🌿 The short version: Alaga collects only what it needs to help you care for your loved ones. We never sell your data. We never use your health information for advertising. You are always in control of your data. This policy explains everything in plain language.
1. Who We Are
Alaga is a personal caregiving app developed by Bootstrap Dojo, Philippines. We help Filipino families and caregivers track medications, vital signs, appointments, and health records for their loved ones.
For any privacy concerns, you can reach us at: hello@alaga.app
2. What Information We Collect
We collect only what is necessary to provide the Alaga service:
- Account information: Your name, email address, and encrypted password when you create an account
- Patient information: The name of the person you are caring for
- Health data: Vital signs, medications, appointments, lab results, symptoms, caregiver notes, and contact information that you choose to enter into the app
- Communication preference: Whether you opted in to receive updates and news from Alaga
- Technical data: Basic usage data to help us improve the app (no personally identifiable information)
3. How We Use Your Information
- To provide, sync, and improve the Alaga app across your devices
- To send you app updates, tips, and news about Alaga — only if you opted in
- To send important account-related emails (such as email verification and password reset)
- To respond to your support requests and feedback
- To improve the app based on anonymized, aggregated usage patterns
🔒 We never sell your data. We never share your health data with advertisers, third-party marketers, or data brokers — ever. Your health information is never used for advertising targeting of any kind.
4. How We Store and Protect Your Data
Your data is stored securely using Supabase, a trusted open-source cloud platform built on PostgreSQL. Supabase protects your data with:
- Industry-standard encryption in transit (HTTPS/TLS)
- Secure authentication via Supabase Auth
- SOC 2 compliant infrastructure hosted on AWS
- Data stored in the Asia Southeast region (closest to the Philippines)
Your password is never stored in plain text — Supabase handles all password security using industry best practices.
5. Your Rights and Choices
You have full control over your data at all times:
- Access: You can view all your data inside the app at any time
- Edit: You can update your account information and health records at any time
- Export: You can download all your health records as a JSON or CSV backup file using the Export feature in the Report tab
- Delete: You can permanently delete your account and all associated data directly inside the app — open the profile panel (click your profile avatar — the circle with your initial in the top-right corner), scroll to the bottom, and click 🗑️ Delete My Account. Alternatively, email us at hello@alaga.app and we will handle it for you
- Unsubscribe: You can opt out of marketing emails at any time by contacting us
6. Philippine Data Privacy Act Compliance
Alaga complies with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines. As a data subject under Philippine law, you have the right to:
- Right to be Informed — to know how your data is being collected and used
- Right to Object — to object to the processing of your personal data
- Right to Access — to access your personal data held by us
- Right to Rectification — to correct inaccurate personal data
- Right to Erasure — to have your personal data deleted
- Right to Data Portability — to receive your data in a usable format
To exercise any of these rights, please contact us at hello@alaga.app and we will respond within 15 business days.
7. International Users (GDPR)
If you are located in the European Union or European Economic Area (for example, OFWs living and working in Europe), you are also protected by the General Data Protection Regulation (GDPR). We process your data based on your consent given at the time of account creation. You have the right to withdraw consent at any time by contacting us.
8. Data Sharing
We do not sell, trade, or transfer your personal data to outside parties except:
- Supabase — our cloud infrastructure provider, used solely for app functionality
- Legal requirements — if required by law or to protect the rights, property, or safety of our users
No health data is ever shared with insurance companies, pharmaceutical companies, healthcare providers, or any other third party without your explicit consent.
9. Children's Privacy
Alaga is not intended for use by children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us at hello@alaga.app and we will delete the account promptly.
10. Cookies and Tracking
Alaga uses minimal browser storage (localStorage) to remember your login session and preferences on your device. We do not use advertising cookies, tracking pixels, or third-party analytics that identify you personally.
11. Changes to This Policy
We may update this Privacy Policy as Alaga grows and evolves. When we make significant changes, we will notify you via email (if you have opted in to communications) and update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
12. Beta Program Notice
You are currently using a beta version of Alaga. While we take data protection seriously at every stage, please be aware that features and policies may evolve during the beta period. We will always communicate material changes.