Privacy Policy

Last updated: March 29, 2026

GABAY ("we", "us", or "our") is committed to protecting the privacy of students, educators, and school administrators who use GABAY. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

1.1 Account Information

When you register, we collect:

  • School name and contact information
  • Administrator name and email address
  • Username and password (encrypted)

1.2 Student Information

Schools may input the following student data:

  • Name, LRN (Learner Reference Number), and birthdate
  • Contact information and address
  • Attendance records
  • Academic grades and assessments
  • Enrollment history

1.3 Personnel Information

Schools may input data about teachers and staff:

  • Name, position, and employee ID
  • Contact information
  • Teaching assignments and schedules

1.4 Usage Information

We automatically collect:

  • Log data (IP address, browser type, access times)
  • Device information
  • Features and pages accessed

2. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service
  • Generate DepEd-compliant school forms and reports
  • Send important service notifications
  • Provide customer support
  • Improve and develop new features
  • Ensure security and prevent fraud

3. Data Privacy Act Compliance

We comply with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines. This includes:

  • Processing personal data only for legitimate purposes
  • Implementing appropriate security measures
  • Respecting data subject rights (access, correction, erasure)
  • Maintaining transparency about data processing activities

4. Data Storage and Security

We implement industry-standard security measures:

  • Encryption of data in transit (HTTPS/TLS) and at rest
  • Secure password hashing using Argon2
  • Regular security audits and updates
  • Access controls and authentication
  • Automatic backups with encryption

Data is stored on secure cloud infrastructure in compliance with international data protection standards.

5. Data Sharing

We do not sell your data. We may share information only:

  • With your consent
  • With service providers who assist in operating the Service (under strict confidentiality)
  • When required by law or legal process
  • To protect our rights, safety, or property

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, we retain data for a reasonable period to comply with legal obligations, after which it is securely deleted.

7. Your Rights

Under the Data Privacy Act, you have the right to:

  • Access - Request copies of your personal data
  • Correction - Request correction of inaccurate data
  • Erasure - Request deletion of your data (subject to legal requirements)
  • Data Portability - Receive your data in a structured format
  • Object - Object to certain data processing activities

To exercise these rights, contact us at privacy@gabay.ph.

8. Children's Privacy

The Service processes student data as directed by schools. Schools are responsible for obtaining appropriate parental consent for processing student data. We do not knowingly collect personal information directly from children under 13 without parental consent.

9. Cookies

We use essential cookies for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of material changes via email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

11. Contact Us

For privacy-related questions or concerns, please contact our Data Protection Officer:

Back to Home