Privacy Policy

UniDeals ("we", "us") is operated by Xylvir Technologies Corp. This policy explains how we collect and use your personal information when you use the UniDeals app and website, in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and the rules of the National Privacy Commission (NPC).

Who is responsible for your data

Xylvir Technologies Corp. is the personal information controller. You can reach our Data Protection Officer (DPO), Paul John Toral, at pj.toral@xylvir.tech for any privacy question or request.

Who this covers

This policy applies to students who use UniDeals and to visitors of our website.

Information we collect

• Account and profile: your name, email, phone number, date of birth, and school.
• Student verification: your student ID number and photos of your student ID, used to confirm you are a real student. This is sensitive personal information and we handle it with extra care.
• Usage: the deals you save, redemptions and savings, loyalty stamps, and searches.
• Location: your approximate or precise location, only if you allow it, to show deals near you. You can turn this off at any time in your device settings, and UniDeals still works without it.
• Payments: if you ever pay for a membership, payment is handled by our payment provider, PayMongo. We do not store your full card number, only limited references we need to manage your membership.
• Device and cookies (website): basic device and usage information, and cookies used to run and improve the site.

How and why we use it

We use your information to run UniDeals: to create and verify your account, personalize the deals you see, show deals near you, process any payment, keep the service safe and prevent fraud, provide support, and meet legal obligations.

Our legal bases include your consent, performance of our agreement with you, and our legitimate interests in operating and protecting the service.

When we share information

We share personal information only as needed: with PayMongo to process payments; with service providers who host and support the app (for example, cloud and analytics providers) under confidentiality obligations; with a partner store only to the minimum extent needed to complete a redemption you make; and with authorities when required by law.

We do not sell your personal information.

Transfers outside the Philippines

Some of our service providers may process data outside the Philippines. Where that happens, we take steps to keep your information protected consistent with the Data Privacy Act.

How long we keep it

We keep your information for as long as your account is active and as needed for the purposes above or to meet legal requirements. When you close your account, we delete or anonymize your personal information within a reasonable period, keeping only what the law requires.

How we protect it

We use organizational and technical measures to protect your information. No system is perfectly secure, and we continue to improve our safeguards, including the security of verification and redemption codes.

Your rights

Under the Data Privacy Act you have the right to be informed, to access and correct your information, to object to or withdraw consent for certain processing, to have your data erased or blocked in the cases the law allows, to data portability, and to be indemnified for damages.

To exercise any right, email our DPO, Paul John Toral, at pj.toral@xylvir.tech. You may also file a complaint with the National Privacy Commission (privacy.gov.ph).

Age requirement

UniDeals is for adults only. You must be at least 18 years old to create an account or use the service. We verify your date of birth as part of student verification, and we decline accounts for anyone under 18. If we learn that we hold information about someone under 18, we delete it.

Changes to this policy

We may update this policy. If we make a material change, we will let you know in the app or by email and ask you to review the updated policy.

Contact us

Xylvir Technologies Corp., 708 BE Residences, Laguardia, Lahug, Cebu City. Data Protection Officer: Paul John Toral (pj.toral@xylvir.tech). Support: info@xylvir.tech.