Effective: June 25, 2026 · Cápsula Laboratorio Creativo S.A.S. (“Cápsula LC”)
Mercurious is built with privacy by design. Detection runs on the device, and Mercurious is designed to measure anonymous, aggregate patterns —not to identify people. This Policy explains what is and is not processed, and distinguishes two very different types of data: your ACCOUNT data (personal) and MEASUREMENT data (anonymous).
The Data Controller for personal account data is Cápsula Laboratorio Creativo S.A.S. (“Cápsula LC”), with address at [Controller address, Colombia] and contact email privacidad@capsulalc.com. The supervisory authority in Colombia is the Superintendence of Industry and Commerce (SIC). This Policy is governed by Law 1581 of 2012, Decree 1377 of 2013, and related regulations.
(A) ACCOUNT DATA (of the user/operator): your name and email. This is personal data; Cápsula Laboratorio Creativo S.A.S. (“Cápsula LC”) is the Controller. (B) MEASUREMENT DATA (of passers-by): anonymous counts and aggregate estimates. It does not identify any individual, includes no images or biometric templates, and therefore does not constitute personal data under Law 1581. For the measurement you perform with the camera, you (the operator) are the Controller.
We process your name and email for the purposes of: creating and authenticating your account, providing the service, syncing your configuration and metrics with your account, supporting you, and sending you service communications. The legal basis is your authorization and the performance of the contract (these Terms). Authentication and storage are handled by Firebase (Google).
Only anonymous, aggregate metrics: counts of people/vehicles/bicycles, direction of movement (in/out), dwell time, an attention estimate, and —only if you enable it— an aggregate statistical estimate of gender and age.
Mercurious does not store or transmit photos, video, or faces; does not perform facial recognition or identification; does not generate biometric templates; does not build profiles of individuals; and does not track specific people over time or across locations.
Camera frames are analyzed in real time on the device and discarded; images never leave the device. Only the following sync to the cloud (Firebase): your project configuration and the anonymous measurement counts/estimates, associated with your account so they are available across your devices. The demo project is not synced.
Cloud infrastructure is provided by Google (Firebase), and data may be stored and processed on servers outside Colombia (for example, in the United States or other Google Cloud regions). Google offers recognized protection mechanisms (including contractual clauses and security certifications). By accepting this Policy and creating your account, you authorize such international transfer and processing of your account data, in accordance with Law 1581 of 2012 and Decree 1377 of 2013.
Gender and age estimation, when enabled, produces an aggregate ESTIMATE and never an identification; no faces, images, or biometric data of identified individuals are stored. Some laws classify or restrict the inference of demographic or biometric attributes. As the operator, you are responsible for assessing and ensuring the legality of enabling this feature in your context and for obtaining any applicable authorizations.
As the Controller of your measurement, you are responsible for the legal basis and compliance duties, such as: posting clear and visible notices/signage where the camera operates, obtaining consent when required, conducting an impact assessment where appropriate, and honoring data-subject requests —as required by laws such as Colombia's Law 1581 of 2012, the EU/UK GDPR, U.S. state laws (e.g., BIPA, CCPA/CPRA), or Mexico's LFPDPPP.
Cápsula Laboratorio Creativo S.A.S. (“Cápsula LC”) applies reasonable technical and organizational measures (authentication, access rules that limit each account to its own data, and encryption in transit). Because some data is also stored on your device, you are responsible for the physical and access security of that device.
Local data is retained until you delete a project, clear the app's data, or uninstall it. Account data and synced data are retained while your account is active and for as long as necessary for the purposes described or as required by law; you may request its deletion as set out in the Rights section.
As a data subject, you have the right to: know, update, and rectify your data; request proof of the authorization granted; be informed of the use given to your data; file complaints with the SIC for violations; revoke the authorization and/or request deletion of your data where applicable; and access your data free of charge.
You can exercise your rights by writing to privacidad@capsulalc.com, stating your identification, the right you are exercising, and the facts. Inquiries are handled within a maximum of ten (10) business days and complaints within fifteen (15) business days, in accordance with Law 1581 of 2012; if that is not possible, we will inform you of the reasons and the date of resolution. Requests from the people you measure with the camera are your responsibility as the Controller of that measurement.
Mercurious is intended for business use by adults. It is not directed at minors and must not be used to deliberately measure or target minors where the law prohibits it.
Cápsula Laboratorio Creativo S.A.S. (“Cápsula LC”) may update this Policy. Material changes will be reflected with an updated effective date and, where appropriate, with notice within the app.
Privacy inquiries and exercise of rights: privacidad@capsulalc.com — Cápsula Laboratorio Creativo S.A.S. (“Cápsula LC”), [Controller address, Colombia]. Supervisory authority: Superintendence of Industry and Commerce (SIC), Colombia.