Privacy Policy

1. What data we collect

When you sign up: your name, your email and your password.

If you fill them in under Personal details, which is optional: date of birth, phone, address, city, country, ID type and number, and the photos of your ID. A lender may ask you for them before lending to you.

If you sign in with Apple or Google: the name and email that service gives us (with Apple it may be an address that forwards to your email, if you choose to hide it) and an identifier of your account with that service. We do not receive your Apple or Google password.

Lender data: their deposit method and the details of the account where they receive money.

Internal clients: if you are a lender and record a borrower who doesn't use the application, we keep the details you enter about them: their name and, if you add them, their phone, email, date of birth, ID, address, notes and the photos of their ID.

Activity: requests, loans, installments, and recorded payments.

Ratings: the ones you give and receive when a loan with another user ends (1 to 5 stars and tags from a fixed list; there is no free text). We keep who gave each one so that each person counts only once, but we do not show it to anyone.

From your phone: the identifier Apple or Google gives it to receive notifications, and whether it is an iPhone or Android.

We do not collect data from your device for advertising purposes, and we do not use third-party trackers.

2. What we use it for

So that a lender can know who they are lending to, which is why they can ask for documents.

To keep track of what is owed and what has been paid.

To notify you of due dates, requests and payments, and to contact you about your account or your loans.

To show each user's rating summary to those who can see it (section 3).

We do not use your data for advertising, and we do not sell it or transfer it to third parties for commercial purposes.

3. Who sees what

The lender you send a request to sees the identity and contact details you have filled in, and the photos of your ID if you uploaded them. That is what allows them to decide whether to lend to you.

The borrower sees the lender's name, code, city and the terms they publish. Once the lender approves a loan for them, the borrower also sees the lender's deposit methods with the details the lender entered for each one (for example, bank, account number and holder), so they know how to receive the money and how to pay. They do not see the lender's portfolio or other clients.

An internal client's details and photos are seen only by the lender who recorded them.

Ratings are anonymous: no one sees an individual rating or who gave it, not even the person who received it. Only a summary is shown (the average stars, how many people rated, and how many marked each tag) once at least 5 different people have rated, and it updates every 5 new ratings. A lender's summary can be seen by any signed-in user, unless one of them has blocked the other; a borrower's, only by the lenders they have a request, a loan or a connection with. Everyone sees their own.

No user sees another user's loans, clients, or documents. This does not depend on the application but on the database rules, which reject any query for other people's data.

4. Who it is shared with

With Supabase, which hosts the database and files on our behalf and under our instructions.

With Expo, which delivers notifications to your phone through Apple or Google: it receives your phone's notification identifier and the text of the notification.

If you sign in with Apple or Google: that service confirms who you are and knows that you use PrestaLink. It receives nothing about what you do in the application.

If you are a lender and subscribe: with Apple or Google (or the external processor you pay with), which charge the subscription, and with RevenueCat, which confirms its status to us. They receive your user identifier and the purchase details, but not the details of your loans or your clients.

With Sentry, which receives the app's error reports so we can fix them: what failed, on which screen, your phone's model and operating system, the app version and your user identifier. It does not receive your name, your email, your documents or the details of your loans.

With an authority, when a valid legal order requires us to.

With no one else.

5. The photos of your ID

Uploading them is optional. They are stored in private storage, in a separate folder for each user. They cannot be accessed through a public link.

Only the lender you sent a request to can see them, and they can approve them or ask you for new ones. They are not used for anything else.

The photos of an internal client's ID are uploaded by their lender, and only that lender can see them.

6. How long we keep it

For as long as your account exists, and afterward for the time required by applicable legal or accounting obligations.

If you delete your account, we erase your personal data, the photos of your ID, your email, and your access. If you had loans, the other party keeps that history with your name marked "account deleted", because it is also their record of what they lent or paid.

Deleting your account also erases the ratings you gave and the ones you received.

If you are a lender, deleting your account also erases your internal clients, with their loans, details and photos. An internal client with no loans can be deleted at any time, and their details and photos with them.

If you signed in with Apple, when you delete your account we also ask Apple to remove the permission you gave PrestaLink.

While you have loans in progress with another user, the account cannot be deleted: their history is the proof of what is owed.

7. Your rights

Access your data and correct it: you can edit it yourself under More › Personal details.

Ask us to delete your account and your data. If you have active loans, they must be closed first: what is owed cannot be erased unilaterally because it affects the other party.

Object to processing or request a copy of your data by writing to soporte@prestalink.app (or prestalink.soporte@gmail.com)

If a lender recorded you as an internal client, you can ask them to correct or delete your details, or write to us at soporte@prestalink.app (or prestalink.soporte@gmail.com)

8. Security

All traffic between the application and the server is encrypted.

Access to data is controlled by the database row by row, not by the application: even if someone queried the server outside the app, they would only get their own data.

Passwords are stored encrypted and no one, including us, can read them. If you sign in with Apple or Google, you have no password in PrestaLink.

To open faster, the application keeps a copy of your profile and your home screen on your phone. It is only shown to your same account. When you sign out from the application it is erased, and the phone stops receiving your notifications. If the session closes on its own due to inactivity, both are kept until you sign in again.

9. Minors

PrestaLink is not directed at people under 18, and we do not knowingly collect their data. If we detect an account belonging to a minor, we close it and delete its data.

10. Changes and contact

If we change this policy, we will notify you in the application.

Data controller and contact: soporte@prestalink.app (or prestalink.soporte@gmail.com)