Last updated: October 4, 2026
Pollo Assistance ("we", "our", "the Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.
The Service is operated from Spain (European Union), and is therefore subject to the GDPR and Spanish data protection law.
| Data Type | Purpose | Retention |
|---|---|---|
| Email address | Account creation and authentication | Until account deletion |
| Display name | Identifying you inside the app | Until account deletion |
| Chat messages | Providing AI responses and chat history | Until chat or account deletion |
| Uploaded files | File management and AI analysis | Until file or account deletion |
| Files written by the AI console | When the AI builds something for you, it works in a Linux console that runs inside your own browser and writes files there. Those files are saved with the chat so you still have them tomorrow. | Until chat or account deletion |
| Device information | Recognising your devices and detecting unauthorised access (see section 6) | Until account deletion |
| Credit and usage records | Applying the daily and weekly credit limits of your plan, and detecting abuse | Until account deletion |
| Purchase records | Delivering Premium, issuing your invoice and supporting your purchase | As required by accounting and tax obligations |
| Authentication tokens | Secure session management | Session duration |
We use your information to:
We use the following third-party services to operate the platform:
We do not sell, trade, or otherwise transfer your personal information to outside parties for marketing purposes.
Some of the heaviest things Pollo does run entirely on your own device. We are spelling this out because people reasonably assume the opposite:
Note the difference: this is about processing. The text that Pollo then sends to an AI model, in order to answer you, does travel to that model’s provider — see the list above.
Free accounts see small ads above the message box. Premium accounts see none.
These ads are served entirely by us and are worth spelling out, because they work differently from advertising on most websites:
Ads are clearly labelled as "Advertising". If you follow one, you leave the Service and the destination site's own privacy policy applies.
To protect your account, we recognise the devices you sign in from. When you log in we generate a device identifier: a one-way SHA-256 hash calculated from your browser's user agent, language, screen size and colour depth, time zone offset, number of CPU cores and platform.
Alongside that identifier we store a readable device label, your browser's user agent string, and the dates of first and last use.
We use this only to:
It is not used for advertising, analytics, profiling, or tracking you across other websites — we cannot do so, as the identifier only exists inside your own account. The legal basis is our legitimate interest in keeping accounts secure. You can see and remove your devices from the settings panel, and they are deleted with your account.
Your data is stored using Firebase/Google Cloud infrastructure with industry-standard security measures including:
We do not monitor conversations in real time, and we do not read them routinely. Moderators can access chat content only when it is necessary to:
Access is manual, case by case, and limited to what that case requires.
Separately, extensions submitted to the store are checked automatically before publication. That check reads the extension's code, description and images — never your conversations.
If you are located in the European Economic Area, you have the following rights:
To exercise any of these rights, please contact us at the email address below.
We use browser local storage to save your preferences (theme, language, settings) and your list of installed extensions. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Firebase Authentication uses essential cookies for session management.
Because we run no advertising or analytics trackers, no cookie consent banner is required.
The Service is not intended for children under 14 years of age, which is the age of digital consent in Spain. We do not knowingly collect personal information from children under 14. If we discover that a child under 14 has created an account, we will delete it and its data promptly.
If you are a teacher or an institution using the Service with students, you are responsible for obtaining any consent your local law requires.
We retain your data for as long as your account is active. You can delete individual chats, files, or your entire account at any time. Upon account deletion, all associated data is permanently removed within 30 days.
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.
For privacy-related questions, data requests, or concerns:
See also: Terms of Service