Privacy Policy
Last updated: October 19, 2025
At Migro, we are committed to protecting your privacy and handling your personal information safely and responsibly. This policy describes how we collect, use, store, and protect your information when you use our mobile application.
⚠️ IMPORTANT DISCLAIMER
Migro is NOT a government entity and is not affiliated, sponsored, or authorized by any public or government institution.
Our application is a private migration advisory service that provides general information and guidance. All government information shared in our application comes from official public sources and is provided for informational purposes only.
Official sources used:
- Ministry of Interior of Spain (www.interior.gob.es)
- Ministry of Foreign Affairs, European Union and Cooperation (www.exteriores.gob.es)
- Office of Asylum and Refuge (OAR)
- Official State Gazette (BOE)
- Official websites of embassies and consulates
Important: Always consult directly with the competent authorities to obtain official and up-to-date information on specific migration procedures.
1. Information We Collect
1.1 Personal Information
We collect the following personal information when you register and use our application:
- Identification data: Full name, email address, phone number
- Profile information: Profile photo (avatar), personal biography
- Authentication data: Password (encrypted), third-party service identifiers (Google, Facebook, Apple)
- Account information: Verification status, user role, last login date
1.2 Usage Information
We automatically collect information about how you use our application:
- Application usage data and features used
- Device information (device type, operating system, application version)
- Connectivity and performance data
- Error and crash information to improve the application
1.3 Migration Services Information
To provide our migration advisory services, we may collect:
- Migration documents you provide to us
- Information about your migration status
- History of consultations and services used
- Communications between you and our advisors
2. How We Use Your Information
2.1 Service Provision
- Provide migration advisory services
- Manage your account and user profile
- Facilitate communication with our specialized advisors
- Process payments and transactions
2.2 Service Improvement
- Analyze application usage to improve user experience
- Develop new features and services
- Fix errors and optimize performance
- Conduct research and statistical analysis
2.3 Communication
- Send important notifications about your account
- Provide updates on the status of your procedures
- Send relevant information about migration legislative changes
- Respond to your inquiries and support requests
3. Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Consent: When you give us your explicit consent
- Contract performance: To provide the services you have requested
- Legitimate interest: To improve our services and prevent fraud
- Legal compliance: When required by applicable legislation
4. Information Sharing
4.1 We Do Not Sell Your Information
We do not sell, rent, or share your personal information with third parties for commercial purposes.
4.2 Sharing with Service Providers
We may share information with trusted service providers who help us operate our application:
- Firebase (Google): For authentication, storage, and analytics
- Stripe: For payment processing
- Hosting providers: For secure data storage
- Communication services: For sending notifications
4.3 Legal Requirements
We may disclose your information when required by law or to:
- Comply with court orders or subpoenas
- Protect our legal rights
- Prevent fraud or illegal activities
- Protect the safety of our users
5. Data Security
5.1 Technical Security Measures
- Encryption of data in transit and at rest
- Two-factor authentication when possible
- Continuous security monitoring
- Regular and secure backups
5.2 Organizational Security Measures
- Limited access to personal information only to authorized personnel
- Regular staff training on data protection
- Strict confidentiality policies
- Regular security audits
6. Data Retention
We retain your personal information for as long as necessary to:
- Provide the services you have requested
- Comply with legal and regulatory obligations
- Resolve disputes and enforce our agreements
- Improve our services
Inactive account data will be deleted after 3 years of inactivity, unless the law requires a longer retention period.
7. Your Rights
Under the General Data Protection Regulation (GDPR) and other applicable laws, you have the following rights:
7.1 Access and Control Rights
- Access: Request a copy of the personal information we have about you
- Rectification: Correct inaccurate or incomplete information
- Erasure: Request the deletion of your personal information
- Restriction: Restrict the processing of your information
7.2 Portability and Objection Rights
- Portability: Receive your information in a structured and readable format
- Objection: Object to the processing of your information for certain purposes
- Withdrawal of consent: Withdraw your consent at any time
7.3 How to Exercise Your Rights
To exercise any of these rights, you can:
- Contact us through the contact information provided at the end of this policy
- Use the privacy settings in the application
- Send a written request to our address
8. Cookies and Similar Technologies
Our application may use cookies and similar technologies to:
- Remember your preferences and settings
- Analyze application usage
- Improve functionality and performance
- Provide personalized content
You can control the use of cookies through your device settings.
9. International Transfers
Some of our service providers may be located outside the European Economic Area (EEA). When we transfer personal information to these countries, we ensure that:
- Adequate safeguards exist to protect your information
- Appropriate data protection guarantees are met
- International privacy standards are respected
10. Minors
Our services are directed to people over 16 years of age. We do not intentionally collect personal information from minors under 16 without verifiable consent from their parents or legal guardians.
11. Changes to This Policy
We may update this Privacy Policy occasionally. We will notify you of significant changes through:
- In-app notifications
- Email to the registered address
- Updating the "last modified" date on this page
We recommend reviewing this policy periodically to stay informed about how we protect your information.
12. Contact
13. Supervisory Authority
If you believe that the processing of your personal information does not comply with applicable legislation, you have the right to file a complaint with the competent data protection supervisory authority in your jurisdiction.
In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD):
- Website: www.aepd.es
- Address: C/ Jorge Juan, 6, 28001 Madrid
- Phone: 901 100 099
Last updated: October 19, 2025
This Privacy Policy is effective as of the last updated date indicated above.