Privacy policy

1. Data controller

• Name: Grupo IDUK, S. de R.L. de C.V.
• Address: La Paz, Baja California Sur, Mexico.
• Contact email: contacto@grupoiduk.com

2. Data we collect

ProManagement app (Android / iOS)

• Account: full name, email address and password (stored as a hash) for authentication.
• Work activity: attendance records, construction progress, reports, purchase orders and documents related to group projects.
• Files and media: photos taken or selected from the device gallery to document construction progress or incidents. Files are uploaded to the group's own server and are not shared with third parties.
• Push notifications: FCM (Firebase Cloud Messaging) device token to send operation-related alerts.
• Technical data: operating system version, device model and connection IP address, used for diagnostics and security.

Website grupoiduk.com

• Contact form: name, email address, phone number and submitted message.
• Basic technical data derived from browsing (browser type, language, pages visited).

3. Purpose of processing

• Authenticate employees and collaborators accessing ProManagement.
• Record and manage the operations of the group's construction and electrical installation projects.
• Send operational notifications related to tasks, purchases and construction progress.
• Respond to information requests and quotes received through the website.
• Comply with applicable legal and tax obligations in Mexico.

4. Third parties that receive data

• Google Firebase (Firebase Cloud Messaging): receives device tokens to deliver push notifications. Firebase is subject to Google's Privacy Policy (policies.google.com/privacy).
• Group's own cloud server: the ProManagement API runs on infrastructure controlled by Grupo IDUK. Data is not sold or shared with commercial third parties.
• We do not use advertising networks, third-party analytics, or behavioral tracking platforms.

5. Data retention

• App data is retained while the account is active or as long as necessary for project operations.
• Upon requesting account deletion, personal data is deleted within a maximum of 30 business days, unless there is a legal obligation to retain it.
• Security technical logs are automatically deleted after 90 days.

6. Your rights

• You have the right to Access, Rectify, Cancel or Object to the processing of your personal data (ARCO rights under Mexican law).
• To exercise these rights, send an email to contacto@grupoiduk.com with the subject "ARCO Rights", stating your full name and specific request.
• We will respond within a maximum of 20 business days as required by the LFPDPPP.

7. Security

• Communications between the app and the server use HTTPS with TLS.
• Passwords are stored using bcrypt hashing; they are never stored in plain text.
• Database access is restricted to the group's internal systems.

8. Minors

• ProManagement is an application for exclusive use by employees and collaborators of Grupo IDUK who are 18 years of age or older.
• We do not intentionally collect data from minors. If we detect that a minor has provided data, we will delete it immediately.

9. Changes to this policy

• We may update this policy when necessary. The "Last updated" date at the top of this document indicates when the most recent change occurred.
• For material changes, we will notify app users through an in-app notification.

10. Contact

• For any questions about this policy or the processing of your data, write to us at contacto@grupoiduk.com.