Privacy Policy

Effective October 1, 2026

HATD is a same-day pabili, delivery, and tricycle-ride service in Jagna, Bohol, operated by CodeLabsPH ("HATD", "we", "us"). This policy explains what personal data we collect, why, who we share it with, how long we keep it, and your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). It covers customers who book through the HATD Facebook Page on Messenger, drivers who use the HATD Driver app, and visitors to this website.

1. What we collect

If you book with us (customers)

• From Facebook and Messenger: your name, profile picture link, language setting, and the ID Messenger gives you for our Page. Meta shares these with us when you message our Page.
• What you tell us: your messages to our Page, pickup and drop-off addresses and landmarks, contact names and phone numbers (yours or the recipient's), the items to buy or deliver, the number of passengers, pickup times, and any notes.
• Booking records: the service, fare, status, dates and times, the driver assigned, and for pabili the receipt amount.
• Photos: if you send a photo for your driver, we keep only the link Messenger gives us so your driver can see it. We do not download or store the photo itself, and the link expires.

If you drive with us (drivers)

• Your name, phone number, email, and password (stored only as a secure hash).
• Your driver's license number, vehicle type, plate number, color, and body number, and your service area.
• Your availability, the bookings you accept, and your messages with customers.
• Your prepaid wallet: top-ups (with their GCash reference numbers), app fees, and refunds.
• The ID of the phone you use the app on and its push notification token, so we can send you new bookings.

If you visit this website

This website has no accounts, cookies, or analytics. Its fonts load from Google Fonts, so Google receives your IP address and browser details when you open a page. Like any website, our hosting provider may also keep standard technical logs (such as your IP address and browser type) for security.

2. How we use it

• To take, price, and confirm your booking, and to find a driver for it.
• To tell your driver where to go, what to buy or deliver, and how to reach you.
• To send you booking updates and relay messages between you and your driver.
• To run driver accounts and wallets, and to charge and refund app fees.
• To help with questions, complaints, and disputes, and to keep the service safe and prevent fraud.
• To keep the records the law requires.

We do not sell personal data, and we do not use it for advertising. Our booking assistant only prepares a booking; nothing is booked until you reply CONFIRM.

3. Our booking assistant (AI)

Messages you send to our Page are read by an automated assistant that turns your chat into a booking. To do this, the text of your messages and the booking details collected so far are sent to our AI service provider, OpenRouter, which passes them to an AI model provider (such as Anthropic) to process. We send only what is needed to understand your request. A person on our team can always review a booking.

4. Who we share it with

• Your driver: your name, phone, addresses, items, notes, and photo links for the booking they accept.
• Our dispatch team: to manage bookings and help customers and drivers.
• Service providers who process data for us: Meta (Messenger, which carries our messages), OpenRouter and AI model providers (the booking assistant), Expo and Google Firebase (notifications to the driver app), and our server and database hosting provider.
• Authorities, when the law requires it or to protect someone's safety.

Some of these providers process data outside the Philippines. We use providers that protect personal data, and we share only what each one needs.

5. How long we keep it

• Your profile, chats, and booking details are kept while you use HATD, until you ask us to delete them, or until we no longer need them.
• Booking amounts, dates, and driver wallet records are kept for as long as accounting and tax rules require, without your personal details once you ask for deletion.
• Photo links expire on their own; Meta decides when.

6. How we protect it

We use reasonable organizational, physical, and technical measures: encrypted connections, hashed passwords, verified Messenger messages, and access limited to the people who need it. No system is perfectly secure; if a breach affects you, we will notify you and the National Privacy Commission as the law requires.

7. Your rights

Under the Data Privacy Act you have the right to be informed, to access your data, to object, to have it corrected, to have it erased or blocked, to data portability, and to claim damages. To use any of these rights, message our Facebook Page or email [email protected]. You can also file a complaint with the National Privacy Commission.

To ask us to delete your data, see Delete your data.

8. Age

HATD is for people 18 and older, or younger people with a parent's or guardian's permission. Drivers must be at least 18 and hold a valid driver's license.

9. Changes to this policy

When we change this policy, we update this page and its effective date. If the change is significant, we will tell you in Messenger or in the driver app.

10. Contact us