Barullo privacy policy
Last updated: 11 September 2026
This English version is provided for convenience. The Spanish version is the one that applies, and if anything differs, the Spanish text prevails.
Barullo brings the queue at a restaurant, a clinic or a shop to the phone you already carry. This page explains what data we process, why, and for how long.
In short: if you are waiting in a queue, Barullo does not ask for your name, phone number or email. It only keeps an identifier of your device so it can alert you, and it deletes it when your turn is over.
What data is processed
If you run a venue
| Data | Purpose | Legal basis |
|---|---|---|
| Email address and password | Having an account and signing in | Performance of the contract |
| Venue name | So whoever scans knows where they are | Performance of the contract |
| Closing times and time zone | Closing the queue when it is due | Performance of the contract |
| The state of your subscription | Knowing whether your venue has access | Contract |
Your password is never stored in clear text: it is stored encrypted, and not even we can read it.
If you are waiting in a queue
| Data | Purpose | Legal basis |
|---|---|---|
| Your turn: number, status and times | Making the queue work | Legitimate interest in providing the service |
| An identifier of your device, to alert you | Alerting you when it is your turn | Your consent, when you accept alerts |
You are not asked for a name, phone number or email address, and there is no account to create. You can withdraw your consent to alerts at any time from your browser or phone settings.
How long data is kept
| Data | How long |
|---|---|
| The identifier of your device | Until your turn is over. Then it is deleted |
| Closed turns | One month |
| The venue account and its business data | As long as the account exists |
| The state of your subscription | As long as the account exists |
Barullo does not issue invoices and does not keep tax data about you: the subscription is sold by Apple and Google, who charge you, issue the receipt and keep that data. Barullo only knows whether the subscription is active.
Who data is shared with
With nobody who is not needed for Barullo to work. These are the providers that process data on our behalf:
| Provider | Purpose | Where |
|---|---|---|
| Supabase | Database and accounts | European Union (Paris) |
| Railway | Hosting the website | European Union |
| Google (Android) and Apple (iPhone) | Delivering alerts to the phone | United States |
| RevenueCat | Managing subscriptions | United States |
| Google Play and App Store | Charging subscriptions | United States |
Providers in the United States process data under the European Commission's standard contractual clauses or the EU–US Data Privacy Framework. Queue and account data are stored in the European Union; only the identifiers needed to deliver an alert or charge a subscription leave for the United States.
Your rights
You can ask to access your data, correct it, delete it, object to its processing, restrict it or take it elsewhere. Write to barullo.dev@gmail.com; requests are answered within one month at most.
If you run a venue, you can also delete your account from Settings inside the app, or from this page, without writing to anyone.
If you believe we have not done our job properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Minors
Waiting in a queue needs no account. Barullo is not aimed at children under 14 and does not knowingly collect data from them: 14 is the age Spanish law sets for consenting to data processing on one's own.
Running a venue requires being over 18, because it means taking out a paid subscription and having the capacity to enter a contract. It is in the terms.
Changes
If this policy changes, the date at the top is updated. When the change is significant, we let you know inside the app.
Who is responsible
Verónica Pérez Duro, as a natural person.
Contact: barullo.dev@gmail.com
The terms
The conditions of use of the service and the subscription are in the terms and conditions.