Patakaran sa Privacy — Privacy Policy

Huling na-update: 6 October 2026 · Effective: 6 October 2026

Ang maikling bersyon

• Kinukuha namin ang pangalan, email, numero, at datos ng tindahan mo — para gumana ang app.
• Hindi namin binebenta ang datos mo. Kahit kanino.
• Ang listahan ng suki at utang mo ay sa'yo. Ikaw ang may hawak niyan; kami ay tagapag-ingat lang.
• Pwede mong hingin, i-download, itama, o burahin ang datos mo kahit kailan — pati sa loob mismo ng app.
• Nagpapadala lang kami sa Anthropic (AI) kapag pumayag ka. Pwede mo itong i-withdraw anytime sa Settings.
• Kung may tanong: hoy@tindahanai.com

Nasa ibaba ang buong bersyon sa Ingles, na siyang opisyal na bersyon.

1. Who we are

TindahanAI ("we", "us") is operated by <<EXACT DTI REGISTERED BUSINESS NAME>>, DTI Business Name No. <<DTI BN NUMBER>>, in <<CITY>>, <<PROVINCE>>, Philippines.

For the purposes of Republic Act No. 10173 (the Data Privacy Act of 2012, "DPA"), we act as a Personal Information Controller (PIC) for the data described in Section 3, and as a Personal Information Processor (PIP) for the data described in Section 5.

Data Protection Officer — hoy@tindahanai.com

2. Scope

This policy covers tindahanai.com, the TindahanAI mobile applications (store, suki, and supplier), and any related services. It does not cover third-party services you reach through links from ours.

3. Personal data we collect as Controller

3.1 Account data

When you sign up through Google, Apple, Facebook, or email, we receive your name, email address, and profile photo from that provider. We do not receive your password, and we never post to your social accounts.

If you use Sign in with Apple with Hide My Email, Apple generates a relay address and forwards email to your real inbox. We treat that relay as your contact address.

We ask for your mobile number and your store address after sign-up. We use the number for order coordination and delivery notifications, and the address to show your store on the directory (if you list it) and to compute delivery radius. We do not use SMS for login and do not send marketing texts.

3.2 Store and inventory data

Information you enter to run your store: business name, address, product catalogue, prices, stock counts, sales records, pre-orders, utang records, suki list, supplier connections, and announcements you publish.

3.3 Messages and photos

Chat messages you exchange with sukis, stores, or suppliers in the app. Photos you attach to products, announcements, or chat. Payment proofs (GCash/Maya screenshots and reference numbers) you upload with a subscription payment or an order payment claim.

3.4 Device and push tokens

When you enable notifications, your device returns an Expo push token which we store on your profile so we can send order updates, suki messages, and renewal reminders. You can revoke this in your device settings or by logging out.

3.5 Payment records

For your ₱199 subscription: the reference number and any screenshot you submit as proof, plus the amount and date. We do not collect or store card numbers, bank account numbers, or GCash credentials. Payments are sent directly by you to our published GCash account; we never have access to your wallet.

Your GCash or Maya payee number, if you add one as a supplier or store, is stored so buyers can pay you directly.

3.6 Technical data

IP address, device and browser type, pages visited, and crash reports, used for security, fraud prevention, and diagnosing faults.

3.7 Moderation data

When you report a message, listing, store, product photo, announcement, or another user, we store what you reported, the reason you gave, your free-text details, and the fact that you are the reporter. When you block another user, we store the blocker/blocked pair so chat between you stops working from both sides. We use this data only to review reports and enforce our Terms of Service.

4. AI processing — Gabay

Gabay is our in-app assistant. When you ask Gabay a question, we send the following to Anthropic PBC (operator of the Claude large language model) to generate a reply:

• a short summary of your store's recent sales and current stock,
• the question text you typed.

We do not send supplier contact details, suki phone numbers, utang balances, chat message bodies, or payment proofs to Anthropic.

