Privacy Policy
In short: you can study without an account, and then your progress stays in your own browser. If you create an account, we keep your email, a display name and your study setup on our account server, plus two progress numbers for the anonymous “Growing together” field. We do not sell data, show ads or track you across other sites.
1. Who we are
inhinyerongmagsasaka.com (“we”, “us”) is a free, open-source review website for the Philippine Agricultural and Biosystems Engineering Licensure Examination. It is an independent project and is not affiliated with the Professional Regulation Commission (PRC) or the Professional Regulatory Board of Agricultural and Biosystems Engineering. For anything in this policy, write to [email protected].
2. Studying without an account
Your answers, study days, flashcard schedule, mock exam results, lesson progress, learning profile, settings and question reports are saved in your browser's local storage on your own device. They are not sent to us. You can export or reset them from the Progress page, or remove them by clearing the site's data in your browser (export first if you want to keep them).
3. With an account
An account is optional. When you create one, we keep the following on our account server:
| What | Why |
|---|---|
| Your email address | To sign you in, confirm your account and send password-reset emails. |
| Your password, hashed (email sign-in only) | To sign you in. We never see or store it in plain text. |
| A display name (it need not be your real name) | To greet you in the app. |
| Your study setup: exam date, Part, goal, study rhythm, optional school, and whether you describe yourself as an exam taker, student or licensed ABE | To plan your study. Your school is optional and is never shown with your name. |
| Privacy switches (all off at the start) | To respect your choices. |
| Your overall progress and mock-exam average (whole percent), and the date of your last visit | To draw your plant in the anonymous “Growing together” field (section 5). |
| Question reports you send, and roles (for peer reviewers) | To fix mistakes in questions and to run the review process. |
Your detailed answers, flashcards, mock results, rank and learning profile still stay on your device for now. If we add backup to your account later, we will update this policy first.
We never ask for grades, a transcript of records, government ID numbers or a phone number.
4. Google user data (if you sign in with Google)
Signing in with Google is optional; you can also sign in with an email and password, or study without an account.
What we access. When you choose “Continue with Google”, we request only Google's basic sign-in scopes (openid, email and profile). Google then shares with us your email address, your name, your profile picture address and a Google account identifier. We do not request or access any other Google data: no Gmail, Drive, Contacts, Calendar or other Google services.
How we use it. We use this data only to create your account, sign you in and keep you signed in, and to send you account emails (confirmation and password reset) at that email address. Your name and picture are not shown to other users. We do not use Google user data for advertising, we do not sell it, we do not use it to build profiles for anyone else, and we do not use it to train artificial-intelligence or machine-learning models.
Who we share it with. We do not share, sell, transfer or disclose Google user data to third parties, except to the service providers that run the sign-in for us and only for that purpose: Supabase, which hosts our sign-in service and database, and Resend, which delivers account emails to your address (section 6). We would also disclose it if the law requires it.
How we protect it. Google user data travels only over encrypted connections (HTTPS/TLS) and is stored encrypted at rest by our database provider. Database rules let each person read and change only their own record; access for administration requires a second sign-in factor; no one at the project can see your Google password, which never reaches us.
How long we keep it, and how to delete it. We keep Google user data for as long as your account exists. To delete your account and all Google user data we hold, email [email protected] from the address on your account; we delete it within 30 days and confirm by email. You can also remove our access at any time in your Google Account under Third-party apps and services; after that we cannot receive new data from Google, and you can still ask us to delete what we hold.
Limited Use. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
5. What other people can see
Only one thing about you is visible to others: an unnamed plant in the “Growing together” field on the Home page, which carries only your overall progress and mock average. It never shows your name, email or school. The field also shows how many learners and how many schools take part, as counts only. After 90 days without a visit, your plant rests out of the field; your account is not removed, and the plant returns at the same stage when you come back.
Nothing else is shown to other people unless you switch it on in a future setting. Peer reviewers and the site owner cannot read your study setup; the owner sees account status only to handle abuse.
6. Service providers we use
- Supabase (database and sign-in), servers in Singapore: stores the account data in section 3.
- Cloudflare (hosting, security and visit counts): delivers the website and protects it from attacks. Cloudflare Web Analytics counts page visits (page, country, device type, load speed) without cookies and without following you to other sites.
- Resend (email delivery): sends sign-up confirmations and password-reset emails to your address.
- Google: only if you choose Google sign-in (section 4).
These providers process data on our behalf under their own security and privacy terms. Some of them process data outside the Philippines.
7. Cookies and local storage
We do not use advertising or tracking cookies. The site saves your study progress in your browser's local storage, and when you are signed in, the sign-in service keeps your session there as well, so you stay signed in.
8. How long we keep data
We keep account data until you delete your account or ask us to. Question reports you sent stay after deletion, without your name, so the fix can still be traced. Data on your device stays until you clear it.
9. Your rights
Under the Data Privacy Act of 2012 (Republic Act No. 10173) you may ask to be informed about, access, correct, object to, export (data portability) or erase the personal data we hold about you. Email [email protected] from the address on your account and we will act on it within 30 days. In-app export and account deletion will be added; until then, email is the way. You may also complain to the National Privacy Commission.
10. Security
Traffic is encrypted (HTTPS). Account data is protected by database rules that let each person read and change only their own record. Administrative actions need a second sign-in factor. No system is perfectly secure; if a breach affecting you happens, we will notify you and the National Privacy Commission as the law requires.
11. Age
The site is meant for college students and graduates preparing for the licensure exam. If you are under 18, ask a parent or guardian before creating an account.
12. Changes
If we change this policy, we will update the date above and, for important changes, tell signed-in users in the app before the change applies.