Privacy Notice
DYCI Campus Claim Check · Last updated [date]
This notice explains what personal information the DYCI Campus Claim Check collects, why, how long it is kept, and your rights under the Data Privacy Act of 2012 (Republic Act No. 10173). The checker is a student research project at Dr. Yanga’s Colleges, Inc. (DYCI) that compares messages about campus announcements with DYCI’s own posts.
Who is responsible for your information
The project team of [thesis title / section], [names of the researchers], under the supervision of [adviser]. Contact: [project email]. For concerns with DYCI as an institution, you may also contact the DYCI Data Protection Officer at [DPO email, if available].
What we collect, and why
| Information | When | Why |
|---|---|---|
| Your DYCI email address and the name on your Google account | When you sign in with Google | To let only the DYCI community use the checker, and to show you whose account is signed in |
| The dates and times you first and last signed in | When you sign in | To manage accounts (for example, to find inactive ones) |
| Whether you turned on “Keep a history of my checks” | When you change it | To respect your choice. History is off unless you turn it on |
| Only if you turn history on: each message (and link) you check, when, the answer, and the DYCI post it was based on. For a picture, only that it was a picture check and its result; never the picture | When you run a check while history is on | So you can see your past checks under My checks and check them again. Only you can see them; administrators cannot |
| A scrambled (hashed) form of your sign-in session | While you are signed in (up to 30 days) | To keep you signed in without asking again |
| Daily counts of checks (how many, which kind, which outcome) | For every check | To monitor and evaluate the system. These counts contain no message, picture, link, name or address |
What we do not collect
- Your Google password. Google confirms who you are; the checker never sees your password.
- The messages and links you check, unless you turn on history. They are processed only to give you an answer and are not saved.
- The pictures you check, ever. They are processed only to give you an answer and are not saved, even with history on.
- Your location, your contacts, your photo from Google, or your device’s address in our records.
Who receives your information
- Google provides “Sign in with Google” under its own privacy policy.
- Tailscale carries the encrypted connection from the internet to the checker’s computer.
- We do not sell, share or publish your information. Account details are visible only to the project’s administrators.
How long we keep it
- Sign-in sessions: up to 30 days, or until you sign out.
- Your account: until you delete it, or until [end date, e.g. the end of the project / AY 2026–2027], when all accounts are deleted.
- My checks (only if history is on): the newest 50 per account, each for at most 90 days. You can delete one, or all, at any time; turning history off lets you delete them too.
- Daily counts: 400 days. They contain no personal information.
How we protect it
The information is kept in a database on the project’s computer, reachable only through the checker. Connections from the internet are encrypted (HTTPS). Only a hash of each sign-in session is stored, administrators cannot see anyone’s saved checks through the checker (the database file stays on the project’s computer, which only the project team can open), and an administrator can disable an account that misuses the service.
Your rights
Under the Data Privacy Act, you may ask to know what information we hold about you, have it corrected, object to its processing, and have it deleted. You can delete your account yourself at any time: Account → Delete my account. This erases your name, email, sign-in record, history choice and saved checks. For anything else, contact [project email]. You may also file a complaint with the National Privacy Commission (privacy.gov.ph).
Your consent
By signing in with your DYCI Google account, you agree to the processing described here. You can withdraw it by deleting your account.