Privacy policy

Last updated: May 28, 2026

This policy describes how Impulse Legacy (the "Controller", "we"), operator of Junte, collects, uses, shares, and protects your personal data when you use the mobile app or the junteapp.com website. We apply the principle of minimization: we only ask for what we need for the service to work, and we give you control over your data at all times.

1. Data controller

Impulse Legacy L.L.C., a Limited Liability Company organized in the State of Wyoming, United States of America (registered address: 30 N Gould St, Ste R, Sheridan, WY 82801), with operating headquarters in Asunción, Paraguay. Privacy contact point: soporte@impulsatulegado.com. We respond to requests in English or Spanish within 30 calendar days.

2. What data we collect

We collect the following categories of personal data:

Account data: name or username, profile photo, email, declared age (16+), credentials or authentication token (Apple, Google, or hashed password).
Optional profile data: interests, short biography, city or neighborhood, languages.
Activity data: Communities you belong to, Plans you join or create, messages you send in Plan chats, reactions, contact lists inside the app.
Approximate location: only with your explicit operating system permission, and always rounded to neighborhood level to show plans near you. We never share your exact GPS position as a public attribute, and we do not track your location in the background.
Media content: photos you upload to your profile, Community, or Plan. As the product evolves, we will add processes to remove sensitive metadata (EXIF, embedded geolocation) before storing them. In the meantime, we recommend that you do not upload images with embedded geolocation you do not wish to share.
Device data: model, operating system and version, language, time zone, Junte version, non-persistent identifier for error reports and basic metrics, push notification token (Apple Push / Google FCM).
Technical / usage data: IP addresses, access logs, errors, and performance. This data is stored for short periods and used for diagnostics and security.
Support communications: if you write to us, we keep the content of the message to respond to you and improve the service.

We do not process special categories (biometric, health, religious, political, or sexual orientation data). If you voluntarily publish them on your profile or in a Community, it is at your own responsibility.

3. What we use your data for and legal basis

We process your data on the following legal bases (Law 6534 of Paraguay and, where applicable, GDPR (Regulation (EU) 2016/679), LGPD/Brazil, and equivalent rules):

Performance of the contract (these Terms): operating your account, showing you Plans near you, delivering chat messages, managing your participation in Communities.
Consent: approximate location, push notifications, camera and gallery access, optional contact export feature. You can withdraw it at any time.
Legitimate interest: preventing fraud, spam, and impersonation; applying community guidelines; maintaining the integrity of the service; aggregated and anonymous analytics to improve the product.
Legal obligation: responding to valid requests from authorities; keeping minimum records as required by tax or regulatory law; cooperating in child safety cases (see CSAE/CSAM).

4. What we do NOT do

We do not sell, rent, or trade your personal data with third parties for advertising purposes.
We do not share your exact location publicly at any time.
We do not read the content of Plan chats for advertising purposes.
We do not perform automated profiling that produces legal or significant decisions about you.
We do not use your data to train third-party generative AI models.
We do not display third-party advertising inside the app.

5. Sub-processors and third-party services

We work with a limited group of vendors that process data on our behalf, under confidentiality agreements and only for the purposes listed in section 3:

Web hosting and delivery: Vercel Inc. (website), Cloudflare Inc. (CDN/security), Amazon Web Services / Google Cloud (backend infrastructure, US or LATAM regions).
Authentication: Apple Sign In, Google Sign In.
Push notifications: Apple Push Notification Service, Google Firebase Cloud Messaging.
Error and performance reporting: standard monitoring services (anonymized logs, no message content).
Maps: OpenStreetMap (data), CartoDB (tiles). Your position is not sent to these providers.
Transactional email: email delivery provider for account notifications and password resets.

The current and updated list of sub-processors is available on request by writing to soporte@impulsatulegado.com.

6. When we share with third parties that are not sub-processors

With other Users: your name/photo/profile is visible to Users authorized by the privacy setting of the Community or Plan. Organizers see lists of confirmed Participants.
By legal requirement: we respond to court orders and valid requests from competent authorities. When legally possible, we notify you.
For safety: we may share information with authorities to prevent imminent harm to people or to investigate serious criminal conduct (e.g., CSAE).
In corporate operations: merger, acquisition, or sale of assets, with reasonable advance notice to Users.

