APEX
Legal

PRIVACY
POLICY

APEX APP SpA — Tax ID 78.426.148-4

Last updated: May 22, 2026

1. Data controller identification

The party responsible for processing your personal data is APEX APP SpA, Tax ID 78.426.148-4, domiciled in Las Condes, Santiago, Chile. Privacy and data rights contact: support@useapexapp.com General contact: contact@useapexapp.com

2. Data we collect

We collect the following types of data to provide the service: • Identification data: name, email, date of birth, sex. • Fitness data: weight, height, body measurements, workout logs, physical progress, nutrition data. • Financial data: income and expense transactions, categories, amounts, dates, and bank connections when the user voluntarily authorizes them. • Habits and skills data: completion records, streaks, frequencies, progress levels. • Usage data: interactions within the app, features used, errors reported. • Account data: authentication credentials securely managed by Supabase Auth. • Payment data: for subscriptions purchased via web, Dodo Payments processes the payment. APEX does not store credit or debit card data.

3. Purpose of processing

We use your data to: • Provide the integrated personal tracking service (habits, fitness, finances, skills). • Generate personalized analysis and reports with artificial intelligence. • Send you notifications related to your activity in the app. • Process and manage subscription payments. • Improve the operation and experience of the application. • Comply with legal and tax obligations in force in Chile. We do not use your data for third-party advertising. We do not sell or transfer your personal data to any company for commercial purposes.

4. Service providers (sub-processors)

To provide the service we use the following providers, who process data on your behalf under confidentiality agreements and their own privacy policies: • Supabase Inc. (United States): database storage, authentication and files. Data encrypted at rest and in transit. • Anthropic PBC (United States): text processing for generating analysis, plans and recommendations with artificial intelligence (Claude models). • Fintoc Technologies (Chile): voluntary bank connection for automatic import of financial transactions. Read-only access. • Dodo Payments: processing of subscription payments purchased via the website, as a global Merchant of Record. • Apple Inc. / Google LLC: distribution of the mobile application on the App Store and Google Play. • Vercel Inc. (United States): hosting and deployment of the useapexapp.com website.

5. Legal basis for processing

The processing of your data is carried out in accordance with Chile's Law No. 19,628 on the Protection of Private Life and Law No. 20,575 on the use of financial data. The primary legal basis is the free and informed consent you provide by accepting this policy when registering for APEX. For health and financial data, consent is explicit at the moment the user enters or voluntarily authorizes that information.

6. Data retention

We retain your data while you maintain an active account in APEX. If you delete your account (available at Profile → Settings → Delete account), your personal data is permanently and irreversibly deleted within a maximum of 30 days. Anonymized and unrecoverable data used for non-personal statistical analysis may be retained indefinitely without any possible identification of the user.

7. International data transfer

Some of our providers (Supabase, Anthropic, Vercel) operate in the United States. By using APEX, you consent that your data may be transferred and processed outside Chile, under the security safeguards established in the contracts with those providers and in accordance with their data protection policies.

8. Your rights

Under Law No. 19,628, you have the following rights over your data: • Access: request what personal data we hold about you. • Rectification: correct inaccurate or incomplete data. • Cancellation/Deletion: delete your data (available directly from the app at Profile → Settings → Delete account). • Objection: object to the processing of your data in specific circumstances. To exercise any of these rights, write to support@useapexapp.com with the subject "Data rights" and your full name or account email. We will respond within a maximum of 15 business days.

9. Security

We implement the following technical and organizational measures to protect your data: • Encryption in transit: all communications use HTTPS/TLS. • Encryption at rest: data stored in Supabase with AES-256 encryption. • Row Level Security (RLS): each user can only access their own data at the database level. • Secure authentication: passwords stored with bcrypt hashing; sessions with short-lived JWTs. • Restricted access: only authorized APEX APP SpA personnel access user data, and only in justified technical support contexts. In the event of a security breach that could affect your personal data, we will notify you within 72 hours by email.

10. Cookies and similar technologies

The useapexapp.com website uses only essential technical cookies for its operation (admin panel authentication). We do not use tracking, advertising or third-party analytics cookies. The mobile application does not use cookies. It uses local storage (AsyncStorage) exclusively to maintain the user's session on the device.

11. Minors

APEX is not directed at persons under 18 years of age. We do not knowingly collect data from minors. If we detect that a minor has created an account without authorization, we will delete it immediately along with all their data. If you are a parent or guardian and believe your child has created an account on APEX, contact us at support@useapexapp.com.

12. Changes to this policy

We may update this privacy policy when necessary. We will notify you of relevant changes through the app or by email at least 15 days in advance. Continued use of APEX after notification implies acceptance of the updated policy. The current version will always be available at useapexapp.com/privacy with the date of last update.

13. Contact

For any inquiry, request or complaint related to this policy or the processing of your data: • Technical support and data rights: support@useapexapp.com • General inquiries: contact@useapexapp.com APEX APP SpA — Tax ID 78.426.148-4 Las Condes, Santiago, Chile

This policy is governed by the laws in force in the Republic of Chile, in particular Law No. 19,628 on the Protection of Private Life, Law No. 20,575 on the use of financial data, and their respective amendments.

Version published on May 22, 2026 · useapexapp.com/privacy