Privacy Notice
Last updated October 25, 2026
Kaya respects your privacy. This notice explains what we collect, why, and the rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173).
Who is responsible for your data
TODO_JOHN: legal name of the business that runs Kaya. You can reach us at privacy@yeskaya.com.
What we collect
- Your first name, email address, city or province, and the work you do.
- Your mobile number, only if you choose to give it.
- Your answers and results from the Skills Check and our other free tools.
- Where you signed up, for example an event page or a Facebook post.
- A record of the consent you gave, with the date and time.
- A scrambled version of your internet address (a "hash"), never the address itself, plus basic device details. We use these only to protect the site from spam and abuse.
Why we collect it
- To send you your results and the emails you asked for: class invitations, event materials and free resources.
- To choose class topics and speakers that match members' skill groups.
- To see which events and partners bring new members.
- To keep the site safe.
We use your data because you gave your consent when you signed up. You can withdraw it at any time.
Who processes it for us
We use trusted service providers to run Kaya. They may only use your data to provide their service to us.
- Supabase (our database, stored in Japan).
- Vercel (website hosting).
- MailerLite (our email newsletter).
- Resend (the emails our website sends right away, like your Skills Check result).
Some of these services store or process data outside the Philippines. We choose providers that protect data to a standard at least as high as Philippine law requires.
We never sell your information.
How long we keep it
We keep your data while you are a member, and for up to 24 months after your last activity. Then we delete it. We keep the record of your consent for as long as the law requires, as proof that you agreed.
Cookies
- 1 cookie that remembers where you first came from, for 30 days.
- 1 signed cookie that remembers you are a member, for 12 months, so you do not have to type your email again. It holds an ID number, not your email.
Our page statistics (Vercel Web Analytics) do not use cookies.
Your rights
You have the right to be informed, to access your data, to correct it, to object, to have it deleted, to get a copy you can take elsewhere, and to withdraw your consent. You can also file a complaint with the National Privacy Commission.
To use any of these rights, send a request on our privacy request page or email privacy@yeskaya.com. We reply within 15 days.
To stop our emails, use the unsubscribe link at the bottom of any email.
How we protect your data
Your data is stored in a private database that the public internet cannot read. Only our website server can add or read records, through locked functions. Connections to our site are encrypted.
Changes to this notice
If we change this notice, we update the date at the top and, for important changes, we email members.