7. How long we keep each category

Active account: as long as the account exists.
Plan chat messages: until the Plan is archived + 12 months for moderation / dispute purposes, then anonymized or deleted.
Technical logs and IP: up to 90 days.
Error reports: up to 180 days.
Data after deleting your account: 30 days for full deletion, backups purged within 90 days.
Tax or legally required records: for the period required by applicable law (typically 5 years in Paraguay).
CSAE reported material: kept in accordance with the law to cooperate with authorities. The rest is deleted.

8. Your rights

Regardless of where you live, you have the following rights over your personal data:

Access: request a copy of the data we hold about you.
Rectification: correct inaccurate or incomplete data.
Deletion: request deletion of your account and associated data.
Portability: receive your data in a structured, machine-readable format.
Objection: object to processing based on legitimate interest.
Withdraw consent: for location, notifications, or any consent-based processing.
Restriction: restrict certain processing while a claim is resolved.
Complaint: file a complaint with the data protection authority of your jurisdiction.

Basic controls (editing your profile, deleting your account) are available from Profile → Settings. For the rest of the rights, or if you cannot access the app, write to soporte@impulsatulegado.com from the email registered to your account. We may ask for additional verification when necessary to confirm that the request comes from the account holder.

9. Minors

Junte is for people 16 years of age or older. Users between 16 and 17 must have parental authorization. We do not knowingly collect data from people under 16. If a parent or legal guardian believes a child under 16 provided us data, write to soporte@impulsatulegado.com and we will delete that information and the account promptly. See also our Child safety standards.

10. Information security

We apply reasonable technical and organizational measures, which we update as the product grows:

Encryption in transit (HTTPS / TLS) in all communications between the app, the site, and our servers.
Encryption at rest mechanisms when provided by the infrastructure vendor hosting the data.
Access to personal information limited to staff strictly necessary to operate and support the service.
Internal review and incident response processes.
Deletion or anonymization when data is no longer needed.

No system is 100% secure. If we detect a breach affecting your personal data that means risk to your rights, we will notify you without undue delay (and in any case within 72 hours to the authority where required by applicable law, such as the GDPR).

11. International transfers

Junte operates from Paraguay. Some of our sub-processors run infrastructure in the United States, Brazil, or other regions. When we transfer personal data outside your country of residence, we do so under appropriate safeguards (standard contractual clauses or equivalent) and with the minimum data necessary.

12. Cookies and similar technologies (website)

junteapp.com uses a minimum of strictly technical local storage technologies (language preference, menu state). We do not use third-party advertising or tracking cookies. If we add web analytics in the future, we will use privacy-respecting tools and give clear notice.

13. Notifications, marketing, and privacy options

Push notifications: optional. Turn them on or off from the operating system or from Profile → Notifications.
Transactional emails (password reset, security alerts): cannot be disabled while you have an active account, as they are necessary to operate the service.
Update emails: if we send newsletters in the future, only to those who actively opt in. Each email will include an unsubscribe link.
Profile visibility: your profile is visible to Users with whom you share a Community or a Plan. As we add more granular profile visibility and privacy controls, you will find them in Profile → Settings → Privacy.

14. Regional notices

Paraguay: we apply Law 6534 on personal data protection. The competent authority is the Ministry of Information and Communication Technologies (MITIC).

European Union / United Kingdom (GDPR): if you reside in the EU/UK, the legal bases described above are interpreted according to the GDPR. You have the right to file a complaint with the supervisory authority of your country of residence. GDPR contact point: soporte@impulsatulegado.com.

Brazil (LGPD): if you reside in Brazil, you can exercise the rights set out in the General Data Protection Law (Law 13.709/2018) at the same contact point.

California (CCPA/CPRA): we do not sell or "share" personal data as defined by CCPA/CPRA. California residents can exercise their rights by writing to the same contact point.

15. Changes to this policy

We may update this policy to reflect changes in the product, in applicable law, or in our practices. When changes are substantial, we notify you inside the app at least 15 days in advance. The "Last updated" date at the top always reflects the current version.

16. Contact

For any question about this policy, to exercise your rights or to file a formal privacy complaint, write to soporte@impulsatulegado.com or by postal mail to Impulse Legacy L.L.C., 30 N Gould St, Ste R, Sheridan, WY 82801, United States.

Privacy by design: we ask only for the data we need, we keep it as little as possible, and we give you control from day one. If you want to go deeper on any point, write to us.