Privacy Policy

This page explains the information GastoTrack uses in the capstone demonstration and where further privacy decisions are still needed before release.

1. Information processed

GastoTrack processes account and business details, orders, transactions, stock changes, and bug reports with optional screenshots. On Android, enabled notification access allows capture of supported GCash and Maya transaction signals. Receipt scanning reads an image selected or captured on the device; the current scanner saves extracted transaction details, not the full receipt photo.

2. How information is used

The information supports sign-in, sales and expense recording, payment review, stock tracking, owner reports, and bug investigation. Some staff records and wallet captures are stored on the device for offline use and later synchronization. AI requests send relevant extracted details, questions, or business context through the GastoTrack server to the configured AI provider.

3. Who can see information

Authorized staff access records for their business through the mobile app. Owners review their own business records through the web portal. Super Administrators manage platform accounts, subscriptions, and bug reports. The AI provider receives the information included in an AI request.

4. Storage and retention

Business records and submitted bug reports are stored on the server; some account, offline, and wallet data may also remain on the Android device. The project has proposed removing demonstration accounts and records within 90 days after final evaluation and removing unneeded raw wallet captures and bug screenshots within 30 days. These are proposed targets, not automatic deletion rules in the current system. The team must confirm and implement retention and deletion, including backups, before release.

5. Privacy requests

The Philippine Data Privacy Act of 2012 (RA 10173) provides rights that may apply to your information, subject to legal conditions. To ask about access, correction, deletion, or another privacy concern, email paghari-oncc.694.stud@cdd.edu.ph. The responsible organization and request process still need to be confirmed before release.