Vigía IA Privacy Policy

Vigía IA is a family safety app. To do what it promises — alert your family if something happens to you, detect scams, let you know where your people are — it needs data that is personal. This document says exactly what data, what for, who it is shared with and how long it is kept.

1. Who is responsible for your data

L5 Cybersecurity, based in Mexico City, Mexico. For anything related to this policy or to your personal data, write to soporte@vigia-ia.com.

2. What data we collect

Your account

• Your name and your email address.
• Your password, always stored hashed with bcrypt. Nobody — including us — can read it.
• Your profile photo, if you choose to add one.
• Your phone number, only if you type it in yourself. It lets your circle call or message you from the app without digging through their contacts.
• The day and month of your birthday, only if you add them. They let Vigía remind your circle that morning.
• The year you were born, which is a separate field and also optional. It is only used to say which birthday it is in that greeting.

The year is separate on purpose. Plenty of people are happy to share the day and month and would rather not say their age, so these are two decisions instead of one date. And the year is never shared with your circle: when the app shows your family's birthdays, only the day and month travel. You can delete all of this whenever you want from your own profile.

The phone number is optional and nobody can enter someone else's: each person enters their own. Only the members of your circles can see it, and you can remove it at any time by leaving the field empty in Settings.

Location

Your device's coordinates, battery level and the speed you are moving at each point. With your permission, the app also collects location when it is closed or in the background.

Battery saver mode. If you turn it on, the app sends your position less often and less precisely, and your circle sees that you are "in battery saver" next to your last position, so that a more spaced-out signal is not read as a phone that died. That indicator is all that is shared: a yes or a no.

The path you travelled. Using the positions from the last few hours, your circle can see the route behind your pin. It is not new data: it is the same location described above, drawn as a line.

Speed is stored so the route can be drawn in detail — how fast you were going on each stretch — and is not used for anything else. While we detect that you are in a car, the app sends a position every few seconds instead of every minute; only during the trip.

Without this, the safety features do not work: an emergency button that only works with the app open is not an emergency button, and a "they got home" alert that needs someone to be holding their phone would never arrive.

Places and movement

• The places you save (home, office, school) with their name and radius.
• Arrivals at and departures from those places.
• Driving data: distance, top speed, hard braking and sharp acceleration, taken from the phone's motion sensors.
• How many times the phone changed position abruptly while you were in a car.
• The no-show alerts you set up: the place, the time and the days on which you expect someone else to be there.
• Your routines: from arrivals and departures, the app works out what time you are usually at each place, so it can tell your circle "at school, as always" or flag it when something is out of the ordinary. It is a calculation over data we already had; nothing extra is collected.
• The nicknames you give to people and places ("Mom", "Grandma's house"). They are stored on the server so they follow you if you change phones, but only the person who wrote them can read them: nobody else in your circle sees them, and nobody can be renamed in front of the rest.

About phone movement while driving. iOS does not let any app know whether the screen was on, so this is not a measure of phone use at the wheel: it is an estimate from the accelerometer. It gets it wrong when the passenger picks up the phone, when the device slides out of the cup holder, or when you are riding in a taxi. That is why the app shows it as "moved the phone N times" and not as "used the phone", carries that note beside it, and does not affect the driving score.

About no-show alerts. The person being watched is notified the moment one is created, and can see it inside their app: who set it, at which place and at what time. It is never silent.

Emergencies

• SOS alerts with the location at that moment.
• Possible impacts detected by the sensors.
• Name, phone number and relationship of the emergency contacts you register.
• Roll calls: when there is an earthquake near you — or when someone in your circle decides to call the roll without one: a flood, a blackout, a scare — Vigía asks whether you are all right. We store your answer ("I'm OK" or "I need help"), the time, the location you answered from, and who opened the roll call.
• Linked devices (an iPad, a tablet) that someone in your circle leaves behind as a tracker: the device name, its battery, its last position and whether it has location permission. That device permanently displays that it is sharing its location and with whom.

About the roll call after an earthquake. Vigía is not an earthquake early-warning system and does not tell you that one is coming: that is what official alerting systems do. What Vigía does is the part afterwards, when calls will not go through and nobody knows whether their family is all right.

To know that an earthquake happened we read three public sources run by scientific institutions: the Servicio Sismológico Nacional at UNAM in Mexico, the USGS in the United States and the European EMSC. We only read their lists of earthquakes: we send them no data about you, not your location and nothing that could identify you. Who was in the area is worked out inside our own server, using the last location we already had.

Who sees a roll call. In a roll call opened by someone in your circle, only that circle. In a real earthquake, as well as the people who were nearby we notify each of their families, even if they are in a different circle, because they are the ones who need to know. But each person sees in the list only the people they share a circle with: never the names or the answers of strangers.

Messages

• The messages you write in your family circle's chat. They are stored end-to-end encrypted: not even we can read them. See section 5.
• The text you send to be analysed when you suspect a scam. This one we do read, because it is the only way to analyse it.
• Your conversations with the emergency assistant.

Your account security

• The email addresses you ask us to watch for breaches.
• The breaches found: in which service, from which year and what kind of data was exposed.

