Effective date: [EFFECTIVE DATE] Last updated: [EFFECTIVE DATE]
⚠️ Template notice (delete before publishing): This document is a starting template tailored to how the GuiHub Delivery app works. It is not legal advice. Have it reviewed by a Philippine lawyer and align it with your obligations under the Data Privacy Act of 2012 (RA 10173) and the National Privacy Commission (NPC) before you publish it or submit it to the Google Play Store. Replace every [PLACEHOLDER].
This Privacy Policy explains how GuiHub Digital Solutions Incorporated ("we", "us", "our"), the operator of the GuiHub Delivery mobile application and related services (the "App" or "Service"), collects, uses, shares, and protects your personal information.
We are the Personal Information Controller (PIC) for the data described here. If you do not agree with this Policy, please do not use the App.
You may contact our DPO for any privacy question, request, or complaint.
GuiHub Delivery serves several types of users, and we process data for each:
We collect the following categories, depending on how you use the App:
a. Account & identity
passwords in plain text.
b. Contact & delivery
drivers, to share live location with the customer and store during an active delivery. Drivers' location may be collected in the background while a delivery is in progress so tracking continues when the app is not in the foreground.
c. Orders & transactions
d. Marketplace
and the listing's location).
e. Support
f. Device & technical
g. Content you provide
comments.
We do not intentionally collect sensitive personal information (e.g. health, religion, political affiliation). Please do not include such information in free-text fields, listings, chats, or support tickets.
Under the Data Privacy Act, we process your data on these bases:
| Purpose | Legal basis |
|---|---|
| Create and manage your account; authenticate you | Contract; consent |
| Take, match, deliver, and track orders | Contract |
| Show your live location to the assigned driver/store during delivery | Contract; consent |
| Operate the wallet, payments, payouts, and remittances | Contract; legal obligation (financial records) |
| Run the marketplace and buyer–seller chat | Contract |
| Send order/chat/promotional notifications | Contract; consent (for marketing) |
| Provide customer support and resolve disputes | Contract; legitimate interest |
| Prevent fraud, abuse, and keep the platform safe (incl. chat moderation) | Legitimate interest; legal obligation |
| Show ads and measure them | Consent; legitimate interest |
| Improve and analyse the Service | Legitimate interest |
| Comply with law and lawful requests | Legal obligation |
We share the minimum necessary data to run the Service:
assigned driver and the store see the customer's name, contact number, delivery address, and location; the customer sees the assigned driver's name and live location. In the marketplace, buyers and sellers exchange the information they choose to share in chat.
Functions, Cloud Messaging) — hosting, auth, database, and notifications. - Google AdMob — in-app advertising (where enabled). - Map & geocoding providers (e.g. OpenStreetMap/Nominatim, Leaflet map tiles) — to display maps and convert coordinates to addresses. - Google Play Services — app integrity and delivery.
rights, safety, and property of users, the public, or us.
data may transfer as part of that transaction, subject to this Policy.
We do not sell your personal information.
Wallet top-ups and payouts are handled through the payment methods integrated in the App. When a real payment gateway is enabled, your payment is processed by that gateway under its own terms and privacy policy; we do not store full card details on our servers. [Update this section to name your actual payment gateway(s) once integrated — e.g. GCash, Maya, or a PSP.]
Our providers (e.g. Google Firebase) may store and process data on servers outside the Philippines. Where data is transferred abroad, we take steps consistent with the Data Privacy Act to ensure it receives an adequate level of protection.
Where in-app ads are enabled, we use Google AdMob. AdMob may use device advertising identifiers to serve and measure ads, including personalized ads. You can limit ad personalization in your device settings (Google → Ads → "Opt out of Ads Personalization" / reset advertising ID). Some parts of the App may also show "Sponsored" listings that we or merchants promote; these are labelled.
The App uses local device storage to keep you signed in and remember preferences (e.g. GPS consent, "seen" notifications, chat-read markers). This is necessary for the App to function.
We keep personal data only as long as needed for the purposes above, then delete or anonymise it:
after closure.
tax, and accounting obligations. [Insert your retention period.]
evidence. [Insert period.]
As a data subject, you have the right to:
Privacy Commission (NPC), https://privacy.gov.ph.
To exercise any right, contact our DPO (§1). We may need to verify your identity before acting on a request. We aim to respond within the period required by law.
We use technical and organizational measures to protect your data, including encrypted transport (HTTPS/TLS), authenticated access, server-side database access rules, password hashing, and administrative access controls. No system is perfectly secure; we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.
The App is intended for users 18 years and older. We do not knowingly collect data from children. If you believe a child has provided us data, contact our DPO and we will delete it.
We may update this Policy from time to time. We will post the new version in the App and update the "Last updated" date. Material changes may be notified to you in-app. Continued use after changes means you accept the updated Policy.
Questions or requests: patcherrom@gmail.com — attention: Data Protection Officer, GuiHub Digital Solutions Incorporated, Lamacan, Rosario Tr. A. Barba, Malusay, 1st District, 6214 City of Guihulngan, Negros Oriental, Philippines.