Privacy Policy - Modo Racha
Modo Racha Modo Racha
Last updated: November 5, 2026

Privacy Policy

This policy describes how Modo Racha collects, uses, and protects user information, both in the mobile app and on this website. It complies with GDPR, CCPA, and Chilean data protection regulations.

We do not collect your location, contacts, camera, or microphone data. We show no third-party advertising and we do not sell your data. We use no tracking or advertising cookies.

Data Controller

CCSB INC SPA, independent operator of the App, based in Chile.
Privacy contact: contact@ccsbincspa.com

01

Information we collect

We only collect what is needed to make the app work and to improve it:

  • Account: email address and password. The password is managed by Supabase Authentication and we never see it. If you sign in with Google, we receive the name and email Google shares.
  • Profile: your @username, the name or nickname you enter and, optionally, a profile photo. The app only accesses the photos you choose for this purpose.
  • Your routine: habits, named routines, daily check-ins, notes, reminder times, and dates.
  • Your progress: streak, level, XP, achievements, equipped Orni, and unlocked Ornis.
  • Subscription and purchases: active plan and purchase history (Premium and characters) through Google Play, Apple App Store, and RevenueCat. We do not store card data.
  • Relationships in the app: who you follow and who follows you, partners, challenges, routines you share or adopt, and reactions (πŸ”₯).
  • Device: push notification token, operating system (iOS or Android), app version, and whether the notification permission is enabled.
  • App usage: answers to short questions you choose to answer (along with context such as streak, level, and platform) and views, taps, and dismissals of the banners shown inside the app.
  • Communications: your email preferences, whether you unsubscribed, and a record of the emails we send you.
02

How we use your information

  • Create and manage your account and profile
  • Save and sync your routine and daily records across devices
  • Calculate your streak, level, achievements, and Orni, and show your activity and that of the people you follow
  • Process and manage your Premium subscription and purchases
  • Send you reminders and push notifications (if you enable them), and account and news emails (you can unsubscribe)
  • Help you get started or come back to the app, for example with an email if you have not logged a habit yet or have notifications turned off
  • Measure how the app is used in aggregate (for example, user retention) to improve it
  • Show short questions and banners inside the app, and measure whether they work
  • Keep the app secure and prevent fraud
03

Legal basis (GDPR)

  • Performance of a contract: using your account, routine, and progress data to provide the App functionality.
  • Consent: push notifications and news or promotional emails. You can withdraw it at any time (see section 11).
  • Legitimate interest: fraud prevention, App security, aggregate statistics to improve it, and messages to help you resume using the app.
04

What other people can see

Modo Racha has social features. This is what other account holders can see:

  • Your @username, display name, and profile photo (if you uploaded one)
  • Your streak, level, adherence, achievements, and unlocked Ornis
  • Who you follow and who follows you
  • Routines you mark as public (you can leave out specific habits)
  • Your achievements in the Activity tab of your followers, who can react with πŸ”₯

Other people cannot see your email, notes, check-in details, or purchases. Partners require acceptance from both people.

05

Storage and security

Your information is stored securely on Supabase, a database service with encryption in transit and at rest. Profile photos are stored in Supabase storage. Payment transactions are processed by Google Play, Apple App Store, and RevenueCat; Modo Racha does not store credit card data or banking information. For internal analysis we use Google Cloud (BigQuery), with access restricted to the Modo Racha team.

06

Sharing information with third parties

Modo Racha uses the following third-party services, each with its own privacy policy:

Supabase β€” database, authentication, and photos Policy β†’
RevenueCat β€” subscription management Policy β†’
Google Play β€” payments (Android) Policy β†’
Apple App Store β€” payments (iOS) and push notifications on iPhone Policy β†’
Expo and Firebase Cloud Messaging β€” push notification delivery Policy β†’
Google (Sign-In, Workspace, and Cloud) β€” Google sign-in, email delivery, and internal analysis Policy β†’
Meta (Facebook SDK) β€” measuring installs and basic app events to evaluate our campaigns; the advertising identifier is disabled Policy β†’
Hostinger β€” hosting for this website Policy β†’

We do not sell or share your personal information with third parties for advertising or commercial purposes.

07

International data transfers

Your data may be stored or processed on servers located outside your country (mainly in the United States, where Supabase, RevenueCat, Expo, Google, and Meta operate). These providers comply with protection frameworks such as the European Commission Standard Contractual Clauses (SCCs) where applicable.

08

Account deletion and data retention

You can delete your account at any time from You β†’ Settings β†’ Security and Privacy β†’ Delete Account. When you do:

1
Your personal data (email address, profile, habits, streak, check-in history, relationships, and activity) is permanently deleted from our servers within 30 days.
2
We keep an anonymized record of the deletion for up to 7 years (internal identifier, sign-up date, deletion date, and whether you had Premium; no email, name, or content), to comply with legal, tax, and defense obligations in case of claims or audits.
3
If you had unsubscribed from our emails, we keep your address on an exclusion list so we do not email you again.
4
Your purchase and subscription history remains in Apple App Store, Google Play, and RevenueCat according to their respective policies. Modo Racha does not control those records.
5
If you have an active subscription, remember to cancel it before deleting your account or it will continue to renew automatically.
09

Your rights (GDPR and CCPA)

Under GDPR, CCPA, and Chilean regulations, you have the right to:

  • Access the personal information we hold about you.
  • Rectify incorrect or outdated data (you can edit your profile in the App).
  • Delete your account and all your data directly from the App.
  • Portability: request your data in a machine-readable format (JSON).
  • Object to the processing of your data and withdraw your consent where processing is based on it.
  • Lodge a complaint with the data protection authority in your country.

To exercise these rights, write to us at contact@ccsbincspa.com. We respond within 30 days.

California residents (CCPA): you have the rights described above plus the right to know which categories of information we collect (section 01) and to request their deletion. We do not sell or share your personal information.

10

Children's privacy

Modo Racha is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with data, write to us so we can delete it.

11

Notifications and emails

You can control each channel at any time:

  • Local reminders and push notifications: reminders for your routine, alerts about what people you follow achieve, πŸ”₯ reactions, and app messages, including messages if you spend several days without opening the app. Turn them off in your phone settings or in Profile β†’ Notifications.
  • Emails: we send account emails (verification, password recovery) and, if you have not unsubscribed, news, promotions, or messages to help you resume using the app. Every email includes an unsubscribe link, and you can also turn them off in Profile β†’ Notifications.
12

Website and cookies

On modoracha.com we only use the cookies needed to keep you signed in when you access your dashboard. We use no advertising cookies or third-party tracking tools on the site. As with any website, the hosting provider may log technical data about the visit (such as the IP address) for security reasons.

13

Changes to this policy

We may update this policy occasionally. We will notify you of significant changes by posting the new version on this page with the updated date.

Questions about this privacy policy?
Reach out and we'll respond.

contact@ccsbincspa.com