[[운영자]] processes users' personal information in accordance with the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules. If the Korean and English versions differ, the English version prevails.
1. Information We Collect
| Category | Items | When collected | Visibility |
|---|---|---|---|
| Account | Mobile number (+63) | Phone login, number verification | Private (not shown to other users) |
| Account | Social account ID, email, name and profile photo (if the provider supplies them) | Kakao, Google, Facebook, Apple login | Private |
| Profile | Nickname, profile photo, nationality (self-reported), time of terms consent | Onboarding | Nickname, photo, and nationality badge are public |
| Trust info | Phone and area verification status, verified areas (up to 2), completed trade count | On verification or completed trade | Public |
| Location | GPS coordinates at the moment of area verification | Only when you press the area verification button | Not stored (item 3) |
| Posts | Item photos, title, description, price, area, status, buyer selection (optional) | Listing, editing | Public (including on the web) |
| Chat | Message content, send time, read status | When chatting | Chat room participants only |
| Activity | Likes, interest keywords, notification settings, notification history, block list, report content | During use | You only (reports: Operator only) |
| Device | Push token, device type (iOS/Android), app language | When you allow notifications | Private |
| Usage records | Screen views; events for listing, starting a chat, completing a trade, and search (only the length of the search term is sent, not the term itself); app instance ID; device and OS info; approximate region from IP | Automatically while using the app (Firebase Analytics) | Private |
| Server logs | Connection IP, request time, error logs | Automatic | Private |
2. Purposes of Use
- Sign-up and login, identity check (+63 number verification), prevention of fraudulent sign-ups
- Providing the Service such as listing, searching, and chatting, and sorting by distance (using the center coordinates of your verified area)
- Sending push notifications for chats, likes, and keyword alerts
- Handling reports, responding to fraud and Terms violations, cooperating with law enforcement
- Statistical analysis to improve the Service (mainly aggregated data that does not identify individuals)
We do not use personal information for selling ads or personalized advertising, and we do not sell personal information.
3. Location Information
When you press the area verification button, the app sends your GPS coordinates at that moment to the server. The server only calculates whether they are within the verification radius of the selected city and does not store the coordinates. Only the "verified area name and verification time" are stored. The app does not collect location in the background.
4. Processors and Transfers Abroad
To operate the Service we entrust processing to the companies below, so information is stored and processed outside the Philippines.
| Company | Purpose | Location |
|---|---|---|
| Supabase Inc. | Database, login, photo storage, real-time chat | Singapore |
| Fly.io | API server | Singapore |
| Netlify | Website (shared-link pages) | Global CDN |
| Google (Firebase) | Push delivery (FCM), usage statistics (Analytics) | United States and others |
| Twilio | Sending verification SMS | United States and others |
| Kakao, Google, Meta (Facebook), Apple | Social login | Per each company's policy |
The Operator confirms the level of data protection through contracts and terms with these companies. We do not provide information to third parties except on legal requests (court orders, law enforcement requests).
5. Retention and Deletion
- When you delete your account, your profile, posts and photos, chat rooms you took part in and their messages (they also disappear from the other person's screen), likes, keywords, notifications, push tokens, area verifications, block list, and reports you made are deleted immediately.
- Exception: when a suspended account is deleted, we keep an irreversibly converted value (hash) of the phone number and the suspension time to prevent re-registration. The original phone number is not kept.
- If the other person deletes their account, the chat room with that person is deleted too. If you need evidence, save it with "Get records for police" before deletion.
- Firebase Analytics usage records are deleted after the retention period set in Google's settings (up to 14 months). Server logs follow each company's retention period.
- Information remaining in backups is erased in turn according to the backup cycle.
6. Your Rights
Under RA 10173 you have the following rights: to be informed, access, rectification, erasure or blocking, objection (withdrawal of consent), data portability (copy request), claiming damages, and filing a complaint with the National Privacy Commission (privacy.gov.ph).
- You can edit your profile and posts and delete your account directly in the app.
- For other requests, email support@ubanph.com and we will handle them after verifying your identity.
- You can turn off push notifications in the app settings or device settings.
7. Children
People under 18 cannot sign up. If we learn that information of a person under 18 was collected, we delete it without delay.
8. Security Measures
Encryption in transit (HTTPS), row-level access control in the database (RLS: only you can read your chats and activity), separated admin accounts, secret keys kept on the server, and hashing of suspended accounts' numbers. If a personal data breach is confirmed, we notify the National Privacy Commission and affected users within 72 hours as required by law.
9. Data Protection Officer (DPO)
- Name:
[[DPO]] - Email: support@ubanph.com
- Address:
[[주소]]
10. Changes
If we change this policy, we will announce it in the app and on the website 7 days before it takes effect (30 days for important changes).
Effective date: [[시행일]]