Privacy Policy

BaligyAklan (“we”) operates a peer-to-peer marketplace for Aklan, Philippines. This policy explains what personal information we collect, why, and who can see it. We aim to collect the minimum needed to run a safe marketplace.

When you create an account or use the Service we collect:

• Account info: name, email, password (hashed), phone number (optional at signup), and your home municipality.
• ID verification: if you submit ID for verification, we store the document for review. Once verified, the document image may be retained for fraud prevention.
• Listings: photos, descriptions, prices, categories, and location of items you list.
• Deals & messages: the chat history between you and the other party, offers, meetup time and place, confirmations, and outcomes.
• Ratings: star ratings and optional comments you leave after a deal.
• Technical data: session cookies, basic device info (browser type, screen size), and request logs for security/abuse prevention.

• To authenticate you and keep your session secure.
• To show your listings to potential buyers, and match you with relevant deals.
• To enable safe meetups — only revealing phone numbers after both parties confirm a meetup.
• To compute and display your buyer/seller rating averages.
• To moderate content, investigate reports, and prevent fraud.
• To send essential transactional emails (signup confirmation, password reset). We do not send marketing emails without your consent.

• Your first name, profile photo (if uploaded), home municipality, ID verification status, and rating averages are visible to other users.
• Your email address is never shown to other users.
• Your phone number is only revealed to the other party of an active deal, and only after both parties confirm the meetup.
• Chat messages are visible only to the two participants of a deal and to BaligyAklan moderators when investigating reports.

We use the following processors:

• Supabase — database, authentication, and file storage. Hosted in their cloud infrastructure.
• Vercel — application hosting and CDN.
• Resend — transactional email delivery (signup confirmation, password resets).

These providers process data on our behalf under their own privacy and security commitments. We do not sell your personal information to third parties.

We use first-party cookies to keep you signed in. We do not use tracking cookies for advertising. You can clear cookies in your browser at any time, but you will be signed out.

• Active account data is retained for the lifetime of your account.
• Completed deal records (including messages) are retained for at least 12 months for dispute resolution and fraud prevention.
• If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for an ongoing investigation.

You can request to:

• Access the personal data we hold about you.
• Correct inaccurate data (or update it directly in the app).
• Delete your account and associated data.
• Export your listings and message history.

To exercise these rights, contact us at the email below. We will respond within 30 days.

We protect your data using HTTPS in transit, hashed passwords, row-level security on our database, and least-privilege access for our team. No system is perfectly secure — please choose a strong, unique password and report any suspicious activity to us.

BaligyAklan is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please report it.

We will announce material changes in the app or by email. The “Last updated” date above always reflects the current version.

Questions, requests, or concerns? Email privacy@baligyaklan.app.