Last updated: October 23, 2026
This English version is provided for convenience. If it differs from the Spanish version, the Spanish version prevails.
Effective date: October 23, 2026 Last updated: October 23, 2026
This Comprehensive Privacy Notice (the "Notice") is issued under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), published in the Official Gazette (DOF) on March 20, 2025 (the "Law"), and other applicable rules. It covers the Bilanz mobile app for iOS and Android, the Bilanz web app, and its website or landing page (together, the "Services").
The controller (responsable) of your personal data is César Román Zúñiga, an individual (persona física) domiciled in Mexico, operating Bilanz under the trade name Robz Code and developing Bilanz in Mexico ("we", "us").
Bilanz is a personal finance tool in which you enter all information manually. Bilanz does not connect to your bank or any financial institution, does not obtain bank account data from third parties. Bilanz itself does not use artificial intelligence to process your information. If you choose, you can connect third-party AI assistants to your account through MCP, as described in Section 7.
We process the following categories of personal data:
a) Identification and contact data (profile)
b) Authentication data
c) Financial and asset (patrimonial) data you enter
d) Subscription data
e) Technical data
Sensitive personal data. Bilanz does not request sensitive personal data as defined in Article 2(VI) of the Law (e.g., ethnic origin, health, religious beliefs, political opinions, or sexual orientation). Please do not enter sensitive data in free-text fields such as account, category, or tag names.
Financial or asset data. We consider the information in item (c) to be financial or asset (patrimonial) data, even though you enter it manually and it does not come from a bank connection. Article 7 of the Law therefore requires your express consent to process it. We request it as described in Section 4.
3.1 Primary purposes (necessary to provide the Services)
3.2 Secondary purposes Bilanz currently does not process your data for any secondary purposes. It does not use your data for marketing, advertising, commercial prospecting, ad profiling, or data sales.
If we want to process your data for a different purpose in the future, we will update this Notice and ask for your consent again, as required by Article 11 of the Law.
We rely on the following providers to run the Services. They process your data only on our behalf and under our instructions. Under the Law, this is a remission to processors (encargados), not a transfer.
| Processor category | Role | Data involved | Processing location |
|---|---|---|---|
| Cloud infrastructure and database provider | Database, backend, and authentication | Profile, authentication, financial data you enter, and technical data | United States |
| In-app subscription and payment management provider | Subscription and in-app purchase management | App user ID, plan and subscription status, purchase information from Apple or Google | United States |
| Server hosting provider | Hosting for the backend API and website | Data in transit, access logs, and technical data needed to serve requests | United States |
We require our processors to give your data the same or an equivalent level of protection as this Notice. We rely on each processor's applicable service terms and data processing agreements
Third-party services you use directly. When you choose Sign in with Apple, Google, or Facebook (Meta), or make an in-app purchase through the Apple App Store or Google Play, you deal with those companies directly. They process your data under their own privacy policies. We receive only the minimum information described in Section 2: the identifier, name, and email for sign-in, and the purchase or subscription status. Facebook/Meta is used for sign-in only. We encourage you to review the privacy policies of Apple, Google, and Meta.
Third-party AI assistants. AI assistants you connect through MCP, and the companies that run them, are not Bilanz processors. They do not process your data on our behalf or under our instructions. See Section 7.
Bilanz does not sell your personal data or share it with third parties on its own initiative. Bilanz makes no transfers that require your consent, except the one you request and expressly authorize when you connect a third-party AI assistant (Section 7).
We may transfer your data without your consent only in the cases listed in Article 36 of the Law. Examples include when a law or a treaty to which Mexico is a party requires it, when a competent authority issues a duly grounded order, or when a transfer is needed to establish, exercise, or defend a right in court.
If we ever need to make a transfer that requires your consent, we will tell you by updating this Notice and will ask you to state whether you accept it (Art. 35 of the Law).
Processing outside Mexico. Some of our processors may process or host your data outside Mexico: primarily the United States, with contractual safeguards through each processor's terms and data processing agreements.
Available since October 19, 2026.
What it is. The Model Context Protocol (MCP) lets third-party artificial intelligence assistants connect to services such as Bilanz. Since October 19, 2026, you can authorize a third-party AI assistant to read and/or change your Bilanz data through OAuth. Bilanz itself does not use AI to process your data; the AI is provided by the third party you choose.
You start and control access. A connection happens only at your request. To authorize it, you sign in to Bilanz and approve an explicit OAuth consent screen showing the assistant or app requesting access and the permissions requested. No data is shared until you approve. Each connection is authorized separately. Your approval on that screen is your express consent, given electronically, for us to communicate to that third party the data covered by the permissions you grant, including your financial and asset data (Arts. 7 and 35 of the Law).
What is shared. Only the Bilanz data covered by the permissions (scopes) you grant. Permissions may be read and/or write for your accounts, transactions, categories, budgets, and other account data: the read and/or write permissions you approve on the OAuth consent screen for accounts, transactions, categories, tags, budgets, and, where needed, profile data strictly required for the requested operation. The assistant never receives your password.
Write access. If you grant write permissions, the assistant can create or change data in your account based on your instructions; write permissions may create, modify, or delete data within the scopes you grant. Bilanz will apply those changes as if they came from your account. We recommend reviewing the changes the assistant makes.
The third party processes your data under its own rules. The AI assistant and the company that runs it receive the data you authorize and process it under their own privacy policies and terms, which may include processing outside Mexico. Bilanz does not control those third parties or what they do with the data once received. Review their privacy policies before connecting an assistant. This is a transfer you request and expressly authorize. We do not make it on our own initiative, and it is not a remission to a processor (Section 5).
How to revoke access. To disconnect Bilanz, remove it from the connectors or integrations settings of your AI assistant.
