Privacy Policy

MyBigasan ("MyBigasan", "we", "us") provides a store management app for rice (bigasan) retailers in the Philippines, covering inventory, point-of-sale, customer utang (credit) tracking, and an optional public marketplace listing. This policy explains what information we collect, how we use it, and the choices you have. It is written to comply with the Philippine Data Privacy Act of 2012 (RA 10173).

1. Information we collect

Account information. When you sign up with Google, we receive your name, email address, and profile photo from Google to create your account.

Store information. Store name, address, region/city, contact phone and email, social media links, and a store photo, as entered by you in Settings.

Business records. Product and inventory data, sales and receipt records, customer names and utang (credit) balances, employee roster entries, supplier contacts, and notes, all entered by you or your staff to operate the app.

Payment references. Plan upgrades are paid manually via GCash outside the app. We only store the GCash reference number and amount you submit for our admin to verify, we never collect or store your GCash password, card numbers, or bank credentials.

Marketplace listing. If you opt in to the public marketplace, the store and product details you choose to make public are shown to anyone browsing the marketplace, as described in Section 4.

Technical data. Standard authentication and session data needed to keep you signed in, handled by our database and hosting provider.

2. How we use information

We use the information above to:

• Provide and operate the app, inventory, sales, utang tracking, reports
• Authenticate you and keep your store data separate from other stores
• Review and approve plan upgrade requests and marketplace listings
• Respond to support requests you submit
• Maintain and improve the reliability and security of the app

We do not sell your data, and we do not use it for third-party advertising.

3. Data you enter about your own customers, employees, and suppliers

As a store owner, you enter information about other people, most notably customer names, phone numbers, and utang balances, into the app. For that data, you act as the data controller and we act as a data processor: you are responsible for having a lawful basis to collect and store it, and for responding to any request from those individuals to access, correct, or delete their information. We process it only to provide the app's functionality to you.

4. Marketplace public listings

The marketplace is opt-in and requires our admin's approval before anything is shown publicly. If you enable it, the following becomes visible to anyone, including people without an account: your store name, photo, address, region and city, the products you individually mark "Show on marketplace", their pricing (wholesale pricing only if you separately enable it per product), your contact phone and email, your social media links, and a map link if you add one. You can turn a listing or individual product visibility off at any time in Settings.

5. Third-party services

We use Google for account sign-in (Google OAuth) and Supabase to host our database and authentication. These providers process data on our behalf under their own security and privacy commitments. We do not share your data with any other third party except as required by law.

6. Data retention

We keep your account and store data for as long as your account is active. If you close your store, we retain sales and financial records for a reasonable period to meet accounting and legal obligations, then delete or anonymize the remaining data.

7. Security

Access to your store's data is restricted to your account by row-level database security, so other stores cannot see your data. No online service is perfectly secure, but we take reasonable technical measures to protect your information.

8. Your rights

Under the Data Privacy Act, you have the right to access, correct, and request deletion of your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. You may also file a complaint with the National Privacy Commission (privacy.gov.ph).

9. Children's privacy

MyBigasan is intended for business owners and is not directed at children. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy as the app changes. We will update the "last updated" date above when we do.

11. Contact us

Questions about this policy or your data can be sent to zendzdev@gmail.com.