Legal

Privacy Policy

Effective date: April 2, 2026

Last updated: April 2, 2026

This Privacy Policy explains how Ugnay.ph ("we", "us", "our") collects, uses, shares, and protects information when you use the Ugnay.ph website and progressive web application (collectively, the "Platform").

This Policy is intended to align with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and guidance.

1. Scope

This Privacy Policy applies to information processed through the Platform, including when you create an account, search for emergency hotlines, contribute hotline data, report inaccurate information, save hotlines for offline access, or contact support.

2. Information We Collect

A. Account Information

  • Email address
  • Account credentials (stored in hashed/secure form via Supabase Auth)
  • Google account information (if you sign in with Google OAuth)

B. Profile Information

  • Display name
  • Phone number (if provided)
  • Avatar URL (if provided)

C. Contribution Data

If you submit emergency hotline information to the directory, we collect:

  • Agency or organization name
  • Phone number(s)
  • Category (e.g., police, fire, medical, disaster)
  • Geographic scope (city, barangay)
  • Notes or additional context you provide

D. Usage Information

  • Reports you submit about hotline accuracy (reason, details)
  • Hotlines you bookmark or save
  • Activity logs (actions taken within the Platform)

E. Contact Form Data

If you contact us through the Platform, we collect:

  • Name
  • Email address
  • Message content

F. Technical & Device Data

  • IP address
  • Device and browser information
  • Log data, timestamps, and security events
  • Geolocation (if you grant permission, used to show nearby emergency hotlines)

G. Offline Data

The Platform uses service workers and IndexedDB to cache hotline data on your device for offline access. This data is stored locally on your device and is not transmitted to our servers unless you take an explicit action (e.g., submitting a contribution).

3. How We Use Information

We use information to:

  • Create and manage user accounts and authentication.
  • Operate the emergency hotline directory and enable hotline discovery.
  • Enable community contributions, reviews, and moderation of hotline data.
  • Show geographically relevant emergency hotlines based on your location.
  • Provide customer support and respond to inquiries.
  • Maintain security, prevent fraud/abuse, and keep audit logs.
  • Improve the Platform (analytics, debugging, feature development).
  • Comply with legal obligations and lawful requests.

4. Legal Bases for Processing (DPA)

We process personal information based on one or more of the following (as applicable):

  • Consent (where required, e.g., optional fields, geolocation access).
  • Contractual necessity (to provide the Platform and enable directory services).
  • Legitimate interests (platform security, fraud prevention, service improvement).
  • Legal obligation (compliance with laws and lawful orders).

5. Sharing & Disclosure

A. Service Providers (Processors)

We use third-party providers to operate the Platform. Depending on your usage, these may include:

  • Supabase (authentication, database, storage)
  • Vercel (hosting and analytics)
  • Resend (transactional email)
  • Upstash (rate limiting)

These providers process data under contractual obligations and appropriate safeguards.

B. Community Contributions

When you contribute hotline data that is approved by moderators, the hotline information (agency name, phone number, category) is published in the public directory. Your personal account information is not publicly displayed.

C. Legal and Safety

We may share information with regulators, law enforcement, courts, or other authorities when required by law or necessary to protect rights, safety, and security.

We do not sell personal information.

6. Data Retention

We retain information for as long as necessary to provide the Platform, maintain business and audit records, resolve disputes, enforce agreements, and comply with legal obligations.

Typical retention targets:

  • Account data: for the life of the account plus up to 3 years
  • Contribution records and audit logs: up to 5 years
  • Support communications: up to 2 years

We may anonymize or aggregate data for analytics and product improvement.

7. Security Measures

We implement reasonable organizational, physical, and technical measures to protect personal information, such as:

  • Access controls and least-privilege permissions
  • Encryption in transit (and at rest where appropriate)
  • Secure password hashing
  • Monitoring, logging, and audit trails
  • Incident response procedures

No method of transmission or storage is 100% secure.

8. Your Rights (Philippines DPA)

Subject to the conditions and exceptions of the Data Privacy Act, you may have rights to:

  • Be informed about how your data is processed
  • Access your personal information
  • Object to processing (where applicable)
  • Correct inaccurate or incomplete data
  • Erase or block data (where applicable)
  • Data portability (where applicable)
  • File a complaint with the National Privacy Commission (NPC)

To exercise your rights, contact us using the details in Section 13.

9. Cookies and Similar Technologies

We may use cookies or similar technologies to:

  • Keep you logged in.
  • Remember preferences.
  • Maintain security.
  • Understand usage and improve features.

The Platform also uses service workers and IndexedDB to cache directory data for offline access. You can control cookies through your browser settings. Some features may not function without cookies.

10. International Data Transfers

If we store or process information outside the Philippines (e.g., via cloud providers), we will implement appropriate safeguards consistent with the Data Privacy Act and applicable guidance.

11. Children's Privacy

The Platform is intended for users who can enter into binding agreements under applicable law. We do not knowingly collect personal information from children without appropriate consent/authority. If you believe a child has provided personal information, contact us to request deletion.

12. Changes to This Privacy Policy

We may update this Policy from time to time by posting a revised version with a new effective date. Material changes may be notified through the Platform or by other reasonable means.

13. Contact

Questions about this Privacy Policy or your data? Contact us via our contact page.