UTZ System Privacy Policy

This policy applies, among others, to the following applications and services:

• Mi Día (My Day).
• Core Financial Applications.
• E-commerce applications.
• CHANIM.
• Other applications published by UTZ System, LLC.

Each application may collect different information depending on its features and functions.

Depending on the application used, we may collect:

• Name, email, phone number, and identification details.
• Access credentials and account-related data.
• Information about transactions, purchases, payments, credits, or operations.
• Device information, operating system, and application version.
• IP address, technical logs, and diagnostic data.
• Geographic location, only when an application function requires it and the user grants permission.
• Camera, photos, or documents, when necessary for digitization, identity validation, or uploading vouchers.
• Biometric data managed by the device to allow login. The application does not receive or store the user's fingerprints or biometric features.

We use the information to:

• Create and manage accounts.
• Authenticate users.
• Provide the functions of each application.
• Process transactions, requests, purchases, or operations.
• Provide technical support.
• Improve the security and performance of the services.
• Detect errors, unauthorized access, or fraudulent activities.
• Comply with legal and contractual obligations.

The Mi Día application may store information entered by the user to organize activities, reminders, tasks, or personal information related to the operation of the application.

The information will not be used for purposes other than those described in this policy.

Applications related to financial services may process personal, financial, credit, transactional, and documentary information.

This data is used solely to execute the processes authorized by the user and by the corresponding financial institution. UTZ System may act as a technology provider, while the institution offering the financial service may be primarily responsible for processing the information.

E-commerce applications may collect information related to:

• Products viewed or purchased.
• Orders and billing.
• Delivery addresses.
• Contact information.
• Status and reference of payments.

We do not directly store full card details when the payment is processed by an external provider.

Applications may use technology providers for hosting, authentication, analysis, notifications, maps, storage, and payment processing.

These providers only receive the information necessary to perform their services and are subject to their own privacy policies.

We do not sell or rent personal information.

We may share information with:

• The company or institution responsible for the application used.
• Technological providers necessary to operate the service.
• Competent authorities, when there is a legal obligation.
• Entities expressly authorized by the user.

Information will be retained for the time necessary to provide the service, comply with legal obligations, address claims, and maintain the security of operations.

The user may request the deletion of their account and data, except for those that must be preserved due to legal, financial, or contractual obligations.

Google requires deletion mechanisms when an application allows account creation.

We apply reasonable technical and organizational measures to protect information, including access controls, encrypted connections, audit logs, and access restrictions.

No technological system can guarantee absolute security, but we work to reduce the risks of loss, alteration, or unauthorized access.

Applications will only request the permissions necessary for their functions. These may include:

• Camera.
• Photos and files.
• Location.
• Notifications.
• Biometric authentication.
• Internet access.

The user can manage these permissions from their device settings.

Our services are not intentionally directed at minors, unless an application expressly indicates otherwise and has the corresponding measures and authorizations.

The user may request:

• Access to their data.
• Correction of incorrect information.
• Update of their data.
• Deletion of their account.
• Information about the processing of their data.
• Revocation of granted permissions.

This policy may be updated due to legal, technical, or functional changes. The date of the last update will be indicated at the top of the page.

For inquiries, deletion requests, or privacy-related matters: