itakda

Privacy Policy

Effective date: [DATE]

This Privacy Policy explains what personal information itakda (“we”, “us”) collects when you use the service, how we use it, and your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

1. Who we are

itakda is operated by [OWNER NAME]. You can contact us about this policy at [CONTACT EMAIL].

2. What we collect

Account data you give us

  • Your name and email address
  • Your password (stored as a one-way hash — we never see it in plain text)
  • Your timezone
  • Your notification preferences (whether and when to send you push reminders)

Usage data we collect automatically

  • Your IP address and browser user-agent, recorded in session logs
  • Aggregate counts of things you create in the app (projects, events, deliverables, clients) so we can understand how the product is used
  • A timestamp of your last sign-in and last activity

Information you enter about other people

The service lets you store contact details for your clients, vendors, and crew — typically their name, company, email, phone number, and address. You are the data controller for this information; we process it on your behalf under your instructions. You are responsible for having a lawful basis to enter this data and for informing those individuals that their information is stored in itakda.

Push notification endpoints

If you opt in to browser reminders, your browser gives us an endpoint URL we can use to send you notifications. You can revoke this at any time from your browser settings or from your profile.

3. How we use it

  • To provide the service you signed up for
  • To send you transactional emails such as email verification and password reset
  • To send you the reminder notifications you opted into
  • To understand usage patterns in aggregate so we can improve the product
  • To diagnose technical issues and prevent abuse

We do not sell your personal information. We do not use it for advertising.

4. Where your data lives

Data is stored on servers operated by Hetzner Online GmbH. Transactional emails (verification, password reset, reminders) are delivered through [email provider]. These are the only third parties that process your data in the normal course of operating the service.

5. Who we share it with

We share personal data only with:

  • Our hosting provider, which stores the data on our behalf
  • Our email provider, which receives the minimum information needed to deliver an email to you
  • Law enforcement or regulators, if we are legally required to

6. Your rights under the Data Privacy Act

As a data subject under RA 10173 you have the right to:

  • Be informed of what we collect and how it is processed
  • Access a copy of the personal data we hold about you
  • Correct inaccurate information
  • Object to processing, or withdraw consent
  • Request erasure of your data (we will honor this unless we are required to keep it by law)
  • Data portability — receive your data in a machine-readable format
  • Lodge a complaint with the National Privacy Commission at privacy.gov.ph

To exercise any of these rights, email [CONTACT EMAIL]. We will respond within a reasonable period.

7. Retention

  • Account data is kept for as long as your account exists.
  • Records you soft-delete (projects, clients, etc.) remain recoverable for 30 days before being purged.
  • Session and sign-in logs are retained for 30 days.
  • When you delete your account, all associated data is permanently removed within 30 days, except where we are legally required to retain it.

8. Cookies

itakda uses a single session cookie to keep you logged in. This cookie is strictly necessary for the service to function and is not used for tracking or advertising. We do not set any third-party cookies and do not use analytics tools that profile you across sites.

9. Security

We protect your data with HTTPS in transit, hashed passwords, firewalled servers, and scheduled encrypted backups. No system is perfectly secure, but we take reasonable measures appropriate to a service of this scale.

10. Children

itakda is not directed at people under 16. If you believe a child has registered for the service, contact us and we will delete the account.

11. Changes to this policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. For material changes we will also notify registered users by email.

12. Contact

For any question about this policy or your data, email [CONTACT EMAIL].