Privacy Policy

1.Introduction

MyApp Studio ("we," "our," or "us") is a custom mobile application development platform based in the Philippines, operating at https://myappstudio.site. We work with businesses and entrepreneurs who want to build mobile applications by submitting project requirements through our intake system, then tracking development progress through our client portal.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have over your data. It applies to:

• Prospective clients who submit an intake or inquiry form on our website
• Active clients who access the MyApp Studio client portal
• Internal staff members (developers, sales managers, and technicians) who use our internal dashboards
• Anyone who communicates with us by email or through our platform

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

2.Information We Collect

We collect only the information that is necessary to deliver our services and communicate with you effectively.

Intake form data. When you submit a project inquiry or onboarding request, we collect your business name, primary contact name, email address, phone number, industry or business category, logo file, preferred brand colors, and a description of the features or functionality you want in your app. This information is used to scope your project and prepare a proposal.

Account and authentication data. When a client or staff member creates an account, we collect an email address and a password. Passwords are never stored in plain text — they are hashed using Supabase Auth before being written to the database. We do not have access to your raw password at any point.

Project and usage data. As your project progresses, we record milestones, deliverables, status updates, uploaded assets, and communication threads associated with your project. This allows you and our team to track progress through the client portal. We may also collect basic usage logs such as login timestamps and session metadata for security and support purposes.

Payment information. Payments are processed through PayMongo, a Philippine-licensed payment gateway. MyApp Studio does not collect, store, or transmit credit card numbers, debit card numbers, or banking credentials. When you make a payment, you are interacting directly with PayMongo's secure payment interface. We receive a transaction reference and status confirmation only.

Communications. If you contact us by email, through a contact form, or via any other channel, we retain those communications in order to respond to your inquiry and maintain an accurate record of our working relationship.

3.How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery. To create and manage your project, assign the right team members, track deliverables, and fulfill the scope of work agreed upon in your contract.
• Client communication. To send you project updates, milestone notifications, invoice reminders, and responses to your support requests. Transactional emails are sent through Resend.
• Payment processing. To initiate and record payment transactions for development services via PayMongo.
• Account management. To authenticate you securely when you log in to the client portal or internal dashboard, and to manage access permissions across our platform.
• Platform improvement. To understand how clients and staff use our platform, identify friction points, and make improvements to our workflows and tools.
• Legal and contractual obligations. To comply with applicable Philippine laws, including the Data Privacy Act of 2012, and to enforce our service agreements where necessary.

We do not sell your personal information to third parties. We do not use your data for behavioral advertising or share it with data brokers.

4.Third-Party Services

MyApp Studio relies on the following third-party service providers to operate our platform. Each acts as a data processor under our instructions and is bound by their own data processing agreements and privacy commitments.

We do not use any additional analytics trackers, advertising networks, or social media pixels on our platform.

5.Data Storage and Security

All data submitted to MyApp Studio is stored in Supabase-managed databases. We implement the following safeguards to protect your information:

• Encryption in transit. All communication between your browser or device and our platform is encrypted using TLS (Transport Layer Security). Connections over plain HTTP are not accepted.
• Encryption at rest. Supabase encrypts stored data at rest by default at the infrastructure level.
• Row Level Security (RLS). Every database table that holds client or staff data is protected by Supabase Row Level Security policies. These policies enforce at the database level that a user can only read or modify records they are explicitly authorized to access. Authorization is not handled solely at the application layer.
• Hashed passwords. Passwords are never stored in recoverable form. Supabase Auth hashes passwords using bcrypt before persisting them.
• Access controls. Internal dashboard access is role-based. Staff members are provisioned with only the permissions required for their role (developer, sales manager, or technician).
• No sensitive data in browser storage. We do not use localStorage or sessionStorage as a primary database for personal or project data. Sensitive state is derived from authenticated server sessions.

While we take reasonable technical and organizational measures to protect your data, no system connected to the internet is completely immune to unauthorized access. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and the National Privacy Commission (NPC) in accordance with RA 10173 and NPC Circular 16-03.

6.Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy or to comply with our legal obligations.

• Active clients. Project data, account information, and associated records are retained for the duration of the active contract and for a reasonable period afterward for warranty, support, and legal reference purposes. Typically this is one year after the final project delivery.
• Leads and inquiries. Information submitted through our intake form by prospective clients who do not proceed to a signed contract is retained for up to two years. This allows us to resume a conversation if a lead re-engages, and to improve our intake and sales process.
• Staff accounts. Internal user accounts for developers, managers, and technicians are retained for the duration of employment or contract engagement and deactivated promptly upon separation.
• Payment records. Transaction references and payment status records may be retained for up to seven years to satisfy Philippine tax and accounting obligations.

You may request the deletion of your personal data at any time (see Section 7 below). We will process erasure requests within a reasonable timeframe, subject to any legal or contractual obligations that require us to retain certain records.

7.Your Rights Under the Philippine Data Privacy Act

Republic Act 10173, the Data Privacy Act of 2012, grants you the following rights as a data subject. These rights apply to personal information we hold about you.

To exercise any of these rights, contact our Data Privacy Officer at hello@myappstudio.site. We will acknowledge your request within 72 hours and respond substantively within 15 business days. If you are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission at www.privacy.gov.ph.

8.Children's Privacy

MyApp Studio's services are directed exclusively at businesses and professionals. We do not knowingly provide services to, or collect personal information from, individuals under the age of 18.

If you believe that a person under 18 has submitted personal information to us, please contact us immediately at hello@myappstudio.site and we will take prompt steps to remove that information from our systems.

9.Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, the third-party tools we use, or applicable law. When we make a material change, we will update the "Last updated" date at the top of this page and, where appropriate, notify active clients by email.

We encourage you to review this page periodically. Continued use of our platform after a policy update constitutes your acknowledgment of the revised terms. If you disagree with any changes, you may request deletion of your account by contacting us.

10.Contact

If you have questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please reach out to our Data Privacy Officer. We take data privacy seriously and will do our best to address your concern promptly.