Loading
Legal
Last updated: July 2026 — Compliant with the Philippine Data Privacy Act of 2012 (RA 10173)
BSIT Survival Kit is a study guide app for Filipino BSIT (Bachelor of Science in Information Technology) students. It is operated by a single independent developer.
As the personal information controller under RA 10173, the developer also serves as the Data Protection Officer (DPO). You can reach the DPO at: paneslawrence8@gmail.com
We only collect what we actually need. Here is what that looks like:
Name and email address
Your email is collected when you create an account. Your name, and optionally your age, gender, school, and course, are collected only if you fill in your profile — all of it is optional and you can delete your account and this data yourself at any time from your Profile page.
We previously ran a "notify me" waitlist for subjects that had no content yet. That is finished: every subject now has content, everyone who signed up was emailed, and their names and emails were deleted.
Device ID
A randomly generated identifier (UUID) stored in your browser's local storage. It is generated by your browser the first time you visit and stays on your device. This is not tied to your identity unless you also sign up with your email.
Behavioral data
Pages you visit, modules you open, and sections you read. This is linked to your device ID, not your name or email, unless you have signed up. We use this to remember your reading progress and to understand how students use the app.
GCash payment data
If you purchase access to premium content, we collect your GCash reference number and the amount paid. We do not collect your GCash account number or any bank credentials.
Code you submit in the playground
When you run code in the IDE playground, your code is sent to Judge0 (a third-party code execution service at ce.judge0.com) for processing. We do not store your submitted code on our own servers.
Account email and profile — to sign you in, keep your unlocked subjects tied to your account across devices, and personalize your dashboard. We will not use your email for anything else without your permission.
Device ID and behavioral data — to save your reading progress across visits and to understand which modules students find most useful, so we can improve the app.
Payment data — to verify your payment and activate your access to premium content.
We use a small number of trusted services to run the app. Here is what each one sees:
Supabase (Database — Singapore region)
Stores your name, email, device ID, and behavioral events. Data is hosted in Singapore. Supabase complies with relevant data protection standards.
Vercel (Web hosting — global edge network)
Serves the app globally. Vercel may process request metadata (IP addresses, headers) as part of normal web hosting operations, subject to their own privacy policy.
Judge0 (Code execution — ce.judge0.com)
When you run code in the playground, your code is sent to the Judge0 community instance for execution. Do not submit sensitive or personal data as code. Judge0 is an independent service with its own terms and privacy policy.
We do not sell your data to anyone.
As a data subject under the Philippine Data Privacy Act, you have the following rights:
Right to be informed — You have the right to know what data we collect and why. This policy is how we fulfill that.
Right to access — You can request a copy of the personal data we hold about you.
Right to rectify — You can ask us to correct inaccurate or incomplete data.
Right to erasure — You can delete your account and personal data yourself, any time, from your Profile page — or email us and we will do it for you. We will comply unless we are legally required to retain it (see Section 7).
Right to object — You can object to how we process your data, including for analytics purposes.
Right to data portability — You can request your data in a structured, commonly used format.
Right to file a complaint — If you believe your rights have been violated, you can file a complaint with the National Privacy Commission at privacy.gov.ph.
To delete your account — sign in, go to your Profile page, and use the "Delete my account" option. This removes your profile and unlinks your name from your subscription and progress history immediately.
For anything else (access, correction, or if you can't sign in), email us at paneslawrence8@gmail.com with the subject line Data Privacy Request. Please describe what you are requesting (access, correction, deletion, etc.) and we will respond within a reasonable time, and no later than the period required under NPC Circular 16-01.
Waitlist name and email — deleted once the subject you signed up for has content and we have notified you, since that is the only purpose we collected it for. All notify-me signups from the 2026 waitlist were deleted in July 2026 after everyone was emailed. The signup form is no longer in use.
Behavioral and analytics data — retained for up to 12 months, then deleted or anonymized.
Payment records — kept for as long as necessary to resolve disputes and comply with any applicable accounting or legal obligations.
Your data is stored in Supabase with encrypted connections (TLS in transit, AES-256 at rest). Admin access to the dashboard is protected by password authentication. We apply reasonable technical measures to protect your data, but no system is completely immune to breaches. If a breach occurs that affects your rights, we will notify you and the National Privacy Commission as required by law.
For any privacy-related questions, requests, or concerns, reach out to the Data Protection Officer:
This policy was written in plain English on purpose. If something is unclear, email us and we will explain it.