Last updated: 2025-09-20
1. Overview
This Privacy Policy explains how Rebyu ('we', 'us') collects, uses, and protects personal data across our website, web app, and mobile app (collectively, the 'Services'). We comply with applicable laws, including the Data Privacy Act of 2012 (Philippines), where applicable.
2. Data We Collect
(a) Account Data (optional): name, email, password hash.
(b) Study Data: exam attempts, answers, bookmarks, analytics, progress, scores.
(c) Device/Usage Data: IP address, device type, browser, app version, pages viewed, crash logs, cookies or similar technologies.
(d) Offline Content: materials you download; sync metadata when online.
(e) Support Data: messages, feedback, and issue reports.
3. How We Use Data
(a) Provide and improve the Services (mock exams, analytics, recommendations).
(b) Personalize content and study plans (e.g., GabAI suggestions).
(c) Maintain security, prevent fraud, and fix bugs.
(d) Communicate updates, changes, and marketing (with your consent where required).
4. AI Features
GabAI may process prompts and context you provide to generate assistance. We apply retention and access controls to protect such data. Do not share sensitive personal data in prompts.
5. Legal Bases
We process data to perform a contract (providing the Services), with your consent (e.g., marketing), to comply with law, and for our legitimate interests (e.g., service improvement, security).
6. Sharing
We may share data with:
(a) Service providers (hosting, analytics, crash reporting, AI processing) under appropriate data protection terms;
(b) Authorities where required by law; and
(c) In mergers/acquisitions, subject to continued protection of data.
We do not sell personal data.
7. International Transfers
When transferring data internationally, we use safeguards such as contractual clauses and technical protections.
8. Data Retention
We retain data only as long as necessary for the purposes above, then securely delete or anonymize it. You may request deletion of your account data.
9. Your Rights
Subject to law, you may request access, correction, deletion, portability, or restriction of your personal data, and object to certain processing. You may withdraw consent at any time without affecting prior lawful processing.
10. Security
We use administrative, technical, and physical safeguards, including encryption in transit, least-privilege access, and audit logging. No method is 100% secure; report issues via support@example.com.
11. Cookies and Similar Technologies
We use cookies for authentication, preferences, analytics, and performance. You can control cookies via browser settings; some features may not work without them.
12. Children
Our Services are not directed to children under the legal age of consent. Where applicable, we obtain parental/guardian consent per law.
13. Third-Party Links
We are not responsible for the privacy practices of third-party sites or services linked from our Services.
14. Changes
We may update this Policy. Material changes will be communicated via the Services or email.
15. Contact
For privacy requests or questions, email privacy@example.com. You may also contact the National Privacy Commission (PH) for concerns.