CUEVAS PRIVACY POLICY
Last updated: July 13, 2026

This Privacy Policy explains how Ecothot LLC ("Ecothot," "we," "us," or "our") collects, uses, discloses, and protects information when you use Cuevas, including the Cuevas mobile application and related Cuevas web pages and services (together, the "Service").

Cuevas is a community service and social media app for posts, stories, missions, rewards, business mission check-ins, and related community features. By using Cuevas, you agree to the practices described in this Privacy Policy.

1. INFORMATION WE COLLECT

Account and profile information
- Email address, name, username, handle, profile photo, bio, and account identifiers.
- Login information from supported login providers, such as Google Sign-In or Sign in with Apple. If you use Sign in with Apple, Apple may provide a private relay email address instead of your real email address.
- Business profile information if you use business features, such as business name, business handle, mission information, QR check-in activity, and event details.

User content
- Posts, stories, comments, captions, reactions, likes, reports, and other content you create or interact with in Cuevas.
- Photos, videos, voiceovers, sound recordings, audio files, music files, file names, and other media you choose to upload, attach, save, or share.
- Mission proof, mission participation, QR check-ins, completed mission activity, and related community service submissions.

Rewards and wallet information
- Cuevas rewards balance, mission reward activity, wallet card requests, and account information needed to create Apple Wallet or Google Wallet passes.
- Cuevas rewards are in-app community rewards and do not represent bank funds, cryptocurrency, securities, loans, regulated financial products, or stored cash value.

Reports and safety information
- Reports you submit about posts, stories, profiles, comments, child safety concerns, harassment, spam, nudity or sexual content, violence, hate or abusive content, false or misleading information, or other safety concerns.
- Information needed to review reports, enforce community standards, protect users, and comply with legal obligations.

Device, usage, and diagnostics information
- App interactions, feature usage, screens viewed, search or selection activity inside the app, app version, device type, operating system, crash logs, diagnostics, and other app performance data.
- Device or other identifiers used for app functionality, security, diagnostics, fraud prevention, and account management.
- We do not currently use the advertising ID for targeted advertising.

Communications
- Messages or emails you send to us for support, privacy requests, account deletion requests, safety reports, or other communications.
- We may send service-related emails or notifications about your account, app updates, safety issues, mission activity, or important changes. We may send marketing communications only where allowed by law and with any required consent.

2. PERMISSIONS YOU CONTROL

Camera
Cuevas uses the camera so you can take photos and videos for posts, stories, mission check-ins, and business QR scans. For example, you can record a story video or scan a mission QR code.

Photo library
Cuevas uses your photo library so you can choose photos and videos for posts, stories, profile photos, and mission proof. For example, you can select a video to share in a post. Cuevas saves images and videos to your photo library only when you choose to save or share them, such as saving a story export or rewards card image.

Microphone
Cuevas uses the microphone to record audio when you create videos or story voiceovers. For example, you can record sound with a story video or add a voiceover to a story.

Notifications
Cuevas may ask to send notifications for account updates, mission activity, reminders, and app-related messages. You can turn notifications off in your device settings.

You can grant or revoke device permissions at any time in your iOS or Android device settings. Some features may not work if required permissions are disabled.

3. HOW WE USE INFORMATION

We use information to:
- Provide, operate, maintain, and improve Cuevas.
- Create and manage your account.
- Authenticate users through supported login providers.
- Display your profile, posts, stories, comments, rewards balance, missions, and completed mission activity.
- Upload, process, store, display, and share user content according to app functionality and your settings.
- Support business mission creation, QR check-ins, attendance counts, and mission proof workflows.
- Generate Apple Wallet or Google Wallet passes when you choose to add a Cuevas rewards card.
- Personalize app features, such as profile displays, feeds, story playback, mission queues, and rewards experiences.
- Send service messages, account notices, safety notices, and important app updates.
- Detect, prevent, and respond to spam, fraud, abuse, security issues, policy violations, and child safety concerns.
- Review reports and enforce community standards.
- Monitor app performance, diagnose bugs, fix crashes, and improve reliability.
- Comply with legal obligations and respond to lawful requests.

4. HOW INFORMATION IS SHARED

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising.

