Privacy policy

What pasaCódigo reads, and what it keeps.

pasaCódigo finds verification codes in your email so you do not have to go looking for them. Doing that means reading part of your mailbox. This page says exactly which part.

Who is responsible

UnVale S.L., Madrid, Spain. CIF: Pending.
Questions, requests or complaints: [email protected].

UnVale S.L. is the data controller for the processing described here. pasaCódigo is distributed by UnVale S.L.; it is not affiliated with any email provider, courier, or the services whose messages it reads.

What we read and what we keep

The list below is the same text the app shows you before you grant anything, in both languages the app ships in. It is generated directly from the application's own copy rather than written separately for this page, so widening what pasaCódigo reads changes this section too. If this page and the app ever disagree, that is a bug — please report it.

English

  • Codes are read only from the senders you select.
  • Tapping one service reads your mailbox for about a minute, for that one sender and nothing else — and the code is shown to whoever asked and to you, to nobody else. A service you mark private is never read on anybody else's request.
  • Finding your services reads senders and subject lines, never message text — and only when you ask.
  • A code is seen by whoever asked for it and by you, then forgotten — pause any service anytime.
  • Only when you open the picker or the Contactos tab, we read the name, first email and first phone on each address-book card so we can show you the list. None of that leaves the phone: only the people you tap are saved.
  • We keep one date: when you first received a code. Written once, never changed, so we can count how many people get that far. What we take from it are counts, never a list of people.

Once a code is no longer live it moves to Recents, where you can still read it. This is how long it stays there before the server deletes it — 1 hour by default. Changing it takes effect straight away.

Español

  • Los códigos se leen solo de los remitentes que selecciones.
  • Tocar un solo servicio lee tu buzón durante un minuto aproximadamente, de ese único remitente y de nada más — y el código se muestra a quien lo pidió y a ti, a nadie más. Un servicio que marques como privado no se lee nunca a petición de otra persona.
  • Al detectar tus servicios leemos remitentes y asuntos, nunca el texto del mensaje — y solo cuando nos lo pides.
  • El código lo ve quien lo pidió y tú; después se olvida. Pausa cualquier servicio cuando quieras.
  • Sólo cuando abres el selector o la pestaña Contactos, leemos el nombre, el primer correo y el primer teléfono de cada ficha de tu agenda para poder mostrarte la lista. Nada de eso sale del teléfono: sólo se guarda a quien elijas.
  • Guardamos una sola fecha: cuándo recibiste tu primer código. Se escribe una vez y no se modifica, para poder contar cuánta gente llega hasta ahí. Lo que sacamos de ahí son recuentos, nunca una lista de personas.

Cuando un código deja de estar activo pasa a Recientes, donde todavía puedes leerlo. Este es el tiempo que se queda ahí antes de que el servidor lo borre; por defecto, 1 hora. Si lo cambias, se aplica al momento.

What we never do

  • We do not sell, rent or share your mail, your codes or your contacts.
  • We do not use the contents of your mailbox for advertising or profiling.
  • We do not train models on your messages.
  • We do not read anything from a switch you have not turned on.

Where the data is processed

Processing takes place in the European Union. Codes are transient by design: a code is delivered to your device and then removed from the server once its retention window ends, as described above.

Your rights

Under the GDPR you may request access to your personal data, correction, deletion, restriction of processing, portability, and you may object to processing. You may withdraw consent for any optional read at any time by turning off the corresponding switch in the app, which takes effect immediately. Write to [email protected] to exercise any of these rights.

You also have the right to lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (aepd.es).

Deleting your account

You can delete your account from within the app. Deleting it revokes mailbox access, removes stored codes, and deletes the account record.

Changes to this policy

When what the app reads changes, the app's own copy changes and this page is regenerated from it. Material changes are announced in the app before they take effect.

Last updated: 2026-08-22.