Yaiki Accesorios

Data We Process

The app is a product catalog. Shoppers do not register, sign in or enter payment details. Depending on how you use it, the following is processed:

• •Shopping cart (on your device only): The products and quantities you add to the cart are saved in the app's local storage so the cart survives closing the app. This data never leaves your device unless you send an order.
• •Catalog requests: To show products, collections and photos, the app downloads them from Google Firebase (Cloud Firestore and Cloud Storage). As with any internet request, Google receives technical data such as your IP address and basic device/app information to deliver that content. The app does not attach any identifier of yours to these requests.
• •Orders sent through WhatsApp: When you tap the WhatsApp order button, the app opens WhatsApp with a pre-written message listing the products, quantities and total. Nothing is sent until you press send in WhatsApp. If you send it, Yaiki Accesorios receives that message together with your WhatsApp name and phone number, plus anything else you choose to share in the chat (for example a delivery address).
• •Admin panel (store staff only): A hidden admin area lets authorized Yaiki staff sign in with an email and password (Firebase Authentication) to manage products. Their session token is stored in the device's secure storage, and the photo library is accessed only when an admin picks product images to upload. Shoppers never see or use this area.
• •What we do not collect: No accounts for shoppers, no location, no contacts, no camera or microphone, no advertising identifiers, no analytics, and no tracking across other apps or websites.

Purposes of Processing

The limited information above is used only to:

• •Display the up-to-date catalog, prices and availability.
• •Keep your cart on your device between sessions.
• •Let Yaiki Accesorios confirm availability, agree on payment and coordinate delivery of the orders you send through WhatsApp.
• •Allow authorized staff to keep the catalog up to date.
• •Meet legal obligations and respond to requests from competent authorities when applicable.

Processors and Third Parties

We do not sell or rent personal data, and the app shows no ads. Information reaches third parties only as follows:

• •Google Firebase: Hosts the catalog and authenticates store staff, acting as a processor under Google's terms and privacy policy.
• •WhatsApp (Meta): Orders are sent through WhatsApp, which you open and use under WhatsApp's own terms and privacy policy. Yaiki Accesorios uses order conversations only to handle your purchase.
• •Instagram and Facebook links: Social buttons simply open Yaiki's public profiles in those apps or your browser, where their own policies apply. The app shares no data with them.
• •International Transfers: Google and Meta may process data on servers outside Colombia, under their own safeguards and in accordance with applicable law.
• •Retention: The cart stays on your device until you empty it or uninstall the app. Order conversations are kept by Yaiki Accesorios for as long as needed to fulfil the order and meet accounting or tax obligations, then deleted.

Security

Catalog and authentication traffic is encrypted in transit (TLS). Only accounts listed as administrators can modify the catalog, enforced by Firebase security rules, and staff session tokens are kept in the operating system's secure storage. Because shoppers have no account and the cart is stored only on the device, there is no shopper profile on our servers to be exposed. The app is intended for a general audience and is not directed at children under 13.

Rights of Data Subjects

You can exercise the following rights at any time:

• •Delete your cart from the app's cart screen, or remove all local data by uninstalling the app
• •Access, update, rectify or request deletion of the order information you shared with Yaiki Accesorios on WhatsApp
• •Revoke consent and object to processing when applicable
• •File claims with control authorities (EU/EEA: GDPR; California: CCPA/CPRA; Colombia: Law 1581/2012 before the Superintendencia de Industria y Comercio)
• •Requests must include your name, the specific petition and a contact email. We will respond within legal deadlines.