Privacy notice

We protect your personal information under the Data Privacy Act of 2012 (RA 10173).

What information we collect

• Payment: the board exam you chose, the app you paid with (e.g. GCash, Maya or a bank app), the reference number, the name on the account you paid from, the mobile number or Messenger you gave us, and the screenshot of the receipt.
• Access code: the code you log in with. We store its hash, not the code itself, so we can't give it back if you lose it. If we make you a new code, we keep it temporarily until you first use it, so we can give it to you. If you log in with its QR, the camera image or screenshot is read on your device and never sent to us.
• Device: for the one-device-per-code limit: a random device ID saved in a cookie in your browser, the type of browser and device (e.g. "Chrome · Android"), and when it was first and last used.
• Membership: when your access started and when it ends.
• Protection against abuse: the number of login and payment attempts, using a hashed IP address, deleted after one day.

Your review progress (the lessons you marked as reviewed) stays in your browser and is never sent to us.

Why we need it

To check that we received your payment before giving access, to give you and replace your access code, to enforce the one-device-per-code limit, and to contact you about your payment or code. We don't sell it or use it for anything else.

Where it is stored

In Supabase (the database and receipts) and Cloudflare (the website), services we use to run Cedar. Their servers may be outside the Philippines. Receipts are in private storage that only the admin can see.

How long we keep it

We keep payment and device information for up to one year after your last membership ends, for questions about payments. After that, or when you ask, we delete it unless the law requires us to keep it.

Your rights

Under RA 10173, you have the right to be informed about how your information is used, to access it, to correct it if it's wrong, to object, to have it erased or blocked, to get a copy, to claim damages, and to file a complaint with the National Privacy Commission.

For any of these, message us on Messenger.