VERSION 2 - PUBLISHED MAY 15, 2026
Welcome to Jalisco Alerta.
The purpose of this Privacy Notice is to help you understand how we collect, use, protect, and share your personal information when using our mobile application Jalisco Alerta, as well as the rights you have and the responsibilities you assume when accessing our services. By using the Jalisco Alerta application, you expressly accept the processing of your data as described in this notice.
General
This Privacy Notice is issued in compliance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and the Privacy Notice Guidelines published by the INAI, and regulates the processing of personal data in the "Jalisco Alerta" mobile application.
Identification of parties and involved individuals
The Developer / Owner: ERLIA (Bonafide Mens Fidelis Co SAPI de CV), responsible for processing personal data in accordance with this notice.
The Provider: The Jalisco State Civil Protection and Firefighters Unit (UEPCBJ), the official entity that provides alert information to citizens through the application.
The User: Any person who uses the mobile application "Jalisco Alerta" obtained through the official stores (Apple's App Store or Google Play Store).
The Application: The mobile application "Jalisco Alerta" referred to in this document.
Responsible Party
The Owner
Business Name: Bonafide Mens Fidelis Co SAPI de CV.
Registered Office: Av. PASEO DE ROYAL COUNTRY 4596, Int. 3-A. Zapopan, Jalisco.
Contact information: contacto@erlia.mx / jalisco.alerta@erlia.mx
Collected data
4.1 Data provided by the User at the time of registration:
a) Age range.
b) Gender.
c) Language preference (Spanish, English, or French).
4.2 Data collected automatically during the use of the Application:
a) Geographic location (GPS), including:
- Foreground location when opening the Application.
- Background location for detecting a change of municipality or leaving the state of Jalisco, for the sole purpose
of updating the User's notification settings. This procedure only occurs when the User has expressly granted background location permission on their device.
b) Type of operating system (iOS / Android) and version.
c) Unique device identifier (push notification token).
d) Installed Application version.
e) Download source or campaign attribution data (only on Android, via the AppsFlyer SDK and integration with Facebook Ads). This data is anonymous and not linked to the User's identity.
The Application does NOT collect name, email address, phone number, or any other direct identification data.
Purpose of the collected data
a) Geographical location: Issue georeferenced alerts relevant to the area where the User is located; automatically detect a change of municipality or leaving the state to update the notification settings.
b) Age range and gender: Production of aggregated usage statistics, improvements to the User experience, and development of new functionalities. They are not used for automated decisions about the User.
c) Language preference: Deliver the content of the Application and notifications in the language selected by the User.
d) Type of operating system and version of the Application: Compatibility analysis, technical support, troubleshooting, and update planning.
e) Unique device identifier (push token): Sending alerts, warnings, and forecast notifications directly to the User's device.
f) Download source / campaign attribution: Measurement of the effectiveness of the Application's dissemination campaigns. The data are processed in an aggregated and pseudonymous manner.
Data Transfer
In general, personally identifiable information is not shared with third parties for commercial purposes.
Personal data may be communicated to the following third parties solely to the extent necessary for the provision of the service (hereinafter "data processors"):
a) Google LLC (United States):
- Geolocation services (Google Maps API) for map visualization and reverse geocoding.
- Automatic translation of notifications (Google Translate API). The content of the notifications is transmitted to Google's servers for translation. Google processes this data in accordance with its privacy policy available at policies.google.com/privacy.
- Push notification services (Firebase Cloud Messaging, for Android devices).
b) Apple Inc. (United States):
Push notification services (Apple Push Notification Service - APNs, for iOS devices).
c) AppsFlyer Ltd. (Israel):
Marketing campaign attribution and installation analysis (only on Android). The data is processed pseudonymously. AppsFlyer is certified under internationally recognized privacy frameworks.
d) State Civil Protection and Fire Department of Jalisco (Mexico):
Aggregate statistical data on Application use (without individual identification of Users) for the purpose of improving the early warning service.
Under no circumstances will personal data be sold, assigned, or transferred to third parties for advertising or commercial purposes without the express consent of the User.
The transfers indicated in subsections a), b), and c) involve a transfer of data to servers located outside of Mexico (United States and Israel). By accepting this Notice, the User consents to such international transfer under the terms of Article 37 of the LFPDPPP.
Security
The Owner implements technical, administrative, and physical security measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction, including:
- Encryption of data in transit (TLS/HTTPS) and at rest.
- Role-based access control with four levels of privilege.
- Audit logs of all data processing operations.
- Automatic and continuous backup of information.
- Guaranteed availability with a 97% SLA.
ARCO Rights
The User has the right to Access, Rectify, Cancel, or Oppose (ARCO rights) the processing of their personal data in accordance with Articles 28 and 29 of the LFPDPPP.
To exercise their rights, the User must send a request to the email address jalisco.alerta@erlia.mx with:
- Full name of the data owner.
- Clear description of the right they wish to exercise and the data upon which they request the action.
- Copy of a valid official ID.
- If applicable, documentation proving legal representation.
In the event that the request does not contain the required information or documentation, the Owner may require the User, within 5 business days following its receipt, to provide the missing elements. The User will have 10 business days, counting from the day after the notification of the requirement, to amend the request; otherwise, the request will be deemed as not submitted. The response period will begin to run upon receipt of the complete request.
The Owner will respond to the request within a maximum period of 20 business days from its receipt. If the request is appropriate, the changes will be made within the 15 business days following the communication of the response, in accordance with Article 32 of the LFPDPPP. The response will be communicated to the User through the same means by which the request was submitted, unless the User expressly indicates a different means.
The exercise of ARCO rights may be denied by the Owner in the cases provided for by Article 34 of the LFPDPPP, among others: when the applicant is not the owner of the data or the legal representative is not duly accredited; when the personal data of the applicant is not located in the database; when the rights of a third party are injured; when there is a legal impediment or resolution of a competent authority that restricts access to the personal data or does not allow its rectification, cancellation, or opposition; or when the rectification, cancellation, or opposition has been previously carried out. In all cases, the Owner will justify their response and inform the User about their right to go to the INAI.
The exercise of ARCO rights is free of charge. The User must only cover the justified shipping expenses or, where applicable, the cost of reproduction in copies or other formats, in accordance with Article 35 of the LFPDPPP. In the case of repeated requests by the same person in a period of less than 12 months, the additional charge provided for in said regulation may apply, unless there are substantial modifications to this Privacy Notice that motivate new consultations.
Important note: The minimum data necessary for the operation of the Application (location, device identifier) are essential for the provision of the service. The cancellation or opposition to the processing of said data implies the technical impossibility of continuing to use the service, which the User expressly acknowledges.
For any complaint regarding the processing of their data, the User may also go to the National Institute for Transparency, Access to Information and Personal Data Protection (INAI): www.plataformadetransparencia.org.mx/Inicio
Modifications
This Notice may be modified. Changes will be published in the app and will be effective upon publication. Making the notice available with its modifications to obtain your consent or, otherwise, object; however, this would mean the cancellation of the use of the service.
. Conflict Resolution
For any complaint or doubt regarding the processing of their personal data, the User may contact the data controller at the details indicated in Section 3, or file a complaint with the INAI (www.plataformadetransparencia.org.mx/Inicio). Any unresolved dispute shall be subject to the applicable laws and competent courts of Jalisco, Mexico.