MegaPok
Privacy Policy (summary)

Privacy Policy (summary)

Spanish version last updated: October 11, 2026

This page is a translated summary for your convenience. The legally binding version is the Spanish one, which prevails in case of any difference. Read the binding Spanish version.

This summary explains what personal data MegaPok collects, why, who we share it with and what rights you have. It complements the Data Processing Policy.

1. Data controller

Controller: MegaPok, marca operada por Santiago Garzón Arias (persona natural comerciante, propietario del establecimiento de comercio Nueva IA), identificado con C.C. 1.000.795.948 / NIT 1.000.795.948-9.

Privacy contact: privacidad@medallovip.com. Support: soporte@medallovip.com. Copyright: dmca@medallovip.com.

2. What we collect

Account: phone number and PIN, profile (name, username, bio, photo, date of birth, gender, city); name, email and photo if you sign in with Google or Apple.
Contacts (optional): only if you allow it, your phone book numbers are compared at that moment to suggest friends; the list is not stored.
Content: videos, photos, audio, text, stories, live streams, calls, comments, chat messages and gifts.
Usage and device: interactions, searches, viewed posts, language, device model and system, a device identifier and the push token. For security we also record the IP address of sign-ups, logins, app openings and posts, and the approximate country and city.
Location: approximate, to show nearby businesses and people; precise only when you allow or choose it (delivery address, «Conoce»); real time only for couriers while online.
Orders, couriers and businesses: delivery details, payment receipts, couriers' identity documents, and business data such as catalog and bank account for transfers.
Conoce and Ideal match (optional): preferences and interests; skin color, social stratum, political ideology and religion only if you choose to give them. Those four sensitive data are never shown to anyone and are used only by automatic matching rules.
Transactions, support and moderation records. Card data is received directly by the payment gateway (Wompi or ePayco).

3–4. Why and legal basis

To run your account and the services, process orders and payments, personalize your feed, send notifications, moderate content, prevent fraud, protect minors, answer requests and meet legal duties. The basis is your prior, express and informed consent, the service agreement, legitimate interest and legal obligations (Colombian Law 1581 of 2012 and Decree 1377 of 2013). We do not sell your personal data.

5. Artificial intelligence

Some features send content to AI providers: the assistant, moderation, reading payment receipts and menus, generated images and the «Cupido» matching chat. Decisions about money are never taken by AI alone. Background removal and person segmentation run on your phone and are not sent or stored. Face recognition is off by default and only works if you turn it on; the face template is deleted when you turn it off.

6–7. Who we share it with

Service providers such as Google Firebase/Cloud, Cloudflare, Google Maps, LiveKit, api.video, Meta (WhatsApp Business), Resend, Wompi, ePayco, AI and search providers, and moderation providers (Sightengine, Google Cloud Vision). Also other users (what you make public), the business and courier of your order, and authorities only upon a formal request. NuevaIA receives only what is needed when you open it from the app. WhatsApp is used only for codes you request and for new-order alerts to businesses that enable them.

8. International transfers

Several providers operate outside Colombia, mainly in the United States.

9. Retention and deletion

You can delete your account from the app with a confirmation code. Access is disabled at once; data is kept for a 30-day grace period and then deleted or anonymized, except what the law requires us to keep.

10–11. Security and minors

Encryption in transit, database access rules, sensitive operations only on the server. You must be at least 15 to sign up; payments, Conoce, live streams, courier work and adult content are for over-18s only.

12. Your rights

Access, update, correct and delete your data, ask for proof of consent, revoke it and complain to Colombia's Superintendence of Industry and Commerce. Write to privacidad@medallovip.com; queries are answered within 10 business days and claims within 15.

13. Cookies

See our cookie and local storage page.