Privacy Policy
Last updated: September 2026
1Introduction
Kabisado (“we”, “our”, or “the Service”) values your privacy and is dedicated to safeguarding student personal data. This Privacy Policy outlines how we collect, use, store, and protect your information in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.
2Information We Collect
We collect only the information necessary to provide our educational and study review services:
Account Information
Email address, display name, and authentication tokens (including via Google Sign-In).
Uploaded Study Content
Lecture slide PDFs, summaries, and text notes submitted for flashcard generation.
Study Usage Data
Decks created, spaced repetition review logs, AI tutor chats, and login timestamps.
Payment Details
Processed securely by PayMongo. We never receive or store full card numbers or sensitive e-wallet credentials.
3How We Use Your Information
Your data is processed strictly for legitimate academic and service purposes:
- To extract key concepts and generate tailored review flashcards;
- To calculate your spaced repetition schedules and track mastery over time;
- To process Pro subscription upgrades and generate official payment invoices;
- To communicate important account alerts or educational updates;
- To deliver customer support and resolve technical or billing inquiries.
4Third-Party Service Providers
To provide a fast and secure service, we collaborate with reputable third-party infrastructure providers:
- Supabase: Cloud database, user authentication, and secure encrypted file storage.
- OpenRouter: AI model interface for analyzing uploaded study material and generating question sets.
- PayMongo: Licensed Philippine payment gateway facilitating GCash, Maya, QR Ph, and card transactions.
- Google: Optional single sign-on (OAuth) authentication.
- Vercel: Global application hosting and serverless edge delivery.
Each of these third parties operates under strict data protection commitments and privacy policies governing data processed on our behalf.
5Data Retention & Deletion
We retain your account data, decks, and review records for as long as your account remains active. If you choose to leave Kabisado, you can permanently delete your account and all associated decks directly from your account Settings, or by contacting support. Upon account deletion, all personal records, decks, cards, and review logs are purged from our database.
6Data Security & Safeguards
We maintain robust administrative, technical, and physical safeguards designed to prevent unauthorized access, disclosure, or modification of your data. All communication between your browser and our servers is encrypted using Transport Layer Security (TLS/HTTPS), and access to backend systems is strictly restricted.
7. Your Rights Under the Data Privacy Act
As a data subject under RA 10173, you are entitled to specific rights regarding your personal information:
- Right to be Informed: To know whether your personal data is being processed;
- Right of Access: To request a copy of your personal data stored in our systems;
- Right to Rectification: To correct inaccurate or outdated information;
- Right to Erasure or Blocking: To request complete deletion of your account and personal data;
- Right to Object: To withhold consent or object to specific processing purposes.
To exercise any of these statutory rights, please email us at support@kabisado.online or use the self-service account deletion tool in your Settings page.
8Children's Privacy
Kabisado is developed for high school, college, and university students aged 13 and above. We do not knowingly solicit or collect personal information from children under the age of 13. If you believe a child under 13 has submitted data to us, please notify us so we can immediately remove the record.
9Cookies & Local Storage
We utilize only essential cookies and browser local storage required for authentication sessions, security verification, and app preferences (such as light/dark theme preference and temporary tutor chat states). We do not employ third-party behavioral advertising or invasive marketing trackers.
10Updates to this Privacy Policy
We may revise this Privacy Policy periodically to accommodate product improvements or statutory updates. When significant changes occur, we will provide notice through the Service or via email where appropriate.
11. Contact & Data Protection Officer
For any privacy inquiries, data subject requests, or questions regarding our privacy practices, please contact our Data Protection team at: