stops returning that data immediately: as far as the app is concerned, the room no longer exists. Physical deletion from the database is performed by an automated process shortly afterwards, normally within the following 48 hours. Technical server logs are kept for short periods and contain neither wish lists nor draw results.
6. Who it is shared with
Data is not sold, not rented and not shared with third parties for commercial purposes. Only two providers are involved, each with its own role:
- Amazon Web Services (AWS) hosts the database and the application server.
- Google AdMob serves the ads and receives the data described in section 2.
Data could also be disclosed if legally required by a competent authority.
7. Where it is processed
The infrastructure is hosted in AWS region us-east-1, in the United States. This means that even if you use the app from Mexico or any other country, your information is stored and processed outside your country of residence. By using the app you accept that international transfer.
8. Security, and what you should know about the link
Communication between the app and the server is encrypted over HTTPS, and data in the database is encrypted at rest by the provider.
Important, and worth stating plainly: access to a room is controlled solely by the 10-digit identifier contained in the invitation link. There are no passwords. Anyone holding that link can enter the room and see the names and wish lists inside it. Share the link only with the people in your exchange and avoid posting it on social media or in open groups.
For the same reason, we recommend not writing anything into a wish list that you would not want the group to see: addresses, phone numbers, banking details or any sensitive data.
9. Your rights
You have the right to access, rectify, cancel or object to the processing of your data, as well as to request its deletion. Since there are no user accounts, these rights are exercised as follows:
- Access and rectification. Open the room with your link: there you can view and edit your name, avatar and wish list at any time.
- Deletion. The simplest route is to wait: data expires on its own within the periods in section 5. If you need it erased sooner, write to the contact address quoting the room identifier, which appears in the invitation link.
- Local data. To remove what the app stores on your phone, clear the app's data in the Android settings or uninstall it.
- Advertising. You can reset or delete your advertising identifier in the Android privacy settings, and change your choice about personalized ads wherever the app offers it.
Note that without accounts or registered email addresses, we have no way of verifying the identity of whoever requests a deletion beyond their knowledge of the room identifier.
10. Changes to this policy
If the way the app handles data changes, this document and the date in the header will be updated. Significant changes will be announced inside the app.