Privacy Policy

1. General Information

This Privacy Policy governs the collection, use and protection of your personal information when you visit and use the services of Alquimia Lab (hereinafter "us", "our" or "Alquimia Lab"), including our website alquimialab-web, the mobile application Kore (hereinafter the "App" or "Kore App") and all associated products, services and content.

By accessing or using our services, you accept the practices described in this policy. If you are under 16 years old, you must obtain the consent of a parent or legal guardian before providing any personal information.

The controller of your data is Isabel Boder, based in Colombia. For any questions about this policy, you can contact us at alquimialab88@gmail.com.

2. Types of Data We Collect

We collect and process the following categories of information when you interact with our website, the Kore App or our services:

2.1 Contact Data

• Information provided through the contact form: name, email address, subject and message
• Correspondence information when we contact you by email

2.2 Email Subscription Data

• Email address to receive our newsletter and welcome sequences
• Subscription preferences and mailing list status
• Email interactions (opens, clicks, replies)

2.3 Usage and Activity Data

• Information about how you browse and use the website
• IP addresses, browser type, operating system, language
• Pages visited, time on site, browsing patterns
• Site diagnostics and performance data

2.4 Advertising Data

• Information about cookies and advertising pixels used by Google AdSense and third-party ad networks
• Ad interaction data (impressions, clicks)
• Advertising ID and interest data for personalized ads

2.5 Automatically Collected Data

• Cookies and similar technologies (see section 7)
• Device and connection usage data
• Data collected by third-party services (Firebase Analytics, etc.)

3. Legal Basis for Data Processing

The processing of your personal information is based on the following legal grounds:

• Consent: When you explicitly give us permission to collect or use your data, such as when you subscribe to our newsletter or accept cookies.
• Legitimate interest: When we use your data to improve our services, analyze site performance, personalize your experience, show relevant ads, or for security purposes.
• Performance of a contract: When it is necessary to provide you a requested service, such as responding to an inquiry through the contact form.
• Legal obligation: When we are required by law to process your data, such as in compliance with tax regulations.

4. What Do We Use Your Data For?

We use the information collected through the website, the Kore App and our services to:

• Respond to your inquiries: Process and respond to messages sent through the contact form.
• Send email communications: Send our newsletter, promotional content and welcome sequences (only with your consent).
• Show personalized ads: Use Google AdSense and third-party ad networks to show relevant ads based on your browsing activity.
• Measure advertising performance: Track ad impressions, clicks and conversions to optimize our campaigns.
• Improve our services: Analyze usage patterns, develop new features and personalize the user experience.
• Security and fraud prevention: Detect and prevent unauthorized access, protect the integrity of our services.
• Comply with legal obligations: Respond to legal requirements and comply with tax and regulatory regulations.

5. Who Do We Share Your Data With

We do not sell or rent your personal information. We only share data with third parties that help us operate our website, the Kore App and our services, and that comply with strict data protection measures:

5.1 Essential Service Providers

• Firebase (Google): Analysis of website and Kore App (Analytics, Auth, Firestore). Usage data is processed on Google’s servers.
• Brevo (formerly Sendinblue): Management of email campaigns, newsletters and welcome sequences. Your contact data is stored on their servers.

5.2 Advertising Networks (Google AdSense)

Our website uses Google AdSense, an online advertising service provided by Google. Google uses cookies (including the DART) to show personalized ads based on your browsing history on this and other websites. Google may also collect information about your visits to this site and other sites in order to show ads about products and services that may be of interest to you.

Google, as a third-party vendor, uses cookies to show ads on our site. Google’s use of the DART cookie enables Google to show ads to users who have visited our website and other sites on the Internet. Users may opt out of the use of the DART cookie by visiting the Google privacy policy and configuring ad preferences.

5.3 Technical Providers

• Web hosting servers.
• Analytics and usage metrics providers.

5.4 Legal Disclosure

We may disclose your data if we are required by law, a court order, a government request, or to protect our rights, property or safety, or those of our users and the public.

6. Third-Party Advertising and Partners

In addition to Google AdSense, this website may use other third-party ad networks that collect information about your visits to this and other websites in order to show ads based on your interests. These providers may use:

• Cookies: To track your browsing activity and show personalized ads.
• Web beacons / pixels: To count visits, track conversions and measure ad effectiveness.
• Device identifiers: To recognize your device across different websites.
• Interest data: To segment audiences and show relevant ads.

Important: These third parties may collect information about your activity on this website and on other websites to provide ads about products and services they think may interest you. We have no direct control over the data practices of these third-party advertising providers. We recommend reviewing the privacy policies of each ad network to learn more about their data practices and how to opt out of personalized ads.

Ads may be shown in different formats: banners, text, images or links. By clicking an ad, you may be redirected to the advertiser’s website, where their own privacy policy will apply.

7. International Data Transfers

Your data may be transferred, stored and processed on servers located in the United States or other countries outside your jurisdiction when using the website or the Kore App. Firebase (Google) and Google services operate under the EU-U.S. Data Privacy Framework, which ensures adequate protection for data transferred from the European Union and Switzerland. Brevo operates under the EU-US Privacy Shield framework for personal data transfers from the EU. Google AdSense processes user data on servers located in the United States in accordance with Google’s policies.

8. Data Retention

We keep your personal data for as long as necessary to fulfill the purposes described in this policy:

• Contact data: As long as we have a business relationship or until you request its deletion.
• Email subscription data: Until you withdraw your consent or request unsubscribe.
• Site usage data: Up to 30 months for statistical analysis, then anonymized.
• Marketing emails: Until you withdraw your consent or request unsubscribe.

