Privacy policy

What we collect

• Account details: name, email (if any), username, city, barangay, profile photo and bio, your mobile number, and your birthdate.
• ID verification: a photo of your government ID and a selfie holding it.
• Your precise location, only if you tap "Gamitin ang location ko".
• Handover photos: the condition photos taken at pickup and return.
• Messages between you and other users, and your listings, bookings and reviews.
• Payment metadata from our payment provider, such as payment status, method and amount. We do not store your full card number.
• Basic technical data, such as device type and error logs.

Why we use it

To run your account and bookings, verify that users are real, hold deposits and pay owners, settle disputes, keep the platform safe, and send you notices about your bookings. We do not sell your personal data.

How long we keep it

ID images are deleted 90 days after we review them. Booking, payment and dispute records are kept as long as needed for accounting, legal and dispute purposes. When you delete your account, we wipe your profile (see below).

Delete your account and data

Go to Account, then Security, then Delete account. Your sign-in account, including anything Google or Facebook shared with us, is deleted. Your listings come down, your payout details are deleted, and your profile name, photo, phone, city, barangay, birthdate and saved location are wiped. ID images are deleted within 90 days of review. Records we must keep for open bookings, payments or disputes stay until those close. Can't sign in? Email hello@kapitbahayan.com from the address on your account and we'll delete it within 30 days.

Birthdate and location

Your birthdate is sensitive personal information. We use it only to check that you are 18 or older. We never show it to anyone. If it shows you are under 18, we do not store it.

If you tap "Gamitin ang location ko", we store your precise location privately. Other users see only your city and barangay. You can also just pick your city and skip this.

Sign-in and accounts

If you sign in with Google or Facebook, we receive your name, email and profile photo from them. Accounts made with a username get an internal address on our own domain. We never send email to that address.

Who sees it

The other party in a booking sees your name and general area. The meet-up spot and your phone number are shown only after the booking is confirmed. Other users never see your ID images. Our admins can see them for review. We share data with service providers that run payments, hosting and email for us, and with authorities when the law requires it.

Service providers

• Supabase: database and sign-in (Singapore region).
• Cloudflare: hosting and CDN.
• Google and Meta: sign-in only, if you choose them.
• PayMongo: payments, once payments are live.
• Resend: email, once email is enabled.

Your data is therefore processed outside the Philippines. Map tiles are © OpenStreetMap contributors, served by OpenFreeMap.

Data breaches

If a breach puts your personal data at risk, we will notify you and the National Privacy Commission within 72 hours of learning of it, as the NPC rules require.

Consent and support resets

You can withdraw your consent by deleting your account, or by writing to hello@kapitbahayan.com.

Password resets for username accounts go through support. We reset a password only on a request from the mobile number on your account.

Your rights

Under the Data Privacy Act of 2012 (RA 10173) you have the right to be informed, to access your data, to correct it, to object to or block its use, to have it deleted, to data portability, to claim damages, and to complain to the National Privacy Commission.

Contact

To use any of these rights, or to ask a question, write to us through Help. We reply within 24 hours. See also our Terms.