EN | ES

COMPREHENSIVE PRIVACY NOTICE (AVISO DE PRIVACIDAD INTEGRAL)

Last updated: October 21, 2026

“MOVEA” MOBILE APPLICATION Please carefully read these Terms of Use regarding the collection and use of personal information. Use of the mobile application and website of IDEAR ELECTRÓNICA, S.A. DE C.V. implies your acceptance of these Terms of Use.

I. IDENTITY AND ADDRESS OF THE DATA CONTROLLER (RESPONSABLE)

IDEAR ELECTRÓNICA, S.A. DE C.V., a Mexican variable-capital limited liability company (sociedad de responsabilidad limitada de capital variable), hereinafter “MOVEA” or the “Data Controller” (Responsable), with its address at Avenida Vallarta number 6503, interior L5, Bodegas Concentro, Colonia Ciudad Granja, Zapopan, Jalisco, Mexico, C.P. 45010, is responsible for the processing, use, protection, storage and, as the case may be, transfer of the personal data collected in connection with the access to, download, installation, registration, browsing and use of the mobile application named “MOVEA” (the “Application”), in accordance with the applicable legislation on personal data protection in the United Mexican States. The purpose of this Privacy Notice is to inform the users of the Application, hereinafter the “User” or the “Users”, of the personal data that may be collected, the purposes for which such data will be processed, and the mechanisms available to exercise their rights.

LEGAL FRAMEWORK.

The processing of personal data carried out by MOVEA is performed in accordance with the Political Constitution of the United Mexican States (Constitución Política de los Estados Unidos Mexicanos), the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), its implementing regulations, and any other applicable provisions, guidelines, criteria and regulations. MOVEA shall at all times observe the principles of lawfulness, purpose, loyalty, consent, quality, proportionality, information and accountability applicable to the processing of personal data.

GENERAL DESCRIPTION OF MOVEA.

MOVEA is a technology-based mobility application whose purpose is to provide the User with information related to urban and/or collective public transportation, including, without limitation:

  • a) available public transportation routes;

  • b) location of stops, stations and boarding points;

  • c) trips and travel alternatives;

  • d) approximate or real-time location of vehicles, when such information is available;

  • e) estimated arrival and travel times;

  • f) schedules and frequencies;

  • g) information regarding the estimated capacity, occupancy level or availability of vehicles;

  • h) incidents, changes, interruptions or conditions of the service;

  • i) generation of routes or travel alternatives taking into account the User’s location;

  • j) sending of notifications related to routes, trips or services selected by the User; and

  • k) other mobility- and transportation-related functionalities that are incorporated into the Application.

PERSONAL DATA THAT MAY BE COLLECTED.

Depending on the functionalities used and the permissions granted by the User, MOVEA may collect and process the following categories of information: A. Identification and contact data. When the Application allows or requires the creation of an account:

  • first name and, if applicable, last names;

  • username;

  • email address;

  • telephone number;

  • internal user identifier;

profile photograph, only when such functionality exists and the User chooses to provide it; and

any other information necessary for the creation and administration of the account.

MOVEA shall endeavor to request only such data as are necessary to provide the corresponding functionalities. B. Geolocation data. When the User authorizes the corresponding permissions on his or her device, MOVEA may access information regarding: approximate geographic location; precise geographic location via GPS; location of the device while the Application is in use; point of origin; selected destination; location relative to transportation routes, stations, stops or vehicles; and information necessary to determine nearby routes or services. Geolocation will be used primarily to provide the mobility functionalities requested by the User. The User may disable access to his or her location through the permission settings of his or her mobile device. However, certain MOVEA functionalities may stop operating or may function with less accuracy. C. Mobility and transportation use information. MOVEA may process information related to the User’s interaction with mobility services, including: routes consulted; routes used or selected; stops and stations consulted; origin and destination of searches; schedules consulted; estimated travel times; trips requested; routes or places marked as favorites; recurring queries; search history within the Application; and mobility preferences configured by the User. Where possible, information used for statistical analysis, mobility planning or service improvement will be subjected to dissociation (disociación), anonymization and/or aggregation processes in order to reasonably reduce the possibility of identifying the User. D. Technical device information. The Application may automatically obtain certain technical information, including: IP address; device type and model; operating system and version; Application version; language; technical installation or device identifiers; telecommunications carrier; date and time of access; session information; technical logs; errors, failures and unexpected crashes; Application performance; and technical information necessary for security, diagnostics and maintenance. E. Information obtained through similar technologies. MOVEA may use technologies such as: SDKs; APIs; application identifiers; analytics tools; diagnostic systems; local storage; notification tokens; cookies, where applicable to linked web services; and equivalent technologies. These technologies may be used to maintain the operation of the Application, remember settings, analyze its operation, identify errors, maintain security and improve the User’s experience.