When you check whether a password has been leaked, the password never leaves your phone. Only a fragment of its cryptographic hash is sent, in such a way that neither we nor the service consulted can reconstruct it. The technique is called k-anonymity.

The password generator stores nothing. The passwords it creates are calculated inside your own phone and are never sent or stored anywhere: not on our servers, not inside the app. When you close that screen, they are gone. Vigía is not a password manager and does not keep yours — your phone's own keychain is there for that.

If you copy a generated password, it clears itself from the clipboard after two minutes, so it does not sit there in view of other apps.

Phone numbers

• The number you look up to find out whether other people have flagged it as a scam. The lookup is not stored against your name.

Since 5 September 2026 the app no longer allows reporting numbers: to report a number we send you to CONDUSEF, the official Mexican service, which is who it belongs with. Reports made from the app before then still serve to warn other people — others see how many people reported it and why, never who — until their author withdraws them or they expire after two years.

When you describe what you were told over the phone so that the artificial intelligence can analyse it, that account is not stored: it is sent, analysed and discarded.

Technical

• The identifier that Apple (on iPhone) or Google (on Android) assigns to your device so that notifications can be delivered to it.
• The version of the app and of the operating system you are running, so we know who to tell when there is an important update.

3. Who we share data with

With your family circle, according to what you decide: in each circle you can choose separately whether you share location, alerts and battery. You can change or revoke it whenever you want.

And with these providers, solely in order to provide the service:

Fallback providers for the artificial intelligence. If Anthropic does not respond, the server may pass that same request to Google Gemini (United States) or Moonshot Kimi (China) at that moment, with exactly the same data described above and under the same rules. We log it every time it happens.

Your exact location never leaves our server: no provider receives it. The routes you see on the map are calculated with our own code. The one exception, said plainly, is the weather: to know whether it is raining where you are, coordinates rounded to one kilometre are sent to the services in the table, with nothing attached that says who you are. One kilometre places a neighbourhood, not a house.

We do not sell your data to anyone, and we do not pass it on for advertising or commercial purposes. We would only hand it to an authority if required to by a valid court order.

4. How long we keep it

Old data deletes itself. This is not an intention: it is an automated job that runs every day on the server.

Breaches do not expire because the fact does not expire either: that your password was exposed years ago still matters today.

5. How we protect your data

• All traffic between the app and the server is encrypted with HTTPS.
• Passwords are stored with bcrypt and cannot be reversed.
• Access to the database is restricted to the application server.

Messages are end-to-end encrypted

Family chat conversations are encrypted on your phone and decrypted on the phone of whoever reads them. In between, the server only stores unreadable text.

Each phone generates a pair of cryptographic keys the first time you sign in. The private key is kept in the iOS Keychain — or in Android's encrypted store — and never leaves your device: we do not know it, we do not store it and we cannot recover it. Each circle also has its own key, handed out among its members inside envelopes only the recipient can open.

Notifications for new messages do not show the content, for the same reason: the server that sends them cannot read it.

6. Your rights

You can exercise these rights at any time:

• Delete your account and all of your data, from inside the app, in Settings. It is a real and permanent deletion, not a deactivation.
• Stop sharing location, alerts or battery with any circle, without leaving it.
• Withdraw permissions for location and notifications from your phone's own Settings.
• Access, correct, delete or object to the processing of your data, by writing to soporte@vigia-ia.com. We reply as soon as we can, and in any case within 30 days.
• Withdraw your consent at any time, at the same address.

L5 Cybersecurity is based in Mexico, and these rights are recognised there by the Federal Law on the Protection of Personal Data Held by Private Parties published on 20 March 2025, which replaced the earlier law of the same name. If you believe we have not respected them, you can go to the Secretaría Anticorrupción y Buen Gobierno, which took over the functions of the former INAI for personal data held by private parties when that law came into force.

Depending on where you live, local law may give you further rights. Write to us at the address above and we will honour them.

7. Children

Vigía IA is meant to be used by families, and that includes children. A child can only be part of a circle if a responsible adult invites them and sets up their device.

If you are a parent or guardian and you want us to delete the data of a child in your care, write to us and we will do it without further formalities.

The under-age label

Whoever creates a circle can mark a member as under age. While that label is on, that person cannot turn off sending their location to that circle, nor leave it.

This feature exists for parental control, and we are aware that a feature like this can be misused. That is why it is never silent:

• Only the person who created the circle can add it and remove it. No other member can, and neither can anyone at L5 Cybersecurity.
• The labelled person gets a notification the moment it is applied and the moment it is removed.
• While it lasts, they see it written in their settings, with the name of the person who applied it and the circle it refers to.
• The rest of the circle is told as well.
• The label does not prevent deleting the account. Anyone, labelled or not, can delete their account from inside the app at any time, and that removes them from every circle and deletes their data.

We do not offer any way to track a person without their knowledge, and we have no intention of offering one. If you believe someone is using this feature to control you against your will, write to us.

8. Changes to this policy

If we change anything significant we will tell you inside the app before it takes effect. The date in the header always indicates the latest version.

9. Contact

For any question about your data: soporte@vigia-ia.com

This is a translation of the Spanish-language policy, which is the original. If a difference in wording ever matters, the Spanish version is the one that governs.