Privacy Policy

1. Introduction

At Arete.AI, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data in accordance with the General Data Protection Regulation (GDPR) and the Federal Law on the Protection of Personal Data in Possession of Private Individuals in Mexico.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Full name and email address
• Professional profile information (for coaches)
• Athlete data entered by coaches (name, age, sport, level)
• Payment and billing information
• Platform usage history

2.2 Technical Information

We automatically collect:

• IP address and approximate geographic location
• Browser and device type
• Pages visited and usage time
• Cookies and similar technologies

2.3 Health and Performance Data

With your explicit consent, we can collect health-related data and performance metrics necessary to generate personalized training plans.

3. How We Use Your Information

We use your information for:

• Providing and improving our AI coaching services
• Generating personalized training, nutrition, and recovery plans
• Processing payments and managing subscriptions
• Communicating with you about updates and news
• Analyzing platform usage to improve user experience
• Complying with legal and regulatory obligations
• Preventing fraud and ensuring platform security

4. Legal Basis for Processing

We process your personal data based on the following legal bases:

• Consent: For sensitive health data and marketing communications
• Performance of a contract: To provide the contracted services
• Legitimate interest: To improve our services and prevent fraud
• Legal obligation: To comply with legal and regulatory requirements

5. Data Storage and Security

5.1 Storage Location

Your data is stored on secure servers located in certified data centers. We use cloud service providers that meet international security standards.

5.2 Security Measures

We implement multiple layers of security:

• Data encryption in transit and at rest (SSL/TLS)
• Two-factor authentication (2FA)
• Role-based access controls
• Regular security audits
• Continuous threat monitoring
• Automated and encrypted backups

5.3 Retention Period

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless required or permitted by law for a longer retention period. Data from inactive accounts is deleted after 3 years.

6. Sharing Information

We do not sell or rent your personal information. We may share your data with:

• Service providers: Companies that help us operate the platform (hosting, payment processing, analytics)
• Business partners: Only with your explicit consent
• Legal authorities: When required by law or to protect our rights

All third parties with whom we share data are contractually obligated to protect your information and may only use it for the specified purposes.

7. Your Rights (GDPR and Mexican Law)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request the deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured and readable format
• Objection: Object to the processing of your data for certain purposes
• Restriction: Request the restriction of processing
• Withdrawal of consent: Withdraw your consent at any time

To exercise these rights, contact us at <a href=&quot;mailto:hi@areteai.mx&quot; className=&quot;text-cyan-600 hover:text-cyan-700&quot;>hi@areteai.mx</a>. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. You can control cookies through your browser settings. The cookies we use include:

• Essential cookies: Necessary for the basic functioning of the platform
• Performance cookies: To analyze how the platform is used
• Functionality cookies: To remember your preferences
• Marketing cookies: To personalize ads (only with your consent)

9. International Transfers

If we transfer your data outside of Mexico or the European Union, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or Privacy Shield certifications.

10. Minors

Our service is not directed at individuals under the age of 18. If a parent or guardian discovers that their child has provided personal information without consent, they should contact us immediately to have that information removed.

11. Changes to this Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through a prominent notice on our platform. We recommend reviewing this policy regularly.

12. Contact and Complaints

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

Email: <a href=&quot;mailto:hi@areteai.mx&quot; className=&quot;text-cyan-600 hover:text-cyan-700&quot;>hi@areteai.mx</a>

Website: areteai.mx

You also have the right to lodge a complaint with the data protection authority of your jurisdiction:

• Mexico: National Institute of Transparency, Access to Information, and Protection of Personal Data (INAI)
• EU: Your local data protection authority