Privacy Policy ‒ Tregua

1. Introduction

At Lesound App SAS ("Tregua", "we") we respect your privacy. This Policy explains how we collect, use, share and protect your personal data when you use our Tregua mobile application and related services. This version is global in scope and complies with Law 1581 of 2012 (Colombia), the GDPR and Google Play policies.

2. Data we collect

1. Identification: name, email address.
2. User-entered financial data: income, debts, bank, amounts and dates.
3. Technical data: anonymous identifiers, usage logs and events.
4. Authentication: basic information shared by Google/Apple.
5. Permissions: currently only notification access.

3. Purposes

1. Personalize payment strategies and budgets.
2. Improve the app experience and performance.
3. Send reminders and notifications.
4. Provide support and comply with legal obligations.

4. Legal bases

Consent, service execution, legitimate interest and legal compliance.

5. Sharing

We may share data with technology providers (Firebase, Google Cloud) who act as data processors. We do not sell your data.

6. AI data processing

Some Tregua features use artificial intelligence to process your financial data. These features are optional and require your explicit consent before activation.

Data shared with the AI service

• Your financial profile (income, expenses, debts, savings, financial goal).
• Voice recordings for transcription.
• Bank statements or receipts for transaction extraction.

Provider and purpose

This data is processed by Google (Gemini) to power AI features such as personalized financial analysis, voice transcription, and document processing. Documents you upload (such as bank statements) may contain personal identifiers; this is necessary for accurate processing.

Your control over AI data

• AI features are disabled by default.
• They are only activated after your explicit consent within the app.
• You can revoke consent at any time from the application menu.
• Upon revocation, data sharing with the AI service stops immediately.

7. Security

Encryption, access controls, monitoring and secure storage on Google Cloud.

8. Retention

1. Active account: active retention.
2. After deletion: up to 3 years.
3. Technical logs: 12 months.

9. Rights

You may access, rectify or delete your data; request restriction or objection; and withdraw consent. Send your request to apptregua@gmail.com. We will respond within 15 business days.