Revoking stops future access, but Bilanz cannot recall or delete data already sent to the third party. For that, contact the assistant's provider directly.
Permission duration: Access and refresh token lifetimes are stated on the OAuth consent screen and in the published feature documentation; connections may expire after inactivity as configured.
You can limit the use or disclosure of your data by:
Bilanz does not send advertising, so there are no marketing messages to opt out of. If we ever send them, we will provide an opt-out. Mexican residents can also register with PROFECO's Public Registry to Avoid Advertising (REPEP).
You or your legal representative may exercise your rights at any time to:
How. Email your request to soporte@bilanzapp.com with the subject "ARCO Rights – Bilanz".
Request requirements (Art. 28 of the Law):
For rectification requests, also state the changes to make and include supporting documents.
Deadlines (Art. 31 of the Law). We will send you our decision within 20 business days of receiving your request. If the request is granted, we will carry it out within the following 15 business days. Each deadline may be extended once by an equal period when justified.
Response format and cost. We will reply through the same channel you used. We will provide data for access requests as an electronic file in CSV format. Exercising ARCO rights is free. Only reproduction or shipping costs may be charged, under Article 34 of the Law.
Refusals. We may refuse a request, in whole or in part, in the cases listed in Article 33 of the Law, and we will tell you why. Cancellation also does not apply in the cases listed in Article 25 of the Law (for example, when the law requires us to keep the data).
Rights-protection procedure. If you disagree with our response, or do not receive one, you may file a data protection request with Mexico's Secretaría Anticorrupción y Buen Gobierno (Anti-Corruption and Good Governance Ministry). Under the Law, this ministry oversees personal data held by private parties, a role formerly held by the now-dissolved INAI. You have 15 business days from receiving our response, or from the end of our response period if we do not reply (Art. 40 of the Law).
You may withdraw your consent at any time, including your express consent for financial and asset data. Withdrawal does not apply retroactively (Art. 7 of the Law). To withdraw, email soporte@bilanzapp.com with the same details listed in Section 9. We will respond within the same deadlines.
If you withdraw consent for processing needed for the primary purposes, we will no longer be able to provide the Services and will cancel your account. We may also be unable to act on your request right away where a legal obligation requires us to keep processing certain data.
How to delete your account:
What is deleted. When you delete your account:
If you connected third-party AI assistants (Section 7), see Section 7.
Steps involving third-party services. When you delete your account, we also attempt to delete your customer record with our subscription provider and, if you signed in with Apple, to revoke your Sign in with Apple token. These steps depend on third-party services. They are attempted and logged, but they never block your account deletion: if one fails, your account is still deleted and the pending step can be retried. We cannot guarantee they always complete on the first attempt. To confirm they were completed, or to ask us to handle them, write to soporte@bilanzapp.com. You can also remove Bilanz's access directly in your Apple, Google, or Facebook account settings.
New accounts. If you sign up again, a new account with a new identifier is created, with no link to your previous account. Data from the deleted account cannot be recovered.
Backups and technical logs. Database backups may contain your full information until they are removed; they are automatically deleted after 7 days. During that time, backups are not used for any other purpose. Our providers' technical logs are removed on their own schedules under the log retention policies applicable to our plan.
Blocking. Because deletion is immediate and total, we do not keep your personal data in a blocked state or any deletion record (tombstone) after your account is deleted.
Confirmation. Through an in-app confirmation screen when you delete from the app, or by email reply when the request was sent by email.
Subscriptions and purchase records. Deleting your Bilanz account does not cancel a Pro subscription, because Apple or Google handles billing. Before deleting your account, cancel your subscription in your App Store or Google Play subscription settings. Apple and Google keep their own purchase records under their own policies. While deletion with our in-app subscription and payment management provider is pending, and for any residual copies in its backup systems, that provider's retention practices apply until it is completed.
Retention while your account is active: we keep your data only while your account remains active and you have not requested deletion; when you delete your account, your data is removed immediately and entirely from our active systems, with no recovery period or post-deletion retention, except backup copies described above until they are automatically removed.
The Services are not directed at minors. They are intended for users 18 years of age or older, consistent with Bilanz's age rating on the App Store and Google Play. We do not knowingly collect data from minors. If you are a parent or guardian and believe a minor has given us personal data, contact us at soporte@bilanzapp.com and we will delete it.
We maintain administrative, technical, and physical safeguards to protect your personal data against damage, loss, alteration, destruction, and unauthorized use, access, or processing (Art. 18 of the Law). These include authentication and access controls, confidentiality obligations for everyone involved in processing, and infrastructure providers with recognized security practices. These include encryption in transit (TLS) and at rest, per-user database access controls, and secure authentication No system is completely secure. If a security breach significantly affects your property or moral rights, we will notify you immediately (Art. 19 of the Law).
The Bilanz landing page does not use third-party analytics or advertising cookies. The web app and MCP sign-in route use local storage and strictly necessary cookies to keep you signed in and run authentication; we do not use analytics or advertising cookies on the web. You can disable or delete them in your browser settings, though some features (such as staying signed in) may stop working
The Bilanz mobile apps do not use advertising cookies and do not track your activity across third-party apps or websites for advertising. You can delete or block cookies and local storage in your browser settings. If you do, some web app features, such as staying signed in, may not work properly.
We may update this Notice because of legal changes or changes to our Services or practices. We will communicate any change by:
If a change involves new purposes, new transfers that require consent, or different processing of your financial or asset data, we will ask for your consent again before applying it.
For questions about this Notice or how we process your data, write to soporte@bilanzapp.com or to Carrillo Puerto 20, Zona Centro, Centro, 91000 Xalapa-Enríquez, Ver.