We may share information in the following ways:

With other Cuevas users
- Public posts, stories, comments, profile information, handles, reactions, and public mission activity may be visible to other users.
- Content visibility may depend on your privacy settings and the feature you use.
- Private lists, such as your research network, are intended to remain private unless you choose to share related information.

With businesses and mission hosts
- If you join, check into, complete, or submit proof for a business or partner mission, the mission host may receive information needed to manage that mission, such as your handle, attendance/check-in status, proof submission status, and mission-related activity.

With service providers
We use service providers to operate Cuevas. These may include cloud hosting, databases, storage, authentication providers, app build and distribution providers, analytics and diagnostics tools, notification providers, wallet pass providers, email/support tools, and media processing services. These providers may process information only as needed to provide services to us.

Examples of providers or platforms Cuevas may use include Apple, Google, Firebase, Wix, Expo/EAS, wallet services, and media or AI processing providers when those features are used.

With third-party apps you choose to use
If you choose to share Cuevas content to another app or service, such as Instagram or your device share sheet, the information you share is handled by that third party according to its own privacy policy.

For safety, legal, and compliance reasons
We may disclose information if we believe it is necessary to comply with law, respond to legal process, protect rights and safety, investigate abuse, prevent fraud, enforce our terms or community standards, or report child safety concerns to appropriate authorities.

In a business transfer
If Ecothot is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction.

5. USER-GENERATED CONTENT AND COMMUNITY SAFETY

Cuevas includes social features and user-generated content. Do not post content you do not have the right to share. Users can report content or profiles in the app. Cuevas may review reports, remove content, restrict accounts, preserve evidence, or take other action when content may violate our rules, threaten safety, or violate law.

Cuevas includes a child safety report option. We do not tolerate child sexual abuse or exploitation, and we may report child safety concerns to appropriate regional, national, or other lawful authorities where required or appropriate.

6. DATA RETENTION

We keep information for as long as needed to provide Cuevas, maintain your account, operate community and mission features, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and maintain security.

Some content may remain visible until you delete it, until it expires, or until we remove it under our policies. Stories may expire from normal viewing after a limited time, but related logs, reports, backups, or safety records may be retained as needed.

If you request account deletion, we will delete or de-identify personal information associated with your account unless we need to retain certain information for legal, safety, security, fraud prevention, dispute resolution, backup, or legitimate operational reasons.

7. ACCOUNT DELETION AND PRIVACY REQUESTS

You can request deletion of your Cuevas account and associated personal data by visiting:
https://ecothot.com/cuevas-delete-account

You may also contact us using the contact information below. We may need to verify your identity before completing certain requests.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information. You may also have the right to object to or restrict certain processing, withdraw consent where processing is based on consent, or appeal a privacy decision.

8. CALIFORNIA PRIVACY RIGHTS

If California privacy law applies to your information, California residents may have the right to:
- Know what categories of personal information we collect, use, disclose, sell, or share.
- Request access to personal information.
- Request deletion of personal information.
- Request correction of inaccurate personal information.
- Opt out of the sale or sharing of personal information.
- Limit certain uses of sensitive personal information.
- Not be discriminated against for exercising privacy rights.

Cuevas does not sell personal information and does not share personal information for cross-context behavioral advertising. To submit a privacy request, contact us using the information below or use the account deletion request page.

9. CHILDREN'S PRIVACY

Cuevas is not directed to children under 13, and users under 13 should not create accounts or use Cuevas. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to Cuevas, contact us and we will take appropriate steps to delete the information.

10. SECURITY

We use reasonable technical, administrative, and organizational measures to protect information. User data transmitted between the app and our servers or service providers is encrypted in transit where supported by those services. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. INTERNATIONAL USERS

Cuevas is operated from the United States. Your information may be processed and stored in the United States and other countries where we or our service providers operate. These countries may have privacy laws different from those in your location.

12. THIRD-PARTY LINKS AND SERVICES

Cuevas may include links, login services, wallet services, sharing features, or integrations provided by third parties. Third-party services are governed by their own privacy policies and terms. We are not responsible for the privacy practices of third-party services.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we update it, we will change the "Last updated" date above. If changes are material, we may provide additional notice as required by law.

14. CONTACT US

If you have questions about this Privacy Policy or want to submit a privacy request, contact us at:

Ecothot LLC
Email: notifications@ecothot.com
Website: https://www.ecothot.com
Account deletion request: https://ecothot.com/cuevas-delete-account