SENSITIVE PERSONAL DATA.

As a general rule, MOVEA does not require or intend to collect sensitive personal data in order to provide the ordinary mobility and public transportation information functionalities. The User is requested to refrain from voluntarily providing information regarding racial or ethnic origin, health status, genetic information, religious, philosophical or moral beliefs, political opinions, sexual preference or any other information that may be considered sensitive under applicable legislation, unless a specific MOVEA functionality expressly requires it and there is a valid legal basis for its processing. Should it become necessary in the future to process sensitive personal data, MOVEA shall previously implement the corresponding consent mechanisms and enhanced protection measures in accordance with applicable legislation.

PRIMARY PURPOSES OF PROCESSING.

Personal data may be processed for the following purposes, which are necessary for the provision of MOVEA’s services: to allow access to and operation of the Application; to create, identify, authenticate and administer the User’s account, where applicable; to identify the User’s location when the User grants the corresponding permissions; to locate nearby routes, stops, stations and transportation options; to calculate routes and travel alternatives; to provide estimated arrival and travel times; to provide information related to schedules and frequencies; to display available information on the estimated capacity, occupancy or availability of vehicles; to customize search results according to the location of, or the requests made by, the User; to store routes, places or preferences selected by the User when the User uses such functionalities; to send operational notifications or notifications related to requested routes and services; to report relevant incidents, changes, interruptions or updates to the services; to provide technical support and respond to requests; to detect, investigate and resolve errors, failures or technical problems; to ensure the security and integrity of the Application and its systems; to prevent improper or fraudulent uses, or uses contrary to the Terms and Conditions; to generate the operational and technical statistics necessary to evaluate and improve the operation of MOVEA; to comply with legal, contractual or regulatory obligations or with requirements issued by a competent authority; and to retain the technical evidence necessary to address claims, disputes or incidents related to the use of the Application.

SECONDARY PURPOSES.

Provided that it is legally appropriate and the User does not express his or her objection, MOVEA may process certain information for the following secondary purposes:

  • a) to conduct statistical analyses of general mobility trends;

  • b) to analyze aggregate patterns of use of routes, schedules and services;

  • c) to improve the functionalities, experience and design of the Application;

  • d) to develop new functionalities and technology services;

  • e) to prepare statistical and mobility planning studies using information that is preferably anonymized, dissociated or aggregated;

  • f) to conduct satisfaction and quality surveys;

  • g) to send informational communications about new MOVEA functionalities or services; and

  • h) to prepare metrics and analyses related to the use of the Application. The User may express his or her refusal to the processing for these secondary purposes by email at: avisodeprivacidad@bea.com.mx Refusal for these purposes shall not affect access to MOVEA’s essential functionalities. GEOLOCATION. Due to the nature of MOVEA’s services, certain functionalities may require access to the device’s location. MOVEA shall access geolocation only when the corresponding authorization has been granted through the permissions of the device’s operating system and in accordance with the available privacy options. Location information may be used to: identify nearby routes and stops; calculate trips; determine transportation alternatives; estimate arrival times; improve the accuracy of mobility services; and provide functionalities expressly requested by the User. MOVEA shall endeavor to ensure that geolocation is processed exclusively for the time reasonably necessary to provide the corresponding functionality. MOVEA shall not collect the User’s location in the background when the Application is not in use, unless such functionality is technically necessary, has been expressly enabled, the User has been previously informed, and the User grants the corresponding permissions. The User may modify or revoke location permissions directly from the privacy settings of his or her device.

