Privacy Policy

Last updated: 14 October 2026 · Status: prototype / early access

Santayo is an early prototype. This page explains in plain language what we collect and why. It is written to follow the Philippines Data Privacy Act of 2012 (Republic Act No. 10173) and Taiwan's Personal Data Protection Act (個人資料保護法). It is not legal advice and may change as the app grows.

1. Who we are

Santayo ("we") is a group food-picking app. The operator's legal name, address and Data Protection Officer will be added here before public launch.
Privacy contact: hello@hoysantayo.com.

2. What we collect

Restaurant owner claims (personal data): when you claim a spot we collect your name, mobile number, your role (owner, manager, etc.), and any menu text, promo, or menu photo you add.
Spots you add: spot name, area, map pin (latitude/longitude), tags, price level, short description and an optional photo. These are shown publicly. Please don't put personal information about other people in them.
Barkada rooms: the display name you type and your swipes. This data lives only in that room and is used to find a match.
Favorites: a random device ID kept in your browser (localStorage) plus the spots you favorited. It is not linked to your name or phone.
Location: if you allow it, your browser shares your approximate location so we can show nearby spots. We use it for that request only and don't save it to your profile. A map pin you add to a spot is saved because it is part of that spot.
Abuse protection: to rate-limit spam we keep a one-way hash of your IP address with a counter. These records expire within about an hour.
Usage counts: totals only (for example "rooms created today"). We don't attach these counts to any person or device.
Technical logs: our hosting provider (Cloudflare) processes request data such as IP address and browser type to run and protect the service.

3. Why we use the mobile number

We use an owner's mobile number only to verify that you really own or manage the spot and to contact you about your claim. We do not show it publicly. We do not sell it, and we do not use it for marketing unless you separately agree. Our legal basis is your consent, which you give when you submit the claim form, plus our legitimate interest in stopping fake claims (PH DPA Sec. 12; Taiwan PDPA Art. 19).

4. Who can see your data

Claims, including mobile numbers, are visible only to Santayo admins through a password-protected admin page.
Service providers: Cloudflare, Inc. hosts the app, database and photos. Its servers may be outside the Philippines and Taiwan, so your data may be transferred abroad. We rely on the provider's security and contract terms for these transfers. Fonts load from Google Fonts, which means your browser connects to Google.
We may disclose data if the law requires it.

5. How long we keep it

Claims (including mobile numbers) are kept while the claim or listing is active. You can ask us to delete them at any time. If a spot is removed, its claims are deleted with it.
Room data is temporary and is cleared after the room goes inactive.
Rate-limit hashes expire within about an hour.

6. Your rights

Under the PH Data Privacy Act you have the right to be informed, to object, to access, to correct, to erase or block, to data portability, to claim damages, and to file a complaint with the National Privacy Commission (privacy.gov.ph). Under Taiwan's PDPA (Art. 3) you may ask to review or get a copy of your data, to correct it, to stop its collection, processing or use, and to delete it. To use any of these rights, contact us at hello@hoysantayo.com. You can clear your favorites any time from inside the app.

7. Security

Data travels over HTTPS. Admin access needs a secret key. IP addresses for rate limiting are stored only as hashes. No system is perfectly secure. If a breach affects your personal data, we will notify you and the authorities as the law requires.

8. Children

Santayo isn't meant for children under 13. Owner claims must be made by adults.

9. Changes

If we make an important change, we'll update this page and the date above.