Privacy Policy
Last updated: September 11, 2026At Rankiamos we respect your privacy and are committed to protecting your personal data. This policy describes what information we collect, what we use it for and how we protect it.
1. Data controller
Controller: Alejandro Verjel
Product: Rankiamos (iOS rank tracking SEO app)
Address: Bogotá, Colombia
Contact email: soporte@rankiamos.com
2. What data we collect
2.1 Data you provide
- Account: email, name and your Apple or Google identifier if you sign in with them (Sign in with Apple lets you hide your email).
- Subscription: billing data is processed by Apple directly — we don't have access to your card.
- Service content: domains, keywords, cities, tags and settings you enter, plus the Search Console data of the property you connect to each project (up to 250 queries from the last 28 days, with clicks, impressions, CTR and average position; each update replaces the previous one).
- Support: messages you send us by email or other channels.
2.2 Data we collect automatically
- Usage data: features you use, frequency, technical errors.
- Device data: model (iPhone, iPad), iOS version, language.
- Network data: IP address (anonymized after processing), approximate country.
We comply with Apple App Tracking Transparency: we do not track your activity outside Rankiamos without your explicit permission.
3. What we use it for
| Purpose | Data used |
|---|---|
| Provide the Service (rank tracking) | Account, domains, keywords |
| Process subscriptions | Apple ID (via Apple) |
| Customer support | Email, messages |
| Improve the App | Anonymized usage data |
| Push notifications (rankings) | Device token, settings |
| Legal compliance | Minimum required data |
We do NOT use your data for: advertising, commercial profiling, sale to third parties, or training external AI models.
4. Legal basis for processing
- Contract performance (Art. 6.1.b GDPR): to provide the Service you contracted.
- Consent (Art. 6.1.a GDPR): to receive push notifications, etc.
- Legitimate interest (Art. 6.1.f GDPR): product improvements based on aggregate usage.
- Legal obligation (Art. 6.1.c GDPR): billing, tax requirements.
5. Sharing with third parties
We share minimal data only with strictly necessary providers:
| Provider | Data shared | Purpose |
|---|---|---|
| Apple (App Store, Sign in with Apple) | Apple ID, subscription data | Process payments and sign-in |
| Supabase | Account data and content (encrypted) | Database |
| DataForSEO | Keywords + queried country (without your identity) | Obtain SERP data |
| Google (Sign in with Google, Search Console) | Your Google account email and read access to the Search Console property you choose | Sign-in and fetching your Search Console queries |
Each provider complies with security standards (SOC 2, ISO 27001) and signs a Data Processing Agreement with us.
We never sell your data. Never.
6. Data retention
- Active account: as long as you keep the account active.
- Deleted account: when you delete your account from the App, your account and data are erased instantly; they may only remain in backups for the period stated below.
- Billing data: 7 years (Colombia tax requirements).
- Backups: up to 90 days for operational security.
7. Security measures
- Encryption in transit (TLS 1.3) and at rest (AES-256).
- Row-Level Security in Supabase: only you access your data.
- Sign-in with Apple, Google or email and password.
- Annual security audits.
- Breach notification within 72h per GDPR Art. 33.
8. Your rights
Under GDPR (EU) and Law 1581 of 2012 (Colombia), you have the right to:
- Access: obtain a copy of your data.
- Rectification: correct inaccurate data.
- Erasure ("right to be forgotten"): have us delete your data.
- Restriction: restrict processing in certain cases.
- Portability: receive your data in a structured format; on the Pro plan you can also export your keywords to CSV from the App.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: when you granted it as legal basis.
- Complaint to authority: SIC (Colombia), AEPD (Spain), CNIL (France), etc.
Exercise these rights by writing to soporte@rankiamos.com. We respond within 30 days max.
9. Minors
Rankiamos is not directed at people under 18. We do not knowingly collect data from minors. If you are a parent and discover that your child has provided us with data, write to us and we will delete it.
10. International transfers
Your data may be processed on servers outside your country (Apple uses US/EU/global, Supabase uses US/EU). These transfers are made under:
- European Commission adequacy decisions (when applicable).
- EU Standard Contractual Clauses (SCC).
- Security guarantees equivalent to GDPR.
11. Cookies
The website rankiamos.com uses the technical cookies it needs to function and, only if you accept them in the consent banner, Google Analytics 4 analytics cookies. More details in our Cookie Policy.
The iOS App does NOT use cookies (it stores data locally on your device and in your Rankiamos account).
12. Changes to this policy
If we update this policy, we will notify you by email and/or within the App with at least 30 days notice if the changes affect your rights. The current version is always available at this URL.
13. Contact
For any privacy inquiry:
📧 soporte@rankiamos.com
📍 Alejandro Verjel · Bogotá, Colombia 🇨🇴
🌐 https://www.rankiamos.com
Data protection authorities where you can file complaints:
- Colombia: Superintendencia de Industria y Comercio (SIC) — www.sic.gov.co
- Spain: Agencia Española de Protección de Datos (AEPD) — www.aepd.es
- Mexico: INAI — home.inai.org.mx
- Argentina: AAIP — argentina.gob.ar/aaip