Skip to main content
CobrApp

Privacy Policy and Personal Data Protection

Last updated: February 14, 2026

This policy describes how YIBIHUGE S.A.S BIC (YH SAS), identified with Tax ID (NIT) 902031444 and domiciled in Medellín, Colombia, collects, uses, stores, and protects personal data of CobrApp users.

1. Information We Collect

We may collect: (i) identification and contact data such as name, email, and phone number; (ii) operational information entered by users in the app to manage their portfolio; (iii) technical data such as device information, operating system, usage logs, and IP; and (iv) subscription and billing data provided by App Store or Google Play. CobrApp does not store full payment card numbers.

2. Purposes of Processing

We use personal data to: create and manage accounts; provide service functionalities; manage subscriptions and payments; respond to support requests; send operational communications; prevent fraud and misuse; and comply with legal and regulatory obligations.

3. Legal Bases for Processing

We process personal data based on: (i) performance of the contractual relationship for use of CobrApp; (ii) user consent for specific purposes; (iii) compliance with legal obligations; and (iv) legitimate interest for security, continuity, and service improvement.

4. Sharing Information and Processors

We do not sell personal data. We may share information with service providers acting on our behalf to operate CobrApp, including distribution and subscription platforms such as Apple (App Store) and Google (Google Play), as well as infrastructure and technical support providers. We may also disclose information when required by law or by a competent authority.

5. International Data Transfers

Some providers may process data outside Colombia. In such cases, we implement reasonable safeguards to protect personal data and require appropriate security and confidentiality standards.

6. Data Retention

We retain data for as long as necessary to provide the service, comply with legal obligations, and address contingencies. When data is no longer required, it is deleted or anonymized in accordance with applicable law.

7. Information Security

We implement technical, administrative, and organizational measures to protect data, including access controls and encryption in transit where applicable. However, no system is entirely immune to security risks.

8. Cookies and Similar Technologies

We use cookies and similar technologies on the website, and equivalent tools in the app, to remember preferences, improve user experience, and obtain service performance metrics. Users may manage cookies through their browser settings when applicable.

9. Data Subject Rights

Users may exercise rights of access, update, rectification, deletion, and revocation of consent, under applicable Colombian data protection law. Requests may be sent to info@cobrapp.co with the subject "Data Protection - CobrApp".

10. Automatically Renewing Subscriptions

CobrApp offers automatically renewing subscriptions through App Store (iOS) and Google Play (Android). By subscribing, users authorize recurring automatic charges according to the selected plan.

Cancellation must be managed through the corresponding store (App Store or Google Play) and becomes effective at the end of the current billing period. For billing or renewal concerns, users may contact us at info@cobrapp.co.

11. Minors

CobrApp is not intended for users under 18 years old. If we identify personal data processing of minors without valid authorization, we will take measures to delete or block such information.

12. Updates to This Policy

We may update this policy from time to time. The current version will be published on this page with its effective update date. When changes are material, we may notify users through available channels.

13. Data Controller and Contact

Controller: YIBIHUGE S.A.S BIC (YH SAS) - Tax ID (NIT) 902031444 - Domicile: Medellín, Colombia. For privacy and personal data requests: info@cobrapp.co.