This is a translation. If it differs from the Spanish version, the Spanish version prevails.
Last updated: [pendiente: fecha]
Who is responsible
[pendiente: razón social, NIF, domicilio]. Privacy contact: [pendiente: correo].
Papelista is not a website or an app of the Spanish government. We help you carry out your procedures on the official government websites.
What stays on your iPhone
Papelista works without an account. The following is stored only on your iPhone, and we never receive it:
- your file (the details you type or scan: name, DNI or NIE, address…);
- your documents and their scans;
- your procedures, appointments and deadlines;
- your conversation history with the assistant and what it remembers about you (you can see and delete it in “What I remember about you”);
- what the document scanner and “Understand an official letter” read (processed on the device);
- the details and documents of the people in your care, if you add them;
- your digital certificate, if you import it: its private key is kept in the iPhone keychain, protected by Face ID or your passcode, and is only used to identify you to official government websites.
Sensitive data is stored encrypted in the iPhone keychain and is not copied to other devices. You can export or delete everything from the My file tab.
What leaves your iPhone, and when
| What | When | To whom | How long it is kept |
|---|---|---|---|
| The details the copilot types into a form | When you carry out a procedure on a government website | To the official website for that procedure | As decided by that public authority |
| Your question to the assistant, with DNI, NIE, phone numbers, emails, IBAN and Social Security number removed | Only if you turn on online answers | To our server and to the language model provider ([pendiente: razón social y país de NaN]) | We do not keep the text. We keep a usage counter per installation for 3 days |
| The details you tick when requesting a professional (may include name, surnames, phone, email, DNI or NIE, address and date of birth), your description and your province | Only if you send a request, with your consent | To our server and to the assigned professional | Until you cancel or the request is closed; 12 months at most |
| Which button or field worked on a government website, without any of your data | When a step succeeds | To our server, to share it with other people | While it is useful |
| Whatever the assistant needs from your file, your procedures and the text of your saved documents to answer about your case, with document numbers, phone numbers, emails, accounts and Social Security number hidden | Only if you turn on online answers and also “Use my data and documents” (asked separately, and you can turn it off at any time) | To our server and to the language model provider | We keep nothing: it is used for that answer and discarded |
| Your open procedures, your deadlines, the names of your documents and the notes the assistant remembers about you (never document numbers or contacts) | With each question, if online answers are on | To our server and to the language model provider | We keep nothing |
| A question the assistant could not answer, without personal data | Only if you tap “Send this question” | To our server | 90 days |
| A random installation identifier | With each of the above | To our server, which only keeps its hash | As long as the data it accompanies |
If your iPhone supports it, the copilot may use Apple’s Private Cloud Compute to decide what to do on a web page; Apple does not keep that data. Otherwise it uses the iPhone’s own model or rules.
We do not use your data for advertising, we do not track you across apps and we do not sell anything to anyone.
Legal basis
- Doing what you ask us to (carrying out the procedure, answering your question).
- Your consent, for the online assistant and for sharing your data with a professional. You can withdraw it at any time.
A request to a professional may reveal special categories of data (for example, your immigration status or criminal record). It is only sent with your explicit consent and only to the assigned professional.
Who else is involved
- [pendiente: proveedor del modelo de lenguaje], for the assistant’s online answers.
- Cloudflare, Inc., which protects the connection to our server.
- [pendiente: dónde está alojado el servidor y con quién].
- The professional your request is assigned to, who is responsible for how they use your data.
[pendiente: si alguno está fuera del Espacio Económico Europeo, con qué garantías]
Your rights
You can access, rectify and erase your data, object to or restrict its use, and take it with you.
- What is on your iPhone is under your control: My file › Export my data, or Delete all my data.
- A request to a professional is deleted from our server when you cancel it in Procedures › Professionals.
- For anything else, write to [pendiente: correo]. We reply within one month at most.
If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Minors
Papelista is not intended for people under [pendiente: 14 o 16] years old.
Changes
If we change this policy we will tell you in the app before the change takes effect.