1. Who processes your data
The data controller is Daniele Martini (Spain), developer of the ProveeGo application, published on Google Play under the developer name «Mundos Paralelos con IA». You can get in touch at soporteproveego@gmail.com about anything to do with this policy or with your data, including the full postal address if you need it in order to exercise your rights.
2. Information we collect
- Account data: name, email address (including a work address) and password.
- Business information: the name, address and phone number of your business.
- Usage data: the orders, products and supplier details you enter (supplier name, contact and sales rep).
- The order PDFs the app generates for you to share with your suppliers.
- Photos and images uploaded so the AI can extract products from them.
- Photos of delivery notes taken when you receive an order (up to 4 per order), either with the camera or picked from your gallery.
- Data about the receipt of each order: quantities received, shortages, returns and the reason for them, products that arrived without being ordered, actual prices, and the name and date of whoever recorded the delivery.
- Temporary audio recordings for the voice assistant (they are not stored).
- An FCM token so we can send push notifications.
- Subscription data: we neither see nor store your card (Google Play takes the payment). We do record which plan you have, since when and whether it is still active, linked to an internal identifier for your account, so we can give you access to the paid features. This is handled by RevenueCat.
- Crash reports: when the app fails, the technical error is sent along with the device model, the Android version, the app version and the internal identifier of your account (not your name or your email). It is used to find and fix bugs.
3. How we use the information
- To provide and improve the order and supplier management service.
- To send push notifications related to your activity in the app.
- To process images and text with artificial intelligence (Google Gemini), including reading the photos of delivery notes to fill in the quantities received automatically.
- To compare what you ordered with what actually arrived and to generate the delivery PDF that you choose to share.
- To manage subscriptions and payments for the Pro plan.
- To send support messages when you ask for them.
4. The legal basis for processing them
- Performance of the contract – the data about your account, your business, your suppliers and your orders is needed to provide the service you signed up for.
- Consent – the camera, the gallery, the microphone and notifications are only used when you give permission, and you can withdraw it at any time from your phone's settings.
- Legitimate interest – crash reports and anti-abuse controls, so that the app works and automated systems cannot use it to your detriment.
- Legal obligation – the billing data for subscriptions, which is handled by Google Play.
5. Third-party services
The app uses the following services, each with its own privacy policy:
- Firebase (Google) – authentication, database and notifications.
- Firebase Crashlytics (Google) – app crash reports.
- Google Gemini / Cloud AI – AI processing.
- RevenueCat – subscription management.
- Google Play Billing – payment processing.
- EmailJS – sending contact and support forms.
6. Where your data is kept, and transfers outside Europe
Your database and the server processes are hosted in Europe (Firebase, Madrid region). Some of the services listed above are companies based outside the European Economic Area and may process data on their own servers: that is the case for the artificial intelligence processing, the subscription management and the sending of support emails. Those transfers are covered by the standard contractual clauses approved by the European Commission, which each of those providers has signed.
7. Storage and security
All data is stored in Firebase Firestore with access protected by security rules, encrypted in transit (HTTPS/TLS) and at rest.
8. App permissions
- Camera – to photograph supplier price lists and delivery notes.
- Photos and media – to pick images already saved in your gallery (price lists and delivery notes). The app only accesses the ones you select.
- Microphone – for the voice assistant (temporary audio, not stored).
- Notifications – for alerts about orders and your team's activity.
- Storage – to export and share order PDFs.
9. How to delete your account and your data from ProveeGo
Steps: open the ProveeGo app, go to Settings, scroll to the bottom and tap «Delete my account and data». You will be asked to confirm, and the deletion happens right then. If you can no longer sign in to the app, write to soporteproveego@gmail.com from the email address you signed up with and we will handle it for you.
What gets deleted:
- If you are the owner of the business and no active staff are left, the whole business is deleted: suppliers, products, orders, the delivery note photos and the delivery records, the staff who were removed, the business access code and the business record itself. Your sign-in account (email and password) is deleted too.
- If you work for someone else's business, your staff record (name, email, photo and permissions) and your sign-in account are deleted. If you have worked for several businesses, all of your records are deleted, not only the one for the business you had open.
- Any feedback or comments you have sent us from Settings, which carry your email address.
- The internal usage counters (the ones that prevent abuse of the artificial intelligence), which are tied to your account.
What is kept:
- If you worked for someone else's business, the orders and the data you entered still belong to that business and are not deleted, because they are its working history. They may still show the name you recorded each order or each delivery with.
- If you are the owner and there are still active staff, the app will not let you delete until you hand the administration over to someone else or remove them. This is so your team is not left without access to their data.
- The payment history of subscriptions is kept by Google Play, not by us, for tax and accounting obligations. RevenueCat, which is what tells us whether your subscription is active, also keeps a record of your purchases linked to an internal identifier for your account; you can ask us to request its deletion by writing to us.
- If you have written to support (or sent us a comment from the app), the email we received stays in our support inbox for as long as it is needed to help you and as a record of the enquiry. You can ask us to delete it.
Timescales: deletion is immediate and we keep no extra copies. The database keeps recovery versions for 7 days as protection against technical failures; after that, the data is not there either. Crash reports are anonymous (they carry neither your name nor your email) and are kept by Google Firebase Crashlytics according to its own retention periods.
Separately from deleting your account, the delivery note photos and the delivery records are stored alongside the order they belong to and are deleted with it: when the order is deleted or when its delivery is undone from the app. Only the administrators of the business can do that.
10. Your rights
You have the right to access your data, correct it, delete it, restrict or object to its processing, and ask us to hand it over in a format you can take to another service. To exercise any of these rights, write to us at soporteproveego@gmail.com; we will reply within one month at the latest.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency, the Agencia Española de Protección de Datos (www.aepd.es).
11. Changes to this policy
We may update this policy from time to time. We will tell you about any relevant changes through the app.
12. Terms and Conditions
Use of the app is also subject to our Terms and Conditions, which include the limitation of liability of the service.
13. Contact
For any question about privacy, write to us at soporteproveego@gmail.com.