Privacy Policy
Effective 8 September 2026 — Version 1.0
This policy explains what personal information MAINSTREAK S.A.S. collects, why we collect it, and what you can ask us to do with it. It applies to mainstreak.app and to the mobile applications we publish, except where an application presents its own privacy policy, which then takes precedence for that application.
Who we are
MAINSTREAK S.A.S. (“Mainstreak”, “we”, “us”) is a company incorporated in Mérida, Yucatán, Mexico. We are the data controller — responsable under Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) — for the information described here.
- MAINSTREAK S.A.S.
- Mérida, Yucatán, Mexico
- alejandro@mainstreak.app
Our approach
We collect as little personal information as we can and only for reasons we can explain. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not build advertising profiles.
Information we collect
This website
mainstreak.app is a static website. It sets no cookies, runs no analytics or tracking scripts, and asks you for nothing. As with any site on the internet, our hosting provider automatically records standard server logs — IP address, date and time, the page requested, and browser user-agent string — which are used only to operate and protect the site and are retained for a short period by that provider.
When you contact us
If you email us, we receive your email address, whatever you choose to tell us, and the contents of the message. We use it to answer you and to keep a record of the exchange. We do not add you to any mailing list.
Our applications
Mainstreak has not yet released a mobile application. When we do, this section will state, for each application, exactly what it collects, why, whether that information ever leaves your device, and which service providers process it. That description will match the privacy information shown on the app's App Store or Google Play listing.
Until then, the commitments we design to are these: data that can stay on your device stays on your device; we do not require an account to use an app unless the app cannot work without one; and we do not integrate third-party advertising or tracking SDKs.
How we use information
- To provide, operate and maintain our websites and applications.
- To respond to messages, support requests and legal enquiries.
- To diagnose faults, prevent abuse, and keep our services secure.
- To comply with legal, tax and accounting obligations that apply to us in Mexico.
Where the GDPR applies to you, our legal bases are performance of a contract (providing the app or service you asked for), our legitimate interests (security, fault diagnosis, answering correspondence), your consent where we ask for it, and compliance with legal obligations.
Sharing and disclosure
We do not sell, rent or trade personal information. We share it only with:
- Service providers acting on our instructions — for example hosting, email and, where an app requires them, crash reporting or backend services. They may process personal information only to provide their service to us.
- App stores. Purchases, subscriptions and refunds in our apps are handled by Apple or Google under their own terms and privacy policies. We never receive your payment card details.
- Authorities, where we are legally required to disclose information, or to establish, exercise or defend legal claims.
International transfers
We are based in Mexico and some of our service providers operate elsewhere, including the United States and the European Union. Where personal information is transferred out of your country, we rely on the safeguards offered by those providers, including standard contractual clauses where applicable.
Retention
We keep personal information only as long as we need it for the purpose it was collected for, or as long as the law requires us to. Correspondence is kept while it remains useful for support and record-keeping and is deleted when it is not. Server logs are short-lived.
Security
We use reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access — encryption in transit, restricted access to the few systems that hold data, and keeping as little data as possible in the first place. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children
Our services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, write to us and we will delete it. Where an application is intended for children, its own policy and store listing will say so and will describe the additional protections that apply.
Your rights
Wherever you are, you may ask us to give you a copy of the personal information we hold about you, correct it, delete it, or stop using it. Write to alejandro@mainstreak.app and we will respond within the period the applicable law allows.
- Mexico. Under the LFPDPPP you hold ARCO rights — access, rectification, cancellation and opposition — and may revoke consent you have given. You may also lodge a complaint with the INAI.
- European Economic Area and United Kingdom. You have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR, and may complain to your national supervisory authority.
- California. You have the rights to know, delete, correct and opt out under the CCPA/CPRA. We do not sell or share personal information as those terms are defined, and we do not discriminate against anyone for exercising these rights.
Changes to this policy
We will update this policy when what we do changes. The effective date at the top of the page always reflects the current version, and material changes will be announced on this page before they take effect.
Contact
Questions, requests and complaints about privacy go to alejandro@mainstreak.app, which is the fastest route and the one we monitor. We are MAINSTREAK S.A.S., Mérida, Yucatán, Mexico; our registered postal address is available on request and will be provided to any authority or data subject who needs it in writing.