Barangay Quests
Privacy Policy
This policy describes personal information handled through the Barangay Quests mobile app and LGU dashboard.
DRAFT — for review and approval by the LGU Data Protection Officer before release. The participating LGU must confirm its privacy contact, controller responsibilities, retention schedule, and final wording before relying on this as its approved policy.
Who is responsible
Barangay Quests is an independent app. It is not a government app and is not affiliated with, endorsed by or acting for any government entity. A local government unit (LGU) that uses Barangay Quests to run community activities and receive reports is expected to act as the personal information controller for that data under the Data Privacy Act of 2012 (Republic Act No. 10173). The exact roles will be confirmed before launch.
What we collect
Your email address (for signing in), a display name, your selected barangay, your language and notification choices, the quests you join and complete, your quiz or survey answers, XP and badges, and community reports you submit. Reports may include a photo and an approximate location only if you choose to add them. If you turn on phone notifications, we store a device token.
What we do not collect
We do not ask for your phone number, home address, government ID or health information. We do not track your location: location is read once, only when you add it to a report or check in to an event, and only an approximate position or a yes/no geofence result is kept.
Why we use it
To run community quests and events, verify participation, award XP and badges once, review and act on community reports, send the notifications you opt in to, prevent abuse, and produce aggregate (non-identifying) statistics for the LGU.
Who can see your information
Your reports, photos and answers are visible only to you and to authorized LGU staff within their assigned barangay or department. Event organizers see only the names and attendance of people in their events. Leaderboards show your display name, a nickname, or nothing at all — you choose in Settings. Staff actions are recorded in an audit log.
How long we keep it
Draft schedule: read notifications are deleted after 180 days (all notifications after 1 year), check-in attempt logs after 1 year, expired check-in codes after 30 days, and audit logs after 5 years. Reports and participation records are kept according to the LGU records policy, to be confirmed.
Your rights
You may ask to access, correct or delete your data, object to or limit its use, and file a complaint with the National Privacy Commission (privacy.gov.ph). Use Settings › Privacy & data to send a request. Requests are handled by the LGU and recorded.
Children
Some quests are for youth. Minors should use the app with a parent or guardian’s guidance. We keep minors’ data to the minimum and never allow private messaging.
Security
Data is protected with access controls enforced by the database, encrypted connections, private photo storage with short-lived links, and encrypted session storage on your device.
Contact and privacy requests
Contact the participating LGU privacy office at alexpolo01@gmail.com. You may also submit an access, correction, or deletion request in the app under Profile → Privacy & data.