Privacy Policy
This Privacy Policy describes how Ambulante Bravo (“we”, “us”) collects, uses, shares, and protects your information across the business-management application for food businesses identified as com.ambulantebravo.app (“the App”), our website at ambulantebravo.com (“the Site”), and their associated services (together, the “Service”).
Data controller: Ambulante Bravo. Privacy contact: hola@ambulantebravo.com
By using the Service you accept the practices described in this Policy. If you do not agree, please do not use it.
1. Information we collect
a) Account data
Name, email address, password (which we store only in hashed, encrypted form), and your role within the business.
b) Business data you enter
The App exists to manage your business, so we process the information you enter, which may include: sales and tickets, menus and their costs, inventory, suppliers, purchase receipts or tickets (including their images), and data about your employees, including their salaries.
c) Tax and invoicing data
If you use electronic invoicing (CFDI), we process the tax data required to issue invoices, such as the RFC (tax ID) and billing details, through our invoicing provider.
d) Payment and subscription data
Payments and subscriptions are processed through Stripe. We do not store your full card numbers; Stripe processes them directly under its own policies.
e) Camera, microphone, and photos
With your permission, the App accesses your camera, microphone, and photo library to capture pictures of menus, receipts, or tickets, and to scan codes. We access these resources only when you take the corresponding action.
f) Technical and usage data
Device identifiers, App version, usage events (product analytics), and error logs, in order to operate, secure, and improve the Service.
g) Biometric authentication
If you enable biometric unlock (fingerprint or face), verification happens on your device through your operating system's features. We do not receive, see, or store your biometric data.
h) Website usage
On the Site we measure how it is used: the pages that are opened, how far down each one is read, which links and buttons are clicked, which frequently asked questions are expanded, and whether a signup form was sent and with what result. We do this with PostHog, the same analytics provider listed in section 3, and the requests are served from our own domain rather than a third-party one.
To do it we keep an identifier in your browser, so that several pages read in one sitting count as one visit rather than several. You can delete it at any time by clearing this site's data in your browser, and you can stop it being stored at all through your browser's settings or any tracker-blocking extension. Nothing on the Site depends on it: every page behaves the same way without it.
Browsing does not require an account and is not tied to your name. If you send us your address to join the closed test, we do link that visit to the address you sent, so that we can tell which page led to a signup.
i) What we do NOT collect
The App does not collect your geographic location or GPS data. We also do not sell your information to third parties.
2. How we use your information
- Provide and operate the Service and its business-management features.
- Issue invoices (CFDI) when you request them.
- Process payments and manage your subscription.
- Provide artificial-intelligence features (for example, menu analysis or assistance).
- Offer support and communicate with you (transactional emails).
- Maintain security, prevent fraud, and debug errors.
- Improve the App based on aggregated usage data.
3. Who we share your information with
We share data only with providers that act as processors, to the extent necessary to deliver the Service:
| Provider | Purpose |
|---|---|
| Railway | Server and database hosting (PostgreSQL). |
| Stripe | Payment and subscription processing. |
| Facturapi | Electronic invoicing (CFDI). |
| PostHog | Product analytics (usage events). |
| Anthropic (Claude) | Artificial-intelligence features. |
| Resend / SMTP | Sending transactional emails. |
| Expo (EAS) | Delivering App updates. |
4. Artificial intelligence
Some features send your business content (for example, menu images or text) to our AI provider to generate results for you. We use providers that, under their API terms of use, do not use your content to train their models. The information is processed solely to return the result you requested.
5. Data about your employees and other third parties
If you record data about your employees (for example, names or salaries) or other third parties, you are responsible for that information toward them, including informing them and obtaining any applicable authorizations. We process that data on your behalf, solely to provide you with the Service.
6. Data retention
We retain your information while your account is active and for as long as necessary to fulfill the purposes described here or applicable legal and tax obligations. When it is no longer needed, we delete or anonymize it.
7. Security
We apply reasonable technical and organizational measures to protect your information: encryption in transit (TLS), password storage using hashing, role-based access control, and secure credential storage on the device. No system is completely infallible, but we work to keep your information protected.
8. Your rights and account deletion
You may request access to, correction of, or deletion of your data, as well as deletion of your account, by writing to hola@ambulantebravo.com. We will address your request within a maximum of 30 days. When you delete your account, we delete or anonymize your personal data, except for data we are required to keep due to legal or tax obligations.
9. Children's privacy
The Service is intended for business owners and employees and is not directed at minors. We do not knowingly collect data from children.
10. International transfers
Some of our providers may process information on servers located outside your country (for example, in the United States). By using the Service, you understand that your information may be processed in those locations with reasonable safeguards.
11. Changes to this Policy
We may update this Policy from time to time. We will post the current version at this same address and indicate the date of the last update. We may notify you of significant changes within the App or by email.
12. Contact
If you have questions about this Policy or about how we process your data, contact us at hola@ambulantebravo.com.