Last updated: March 3, 2026
1. Introduction
Welcome to eUgnay ("we," "us," or "our"). eUgnay is a barangay management system designed to help Philippine barangay communities digitize their operations and improve resident engagement. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform, in compliance with the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.
By registering for an account or using our services, you consent to the collection and processing of your personal information as described in this policy.
2. Information We Collect
2.1 Account Registration Information
When you create an account, we collect the following personal information:
- Full name (first name, middle name, last name, and suffix)
- Email address
- Password (stored in encrypted/hashed form)
- Date of birth
- Gender
- Barangay affiliation
- Address (derived from your selected barangay)
2.2 Service Usage Data
When you use our services, we collect information related to your activities, including:
- Document requests — document type, purpose, reference number, request status, and processing fees
- Facility bookings — facility selected, booking date, time, and booking status
- Event participation — events you have joined or expressed interest in
- Feedback submissions — feedback category, message content, and optionally your name, email, phone number, and address
- Reward points and redemptions — points earned, reward items claimed, and redemption status
2.3 Activity Logs
We maintain activity logs that record actions you perform on the platform, including logging in, logging out, submitting document requests, making facility bookings, and redeeming rewards. These logs are used for security monitoring and to provide you with a history of your recent activity.
2.4 Technical Data
We use authentication tokens (via Laravel Sanctum) to maintain your session. We also use browser local storage (via Pinia persisted state) to keep you logged in between visits. We load fonts from Google Fonts, which may collect technical data such as your IP address, browser type, and referring URL as described in Google's Privacy Policy. We do not receive this data from Google.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To create and manage your user account
- To verify your identity and barangay residency
- To process your document requests and facility bookings
- To allow you to participate in barangay events
- To manage the reward points program and process reward redemptions
- To receive and respond to your feedback and complaints
- To send you notifications related to your service requests and community updates
- To maintain activity logs for security and auditing purposes
- To improve our platform and services
4. Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Consent — You provide explicit consent during registration by agreeing to this Privacy Policy before creating your account.
- Contractual necessity — Processing is necessary to provide the services you have requested (e.g., document requests, facility bookings).
- Legitimate interest — We have a legitimate interest in maintaining security logs and improving our services.
- Legal obligation — We may process data to comply with applicable Philippine laws and regulations governing barangay operations.
5. Data Sharing and Disclosure
Your personal information may be shared with:
- Barangay administrators and staff — Officials of your affiliated barangay who manage document requests, events, facilities, feedback, and resident profiles through the admin panel.
- Third-party service providers — We use Google Fonts for typography. No other third-party analytics or tracking services are integrated into the platform.
- Government authorities — When required by law, court order, or other legal processes.
We do not sell, rent, or trade your personal information to third parties.
6. Data Storage and Security
- Your password is stored using one-way hashing (bcrypt) and is never stored in plain text.
- API authentication is handled through token-based authentication (Laravel Sanctum), and tokens are invalidated upon logout.
- Role-based access control ensures that only authorized administrators and staff can access resident data through the admin panel.
- Activity logs track user actions for security monitoring and accountability.
- The system performs periodic backups in accordance with operational requirements to prevent data loss.
While we implement reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
7. Data Retention
We retain your personal information for as long as your account is active. Upon account deletion, your personal profile data will be removed within 30 days, except for document request records, facility booking history, event participation records, and feedback submissions, which are retained as part of barangay operational records in compliance with applicable laws. If you wish to have your data deleted, please contact us (see Section 10).
8. Your Rights
Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:
- Right to be Informed — You have the right to know how your data is being collected and processed.
- Right to Access — You can view your personal information through your profile page.
- Right to Rectification — You can update your profile information at any time.
- Right to Erasure — You may request deletion of your personal data, subject to legal and operational retention requirements.
- Right to Object — You may object to the processing of your personal data under certain circumstances.
- Right to Data Portability — You may request a copy of your personal data in a structured, commonly used format.
- Right to File a Complaint — You may file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.
9. Children's Privacy
Our platform is not intended for use by individuals under the age of 15. We do not knowingly collect personal information from children under 15. If a parent or guardian believes their child's data has been collected without consent, they may contact us to request its deletion (see Section 10).
10. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data privacy rights, or have concerns about how your personal information is being handled, please contact us:
You may also file a complaint with the National Privacy Commission at www.privacy.gov.ph.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any significant changes will be communicated to registered users via email or an in-app notification. All changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
© 2026 eUgnay. All rights reserved.