Draft, pending legal review. Not yet in force.
Privacy Policy
In short: we collect what you put into Haligi to run it for you. Your build is private unless you share it. We don't sell your data, show ads or track you across other apps. You can ask us for a copy of your data or to delete it at any time.
Who we are
Haligi is an app and website for tracking a house build. It is operated by Haligi of Metro Manila, Philippines ("Haligi", "we", "us"). We are the personal information controller for the data described here, under Republic Act No. 10173, the Data Privacy Act of 2012, and its implementing rules.
What we collect
We collect only what the app needs to work, and mostly what you choose to enter.
| What | Examples | When |
|---|---|---|
| Account details | Your name, mobile number, a password (stored only in scrambled, hashed form), and the type of account you made | When you sign up |
| Your project | The project's name, location, size, budget, stages, and the dates it started and finished | When you set up and update a project |
| Purchases and expenses | Materials bought, quantities, prices, stores, dates, and other costs such as labor and permits | When you or a member of your project records them |
| Photos and notes | Progress photos, notes on updates, photos of the finished house | When you post them |
| Project members | The name and mobile number of people you add, such as a manager or foreman | When you add them |
| Location | Your phone's location, used once to pin the project's place | Only if you tap to use it, and only if you allow it |
| Verification | A photo of a government ID and a selfie, the type of ID, and our decision. For professionals: licence numbers and photos of licences or certificates | Only if you choose to verify your account |
| Professional profile | Years of experience, areas served, a short bio, past-work photos, and your public link name | If you sign up as a professional |
| Technical data | Sign-in tokens and basic request logs from our servers, such as the time and the address a request came from | When you use the app |
Before a photo leaves your phone, Haligi removes the GPS location that phones save inside photos. We do not collect contacts, browsing history or advertising identifiers, and the app has no ads or third-party analytics.
How we use it
- To run your account and your projects: showing your budget, purchases, stages and updates to you and to the members you add
- To show the pages you choose to share, and the portfolio of a professional who makes one
- To verify identities and professional licences when someone asks us to
- To keep Haligi secure: preventing abuse, fraud and unauthorised access
- To contact you about your account, such as a verification result or a change to these terms
- To understand how Haligi is used, using totals and counts rather than any one person's data, so we can improve it
We do not use your data for advertising, and we do not sell it or rent it to anyone.
Why we're allowed to
- To provide the service you signed up for. Most processing is needed to run Haligi for you under our Terms of Service.
- Your consent, which you give when you sign up, and separately when you allow location or choose to verify your account. You can withdraw consent at any time; some features stop working without it.
- Our legitimate interests in keeping Haligi secure and working well, weighed against your rights.
- Legal obligations, when a law or a lawful order requires us to keep or disclose information.
Government ID photos are sensitive personal information. We process them only with your consent and only to verify you.
Who sees it
- You see everything on your projects.
- People you add to a project see what their role allows. A manager sees the budget and purchases; a foreman sees the stages and updates, not the money.
- Anyone with the link, if you share a project by link, or anyone at all if you make it public. Shared pages show the project's town and province, never the street address, and you can hide the amounts. You can make a project private again at any time.
- Professionals you credit see the project they're credited on once they accept, and it can appear on their public portfolio if the project is public.
- Our staff, only as needed to support you, review verifications, or keep the service secure.
- Service providers who run parts of Haligi for us (below), and authorities when the law requires it.
Service providers
These companies process data on our behalf, under contracts that bind them to protect it and use it only for us:
| Provider | What they do | Where |
|---|---|---|
| Fly.io | Runs Haligi's servers | Singapore |
| Neon | Hosts the database | Singapore |
| Cloudflare | Stores photos and files, and serves this website | Global network |
| Expo | Delivers the app and the web version | United States |
If we add a provider, such as one that sends verification text messages, we'll update this list.
Data kept abroad
Our servers and storage are outside the Philippines, mainly in Singapore. When we transfer data abroad, we remain responsible for it under the Data Privacy Act, and we use providers that protect it to a comparable standard.
How long we keep it
- Your account and projects: for as long as your account is open. When you delete your account, we delete them within 30 days.
- Photos are deleted when you remove them, or with your account.
- ID photos and selfies: deleted 90 days after we decide on the verification. We keep the result (verified or not, and when), not the photos.
- Backups roll over and are gone within 30 days of the data being deleted.
- Server logs: up to 30 days.
- We may keep specific records longer when a law, a dispute or a lawful order requires it, and only for as long as it does.
Keeping it safe
Data travels encrypted between your phone and our servers. Passwords are stored hashed, never as they're typed. Photos are private files that open only through short-lived links, except the ones on pages you choose to share. Access to data inside Haligi is limited to the people who need it. No system is perfectly secure: if a breach affects your personal data, we will notify you and the National Privacy Commission as the law requires.
Your rights
Under the Data Privacy Act you have the right to:
- Be informed about how your data is processed, which is what this policy is for
- Access your data and get a copy of it
- Correct data that's wrong. Most of it you can edit in the app yourself
- Object to processing, and withdraw consent
- Erasure or blocking, including deleting your account: see Delete your account
- Data portability: receive your data in a format you can take elsewhere
- Damages, if you're harmed by inaccurate, unlawfully obtained or misused data
- File a complaint with the National Privacy Commission at privacy.gov.ph
To use any of these, email us at hello@example.com from the email you'd like us to reply to, and tell us the mobile number on your account. We'll answer within 15 working days, and may ask you to confirm it's you first.
Children
Haligi is for adults. You must be 18 or older to make an account. If we learn that a child has made one, we will delete it.
Changes to this policy
When we change this policy, we'll update the date at the top. If a change affects how we use data you've already given us, we'll tell you in the app before it takes effect, and ask you to agree again where the law requires.
Contact us
Questions, requests or complaints about your data go to our Data Protection Officer:
Haligi
Metro Manila, Philippines
hello@example.com