Privacy Policy

At Rankiamos we respect your privacy and are committed to protecting your personal data. This policy describes what information we collect, what we use it for and how we protect it.

1. Data controller

Controller: Alejandro Verjel
Product: Rankiamos (iOS rank tracking SEO app)
Address: Bogotá, Colombia
Contact email: soporte@rankiamos.com

2. What data we collect

2.1 Data you provide

• Account: email, name and your Apple or Google identifier if you sign in with them (Sign in with Apple lets you hide your email).
• Subscription: billing data is processed by Apple directly — we don't have access to your card.
• Service content: domains, keywords, cities, tags and settings you enter, plus the Search Console data of the property you connect to each project (up to 250 queries from the last 28 days, with clicks, impressions, CTR and average position; each update replaces the previous one).
• Search Console connection: if you connect it, we store on our server the read-only permission you grant us to fetch your metrics. When you delete your account we revoke it with Google and erase it.
• Support: messages you send us by email or other channels.

2.2 Data we collect automatically

• Usage data: features you use, frequency, technical errors.
• Last time you opened the App: date and time. On the free plan we use it to pause automatic measurements if you don't open the App for 30 days; nothing is deleted and they resume when you come back.
• Device data: model (iPhone, iPad), iOS version, language.
• Network data: IP address (anonymized after processing), approximate country.

We comply with Apple App Tracking Transparency: we do not track your activity outside Rankiamos without your explicit permission.

3. What we use it for

We do NOT use your data for: advertising, commercial profiling, sale to third parties, or training external AI models.

4. Legal basis for processing

• Contract performance (Art. 6.1.b GDPR): to provide the Service you contracted.
• Consent (Art. 6.1.a GDPR): to receive push notifications, etc.
• Legitimate interest (Art. 6.1.f GDPR): product improvements based on aggregate usage.
• Legal obligation (Art. 6.1.c GDPR): billing, tax requirements.

5. Sharing with third parties

We share minimal data only with strictly necessary providers:

Each provider complies with security standards (SOC 2, ISO 27001) and signs a Data Processing Agreement with us.

We never sell your data. Never.

6. Data retention

• Active account: as long as you keep the account active.
• Deleted account: when you delete your account from the App, your account and data are erased instantly and, if you signed in with Apple, we also revoke Rankiamos' access to your Apple ID; they may only remain in backups for the period stated below.
• Billing data: 7 years (Colombia tax requirements).
• Backups: up to 90 days for operational security.

7. Security measures

• Encryption in transit (TLS 1.3) and at rest (AES-256).
• Row-Level Security in Supabase: only you access your data.
• Sign-in with Apple, Google or email and password.
• Annual security audits.
• Breach notification within 72h per GDPR Art. 33.

8. Your rights

Under GDPR (EU) and Law 1581 of 2012 (Colombia), you have the right to:

• Access: obtain a copy of your data.
• Rectification: correct inaccurate data.
• Erasure ("right to be forgotten"): have us delete your data.
• Restriction: restrict processing in certain cases.
• Portability: receive your data in a structured format; on the Pro plan you can also export your keywords to CSV from the App.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: when you granted it as legal basis.
• Complaint to authority: SIC (Colombia), AEPD (Spain), CNIL (France), etc.

Exercise these rights by writing to soporte@rankiamos.com. We respond within 30 days max.

9. Minors

Rankiamos is not directed at people under 18. We do not knowingly collect data from minors. If you are a parent and discover that your child has provided us with data, write to us and we will delete it.

10. International transfers

Your data may be processed on servers outside your country (Apple: US, EU and other countries; Supabase: São Paulo, Brazil; OpenRouter and Anthropic: US, with Amazon Web Services or Google Cloud as backup, only if you use the AI analysis). These transfers are made under:

• European Commission adequacy decisions (when applicable).
• EU Standard Contractual Clauses (SCC).
• Security guarantees equivalent to GDPR.

11. Cookies

The website rankiamos.com uses the technical cookies it needs to function and, only if you accept them in the consent banner, Google Analytics 4 analytics cookies. More details in our Cookie Policy.

The iOS App does NOT use cookies (it stores data locally on your device and in your Rankiamos account).

12. Changes to this policy

If we update this policy, we will notify you by email and/or within the App with at least 30 days notice if the changes affect your rights. The current version is always available at this URL.

13. Contact

For any privacy inquiry:

soporte@rankiamos.com
Alejandro Verjel · Bogotá, Colombia
https://www.rankiamos.com

Data protection authorities where you can file complaints:

• Colombia: Superintendencia de Industria y Comercio (SIC) — www.sic.gov.co
• Spain: Agencia Española de Protección de Datos (AEPD) — www.aepd.es
• Mexico: INAI — home.inai.org.mx
• Argentina: AAIP — argentina.gob.ar/aaip