Privacy Policy

1. Introduction

This Privacy Policy explains how Pinoyaya Social Welfare Services ("Pinoyaya," "we," "us," or "our"), a Philippine-registered entity, collects, uses, discloses, and protects personal information of users of the Pinoyaya mobile application and related services (the "App").

Pinoyaya is a two-sided marketplace connecting Filipino families with verified helpers (yayas, housekeepers, and household helpers). This policy applies equally to families who post jobs and pay for access ("Family Users") and helpers who create profiles and apply for work ("Helper Users") — together, "Users" or "you."

We comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC).

By creating an account or using the App, you confirm that you have read, understood, and agreed to this Privacy Policy.

2. Personal Information Controller and Data Protection Officer

Personal Information Controller

Pinoyaya Social Welfare Services
Cebu City, Philippines
support@pinoyaya.com

Data Protection Officer

Email: support@pinoyaya.com

The DPO is our point of contact for all privacy inquiries, access requests, and complaints. Our full registered office address is available on request.

3. Information We Collect

We collect the following categories of personal information.

3.1 Information you provide directly

All Users

• Full name
• Mobile phone number (verified via one-time SMS code)
• Email address
• Date of birth (to confirm you are 18 years or older)
• Password (stored in encrypted form; we never see your plain-text password)
• Profile photo
• City and barangay
• Communications you send to us (support tickets, feedback)

Helper Users (additional)

• Skills and services offered (e.g. childcare, housekeeping)
• Work experience and self-described history
• Availability and preferences (stay-in/stay-out, full-time/part-time, schedule)
• Expected salary range
• Languages spoken
• References (if provided voluntarily)

Family Users (additional)

• Household details (e.g. number of children, ages, pets at home, home type)
• Job posting details (job description, schedule, location, rate offered)
• Approximate home location (used to find nearby helpers; precise location is only visible to a helper after you accept their application)

3.2 Identity verification information

To maintain a trusted marketplace, all Users undergo identity verification through a specialised third-party verification provider.

During verification, you submit a government-issued ID (e.g. PhilSys, driver's licence, passport, UMID) and a selfie. This data is collected and stored by the verification provider, not by Pinoyaya. Pinoyaya receives only:

• Verification result (passed / failed / under review)
• Name and date of birth as confirmed by the provider
• Verification timestamp and unique reference ID

Pinoyaya does not store your ID document images or biometric data on our own servers.

3.3 Payment information

Family Users who purchase an access pass make payments through a third-party payment processor and its supported payment channels (including e-wallets and credit/debit cards).

Pinoyaya does not collect, see, or store your full payment card number, CVV, or e-wallet credentials. These are handled directly by our payment processor under PCI-DSS-compliant infrastructure. Pinoyaya receives only:

• Payment status (success / failed / refunded)
• Amount and currency
• Transaction reference ID
• Payment method type (e.g. e-wallet name, last four digits of card)

3.4 Information collected automatically

• Device data: device type, operating system, app version, language, timezone, mobile network
• Usage data: screens viewed, features used, app session length, taps and interactions
• Log data: IP address, access timestamps, crash reports
• Approximate and precise location data (see Section 3.5)

3.5 Location data

The App uses your device's GPS location to power core marketplace features:

• For Family Users: showing helpers near your home
• For Helper Users: showing jobs near you, allowing distance filtering

We will request your permission to access location when you first use a location-dependent feature. You may decline or revoke this permission at any time through your device settings; if you do, location-based search will be unavailable but other App features will continue to work.

Your precise home address is never shared with the other side of the marketplace by default. Helpers see only an approximate area (city/barangay-level pin); families see the helper's approximate area. Exact location is only revealed after both parties choose to connect.

3.6 Chat and message content

The App allows Users to communicate directly with each other through in-app messaging. Pinoyaya stores message history to:

• Allow Users to access past conversations
• Investigate reports of harassment, fraud, or platform abuse
• Comply with lawful requests from authorities

Messages are stored on secure servers and accessed by Pinoyaya staff only when necessary (e.g. abuse reports). Pinoyaya does not actively monitor or read private conversations.

Please do not share sensitive personal information (full home address, bank details, ID numbers, payment credentials) in chat. Always treat in-app messaging as you would any messaging app.

4. How We Use Your Information

We process personal information for the following purposes, on the legal bases described in Section 5:

• Account creation and management: Registering you, verifying your phone via SMS OTP, signing you in, recovering your account
• Identity verification: Confirming your identity before you can post jobs or apply
• Running the marketplace: Matching helpers to jobs near you, showing job listings, ranking profiles, enabling chat
• Payments and subscriptions: Processing your access pass, sending receipts, handling refunds
• Trust and safety: Investigating fraud, abuse, harassment, fake profiles; suspending or removing accounts
• Customer support: Responding to your questions, complaints, and feedback
• Service improvement: Analysing aggregate usage to fix bugs, improve features, build new ones
• Marketing communications: Sending you emails and push notifications about new jobs, app features, and promotions (see Section 8 — you can opt out anytime)
• Legal compliance: Complying with the Data Privacy Act, lawful court orders, NPC directives, and tax/AML laws

5. Legal Basis for Processing

Under the Data Privacy Act, we process your personal information on one or more of these bases:

• Your consent, which you give when you create an account, agree to this policy, and accept specific permissions (e.g. location, notifications, marketing)
• Performance of a contract with you — to deliver the services you signed up for
• Compliance with a legal obligation under PH law
• Legitimate interests of Pinoyaya — including platform safety, fraud prevention, and improving the App — balanced against your rights and freedoms

You may withdraw consent at any time by contacting our DPO or by changing your settings within the App. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

6. How We Share Your Information

We do not sell your personal information. We share it only in the following limited circumstances.

