Introduction
Welcome to Byaheroo. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Byaheroo mobile application and related services.
By using Byaheroo, you consent to the data practices described in this policy. If you do not agree with the terms of this policy, please do not use the application.
This policy applies to all users of Byaheroo, including Financers and Collectors. We operate under Philippine data privacy laws, including the Data Privacy Act of 2012 (Republic Act No. 10173).
Data We Collect
We collect information that you provide directly to us, information we collect automatically, and information from third parties.
Personal Identification
- Name — your full name as provided during registration
- Email address — used for authentication and communication
- Profile photo — optional, provided by your Google or Apple account
- Government-issued ID — collected during KYC verification for collectors
Location Data
- GPS coordinates — collected in real time when the app is in use, for route optimization and collector tracking
- Last known location — stored in your user profile for financer visibility
- Customer address pins — GPS coordinates saved during KYC onboarding
Financial Data
- Loan amounts, terms, and repayment schedules
- Payment records, collection history, and receipt photos
- Customer (borrower) information including name, address, and loan details
Device & Usage Data
- Device type, operating system, and app version
- Push notification tokens for collection reminders
- App usage logs and crash reports (via Firebase Analytics)
How We Use Data
We use the information we collect to:
- Provide, operate, and maintain the Byaheroo application
- Authenticate users and manage accounts
- Enable collectors to receive assignments and financers to monitor collections
- Generate optimized collection routes using GPS data
- Record and track loan payments immutably
- Send notifications about loan due dates and payment confirmations
- Prevent fraud and enforce our Terms of Service
- Comply with applicable laws and regulations
We do not sell your data to third-party marketers or use it for advertising.
Data Sharing
We do not sell, trade, or rent your personal information. We may share data in the following limited circumstances:
Within Your Tenant
Within your organization (tenant), financers can view collector profiles, locations, and collection activities. Collectors can only access loan records assigned to them.
Service Providers
- Google Firebase — authentication, database, cloud storage, and analytics
- Google Maps Platform — location services and route display
- Expo / EAS — app distribution and over-the-air updates
Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities.
Data Security
- All data is encrypted in transit using TLS/HTTPS
- Firebase Security Rules enforce strict tenant isolation
- Authentication tokens are stored securely using device-level encryption (Expo Secure Store)
- Payment records are immutable after creation — they cannot be edited or deleted
- Access control is role-based: Collectors cannot access financer dashboards or other collectors' data
Your Rights
Under the Data Privacy Act of 2012, you have the following rights:
- Right to be informed — to know how your data is collected and used
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to correct inaccurate or incomplete personal data
- Right to erasure — to request deletion of your data (see below)
- Right to data portability — to receive your data in a machine-readable format
- Right to object — to object to processing your data in certain circumstances
To exercise any of these rights, contact us at cmichaeljay@gmail.com. We will respond within 30 days.
Delete Your Account
You have the right to delete your Byaheroo account and associated personal data at any time. Please read the important information below before proceeding.
What gets deleted:
- Your user profile (name, email, role, profile photo)
- Your authentication credentials
- Your last known location and device tokens
What is retained for legal and regulatory compliance:
- Loan and payment records (required by Philippine lending regulations)
- KYC documents associated with borrowers you onboarded
You can delete your account in two ways:
Option 1 — Delete in the App
The fastest way to delete your account:
- 1Open the Byaheroo app and go to Settings
- 2Scroll to the bottom and tap "Delete Account"
- 3Confirm the deletion when prompted
Option 2 — Request via Email
Send a deletion request to our support team with your registered email address and we will process it within 5 business days.
✉ Send Deletion Request