Privacy Policy

GIYA is a pilgrimage companion for the churches of Cebu. This policy explains what personal data GIYA keeps, why, and what you can do about it, in line with the Data Privacy Act of 2012 (Republic Act No. 10173).

1. What GIYA collects

• Account: your name, email address and password. The password is stored only as a secure hash; nobody at GIYA can read it.
• Profile: a photo if you upload one, your language and theme, and your reminder settings.
• Your pilgrimages: itineraries you save, churches you mark as visited, favourites, churches you follow, and the ratings and reviews you write.
• Giya AI: the messages you send to Giya AI and its replies.
• Payments: the plan you bought, the amount, the date and the payment reference. Card and wallet details stay with Maya; GIYA never sees or stores them.
• Technical: your sign-in session, and your IP address and browser for security (for example, to stop too many sign-in attempts).

2. Why GIYA uses it

• To run your account and show you your itineraries, visits and favourites.
• To send the Mass and event reminders you ask for.
• To answer your questions in Giya AI.
• To process Premium payments.
• To keep GIYA safe and working, and to improve it using totals that do not identify you (for example, which churches are visited most).

GIYA does not sell your data and does not show advertising.

3. Your location

The map and an active pilgrimage use your device's location, only after your browser asks you and you allow it. Your location is used on your device to show where you are and to notice when you reach a church. GIYA's server does not keep a history of where you have been; it only records that you reached a stop.

4. Giya AI chats

To answer you, your message and the recent messages of that conversation are sent to Groq, the AI service GIYA uses. Please do not share private details such as ID numbers, card numbers or health information with Giya AI. Your chats are saved in your account so you can come back to them.

5. Payments

Premium is paid through Maya. You enter your card or wallet details on Maya's own page, and Maya's privacy policy applies to them. GIYA receives only whether the payment succeeded and its reference.

6. Who else handles your data

GIYA uses these services to run, and they process data only to provide their service to GIYA:

• Vercel and Render: host the website.
• Neon: stores the database.
• Supabase: stores uploaded photos.
• Groq: answers Giya AI messages.
• Maya: processes payments.
• OpenStreetMap map tiles: show the map.

Some of these services store data outside the Philippines. GIYA shares data with authorities only when the law requires it.

7. How long GIYA keeps it

GIYA keeps your data while your account exists. When you delete your account, your profile, itineraries, visits, reviews, chats, notifications and payment records are deleted at once.

8. Your rights

Under the Data Privacy Act you have the right to be informed, to access your data, to correct it, to object, to have it erased, and to file a complaint with the National Privacy Commission (privacy.gov.ph). In GIYA you can:

• see and change your name, email, photo and settings in Profile;
• delete itineraries, notifications and chats;
• delete your whole account in Profile, Preferences, Your data, Delete my account.

9. How GIYA protects it

GIYA uses HTTPS, hashes passwords, limits repeated sign-in attempts, keeps every API key on the server, and lets each account see only its own data. No system is perfectly secure; if a breach affects you, GIYA will tell you and the National Privacy Commission as the law requires.

10. Contact

For questions or requests about your data, contact the GIYA team.

If this policy changes, the date at the top changes and GIYA will show a notice in the app.