INFORMATION ON TRANSPORTATION CAPACITY OR OCCUPANCY.

The information displayed by MOVEA regarding the capacity, availability or occupancy of transportation vehicles may be obtained through technological systems, authorized information sources, data provided by transportation operators and/or information generated by systems associated with the provision of the service. When such information derives from fare collection systems, validators, sensors or other technologies, MOVEA shall endeavor to receive and display only statistical, aggregated, anonymized or dissociated information, preventing public consultation from allowing the individual identification of passengers or users of transportation. The Application may display categories such as “low occupancy,” “medium occupancy,” “high occupancy” or equivalent categories. Information on capacity or occupancy shall not be intended to identify the persons who are on board the vehicles.

INFORMATION ON MINORS.

MOVEA is designed as a general information tool on mobility and public transportation, and its main purpose is not to collect personal information from children or adolescents. When it is reasonably identifiable that a User is a minor and the processing requires consent under applicable legislation, MOVEA shall adopt the corresponding measures to protect his or her information and, where necessary, obtain the authorization of the person exercising parental authority (patria potestad), guardianship (tutela) or legal representation. MOVEA recommends that minors use the Application under the supervision of their parents, guardians or legal representatives.

TRANSFERS OF PERSONAL DATA.

MOVEA may communicate personal data to third parties when necessary to fulfill the purposes described in this Privacy Notice and there is a legal basis for doing so. Such third parties may include: competent judicial or administrative authorities; public security authorities, when there is a legal requirement; technology providers; cloud infrastructure and services providers; map and geolocation service providers; notification service providers; analytics, diagnostic and security service providers; controlling companies, subsidiaries, affiliates or companies belonging to the same corporate group as the Data Controller, when legally appropriate; and third parties whose involvement is indispensable for the operation of a functionality expressly requested by the User. When a third party acts solely on behalf of and under the instructions of the Data Controller as a data processor (encargado del tratamiento), the relationship shall be documented in accordance with applicable legislation. MOVEA shall not commercialize identifiable personal databases of its Users as an ordinary activity of the Application. When a transfer requires the consent of the data subject (titular) under applicable legislation, MOVEA shall obtain such consent in advance.

ANONYMIZED, DISSOCIATED AND AGGREGATED INFORMATION.

MOVEA may generate statistical, aggregated, anonymized or dissociated information derived from the use of the Application. Such information may be used for: mobility planning; statistical analysis; route optimization; demand analysis; evaluation of schedules and frequencies; occupancy analysis; research and development; preparation of indicators; improvement of transportation services; and generation of technical reports. MOVEA shall endeavor to ensure that such processes reasonably prevent the information from being re-attributed to an identified or identifiable person.

THIRD-PARTY SERVICES AND PROVIDERS.

The Application may integrate technology services provided by third parties, such as maps, geolocation, cloud infrastructure, analytics, notifications and diagnostic tools. When such third parties act as independent controllers of the processing of certain information, their own privacy policies and notices may apply. MOVEA recommends that the User review the privacy policies of the third-party services that are integrated into or linked to the Application.

DATA RETENTION.

Personal data shall be retained only for the time necessary to fulfill the purposes that justified their collection, as well as for any additional periods necessary to comply with legal, contractual, tax, administrative, security or legal defense obligations. When the information is no longer necessary and there is no legal obligation to retain it, MOVEA shall proceed to its deletion, blocking (bloqueo), anonymization or dissociation, as applicable.

SECURITY MEASURES.

MOVEA shall implement reasonable and appropriate administrative, technical and physical measures to protect personal data against unauthorized damage, loss, alteration, destruction, use, access, processing or disclosure. Among other measures, as applicable, access controls, authentication, encryption, systems monitoring, backups, vulnerability management, vendor controls, internal policies and incident response procedures may be implemented. No computer system or electronic transmission can guarantee absolute security; however, MOVEA shall maintain reasonable measures consistent with the nature of the data processed and the associated risks.

