Data privacy notice

This Data Privacy Notice is issued pursuant to Republic Act No. 10173 (Data Privacy Act of 2012) and its implementing rules. It supplements the RESQ-Link Privacy Policy and provides specific information about our data protection commitments for users in the Philippines.

Personal Information Controller (PIC): RESQ-Link Program / City of Tuguegarao emergency-response initiative, operated in coordination with St. Paul University Philippines Institutional Innovations.

Data Protection contact: [email protected]

• Identity and contact data (name, address, phone, email);
• Sensitive personal information: government ID type and ID photograph submitted for KYC verification;
• Location data related to registration and emergency reporting;
• Incident report content (descriptions, photos, timestamps);
• Authentication and security logs.

Personal data is processed to:

• Register and authenticate civilian users;
• Verify identity before granting access to reporting features;
• Coordinate emergency response with authorized dispatch and responder personnel;
• Maintain audit trails for public-safety operations;
• Secure the platform against fraud, abuse, and unauthorized access;
• Comply with legal and regulatory obligations.

Photographs of government-issued identification constitute sensitive personal information under the DPA. We collect this data only with your explicit consent at registration, after you are shown this notice and our Privacy Policy. Processing is limited to manual verification by authorized administrators and is not used for unrelated commercial purposes.

Access to ID images is restricted through Firebase Storage security rules and admin role controls. Only personnel with a legitimate operational need may view KYC submissions.

Personal data may be disclosed to:

• Verified emergency responders and dispatch operators handling your reports;
• Cloud infrastructure providers (Google Firebase / Google Cloud) under data processing arrangements;
• Mapping and email service providers (Mapbox, Resend) as necessary to operate the Services;
• Government or law-enforcement agencies when required by valid legal process or to protect vital interests.

We retain personal data only for as long as necessary to fulfill the purposes above, unless a longer retention period is required by law or legitimate public-safety record-keeping requirements. KYC documents are retained for verification and audit purposes and reviewed periodically for deletion when no longer required.

Under the DPA, you have the right to:

• Be informed of the existence and scope of processing;
• Reasonable access to your personal data;
• Dispute the accuracy and request correction;
• Suspend, withdraw, or order blocking, removal, or destruction of data in appropriate cases;
• Data portability where applicable;
• File a complaint with the National Privacy Commission.

Submit requests to [email protected]. We may verify your identity before acting on a request.

We implement organizational, physical, and technical safeguards appropriate to the nature of emergency-response data, including access controls, encrypted connections, authenticated admin access, and Firebase security rules.

KYC approval is performed through human review by authorized administrators. We do not make fully automated decisions that produce legal or similarly significant effects without human oversight.

For transparency with mobile app users and app store reviewers, RESQ-Link collects the following categories of data linked to your identity:

• Contact info — name, email, phone, address;
• Identifiers — user ID, device identifiers in logs;
• Location — precise location when reporting or using location features;
• User content — emergency reports, photos, government ID image;
• Photos or videos — ID and incident images you upload;
• Usage / diagnostics — crash and performance data for app stability.

Purposes: app functionality, account management, fraud prevention / KYC, and product analytics limited to reliability. Data is not sold. See our Privacy Policy for full details.

Privacy inquiries: [email protected]

National Privacy Commission: privacy.gov.ph