Privacy Policy 🔒
Last updated: August 2026 · Covered by the Data Privacy Act of 2012 (RA 10173)
What data do we collect?
- Email address (for login), and your name/avatar if you log in with Google
- Your posts: listings, LF posts, offers, prices, photos
- Chat messages and photos you send in the app
- Reviews and ratings you give or receive
- Payment records you enter (amount, method, reference no. — we are NOT connected to GCash/Maya/any bank)
- For ID verification: only the ID type and last 4 characters are kept. Your ID photo and selfie are deleted after review.
How is it used?
- To make the marketplace work: posts, chat, offers, notifications
- For trust & safety: verification badge, Sipot Score, reports
- We never sell your data to anyone
What are your rights? (RA 10173)
- See your data — it's in the app itself (profile, posts, chats)
- Correct it — you can edit your posts and profile
- Delete it — Profile → Delete account. Your account, posts, offers, chats and alerts will be deleted.
- Note: the receipts and reviews that are part of SOMEONE ELSE's transaction have limits on deletion — this protects against fraud (a scammer can't erase the evidence).
Where is it stored?
In Supabase (managed PostgreSQL) with Row Level Security — each user can only access what they're supposed to see, enforced by the database itself.
Questions?
Email us: support@hanapbenta.example (to be replaced with a real contact before public launch)