Privacy Policy

Last updated: August 20, 2026

Before you publish this: this describes what the app technically does with data, written honestly and specifically — but it is not a substitute for legal advice on the Philippines' Data Privacy Act of 2012 (RA 10173) or any other applicable law. Have this reviewed before relying on it, and register with the National Privacy Commission if your processing activities require it.

1. What we collect

Data	Who it's about	Why we collect it
Email & password	The business account holder	To let you sign in
Name & role	Anyone using the app on your team	To label who logged what, and set permissions
Names, contact numbers, addresses, work info	Riders you enter into the app	Because tracking that is the whole point of the app
Uploaded ID/permit documents	Riders you enter	Stored only because you chose to upload them
Payment records	Your business's transactions	The core ledger function of the app
Billing email	The business account holder	To process your subscription via our payment provider

2. Who can see your data

Only your own business account. Every other business using the Service is stored in a technically separate, isolated space — enforced at the database level.
We (the people operating the Service) can technically access the underlying database for support and maintenance purposes, but do not browse business data without reason.
We do not sell your data or any rider's data to third parties, and do not use it for advertising.

3. Where data is stored

Data is stored with Supabase, a third-party infrastructure provider. Uploaded documents are stored in Supabase Storage. (The specific data center region depends on which region was selected when this project's Supabase database was set up — check Project Settings in Supabase to confirm and note it here if it matters for your compliance needs.)

4. Payments

Subscription payments are processed by PayMongo, a third-party payment processor. We do not store your card details — that's handled entirely by the payment processor.

5. Your responsibilities as a business

If you enter another person's personal information (a rider's name, contact details, ID documents) into the Service, you are acting as that data's controller under Philippine data privacy law. You're responsible for having a lawful basis to collect and store that information — typically the rider's consent — and for handling it appropriately, including deleting it if the rider asks and there's no legal reason to keep it.

6. How long we keep data

Data is kept for as long as your account is active. If you cancel, your data is retained for 6 months in case you resubscribe, then deleted.

7. Your rights

You can request a copy of your business's data, ask us to correct it, or ask us to delete your account and its data, by contacting support@kitangkita.app.

8. Security

We use industry-standard measures (encrypted connections, access controls, database-level data isolation between businesses) to protect data, but no system is perfectly secure, and we can't guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. We'll update the date at the top when we do.

10. Contact

Questions about this policy or your data: support@kitangkita.app