Comprehensive Privacy Notice

The Controller is SASU, S.A.P.I. de C.V., with its address at Calle Jaime Balmes 11, Torre B, Piso 4, Despacho 402, Col. Polanco I Sección, Miguel Hidalgo, C.P. 11510, Mexico City. For any matter related to your personal data, you can contact us at privacidad@sasuedu.com.

Depending on the features you use, we process the following categories of data:

• From the parent or guardian: phone number and, optionally, email address and family name; free-text notes from daily check-ins; reminder settings and time zone; notification token; referral codes; and, if you place print orders, full name, address and phone number.
• From children: name, date of birth or age range, gender, optional avatar photo, and the photos, videos and text you upload to the Memory Chest, as well as emotion and activity records.
• Sign-in and device data: user and device identifiers, model, operating system, app version and IP address.
• Subscription and payment data: subscription tier and status. Payments are processed through Apple, Google or Stripe; Sasu does not receive or store your card or bank account details.

Sensitive data. Children’s photos and videos, as well as the emotional notes in check-ins, are considered data that requires special protection. They are processed only with the express consent of the parent or guardian.

Primary purposes (necessary for the service):

• Creating and managing your account and the children’s profiles.
• Operating the app’s features: daily check-ins, Memory Chest, reminders and content recommendations.
• Processing subscriptions and, where applicable, print orders.
• Sending notifications and service-related communications.
• Keeping the platform secure and handling support requests.

Secondary purposes (not necessary; you may object):

• Product analytics and service improvement.
• Campaign measurement and marketing.

If you do not want your data processed for secondary purposes, you can say so at any time by writing to privacidad@sasuedu.com; this will not be a condition for using the app.

To recommend content after a daily check-in, we use a Google artificial intelligence service (Vertex AI) located in the United States. The text of your note and the selected emotions are sent for this purpose; the child’s name and age are not included. This processing constitutes an international transfer that you authorize by accepting this Notice.

To operate the service, we use providers that process data on our behalf (processors) or to whom we transfer data. The main ones are:

We do not sell your personal data. Transfers to these providers are made for the purposes described; those that require your consent under the Law are authorized when you accept this Notice. We maintain with our processors the protection commitments required by the Law.

Sasu accounts are created and managed exclusively by adults acting as a parent or guardian. When you sign up and, in any case, before you upload photos or videos of a child, we ask for your express consent to process that data. You represent that you have the authority to give it. The Parents Zone is protected by a parental gate. If you believe a minor provided us with data without your authorization, contact us so we can delete it.

You may Access, Rectify, Cancel or Object to the processing of your data (ARCO rights), and revoke your consent, by sending a request to privacidad@sasuedu.com. The request must state your name, the means by which you wish to receive a response, documents proving your identity and a description of the data regarding which you wish to exercise the right. We will respond within the time limits set by the Law (20 business days to decide and 15 to carry out the decision). You can also delete your account from the Parents Zone.

We keep your data while your account is active and for the periods needed to comply with legal obligations. When you delete your account, we remove your data from our active systems immediately and permanently within a maximum of 30 days, including photos, videos and technical logs, except for information we must keep by law. Some providers may keep limited technical or usage data, without your name, phone number or email address, for up to 14 months under their own policies. Apple and Google keep subscription purchase records under their own policies.

You can delete your child’s profile from the app under Parents Zone › Manage profiles › Delete profile. Doing so also deletes their memories, photos, videos and notes. To delete a specific memory, photo or video, write to us at privacidad@sasuedu.com.

On sasuedu.com we use our own and third-party cookies and similar technologies (Google Analytics, Meta, Stripe). Non-essential cookies are only activated with your consent through the corresponding notice on the site. You can manage them from your browser settings. Details are available in our Cookie Policy.

We apply administrative, technical and physical security measures to protect your data. Information is encrypted in transit (HTTPS/TLS) and stored encrypted at rest. No system is completely infallible, but we work to protect your data in accordance with the Law.

We may update this Notice due to legal changes or changes in our practices. We will publish the current version at https://sasuedu.com/es/privacy and, when the change is significant, we will let you know through the contact details we have on file.

If you believe your right to data protection has been violated, you may contact the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), or the authority that replaces it.