Privacy Policy
1. Introduction
This Privacy Policy explains how Pati by OVPRIDE (“the Service,” “we,” “us”) collects, uses, shares, and protects your information. The Service is a community online bulletin for sharing announcements, events, and community updates within the J.H. Cerilles State College (JHCSC) community. We process personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and applicable law.
2. Information we collect
- Account information you provide when registering: your name, email address, and password (stored only as a strong one-way hash — we never see or store your plain password). You may optionally add a profile photo, cover photo, and a short bio.
- Content you create: posts, photos and videos you upload, comments, reactions, and shares, together with their audience setting.
- Notification data: a device push token, the device platform (Android/iOS), and an optional device name — used only to deliver notifications you opt into.
- Usage & reach data: which posts have been seen and how many times (impressions/reach), and video plays, so authors can measure how far a post traveled. Viewers are identified by your account or, for signed-out viewing, by a hashed device fingerprint that cannot be reversed into your identity.
- Reports you submit: if you report a post, photo, or comment, we record the reported item, your account as the reporter, and the reason you chose, so moderators can review it.
- Technical & security data: your IP address and request metadata, used transiently for rate-limiting, abuse prevention, and error logging.
- Email verification data: a temporary, hashed 6-digit code used to confirm your email during sign-up.
We do not collect precise location, contacts, advertising identifiers, or device microphone/camera data except media you explicitly choose to capture and post.
3. How we use your information
- To create and secure your account and keep you signed in.
- To display the bulletin, your profile, and your activity to the community according to each post’s audience setting.
- To deliver push and in-app notifications you opt into, and let administrators broadcast announcements.
- To measure post reach and engagement for authors and administrators.
- To keep the Service safe — preventing spam, abuse, and unauthorized access — and to diagnose problems.
4. Legal basis & consent
We process your data based on your consent (given when you create an account and when you enable notifications), the performance of the Service you request, our legitimate interest in operating and securing the bulletin, and compliance with legal obligations. You may withdraw consent for optional features (such as push notifications) at any time in your device settings or the app.
7. Data retention
We keep your information for as long as your account is active or as needed to operate the Service. When you delete your account, your personal data is removed as described in Account & data deletion. Residual copies in encrypted backups are purged on our rotation cycle, normally within 30 days. We may retain limited records where required by law or legitimate institutional record-keeping, and we may keep aggregated or anonymized statistics that can no longer identify you.
8. Security
Passwords are stored using strong one-way hashing (Argon2id/bcrypt). Sessions use revocable, expiring tokens of which we store only a hash, so a database leak cannot be used to impersonate you. Data is transmitted over encrypted (HTTPS/TLS) connections. No system is perfectly secure, but we take reasonable and appropriate technical and organizational measures to protect your data.
9. Your rights
Under the Data Privacy Act you have the right to be informed, to access and obtain a copy of your data, to correct inaccurate data, to object to or restrict processing, to withdraw consent, to data portability, and to erasure. You can edit your profile and change your password in the app, manage notification consent in your device settings, and delete your account at any time. To exercise any right, contact ovpre@jhcsc.edu.ph. You also have the right to lodge a complaint with the National Privacy Commission.
10. Account & data deletion
You can delete your account and data at any time.
In the app, go to Settings → Account → Delete account, or follow the full instructions (including how to request deletion by email) on our dedicated page:
11. Children’s privacy
The Service is intended for members of the JHCSC campus community. Accounts for minors should be created and managed in accordance with institutional policy and with parental or guardian consent where required. If you believe a minor has provided personal data without appropriate consent, contact us so we can address it.
12. Changes to this policy
We may update this Policy from time to time. Material changes will be communicated through the Service, and the “Effective” date above will be revised. Continued use after changes take effect constitutes acceptance of the updated Policy.
13. Contact
For privacy concerns, data requests, or to reach the Data Protection Officer, email ovpre@jhcsc.edu.ph.
© Pati by OVPRIDE. · Terms of Service · Delete account
5. Google & Facebook sign-in
If you choose to sign in with Google or Facebook, we receive your basic profile from that provider — your name, email address, and profile photo — solely to create or access your OVPRIDE account. We never receive your Google or Facebook password. Your use of those providers is also governed by Google’s Privacy Policy and Meta’s Privacy Policy. You can remove OVPRIDE’s access from your Google or Facebook account settings at any time.