Privacy Policy
Last updated: 7 October 2026
On this page
1. Who we are
Ryblusoft, S.A.S. de C.V. (“Ryblusoft”, “we”) is a company incorporated in Mexico with its registered address at [street address], Naucalpan de Juárez, Estado de México, C.P. [postal code], Mexico. We are the controller (responsable) of the personal data described here.
This policy covers ryblusoft.com, the PumpFlow waitlist, and the PumpFlow app for iOS and Android. The app is not released yet; the sections about it apply from the day it becomes available. Users in Mexico can also read our Aviso de Privacidad, the notice required by Mexican law, which prevails if the two differ.
Privacy questions: privacy@ryblusoft.com.
2. What we collect
| When | Data | Why |
|---|---|---|
| You visit the website | IP address, browser and device type, pages visited, timestamps (server logs) | Security, keeping the site up, aggregate traffic counts |
| You join the waitlist | Email address; optionally your first name, language and which product you want | Sending the beta invitation and launch news |
| You contact support | Name, email, message, any screenshots you attach | Answering you |
| You create a PumpFlow account | Email, password (stored hashed), display name, country and time zone | Running your account |
| You use PumpFlow | Pumping sessions (date and time, duration, side, volume), notes, schedule and reminder settings, in-app audio preferences; optionally your baby’s name or nickname and birth date | The core features of the app |
| The app runs | Device model, OS version, app version, crash reports (if crash reporting is enabled) | Fixing bugs and keeping the app stable |
Health data. Pumping records describe your lactation, so Mexican law treats them as sensitive personal data. We collect them only after you give express consent inside the app. You can withdraw that consent at any time by deleting your account. We never use them for advertising, profiling or sale.
We do not collect precise location, contacts, photos or payment card details.
3. Why we use your data
Purposes needed to provide the service: creating and securing your account; storing and showing your sessions and statistics; sending reminders you set; answering support requests; preventing abuse and fraud; meeting legal obligations.
Purposes that need your separate consent (you can say no and still use the service): emailing you product news and beta invitations; inviting you to user research; using anonymized, aggregated usage statistics to improve the app.
We do not sell personal data, do not show ads, and do not share health data with advertisers or data brokers.
4. Legal basis
Under the Mexican Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), our basis is your consent: implied for ordinary data when you use the service after reading this notice, and express written consent for health data, which you give through the consent step in the app linked to your authenticated account. If you live in the European Economic Area, the United Kingdom or another place with its own privacy law, we rely on your consent and on our contract with you, and you have the rights that law grants.
5. How long we keep it
| Data | Kept for |
|---|---|
| Account and pumping data | While your account exists, then deleted within 30 days of your deletion request; backups expire within 90 days |
| Waitlist | Until PumpFlow launches plus 12 months, or until you unsubscribe |
| Support messages | 24 months after the last message |
| Server logs | 90 days |
| Records the law obliges us to keep (consent records, invoices) | The period the law requires |
7. Your rights
You can at any time: access the data we hold about you; correct it; delete it (cancellation); object to a specific use (opposition); withdraw consent, including consent for health data; and limit how we use or share your data, for example by opting out of emails.
Write to privacy@ryblusoft.com with your name, the email on your account and what you want. We may ask you to confirm you own the account. Requests are free, and we answer within the deadlines set by the LFPDPPP: 20 business days to tell you our decision and 15 more to carry it out. If you are not satisfied, you can complain to the Secretaría Anticorrupción y Buen Gobierno, the Mexican data protection authority, or to your local authority if you live elsewhere.
Most of this you can do yourself in the app: edit sessions, export your data, and delete your account under Settings → Account.
8. Children
Our services are for adults. We do not knowingly collect data from anyone under 18. Any details about your baby are entered by you, as their parent or guardian, and belong to your account.
9. Security
Data travels encrypted (TLS) and is stored encrypted at rest. Access is limited to the two founders and protected by two-factor authentication. If a breach affects your data, we will tell you and the authority as the law requires.
11. Deleting your data
In the app: Settings → Account → Delete account. Without the app: email privacy@ryblusoft.com from your account email. Deletion removes your account, sessions and baby details within 30 days; we keep only what the law obliges us to keep.
12. Changes
We post updates on this page with a new date. If a change affects health data or adds a new purpose, we ask for your consent again before applying it.
13. Contact
Ryblusoft, S.A.S. de C.V. · [street address], Naucalpan de Juárez, Estado de México, C.P. [postal code], Mexico · privacy@ryblusoft.com