mypayme.app

Privacy policy

Draft for review — have this reviewed against the Philippine Data Privacy Act of 2012 (RA 10173) before launch.

What we collect

  • Account data: your email address and authentication data.
  • Page content you choose to publish: name, business name, bio, photo, social links, payment-method names, account holder names, account or mobile numbers and QR images.
  • Privacy-safe analytics: page views and interactions (copy, QR view/download) with a daily-rotating, one-way hashed visitor identifier, device type and referring website. We do not store raw IP addresses in analytics, and we never record account details in analytics.
  • Reports: the content of abuse reports and, if provided, the reporter’s email.

How we protect it

  • Account and mobile numbers are encrypted at rest (AES-256-GCM) and only decrypted to show your published page or your own dashboard.
  • Full account numbers are not included in page HTML, link previews or metadata, and payment pages ask search engines not to index them.
  • When you upload a QR, we read its data and store it encrypted. Payers see a QR redrawn from that data, never your uploaded picture, and only while your page is published.
  • Your original QR upload is kept privately for 90 days to help resolve disputes and impersonation reports, then permanently deleted.
  • We compare a keyed fingerprint of QR data across accounts to detect impersonation. The fingerprint can’t be turned back into your account details.
  • All traffic uses HTTPS. Database access is restricted with row-level security.
  • To stop bulk collection, we count how many pages a visitor or network opens details on (using one-way hashes, never raw IP addresses), and may ask for a bot check or refuse unusual volumes.
  • We record security events on your account (for example, changes to payment details) and email you about them.

What we never do

  • We never ask for bank or e-wallet PINs, passwords or OTPs.
  • We never hold, process or transfer your money.
  • We don’t sell personal data.

Your choices

  • Hide, edit or delete any payment method; unpublish your page at any time.
  • Delete your account from Settings — this removes your pages, stored details and uploaded images.
  • Contact support@mypayme.app for access or correction requests.