← Back
Legal

Privacy Policy

Effective: March 2026 · Version 1.0

v1.0

Vitamigo ("we," "us," or "our") operates the community health directory at vitamigo.ph. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

1. Information we collect

Community users (anonymous accounts)

  • Username (chosen by you)
  • Password (hashed, never stored in plain text)
  • Recovery phrase (hashed, never stored in plain text)
  • Age confirmation timestamp
  • Consent version and timestamp

Clinic admins (Google OAuth)

  • Google email address
  • Google display name
  • Claim role (e.g., Nurse, Admin Officer)

CBS Motivators

  • First name
  • Location (city)
  • Contact information (Facebook, phone, Telegram) — accessible only to logged-in users via authenticated API
  • Consent version, timestamp, and text snapshot

2. How we use your information

  • To provide and maintain the Vitamigo directory service
  • To authenticate users and manage accounts
  • To send notifications related to clinic claims (approval or rejection emails to clinic admins only)
  • To audit contact information access (reveal logs)
  • To comply with legal obligations under RA 10173

3. Data retention

Data typeRetention
Community user accountUntil deletion requested (30 days)
Clinic admin emailActive + 12 months
Motivator contact infoWhile listing active (30 days after deactivation)
Contact reveal log12 months (then anonymized)
Clinic claim recordsIndefinite

4. Your rights

Right to access

Request a copy of all personal data we hold about you.

Right to correction

Request corrections to inaccurate or incomplete data.

Right to erasure

Request deletion of your account and personal data.

Right to object

Object to processing of your personal data.

5. Third-party services

  • Supabase — database hosting and authentication
  • Vercel — frontend hosting
  • Google OAuth — clinic admin authentication
  • Cloudflare Turnstile — bot protection
  • Resend — transactional email delivery

Contact us

For questions about this Privacy Policy or to exercise your data rights, contact us at privacy@vitamigo.ph.

You may also file a complaint with the National Privacy Commission at privacy.gov.ph.