ARCO RIGHTS (DERECHOS ARCO: ACCESS, RECTIFICATION, CANCELLATION AND OPPOSITION).

The User, as the data subject (titular) of his or her personal data, may at any time exercise his or her rights of: Access: to know what personal data MOVEA holds and the general conditions of its processing. Rectification: to request the correction of inaccurate, incomplete or outdated data. Cancellation: to request the deletion of personal data when legally appropriate. Opposition: to request the cessation of processing for certain purposes when legally appropriate. The exercise of one right shall not be a prerequisite for, nor shall it prevent, the exercise of another.

PROCEDURE FOR EXERCISING ARCO RIGHTS.

To exercise his or her ARCO Rights, the data subject or his or her legal representative may submit a request by: Email: avisodeprivacidad@bea.com.mx and/or by: Address: Avenida Vallarta number 6503, interior L5, Bodegas Concentro, Colonia Ciudad Granja, Zapopan, Jalisco, Mexico, C.P. 45010. The request shall contain, at a minimum: 1. Name of the data subject; 2. Means for communicating the response; 3. Documents evidencing his or her identity and, if applicable, legal representation; 4. A clear description of the data with respect to which he or she seeks to exercise any ARCO Right; 5. The right he or she wishes to exercise; and 6. Any information that facilitates the location of his or her data. MOVEA shall respond to requests within the time periods established by applicable legislation.

REVOCATION OF CONSENT.

The User may revoke the consent previously granted for any processing that depends on such consent. Revocation may be requested via email: avisodeprivacidad@bea.com.mx or through the tools available within the Application. Revocation shall not have retroactive effects, nor shall it apply to processing that must be maintained due to a legal obligation or another legally valid cause.

LIMITATION OF USE OR DISCLOSURE.

The User may request the limitation of the use or disclosure of his or her personal data by means of a request sent to the email address: avisodeprivacidad@bea.com.mx Likewise, the User may disable certain functionalities, permissions or notifications directly from: MOVEA’s settings; the operating system settings; location permissions; notification settings; and the other privacy tools available on the device.

DELETION OF ACCOUNT AND DATA.

When MOVEA allows the creation of personal accounts, the User may request the deletion of his or her account and associated personal data via the email address: avisodeprivacidad@bea.com.mx Deletion shall be subject to the legally applicable blocking and retention periods. Information that has previously been irreversibly subjected to anonymization or dissociation procedures may be retained for statistical purposes.

CHANGES TO THE PRIVACY NOTICE.

MOVEA may modify or update this Privacy Notice as a result of: legislative amendments; criteria issued by authorities; incorporation of new functionalities; technological changes; changes in processing practices; incorporation or replacement of providers; or changes in the corporate structure or operation of the Data Controller. Changes shall be communicated through one or more of the following means:

  • a) publication within the Application;

  • b) publication on the website: www.moveatransit.com;

  • c) notification within the Application;

  • d) email, where applicable; or

  • e) any other mechanism permitted by applicable legislation. When a change involves new purposes that require consent, MOVEA shall request the corresponding consent before carrying out such processing.

PRIVACY CONTACT.

For any question, comment, request or clarification related to this Privacy Notice or to the processing of personal data, the User may contact: Responsible area: Administration, by email at: avisodeprivacidad@bea.com.mx and/or by email at: avisodeprivacidad@bea.com.mx CONSENT. When, under applicable legislation, tacit consent is appropriate, it shall be deemed granted if, once this Privacy Notice has been made available to the User, the User does not express his or her objection. When, due to the nature of the data or of the processing, it is necessary to obtain express consent, or express and written consent, MOVEA shall implement the corresponding electronic or legal mechanisms to obtain it. Technical permissions granted through the device’s operating system, particularly with respect to location, shall be managed in accordance with the options available on such device, without prejudice to any consents that may be legally required.

COMPETENT AUTHORITY.

The data subject may go before the competent personal data protection authority when he or she considers that his or her right to the protection of personal data has been violated, in accordance with the procedures and legislation in force.

FINAL PROVISION.

This Privacy Notice exclusively governs the processing of personal data carried out by MOVEA. Last updated: October 21, 2026.