Privacy notice

Who is responsible

Mang Frito, owned by Nelson Lago Jr in Iloilo City, decides what the app collects and is responsible for it. The owner also handles privacy questions and requests (see Contact below).

What we keep

• Your account: name, phone number, role (worker, admin or owner), whether the account is active, and your password — stored only in scrambled (hashed) form, so no one can read it.
• Your work records: trips, pickups, sales, recounts and expenses you record, with the time each was made and when it reached the office, plus a log of these actions.
• Checks by the owner or admins: who marked a problem as checked, when, and their note.
• Buyers and plantations: the names, locations and notes the business saves about them.

The app doesn't use your location, camera, contacts or advertising trackers. The owner's QR screenshots are read in the browser and only the text inside the QR is saved.

On your phone

So you can work without signal, your records, the buyer and plantation lists, the price and the payment QR codes are kept on the phone until they are sent. Login cookies keep you signed in; they can't be read by other websites. Logging out clears the saved pages; records that haven't been sent yet stay on the phone so they aren't lost.

Why we keep it

• To run the business: trips, stock, sales, receipts and pay-outs.
• To check the records are right (recounts, price changes, sales after a trip ended).
• To give you an account and keep it secure.

We rely on your work arrangement with Mang Frito and the business's legitimate need to keep accurate records.

Who can see it

The owner and admins. Workers see their own trips only. The app runs on a hosting service whose servers are in Singapore; it stores the data for us and doesn't use it for anything else. We don't sell or share your information, except when the law requires it.

How long

Account details are kept while you work with Mang Frito. Sales and trip records are business records and are kept as long as the business needs them for its books and as the law requires. A deactivated account can't log in, but its past records stay.

Your rights

Under the Data Privacy Act you can ask to:

• know what information we have about you and see a copy;
• have wrong information corrected;
• object to, or have removed, information that isn't needed anymore (business records the law requires us to keep may stay);
• complain to the National Privacy Commission if you think your data was mishandled.

Contact the owner and we'll answer as soon as we can.

Keeping it safe

Connections are encrypted, passwords are hashed, each person only sees what their role allows, and accounts can be deactivated at once. Please keep your password to yourself and log out on shared phones.

Changes

If this notice changes, the date at the top changes too. Big changes will be told to staff directly.

Contact