Sugoa Ko

Privacy Policy

Last updated: July 2026

Sugoa Ko respects your privacy and processes personal data in line with the Philippine Data Privacy Act of 2012 (RA 10173). This page explains what we collect, why, and your rights.

1. What we collect

  • Account data — name, email, mobile number, city/municipality.
  • Location data — your city, and only when you choose to drop a map pin for a listing or errand, the precise location you set. You can decline the location permission and set an area manually instead.
  • Verification data (Magpasugo only) — photos of a valid government ID (front and back) and your GCash payout number.
  • Photos you upload — images you attach to your marketplace items, skill listings, or errands.
  • Transaction data — errands you post or run, bids, agreed amounts, payment proofs, receipts, payout references.
  • Communications — in-app chat messages (which are moderated) and support conversations.
  • Technical & diagnostic data — push notification subscriptions for your devices, standard server logs, and crash/error diagnostics we use to fix bugs.

2. Why we collect it

  • to match errands with nearby runners and operate escrow payments and payouts;
  • to verify Magpasugo identity and keep the marketplace safe;
  • to moderate chats, resolve disputes, and prevent fraud;
  • to send you notifications you have opted into;
  • to diagnose crashes and improve the app;
  • to comply with legal obligations.

3. Who can see your data

  • Other users see only your name, city, rating, and Magpasugo profile (categories, bio, service area). Your phone, email, ID photos, and payment details are never shown to other users.
  • ID photos and payment proofs are visible only to Sugoa Ko’s verification staff.
  • Chat messages are visible to the two participants and Sugoa Ko moderators.
  • We do not sell your personal data to anyone.

3a. Automated moderation (AI)

To keep everyone safe, chat and support messages are also screened by an automated moderation system. This includes automatic masking of contact details and an AI review step: message text (with a few surrounding messages for context) is processed by a third-party AI provider (currently OpenAI) to detect scams, attempts to move payment outside the app’s escrow protection, and harassment, and to help our team answer support questions faster. What this means in practice:

  • Only message text is analyzed — never your password, ID photos, or payment credentials.
  • Per our provider’s API terms, this data is not used to train their models.
  • The system may post an automated safety reminder into a chat as “Sugoa Ko Moderator.”
  • Flagged messages are reviewed by human moderators — decisions that affect your account or your money are always made by people, not by the AI.

4. Service providers

We share data only with the providers that run Sugoa Ko, each bound to protect it:

  • Supabase — database and file storage;
  • Vercel — app hosting;
  • PayMongo — processes online payments and GCash payouts (QR Ph / InstaPay);
  • Resend — transactional email;
  • OpenAI — processes message text for the safety moderation described above;
  • Sentry — crash and error diagnostics.

Your records are protected by row-level security so each account can only access its own data.

5. Retention

Transaction and chat records are kept while your account exists — they are the audit trail that makes escrow and dispute protection possible. If your account is deleted, your profile and personal records are removed; a limited set of transaction records may be retained in anonymized form where required by Philippine financial and tax law.

6. Your rights & account deletion

Under the Data Privacy Act you may request access to, correction of, or deletion of your personal data, and you may withdraw consent. You can delete your account any time from Profile → Delete my account in the app (details on our account deletion page). For any privacy request, contact us at support@sugoa-ko.com or via Profile → Contact Sugoa Ko.

7. Age

Sugoa Ko is intended for users 18 and older. It is not directed to children, and we do not knowingly collect personal data from anyone under 18.

8. Changes

Material changes to this policy will be announced in-app before they take effect.