1. What this app is
A free public tool that estimates drinking-water access and disaster impacts from public, aggregate data (census tables, official poverty statistics, public hazard feeds). It exists to help Filipino communities, responders, and agencies — not to monetize anyone. We do not sell data, run ads, or profile users. Ever.
2. What we collect today
- No accounts, no names, no personal profiles. You can use everything anonymously.
- Standard server logs. Our hosting (Google Firebase/Cloud Run) records ordinary technical logs (IP, time, URL) for security and reliability only.
- No analytics trackers and no advertising scripts.
3. The verification ledger (operational, not personal)
Pilot response partners may log field verifications — "we called; stations in this municipality are operating." These records contain municipality-level operational status only (area, status, source type, short note, timestamp). They are append-only, write-protected by a pilot token, rate-limited, free of personal data by design, and statuses older than 72 hours are flagged stale and treated as unknown.
4. Phase 2 — station enrollment (not yet active)
When water-refilling-station enrollment launches, and only with the owner's consent, we will collect station name, location, contact channel, capacity bracket, and emergency status. In advance we commit to: specific and revocable consent (RA 10173); purpose limitation (connecting stations with responders and buyers in emergencies — never sold, never marketing); contacts visible only to vetted response partners, never published openly; deletion within 30 days of an owner's request; and no collection of any station contact data before these systems are live.
5. Security
HTTPS everywhere; an explicit browser origin allowlist; token-gated and rate-limited write endpoints; append-only audit records; least-privilege cloud service accounts. If a breach affecting personal data ever occurs, we will notify affected people and the National Privacy Commission as RA 10173 requires.
6. Third-party services
Google Firebase Hosting / Cloud Run (processing in the US); map tiles from OpenStreetMap; public hazard feeds (GDACS, JTWC). A Philippine-hosted deployment is a stated project goal; this section will be updated when it lands.
7. Children
The app is an informational map suitable for general audiences and collects no personal information from anyone, including children.
8. Changes
Material changes are posted here with a new version and date. The canonical copy lives in the project
repository (PRIVACY.md).