Gabay sends nothing to Anthropic until you opt in inside the app. Opting in sets ai_consent_at on your profile to the moment you agreed. You can withdraw at any time in Settings; when you do, we clear ai_consent_at and the server refuses to send anything further to Anthropic until you opt in again.

Anthropic processes the request on our behalf under their commercial terms and does not use your request to train their models. Processing happens on Anthropic infrastructure outside the Philippines; we require contractual protections consistent with Section 21 of the DPA.

5. Suki and customer data — your data, our safekeeping

This section matters and is easy to miss.

When you record a customer (a suki) and their utang, you are collecting another person's personal data. Under the DPA, you are the Personal Information Controller for that data. TindahanAI acts only as your Personal Information Processor — we store and process it on your instructions and for no other purpose.

This means:

• We do not use suki data for anything of our own. Not marketing, not analytics, not model training, not resale.
• We act only on your instructions, plus what the law requires of us.
• You are responsible for collecting that data lawfully — telling your sukis you keep a record, and having a legitimate basis for it.
• If a suki asks us to access, correct, or delete their record, we will refer them to you and assist you in responding, because it is your record to answer for.
• If you close your account, that data is deleted per Section 9.

The processing terms that govern this relationship form part of our Terms of Service.

6. Why we process your data, and on what basis

We do not engage in automated decision-making that produces legal effects concerning you.

7. Who we share data with

We do not sell personal data. We never have, and we will not.

We share data with service providers who process it on our behalf, under contract:

We also disclose data where legally compelled — a valid subpoena, court order, or lawful government request — and will tell you when we are permitted to.

Between users: when you place an order with a supplier, that supplier receives your store name, contact details, the order, and your payment claim. When a suki places a pre-order with your store, you receive their name, phone, and order. This is how the transaction works and is limited to what the transaction needs.

8. Cross-border transfers

Some of the providers above process data outside the Philippines. Where that happens, we require contractual protections consistent with the DPA and remain accountable for the data, as required by Section 21 of the DPA.

9. How long we keep data

You can export your inventory, orders, suki list, and utang records at any time, on any plan, including a lapsed one. We do not hold your records hostage.

9.1 How to delete your account

Two ways, both end at the same place — your records are deleted on the same schedule:

• In the app: Settings → Account → Delete Account. You will see a summary of what will be deleted, type DELETE to confirm, and the account closes immediately.
• On the web: sign in and visit tindahanai.com/delete-account. Same two-step confirmation.

If you cannot sign in (lost device, forgotten password), email hoy@tindahanai.com from the address on file and we will help.

10. Your rights

Under the DPA you have the right to:

• Be informed — this notice
• Access the data we hold about you
• Object to processing, and withdraw consent
• Rectify anything inaccurate
• Erasure or blocking of data, within legal limits
• Data portability — receive your data in a structured, machine-readable format
• Damages for violations
• Lodge a complaint with the National Privacy Commission

To exercise any of these, email hoy@tindahanai.com. We respond within 15 working days, and will tell you if we need longer and why. Some requests require identity verification.

If you are dissatisfied, you may complain to the National Privacy Commission, 5th Floor Delegation Building, PICC Complex, Pasay City — privacy.gov.ph · complaints@privacy.gov.ph.

11. Security

We use organisational, technical, and physical safeguards: encryption in transit, encryption at rest, row-level access controls isolating each business's data, least-privilege administrative access, and access logging.

No system is perfectly secure. If a breach occurs that is likely to put your rights at risk, we will notify you and the National Privacy Commission within 72 hours of becoming aware, as required by NPC Circular 16-03.

12. Children

TindahanAI is for business use and is not directed at children under 18. We do not knowingly collect their data. If you believe a child has given us data, contact hoy@tindahanai.com and we will delete it.

13. Changes

We will post material changes here and, where they significantly affect you, notify you by email at least 15 days before they take effect. Continued use after that date constitutes acceptance.

14. Contact

Data Protection Officer — hoy@tindahanai.com

<<EXACT DTI REGISTERED BUSINESS NAME>> DTI Business Name No. <<DTI BN NUMBER>> <<CITY>>, <<PROVINCE>>, Philippines