OinkOinkApp Privacy Policy

Version: 2026-09-12 · Effective for every account created on or after this date.

1. Who we are

OinkOinkApp ("we," "us," "the Platform") operates a mobile marketplace connecting hog farmers ("Farmers") with haulers ("Byaheros") in the Philippines. We are the Personal Information Controller for the data described below.

Registered business name: [LEGAL ENTITY NAME]
Business address: [REGISTERED ADDRESS]
Data Protection Officer contact: [DPO NAME AND EMAIL]
General support contact: available in-app under Profile → Contact Support

2. What we collect

Category	Examples	Collected when
Identity & contact	Full name, phone number	Registration
Account credentials	Password (stored only as a salted hash - we never see or store your actual password)	Registration
Location	Farm pickup location (Farmers); live position while on duty (Byaheros)	Setting a pickup location; while on duty
Farm & listing details	Farm address, pig class/count/weight/price, pig photos	Creating a listing/booking
Transaction data	Booking history, actual weights/prices recorded at pickup, wallet balance and transaction history, commission receipts	Using the booking, wallet, and cash-out features
Communications	In-app chat messages between a Farmer and Byahero on a booking	Using in-app chat
Verification	One-time SMS verification codes (not retained beyond verification)	Phone verification
Ratings	Star ratings and comments about the other party on a completed booking	After a booking completes
Device & security	Push-notification device token; IP address and basic request metadata for rate-limiting, fraud prevention, and security logs	App usage

We do not collect sensitive personal information (health, religion, sexual life, political affiliation, criminal records) as defined by RA 10173, except that precise geolocation and financial transaction data are handled with the same heightened care.

3. Why we process your data, and on what legal basis

To provide the service you asked for (contract necessity): matching Farmers with Byaheros, processing bookings, computing prices and commissions, running the wallet and cash-out system, and letting the two parties communicate about a shared booking.
With your consent: you actively agree to this Policy when you create an account (see the acceptance record on your account).
To meet a legal obligation: we keep a price-transaction audit trail (raw seller/buyer price inputs and a live PSA reference snapshot) to demonstrate compliance with RA 12022 (the Anti-Agricultural Economic Sabotage Act) - this record proves the Platform never fixes, blocks, or penalizes either side's pricing. We also retain transaction and payment records as required for tax and financial recordkeeping (BIR regulations).
Legitimate interest: security logging, rate-limiting, and fraud/abuse prevention (for example, detecting a suspicious pattern of cancellations or mismatched pickup figures) are necessary to keep the Platform usable and safe for everyone, and are proportionate to that goal.

We never sell your personal data.

We share the minimum data necessary with the following processors, each engaged to provide a specific part of the service:

PayMongo — processes wallet top-up payments (GCash, Maya, card, QRPh). We do not store your card or e-wallet credentials ourselves.
Semaphore — delivers SMS one-time verification codes to your phone number.
Mapbox — provides map tiles and driving-route calculations; your pickup/destination coordinates are sent to compute a route, not your identity.
Cloud storage provider — hosts uploaded photos and transport documents (where the storage feature is active).
The other party on a booking — a Farmer and the Byahero matched to their booking necessarily see each other's name, phone number (while the booking is active), approximate/precise pickup location, and any chat messages exchanged for that booking.
Government authorities — when legally required (for example, a lawful order, or a BAI/regulatory inquiry into a specific transaction).

We require each processor to handle your data securely and only for the purpose we've engaged them for. [Confirm/attach data-sharing or data-processing agreements with each named processor.]

5. How long we keep your data

We keep account and transaction data for as long as your account is active, and afterward for as long as needed to meet a legal obligation (tax records, the RA 12022 audit trail, dispute resolution) — see Section 7 on what happens when you delete your account.

6. Your rights under the Data Privacy Act

You have the right to:

Be informed — this Policy is that notice.
Access your personal data — request a copy via Profile → Download my data.
Object to processing, and withdraw consent where processing is based on consent (this may mean we can no longer provide the service to you).
Correct inaccurate data — update your profile in-app, or contact support for data we don't expose an edit screen for.
Erase or block your data — request account deletion via Profile → Delete my account. See Section 7 for exactly what this does.
Data portability — the same data-export feature above is provided in a structured, machine-readable (JSON) format.
Damages for violations of your rights under the Act, and to file a complaint with the National Privacy Commission (privacy.gov.ph) if you believe we have mishandled your data.

7. What "delete my account" actually does

Because OinkOinkApp is a financial marketplace, we cannot simply erase every row that mentions you — booking records, commission receipts, and the RA 12022 price-audit trail must legally survive for recordkeeping and dispute resolution, and other users' own booking history references shared transactions with you. Instead, deleting your account:

Immediately and permanently replaces your name, phone number, farm address, and saved location with anonymized placeholders.
Ends all active sessions and signs you out everywhere.
Removes your device from push notifications.
Keeps your transaction history, ratings, and audit records, but no longer tied to your real identity.

You cannot delete your account while a booking is in progress (PENDING, ACCEPTED, or IN_TRANSIT) or while your wallet carries a nonzero balance — finish or cancel the booking, and cash out or settle your balance, first.

Messages you sent in booking chat remain visible to the other party as part of that booking's record, since we cannot retroactively remove content from a shared conversation without affecting the other party's own record of it.

8. Security measures

We protect your data with encrypted network transport, salted password hashing, short-lived access tokens with rotating refresh tokens, rate limiting against abuse, and restricted, audited administrator access. Precise pickup coordinates are not shown to a Byahero until they accept a booking.

9. Children

OinkOinkApp is intended for adults operating a farming or hauling business. We do not knowingly collect data from minors.

10. Changes to this Policy

We will update the version date above when this Policy changes materially, and will ask you to review and re-accept it in-app when that happens.

11. Contact us

Questions or requests about your personal data: [DPO EMAIL], or through Profile → Contact Support in either app.