Privacy Policy
Last updated: October 24, 2026
Why Mexico Smiles (whymexicosmiles.com) is operated by Digify Platforms, Inc., a Delaware corporation ("we", "us"). This policy explains what personal information we collect on this site, why, who we share it with, and the choices you have. If you have a question or want to use any of your rights, email hello@whymexicosmiles.com.
What we collect
When you subscribe to the newsletter: your email address and, if you give it, your name. We use these to send the newsletter and its email series. Every email has an unsubscribe link.
When you buy something:
- Contact details: your email address and name.
- What you bought: the products, amounts, any discount code, and how you found us (for example, a link from YouTube).
- For printed books and other physical products: your shipping address.
- Payment: card payments are handled entirely by Stripe. We never see or store your full card details.
When you use My Library (where digital products such as the Mexican Spanish Survival Kit live):
- Sign-in: we email you a one-time sign-in link, and we record when you sign in.
- Usage: we record how you use what you bought: when you open the library or a product, when you start, reach the halfway point of and finish an audio track, when you open a guide and when you download files. We use this to show your progress and to understand which parts of our products help people, so we can improve them.
When you contact us: your name, email address and message.
When you browse the site:
- Device and visit data: the pages you visit, the link you came from, your browser and device type, and an approximate location derived from your IP address.
- Cookies: these are collected through the cookies and similar technologies described below.
Public social content: we show and keep copies of public comments posted on our YouTube and Instagram content, including the commenter's public name, as they appear on those platforms.
When you comment a keyword or message us on Instagram or Facebook: some of our posts invite you to comment a word (for example SPANISH) to get a link in a direct message. Those messages are sent through ManyChat, our messaging provider. When you take part, we receive and keep:
- Your profile details on that platform: your public name, your username and the ID ManyChat gives your conversation with us.
- When you commented or messaged us, and how many times.
- What happened after you tapped our link, if it led to the PalabraFlow app (also run by Digify Platforms): on Android, whether you installed the app with that link, whether you went on to practise a phrase out loud, and whether you started a paid plan. We can't make this connection for iPhone installs.
We use this to send you what you asked for, to understand which posts actually help people start speaking Spanish, and to make sure our follow-up messages fit (for example, not sending an install link to someone who already has the app). We don't sell it and we don't use it to build advertising audiences.
Cookies and similar technologies
| Purpose | What | Provider |
|---|---|---|
| Essential | Keeping you signed in to My Library (up to 60 days if you use a sign-in link), your shopping cart, and security protection for forms | Why Mexico Smiles |
| Analytics | Understanding how the site and products are used | PostHog |
| Advertising measurement | Measuring whether our ads lead to visits and purchases | Meta (Facebook and Instagram) Pixel |
| Embedded videos | Playing our YouTube videos on the site | YouTube (Google) |
You can block or delete cookies in your browser settings. Essential cookies are needed for sign-in, the cart and checkout to work.
How we use your information
We use your information to:
- Deliver what you ask for: the newsletter, your purchases, the library and replies to your messages.
- Run the shop: process payments, ship physical products, handle refunds and keep records.
- Improve our content and products: understand which pages, videos and products are useful.
- Reply to you on Instagram and Facebook: send the link you asked for and understand whether our posts lead people to try the PalabraFlow app.
- Measure our advertising: for example, telling Meta that a purchase happened. Your email address is converted into a one-way code (hashed) before it is sent.
- Prevent fraud and abuse: this includes spam on the contact form.
Our legal bases, where the law requires one:
- Your consent: the newsletter, analytics and advertising cookies.
- Performing our contract with you: purchases and the library.
- Our legitimate interests: improving the site and keeping it secure, and understanding which of our social posts are useful to the people who respond to them.
- Legal obligations: for example, tax and accounting records.
We never add you to the newsletter just because you bought something. It is always your choice.
Who we share it with
We don't sell your personal information. We share it only with service providers that help us run the site, each for the purpose described:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing |
| Printful and Lulu | Printing and shipping physical products (your name and shipping address) |
| SendGrid (Twilio) | Sending emails, including sign-in links and receipts |
| PostHog | Site and product analytics |
| ManyChat | Sending and receiving Instagram and Facebook direct messages, including the links you ask for by commenting a keyword |
| Meta | Advertising measurement |
| Google (YouTube) | Embedded videos |
| Our hosting provider | Running the website and its database |
Within our company, your newsletter subscription, a record of your orders and your Instagram or Facebook keyword replies are also stored on ZapNPay, Digify Platforms' own customer and email platform, so we can send emails and keep one view of our customers across our products, including the PalabraFlow app. Order notifications, which can include your name and what you bought, are visible to our team in our internal tools.
We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a sale or reorganisation of our business.
International transfers
We are a US company and our service providers may process your information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the standard contractual clauses our providers offer.
How long we keep it
| Information | How long we keep it |
|---|---|
| Newsletter details | Until you unsubscribe. After that, we keep only what's needed to make sure we don't email you again. |
| Orders and purchase records | As long as tax and accounting law requires, typically up to 7 years |
| Library access and usage | As long as you have access to the products you bought, or until you ask us to delete your account |
| Contact messages | As long as needed to deal with your message. Spam is deleted. |
| Instagram and Facebook keyword replies | Up to 2 years after you last commented or messaged us, or until you ask us to delete them |
| Analytics data | According to our analytics provider's retention settings |
Your rights and choices
Depending on where you live (for example, the European Union, the United Kingdom, Mexico or some US states), you may have the right to:
- see the personal information we hold about you and get a copy of it
- correct it
- delete it
- object to or restrict how we use it, or withdraw consent at any time (this doesn't affect what happened before)
- complain to your local data protection authority
How to exercise them:
- Any right: email hello@whymexicosmiles.com. We may need to confirm it's really you, and we'll reply within the time the law requires.
- Newsletter: you can always leave using the link at the bottom of any email, or in My Library settings.
- Analytics and advertising cookies: you can turn these off in your browser.
Children
This site is not intended for children under 16, and we don't knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
Security
We protect your information with measures such as encrypted connections (HTTPS), access controls, and one-time sign-in links that we store only in a scrambled (hashed) form. No method of transmission or storage is completely secure, but we work to protect your information and limit who can access it.
Changes to this policy
If we make changes, we'll update the date at the top of this page. If the changes are significant, we'll tell you by email or on the site.
Contact
Digify Platforms, Inc.
Email: hello@whymexicosmiles.com