6.1 With other Users (within the marketplace)

The core function of the App is to connect Users with each other. Therefore:

• Helper Users: your profile (name, photo, skills, experience, ratings, approximate area, reply speed, jobs done) is visible to Family Users with an active access pass.
• Family Users: your job post (description, household details, approximate area, rate) is visible to all Helper Users.
• Once you connect: your in-app messages and any details you choose to share become visible to the other party.

You control what you share. Do not post information you wouldn't want the other side to see.

6.2 With our service providers

We engage vetted third-party service providers ("Personal Information Processors") to help operate the App. Each is bound by a written agreement requiring them to protect your information and use it only for the purposes we instruct. The categories of providers we use include:

• Identity verification providers — to confirm User identity from government-issued IDs
• Payment processors — to handle access pass payments and refunds
• SMS / OTP providers — to deliver one-time verification codes
• Cloud hosting and infrastructure providers — to securely store and serve app data
• Analytics and crash-reporting providers — to measure performance and fix bugs
• App development and technical support partners — to build, maintain, and operate the App

A current list of specific providers is available on request from our DPO.

6.3 With authorities and in legal proceedings

We may disclose your information when required by law, court order, or lawful directive of a Philippine regulator (including the National Privacy Commission, NBI, or PNP), or when necessary to protect the safety of Users or the public.

6.4 In corporate transactions

If Pinoyaya is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you and ensure any successor honours the commitments in this policy.

7. Cross-Border Transfers

Some of our service providers process data outside the Philippines. When we transfer personal information abroad, we ensure:

• The transfer is governed by a written data processing agreement requiring equivalent protections to the Data Privacy Act
• The receiving country offers an adequate level of protection, or appropriate safeguards (e.g. standard contractual clauses) are in place
• Your rights as a data subject remain enforceable

You may contact our DPO for further information about the safeguards used for any specific transfer.

8. Marketing Communications

We will send you marketing emails and push notifications about new jobs, features, promotions, and tips relevant to your role on the App.

You can opt out at any time by:

• Tapping "Unsubscribe" at the bottom of any marketing email
• Turning off marketing notifications in Settings → Notifications within the App
• Emailing our DPO

Opting out of marketing does not stop transactional messages (e.g. verification OTPs, payment receipts, job application notifications, abuse-report responses), which are necessary for the service to function.

9. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy or as required by law.

After the retention period, data is securely deleted or anonymised.

10. Your Rights

Under the Data Privacy Act, you have the following rights regarding your personal information:

• Right to be informed of how your data is collected and used (this policy)
• Right to access — request a copy of the personal data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure or blocking — ask us to delete or block your data (subject to retention obligations in Section 9). You can also delete your account directly from within the App at any time.
• Right to object — object to processing for direct marketing or other purposes
• Right to data portability — receive your data in a structured, commonly-used format
• Right to file a complaint with the National Privacy Commission
• Right to damages for any violation of your rights under the Data Privacy Act

To exercise any right, contact our DPO at support@pinoyaya.com. We will respond within 15 working days of receiving a verified request, or sooner where required.

11. Security

We protect your personal information with appropriate organisational, physical, and technical safeguards, including:

• Encryption of data in transit (TLS 1.2+) and at rest
• Hashed passwords (we never store your plain-text password)
• Role-based access controls — staff and contractors access data only on a need-to-know basis
• Regular security reviews and updates
• Written data processing agreements with all third-party providers
• Incident response procedures and breach notification protocols

In the event of a personal data breach that is likely to cause real risk of serious harm, we will notify the National Privacy Commission and affected Users in line with NPC Circular 16-03 (within 72 hours where applicable).

No system is perfectly secure. You also play a role: choose a strong password, do not share your account, and contact us immediately if you suspect unauthorised access.

12. Children

Pinoyaya is for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it promptly. If you believe a minor is using the App, please contact our DPO.

This restriction applies on both sides of the marketplace — including to anyone applying as a Helper. Family Users may, of course, post jobs that involve caring for minor children in their household, but those children are not Pinoyaya users and we do not collect personal information about them beyond what the Family User shares in a job post (e.g. "1 toddler, 1 newborn").

13. Cookies and Similar Technologies

The App may use cookies, local storage, software development kits (SDKs), and similar technologies to:

• Keep you signed in
• Remember your preferences
• Measure app performance and crashes
• Deliver and measure marketing communications

You can control device-level permissions through your phone's settings (e.g. "Limit Ad Tracking" on iOS, "Reset Advertising ID" on Android).

14. Third-Party Links and Services

The App may contain links to or integrations with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review their own privacy notices before providing them with information.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top
• Notify you in-app or by email at least 30 days before the changes take effect
• Where required by law, request your fresh consent

Continued use of the App after the effective date constitutes acceptance of the updated policy.

16. Contact Us

For privacy-related questions, complaints, or requests to exercise your rights, contact:

Pinoyaya Data Protection Officer
Email: support@pinoyaya.com

For complaints you believe are unresolved, you may also contact:

National Privacy Commission (Philippines)
Website: www.privacy.gov.ph
Email: complaints@privacy.gov.ph