At a glance
| What | Why | Who sees it |
|---|---|---|
| Name, email, phone | Run your account, keep it secure | You and us |
| Device location, while you use live features | Arrivals, routes, nearby stops | Used in the app; not shared with others |
| Driver position, during an active trip | Show the jeepney on the map | Riders, and the driver's cooperative |
| Driver licence and vehicle details | Verify drivers and units | The driver, their cooperative, and us |
| Ride record with a yes/no "discounted" note | Fare totals for the cooperative | Cooperative sees totals only, never who |
| App diagnostics and error reports | Fix bugs, know which phones to support | Us and our error-monitoring provider |
1. Who is responsible for your data
ProFlow Partners Corporation, which operates IlongGo!, is the personal information controller. Address: Iloilo City, Philippines 5000. Our Data Protection Officer is [name], reachable at [privacy@yourdomain.ph]. NPC registration: [status / number].
2. What we collect
- Account details: name, email address, phone number, and a password stored in hashed form.
- Location: your device location, only with your permission and only while you use live trip features. Drivers' positions are recorded every few seconds during an active trip.
- Driver and cooperative details: licence information, vehicle plate and type, cooperative membership and registration documents.
- Ride records: rides you board, and whether a discounted fare was used. We never record which discount.
- Diagnostics: basic usage events, error reports linked to your account but not your email, and, once per app open, your Android and web-engine version numbers (sent without your account and deleted after 30 days).
3. Why we use it, and on what basis
To run the service and your account (contract); to show live positions and routes (your consent to location); to keep the service secure and fix faults (legitimate interest); and to meet legal duties. We do not sell your personal information and we do not use it for advertising.
We don't use AI on your data. IlongGo! does not use artificial intelligence to process your personal information or to make decisions about you. The promotional video on this website was made with AI tools and is labelled as such.
4. Who we share it with
- Your cooperative (drivers): trip and unit records.
- Local government partners: aggregated, non-identifying transit statistics only.
- Authorities, where the law requires it.
- Service providers who run parts of the service for us. Each receives only what it needs:
| Provider | What it receives | Where | Why |
|---|---|---|---|
| Supabase | Everything in your account; your trips; your GPS while you share it | Singapore | Database and sign-in |
| Hostinger | Your IP address and the pages you open | [confirm country] | Hosts the website and web app |
| Sentry | Error reports, with personal details removed before sending | United States | Tells us when the app breaks |
| Photon (komoot) | The text you type into search | Germany | Finds places as you type |
| OpenStreetMap Nominatim | The point you drop on the map | [confirm country] | Names the place at that point |
| OSRM routing (openstreetmap.de) | Start and end points of walking legs | Germany | Estimates walking time |
| OpenStreetMap map tiles | The map area you are viewing | [confirm; provider may change] | Draws the map |
| [email provider, once chosen] | Your email address and the emails we send | [confirm] | Sign-in and password emails |
5. Where it is stored
Our database is in Singapore, and some of the providers above are in Germany, the United States and other countries. Sending your data to them is a transfer outside the Philippines, and we use providers bound by [lawyer: contractual safeguards].
6. How long we keep it
| What | How long |
|---|---|
| Your account and profile | Until you delete your account |
| A rider's GPS during a ride | 7 days |
| A driver's GPS during a trip | Full detail for 3 days, then one point every 30 seconds, kept as the cooperative's trip record |
| App diagnostics | 30 days |
| Feedback you send us | 180 days |
| Account-deletion requests | 90 days after we handle them |
| Guest (no account) sign-ins | 30 days after last use |
| Discount ID photos | Deleted as soon as the request is decided |
| Backups | The 10 most recent backups; older ones are deleted |
| Records of admin actions | Copies of your data in them are removed after 30 days; the record itself (who did what, and when) after 2 years |
7. Your rights
Under the Data Privacy Act you have the right to be informed, to access your data, to object, to correct it, to have it erased or blocked, to data portability, and to claim damages. You may also complain to the National Privacy Commission (privacy.gov.ph). To use any of these, write to our Data Protection Officer.
These rights apply to everyone who uses IlongGo!, wherever you live, including visitors from the European Union. [lawyer: GDPR position for Tourist Visitor Pass buyers]
8. Deleting your account
Open Account in the app and choose delete. If you cannot sign in, use the account deletion page. When you delete your account we immediately:
- delete your rides, ride GPS, waiting signals, ratings, reviews and points;
- remove your name, phone number and email, and sign you out everywhere;
- keep an anonymous shell of the account ("Deleted user"), because other records point to it.
Drivers: your past trips and their GPS stay with your cooperative as its operating records, no longer linked to your name. [lawyer: confirm basis and period]
Incident reports you sent stay as anonymous records of what happened, no longer linked to you. Some copies take longer to disappear: diagnostics within 30 days, feedback within 180 days, and backups once 10 newer backups have been made.
9. Security
Accounts are protected by access rules in the database so that people see only their own records and cooperatives see only their own fleet, and connections are encrypted. No system is perfect; if a breach affects you we will tell you and the NPC as the law requires.
10. Children
IlongGo! is for general audiences, and students ride jeepneys. [lawyer: minimum age and parental consent wording] [parent-consent flow for under-13s: designed (W-L7), wording added when it ships]
11. Changes to this policy
We will post updates here with a new date, and notify signed-in users in the app when a change affects how we use their data.
12. Contact
Data Protection Officer: [name, email, postal address].