If your account or subscription remains inactive for more than 24 months, we may proceed to delete or deactivate it.

9. Cookies and Similar Technologies

We use cookies and similar technologies on the website and the Kore App to:

• Essential cookies: For the operation of the website (session, authentication, language preferences).
• Analytics cookies: Firebase Analytics to understand how users interact with our website and the Kore App.
• Advertising cookies: Google AdSense and third-party ad networks use cookies to show personalized ads, measure campaign effectiveness and avoid showing the same ads repeatedly.
• Preference cookies: To remember your preferred language and settings.
• Marketing cookies: To show relevant content and measure email campaigns (only with consent).

You can manage your cookie preferences at any time through your browser settings. Keep in mind that by disabling essential cookies, parts of our website may not work correctly. You can also manage your cookie preferences with Brevo through their privacy policy.

Opt-out option: You can opt out of personalized Google AdSense ads by visiting Google Ads Settings or downloading the Google Analytics opt-out add-on. You can also opt out of personalized ads from other ad networks through the OptOut.org or the Digital Advertising Alliance opt-out tool.

10. Your Privacy Rights (GDPR / LOPD)

Depending on your jurisdiction, you have the following rights:

• Right of access: Request and receive a copy of the personal data we hold about you.
• Right to rectification: Correct inaccurate or incomplete personal data.
• Right to erasure: Request the deletion of your personal data ("right to be forgotten").
• Right to data portability: Receive your data in a structured format and request its transfer to another controller.
• Right to object: Object to the processing of your data, especially for direct marketing and personalized advertising.
• Right to restrict processing: Restrict the processing of your data in certain circumstances.
• Right not to be subject to automated decisions: Not be subject to decisions based solely on automated processing.
• Right to withdraw consent: Withdraw your consent at any time without affecting the lawfulness of previous processing.
• Right to lodge a complaint: Contact your local data protection authority.

To exercise any of these rights, send a request to alquimialab88@gmail.com. We will respond within the next 30 business days. We will verify your identity before processing any request.

11. California Residents' Rights (CCPA)

If you reside in California (United States), you have the following additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: Request the categories and specific pieces of personal data we have collected, used, disclosed and sold.
• Right to opt out of the sale: Object to the sale of your personal data to third parties. You can exercise this right by clicking "Do Not Sell My Personal Information" or contacting us at alquimialab88@gmail.com.
• Right to deletion: Request deletion of personal data we have collected from you.
• Right not to be discriminated against: We will not discriminate against you for exercising your rights under the CCPA.

This website does not sell personal data to third parties. Data collected through Firebase Analytics and Google AdSense is used solely for analytical and advertising purposes, in compliance with Google’s policies.

12. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction, both on the website and in the Kore App. These measures include:

• Data encryption in transit (TLS/SSL).
• Role-based access control for internal staff.
• Continuous security monitoring and intrusion detection.
• Privacy and security policies for all staff with access to data.
• Periodic risk assessments and security audits.

Please note that no method of Internet transmission or electronic storage is 100% secure. Although we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

12B. Data Collected in the Kore App

When using the Kore App, we collect the following specific data:

12B.1 Account and Authentication Data

• Email, name and profile photo (Firebase Auth, Google Sign-In, Facebook Login)
• Firebase UID, authentication tokens

12B.2 App Usage Data

• Tasks, habits, notes, diary, calendar events (stored locally in Room + synced to Firestore when signed in)
• Notification, sound, vibration, language preferences (local DataStore)
• Premium/subscription status (Google Play Billing)

12B.3 Technical and Diagnostic Data

• Firebase Analytics: screen events, actions, errors, performance
• Firebase Crashlytics: crash reports (if enabled)
• Device identifiers (Firebase Instance ID, Android ID)

12B.4 Notifications

• FCM token for push notifications (opt-in, disabled by default)
• Schedules and preferences for motivational phrases and events

All personal data is stored securely (TLS in transit, encrypted at rest in Firestore/Room) and you can request its deletion at any time.

12C. Intellectual Property and Music Rights

All music tracks included in the Kore application are the exclusive intellectual property of Alquimia Lab. The music content was generated using artificial intelligence tools under a commercial license granted to Alquimia Lab, which gives us the necessary rights for its distribution and use in the application.

No third-party music is used without proper authorization. Track names, covers and associated information are trademarks and registered content of Alquimia Lab.

Redistribution, reproduction or commercial use of the music content is prohibited without the prior written consent of Alquimia Lab. For license or attribution requests, contact us at alquimialab88@gmail.com.

13. Minors

Our services are not directed at children under 16 (or the equivalent age under applicable jurisdiction). We do not knowingly collect personal information from minors. If we discover that we have collected data from a minor without parental verification, we will take steps to delete that information from our records. Parents or legal guardians can contact us at alquimialab88@gmail.com to request deletion of a minor's data.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant change through:

• A prominent banner on our website.
• Publishing the new version with the "Last updated" date revised.

We recommend reviewing this policy periodically. Your continued use of our services after any change constitutes your acceptance of the new practices described.

15. How to Contact Us

If you have questions, requests or concerns about this Privacy Policy or the processing of your personal data, you can contact us:

• Email: alquimialab88@gmail.com
• WhatsApp: +57 310 410 8483
• Contact form: Contact
• Delete Kore data: Request data deletion
• Address: Colombia

You also have the right to lodge a complaint with the data protection authority of your jurisdiction. In Colombia, you can contact the Superintendency of Industry and Commerce (SIC).