Skip to content
Pukial

Legal document · Last updated: 30 October 2026

Privacy Policy

Last updated: 30 October 2026.

Data controller

The controller of the personal data processed on this site is PUKIAL IA S.R.L., a company incorporated in Peru, with taxpayer number (RUC) 20616230043 and registered address at Jr. Catalina Huanca 190, Huancayo, Junín 12007, Peru. Our team works from Huancayo (Peru) and Madrid (Spain).

For any privacy question, write to privacy@pukial.com.

What this policy covers

This policy applies only to the pukial.com website: the contact form, the Pukial Labs waitlist and site analytics. Each of our apps (for example, Waki) has its own privacy policy, available on its website and its store listing. It also describes our TikTok integration, which we use solely to publish our own content.

We process data under Peru's Personal Data Protection Law (Law No. 29733) and its Regulation (Supreme Decree No. 016-2024-JUS). If you live in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR) also applies; if you live in the United Kingdom, the UK GDPR. In other countries we respect the rights granted by your local law.

What we collect and why

  • Contact form: name, email, subject and message. We use them only to reply to you.
  • Pukial Labs waitlist: name, email and the product you are interested in (for example, Roci or Kusi). We use them only to send you one notice when that product is available.
  • Vercel Analytics and Speed Insights: anonymous, aggregated, cookieless metrics. They cannot identify you.
  • Site preferences (language, theme): stored in your browser (localStorage) and never sent to a server.

We do not use advertising, tracking or third-party cookies.

  • Contact form: your consent when you submit it and steps taken at your request prior to entering a contract (GDPR Art. 6.1.a and 6.1.b).
  • Waitlist: your express consent, given by ticking a specific box, which you can withdraw at any time (GDPR Art. 6.1.a).
  • Anonymous analytics: our legitimate interest in understanding how the site is used (GDPR Art. 6.1.f).

Retention

  • Contact-form messages: up to 24 months, unless you ask us to delete them sooner.
  • Waitlist: deleted once we send the launch notice or, at the latest, 12 months after you sign up, whichever comes first.

Processors and international transfers

To run the site we use these providers, which process data only on our instructions:

  • Vercel Inc. (United States): site hosting and analytics.
  • Brevo (Sendinblue SAS) (France, EU): delivery of contact-form email.
  • Cloudflare, Inc. (United States): DNS for our domain.
  • Zoho Corporation B.V. (Netherlands, EU): the email service where we receive and answer messages. Data is hosted in the EU.

Some of these providers process data outside Peru and the European Economic Area. These transfers rely on the European Commission's Standard Contractual Clauses or other appropriate safeguards (such as the EU–US Data Privacy Framework), and comply with the cross-border transfer rules of Law No. 29733.

We do not sell your data or share it with third parties for commercial purposes.

TikTok integration

We use Postiz with TikTok's Content Posting API to upload drafts of marketing content (videos, slideshows) about our own apps — currently Waki, and in the future Roci and Kusi — to TikTok accounts we own and operate.

We request only the user.info.basic and video.upload scopes. Drafts uploaded through the API are visible only to the account owner within TikTok until they are manually published from the TikTok app.

No data from pukial.com visitors is shared with TikTok. The integration is server-side and used solely by us to publish our own marketing content. We comply with the TikTok Developer Terms of Service.

To revoke our access to a TikTok account we own, the account owner uses the TikTok app → Settings & privacy → Security & permissions → Manage app permissions.

Your rights

You can exercise the rights of access, rectification, cancellation and objection (ARCO) granted by Law No. 29733 and, if the GDPR or UK GDPR applies to you, also the rights to erasure, restriction of processing and data portability. You can withdraw your consent at any time, without affecting earlier processing.

To exercise them, write to privacy@pukial.com. We will reply within the legal deadlines.

If you are not satisfied with our reply, you may lodge a complaint with Peru's National Authority for Personal Data Protection, the Spanish Data Protection Agency or another EU supervisory authority, or the UK Information Commissioner's Office.

Children

This site is aimed at adults and we do not knowingly collect data from children under 14. The waitlist for children's products (such as Kusi) is for parents and teachers, not for children. If you believe a child has sent us their data, write to us and we will delete it.

Security and incidents

We apply reasonable technical and organisational measures to protect data. In the event of a security breach, we will notify the competent authority and, where required, the people affected, under the applicable law.

Changes to this policy

Updates will be posted on this page with the corresponding date.