Privacy Policy

Last updated: August 18, 2026

This policy explains what data Polo Breeders collects, how we use it, who we share it with and what rights you have over it. It applies to the iOS and Android apps, the web version and this site.

Data controller

Polo Breeders is developed and operated by COLIBRÍ AGRO SRL, Argentine Tax ID (CUIT) 30-71610822-4, with registered address at Cerrito 1364, floor 5, apartment A, Ciudad Autónoma de Buenos Aires, Argentina.

Email: [email protected]. Telephone: +54 11 2453-5445.

Data we collect

• Account data: first name, last name, email address and phone number, provided when you register your stable or when you are invited to one. Your password is managed by Firebase Authentication (Google): we never see or store it.
• Stable data: the name of your stable, its prefix, the logo and the health parameters you configure.
• Data you enter: horse profiles, pedigrees, categories, location, microchip numbers, health records, breeding services, embryo transfers, pregnancies, births, event history, observations and the photos you upload. Some fields may include third-party personal data (for example, the name of a horse breaker): you are responsible for having the right to enter it.
• Photos: the app asks for permission before accessing your camera or photo library, and only accesses the images you select.
• Notifications: if you enable due-date reminders, we store your device's push notification token (Firebase Cloud Messaging), its platform and language, and your reminder preferences.
• Subscription data: the status, plan and dates of your subscription. Payments are processed by the App Store (Apple) or Google Play and managed with RevenueCat; we never receive or store your card details.
• Invitations and support: the email address of the people you invite to your stable and the content of the requests you send us.
• Technical data: server logs with IP address, timestamp and request type, used to operate the service, rate-limit abuse and protect accounts. If you try the demo mode, we record the IP address the trial account was created from.

We do not collect GPS location or contacts, we do not use advertising analytics or cross-app tracking, and this site uses no analytics or advertising cookies. We also do not use the device advertising identifier (IDFA) or any other tracking identifier, which is why the app never asks for the iOS tracking permission (App Tracking Transparency). We do not build advertising profiles from your data and we do not carry out automated decision-making that produces legal effects concerning you.

How we use the data

• To provide the service: store, display and sync your breeding records.
• To authenticate you and protect your account.
• To send the health due-date reminders you have enabled.
• To send transactional emails (verification, password reset, invitations).
• To manage your subscription and free trial.
• To answer your support requests.
• To prevent fraud, abuse and unauthorized access, and to comply with legal obligations.

We do not sell your data, we do not share it with third parties for advertising, and we do not use it to train artificial intelligence models.

Legal basis for processing

We process your personal data on the following legal bases:

• Performance of the service contract: to provide the app's functionality and manage your subscription.
• Consent: for sending push notifications, which you can withdraw at any time.
• Compliance with legal obligations: when a law or a competent authority requires us to retain or hand over information.
• Legitimate interest: to prevent fraud and abuse, protect account security and improve the service.

Service providers that process data on our behalf

To provide the service we rely on providers that process data solely on our instructions and for the purposes described in this policy. We contractually require all of them to apply the same or an equivalent level of protection to the one we apply; none of them is allowed to use your data for its own purposes, transfer it or sell it.

• Google (Firebase): account authentication and push notification delivery.
• Railway: hosting of the API and the database.
• Cloudflare (R2 and Pages): storage of photos and logos, and hosting of this site.
• Vercel: hosting of the web version of the app.
• Resend: delivery of transactional emails.
• RevenueCat: management of subscription status.
• Apple and Google: subscription payments through the App Store and Google Play, each under its own privacy policy.

Beyond these providers, we share data only where required by applicable law or a competent authority, or where necessary to exercise or defend legal claims. If the service were ever transferred to another company (merger, sale or reorganisation), we would notify you before your data changes controller.

Where it is stored, and security

Data is hosted on servers located primarily in the United States; by using the app you consent to that international transfer. All communication between the app and our servers is encrypted (HTTPS/TLS), database access is restricted, and every request is validated against your identity. We take reasonable measures to protect your information, although no system can guarantee absolute security.

Who can see your breeding data

• Invited users: the people you explicitly invite (partners, vets, staff), with edit or read-only permission as you choose. You can revoke access at any time from the app.
• Public profile links: you can generate a link to share a horse's profile with someone without an account. Anyone holding the link sees only the sections you selected for that horse and cannot browse the rest of your stable. You can delete the link at any time and it stops working immediately.

Retention and deletion

You can permanently remove individual horses, photos, health records, breeding services, embryos, events and observations from within the app. You can also delete your account and all associated data under Settings → Account, or by requesting it via email, in which case we process the request within 30 days.

While your account is active we retain your data in order to provide the service. After deletion we may retain, for a limited period, records we are legally required to keep (such as billing records) and backups, which are overwritten in their normal rotation cycle.

Your rights

At any time you may access and modify your data from the app, delete it, request a copy, object to a specific processing activity, or withdraw your consent for push notifications.

You can withdraw the permissions you granted the app at any time from your device settings (notifications, camera and photo library) and turn off due-date reminders under Settings in the app, without losing the rest of the service. To request a copy of your data, object to a specific processing activity or file a complaint, write to [email protected]: we respond within 30 days.

Under Argentina's Personal Data Protection Act 25.326 you have the right to access, rectify, update and delete your personal data; the Agencia de Acceso a la Información Pública is the supervisory authority for complaints under that law. If you reside in the European Union, the United Kingdom or California, you may also exercise the rights granted by your local regulations by writing to the same contact.

Children

Polo Breeders is not directed to children under 18 and we do not knowingly collect their personal data. If we become aware of an account created by a child under that age without authorization, we will delete it.

Changes to this policy

If we change this policy, we will publish the updated version on this page with its new effective date. If the change is significant, we will also notify you by email or within the app.

Contact

For privacy questions, questions about your data, or to exercise your rights, write to [email protected] or call +54 11 2453-5445.