Privacy Policy

Last updated: May 28, 2026

Resibo ("we", "us", "our") operates the Resibo mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By using the App, you consent to the practices described in this policy.

1. Information We Collect

Account Information

• Mobile phone number (Philippine format) — required
• Email address — optional
• Password — optional. If provided, it is protected with one-way encryption; we cannot see or recover your actual password.
• Profile photo — optional, stored on your device only (never uploaded to our servers)

Receipt Data

• Photos of receipts you scan
• Extracted receipt information: store name, purchase total, date, and item list (line items, quantities, prices)
• Receipt category (e.g., Groceries, Health, Food & Dining)
• Image fingerprints used to detect duplicate or fraudulent submissions

Usage Data

• Points earned and redeemed
• Game play history and prize records
• Cashout / mobile-load fulfillment history
• Scan streaks and activity patterns
• Referral code usage
• Aggregate ad-interaction counts (e.g., how often ads load and are shown within the app), used only to measure and improve in-app performance — these are counts, not linked to any advertising profile or used to target ads

Technical Data

• Device type and operating system
• App version
• IP address (collected by our hosting infrastructure for rate-limiting and security)
• Mobile advertising identifier (Google Advertising ID on Android, IDFA on iOS) — collected by our advertising provider to serve ads. You can reset or limit this through your device settings.

2. How We Use Your Information

• To provide the service: Process receipt scans, calculate points, deliver mobile load prizes
• To prevent fraud: Detect duplicate receipts, enforce upload limits, identify suspicious activity
• To improve the App: Understand usage patterns and optimize the experience
• To fulfill prizes: Send mobile load to your registered phone number via our fulfillment partner
• To communicate: In-app notifications about prize delivery and account status

3. How We Store and Protect Your Data

• Passwords are protected with one-way encryption — we cannot see or recover them
• Sign-in sessions use secure tokens that expire automatically
• Receipt images are stored securely and are not publicly accessible
• We do not store payment card or bank account information

4. Third-Party Services

To operate the App, we rely on a small number of trusted service providers that may process your data on our behalf. We share only the minimum data each provider needs to do its job:

• Cloud hosting & storage — Stores your account record, receipt information, and receipt images, encrypted at rest.
• Receipt text recognition — Reads the text from your receipt photos. Images are processed only to read them and are not retained by the provider afterward.
• Mobile-load fulfillment — Delivers load prizes to your phone. We share your phone number and the load amount to complete delivery, and receive back your carrier (e.g., Globe, Smart) for our records.
• Advertising (Google AdMob) — Displays advertisements and collects your mobile advertising identifier and standard ad-engagement signals. See Google's Privacy Policy.

5. Your Rights Under the Data Privacy Act

As a data subject under RA 10173, you have the right to:

• Be informed — Know what data we collect and why (this policy)
• Access — Request a copy of your personal data
• Correct — Update inaccurate or incomplete information via your profile
• Erase — Delete your account and all associated data
• Object — Opt out of certain data processing
• Data portability — Request your data in a machine-readable format

To exercise any of these rights:

• Delete your account and data — use the Delete Account button in Settings. All personal data, receipts (including receipt images), and prize history are removed.
• Download a copy of your data — your account profile, receipt history, and fulfillment records are available in a machine-readable format. Contact us at the email below to request a copy.
• Update your information — edit your phone number or email from the Profile screen.
• Other questions or complaints — contact us at the email below.

6. Data Retention

• Active accounts: Account data, receipts, and receipt images are retained for the lifetime of your account so you can view your scan and prize history.
• Deleted accounts: When you delete your account, your account record, receipt metadata, and receipt images are removed at the time of the deletion request. Server backups, if any, may retain residual copies until the backup window rolls over.
• Cashout / fulfillment records: Mobile-load fulfillment records (which include the destination phone number and amount sent) are retained for up to 7 years after creation, after which they are automatically expired by our database, to satisfy financial-audit and fraud-investigation needs.
• Deleted-phone registry: When an account is deleted, we keep a record of the previously-registered phone number to prevent abuse of one-time signup bonuses. This registry stores only the phone number and deletion timestamp.
• Server logs: Operational logs are retained per our hosting provider's defaults. Logs are redacted to mask phone numbers (only the last four digits are shown).

7. Children's Privacy

Resibo is not intended for use by children under the age of 13. We require all users to confirm during signup that they are at least 13 years old, and that any user under 18 has parental or guardian permission to use the App. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided personal information through the App, please contact us at the email below.

8. Data Sharing

We do not sell, rent, or trade your personally-identifying information (your phone number, email, or anything else that identifies you as an individual). We share data only as follows:

• With the service providers described in Section 4, solely to operate the App (for prize fulfillment, hosting, receipt text recognition, and advertising).
• With law enforcement, regulators, or in response to a valid legal process when required by Philippine law.
• With a successor entity in the event of a merger, acquisition, or asset transfer, in which case the recipient will be bound by terms at least as protective as this policy.

9. Cookies and Tracking

The App does not use cookies. Google AdMob may use device advertising identifiers. You can reset your advertising ID or opt out of personalized ads through your device settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App. The "Last updated" date at the top indicates the most recent revision.

11. Contact Us

For privacy-related questions, data requests, or complaints: