Legal

Privacy Policy

How we collect, use, and protect your personal information

Last Updated: January 15, 2026

Compliant with the Philippine Data Privacy Act of 2012 (RA 10173)

1. Introduction

AMAYA PH ('we', 'our', 'us') is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

This policy applies to all users of AMAYA PH, including students, teachers, schools, employers, parents, and visitors.

By using our Service, you consent to the collection and use of your information in accordance with this Privacy Policy.

We comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and other applicable data protection regulations.

2. Information We Collect

Personal Information: Name, email address, phone number, date of birth, address, and government IDs for identity verification.

Academic Information: School enrollment, courses taken, grades, attendance records, and academic achievements.

Work Information: Skills, work history, task completions, client ratings, earnings, and portfolio materials.

Financial Information: Payment details, bank account or e-wallet information, transaction history, and credit balances.

Device Information: IP address, browser type, device type, operating system, and unique device identifiers.

Usage Information: Pages visited, features used, time spent on platform, click patterns, and search queries.

Communication Data: Messages sent through the platform, support tickets, and feedback submitted.

Biometric Data: For identity verification purposes only, with explicit consent, such as facial recognition for exam proctoring.

3. How We Use Your Information

To provide and maintain our Service, including processing enrollments, matching students with work, and facilitating payments.

To personalize your experience through BATHALA AI, including customized learning paths and work recommendations.

To communicate with you about your account, updates, and promotional content (with your consent).

To process payments and manage the credit system, including automatic tuition allocation.

To verify identity and prevent fraud, unauthorized access, and violations of our Terms.

To generate analytics and insights for improving our platform and educational outcomes.

To comply with legal obligations and respond to lawful requests from authorities.

To facilitate the Student Monitoring System, sharing progress data with authorized parties based on your privacy settings.

4. Information Sharing & Disclosure

With Schools: Academic progress, attendance, and performance data for enrolled students.

With Parents/Guardians: Progress reports and notifications based on student's privacy settings (for users under 18, parents have default access).

With Employers/Clients: Work samples, ratings, and professional profile information for task matching.

With Service Providers: Third-party vendors who assist in platform operations (payment processors, cloud services, analytics).

With BATHALA AI: Your data is processed by our AI systems to provide personalized services.

For Legal Compliance: When required by law, court order, or to protect our rights and safety.

Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the new entity.

We do NOT sell your personal data to third parties for marketing purposes.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services.

Academic records and transcripts may be retained indefinitely for verification purposes.

Financial records are retained for a minimum of 10 years as required by Philippine tax and accounting laws.

Work history and portfolio data are retained to maintain your professional profile.

Upon account deletion request, we will delete or anonymize your data within 30 days, except where retention is required by law.

Backup copies may be retained for up to 90 days after deletion for disaster recovery purposes.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest (AES-256).

Access to personal data is restricted to authorized personnel on a need-to-know basis.

We conduct regular security audits and vulnerability assessments.

All payment processing is handled through PCI-DSS compliant providers.

We use secure authentication methods, including two-factor authentication (2FA) options.

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

In the event of a data breach, we will notify affected users and relevant authorities within 72 hours as required by law.

7. Your Rights

Right to Access: You can request a copy of your personal data we hold.

Right to Correction: You can request correction of inaccurate or incomplete data.

Right to Deletion: You can request deletion of your data, subject to legal and operational requirements.

Right to Portability: You can request your data in a commonly used, machine-readable format.

Right to Object: You can object to processing of your data for certain purposes, including direct marketing.

Right to Restrict Processing: You can request limitation of how we use your data.

Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise these rights, contact us at privacy@amaya.ph. We will respond within 30 days.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content.

Essential Cookies: Required for platform functionality (authentication, security, preferences).

Analytics Cookies: Help us understand how users interact with our platform (Google Analytics, Mixpanel).

Marketing Cookies: Used to deliver relevant advertisements (with your consent).

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.

We do not respond to 'Do Not Track' signals, but you can opt out of tracking through cookie settings.

9. Children's Privacy

AMAYA PH is designed for users aged 13 and above.

For users under 18, parental or guardian consent is required for account creation.

Parents/guardians have the right to access, correct, or delete their child's personal data.

We do not knowingly collect personal information from children under 13. If we discover such data, we will delete it promptly.

The Student Monitoring System provides parents with visibility into their child's academic and work progress.

10. International Data Transfers

Our primary servers are located in the Philippines, with backup facilities in Singapore for reliability.

Some service providers may process data in other countries. We ensure appropriate safeguards are in place for such transfers.

By using our Service, you consent to the transfer of your data to jurisdictions that may have different data protection laws.

We implement Standard Contractual Clauses and other mechanisms to ensure adequate protection for international transfers.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

Material changes will be communicated through email notification or prominent notice on our platform.

The 'Last Updated' date at the top indicates when the policy was last revised.

Continued use of the Service after changes constitutes acceptance of the updated policy.

We encourage you to review this policy periodically.

12. Contact Us

For privacy-related inquiries, concerns, or to exercise your data rights:

Data Protection Officer: privacy@amaya.ph

General Inquiries: info@amaya.ph

Phone: +63 920 434 0677

Address: Philippines

You also have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your privacy rights have been violated.

Your Privacy Matters to Us

If you have any questions about this Privacy Policy or how we handle your data, please contact our Data Protection Officer.

privacy@amaya.ph