Privacy Policy

1. Introduction & Legal Framework

This Privacy Policy describes how OnlyFilipinas ("we", "us", or "our") collects, uses, protects, and discloses personal information obtained from members using our mobile application and website at onlyfilipinas.com.

We operate in strict adherence to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), circulars issued by the National Privacy Commission (NPC), and the Google Play Developer Policy on User Data and Data Safety.

2. Eligibility: Strict 18+ Requirement

OnlyFilipinas is strictly intended for individuals who are at least eighteen (18) years of age. We do not knowingly solicit, collect, or process personal data from anyone under the age of 18. If we determine that a registered account belongs to a minor, the account and all associated records are permanently purged immediately.

3. Information We Collect

To provide matching, messaging, and account security, we collect the following categories of data:

A. Information You Provide Directly

• Authentication Information: Full name, email address, and Google account profile identifier when you authenticate via Google Sign-In.
• Profile Data: Display name, date of birth (used strictly to compute age and verify 18+ eligibility), gender identity, and dating preferences.
• Location Information: Island group (Luzon, Visayas, Mindanao), Philippine province, and city/municipality (or international country for overseas members) to display regional hierarchy on candidate profile cards. We do not track continuous GPS coordinates in the background.
• Photos & Media: Up to six (6) profile photographs that you choose to upload to our secure cloud storage.
• Passions & Bio: Bio description (up to 300 characters), selected interest taxonomy chips (e.g., sports, food, travel, vocation, and relationship intentions).
• Direct Messages: 1-on-1 private chat messages and icebreakers exchanged with mutual matches.

B. Information Collected Automatically & Security Attestation

• Device & Integrity Data: We utilize the Google Play Integrity API and Firebase App Check to obtain hardware-attested cryptographic tokens. This confirms that requests originate from a genuine, untampered Android device and blocks emulators, automated scrapers, and malicious bots.
• Push Notification Tokens: Firebase Cloud Messaging (FCM) registration tokens to deliver timely push alerts for new mutual matches and direct chat messages.
• Crash & Diagnostic Logs: Anonymized performance telemetry and crash diagnostics to identify and resolve software bugs.

4. How We Use Your Information

Your personal information is processed exclusively for legitimate dating service operations:

• Generating mutual matches and candidate discovery decks based on your age and geographic preferences.
• Enabling real-time 1-on-1 text messaging and icebreaker exchanges between matched users.
• Verifying accounts, preventing spam, detecting harassment, and enforcing our Community Guidelines.
• Facilitating VIP subscription tier purchases and billing verification via Google Play Billing.
• Communicating critical service announcements, security alerts, and customer support responses.

5. Data Storage, Processing & Security

All member profile records, media assets, and chat messages are hosted in secure, isolated data centers operated by Google Cloud Platform (GCP) and Firebase within the Singapore region (asia-southeast1).

All data in transit is encrypted using modern industry-standard Transport Layer Security (TLS/HTTPS). Media assets stored in Cloud Storage are protected by granular Firestore Security Rules requiring authenticated owner permissions.

6. Third-Party Service Providers

We work with trusted enterprise cloud infrastructure providers to deliver our service:

• Google Cloud Platform & Firebase: Authentication, Cloud Firestore (database), Cloud Storage (photos), Cloud Functions (serverless matching engine), and Firebase Cloud Messaging (push alerts).
• Google Play Billing: Secure payment processing for in-app VIP subscriptions. OnlyFilipinas never accesses, handles, or stores your credit card, debit card, or payment credentials.

7. Your Rights Under Philippine RA 10173 & Google Play

As a data subject, you hold statutory rights including:

• Right to Be Informed: To understand how and why your personal data is collected and processed.
• Right to Access: To request a summary of your profile information stored on our servers.
• Right to Rectification: To edit and update your bio, photos, passions, and location at any time directly in the app.
• Right to Erasure (Account Deletion): To have your account, personal data, uploaded photographs, and chat transcripts permanently destroyed.

8. Account & Data Deletion Policy

In full accordance with Google Play's mandatory account deletion policy, we provide two simple methods for members to permanently delete their account:

1. In-App Deletion: Open the app > Navigate to Profile > Account Settings > Select "Delete Account" and confirm. Your account, authentication credentials, photos, and match records are permanently removed immediately.
2. Web Deletion Portal: If you have uninstalled the application or lost device access, you can submit a deletion request via our public web portal at onlyfilipinas.com/delete-account. Upon email ownership verification, all data is purged within 30 days.

9. Contact Our Data Protection Officer

If you have questions, feedback, or formal data privacy inquiries under the Philippine Data Privacy Act of 2012, please reach out to our designated Data Protection Officer: