Privacy Notice

• Member record: your name, nickname, Ateneo student email, student ID number, year, and course, taken from MISA's official member list.
• Google account details: your name, email address, and profile picture, provided by Google when you sign in.
• Participation records: activity attendance imported from approved event records, the stamps you earn, and rewards issued to you.
• Proof submissions: photos you upload as proof of an activity, any description you write, and the review decision.
• Session data: sign-in session records, which may include your IP address and browser information, used to keep you signed in and secure your account.

Please avoid uploading photos that show sensitive information, such as IDs, or people who have not agreed to be photographed.

• To confirm that you are an active MISA member before granting access.
• To record completed activities and show your stamp progress.
• To review proof submissions and award stamps.
• To determine and issue member rewards.
• To understand overall participation and improve MISA programs.

We process this data based on your consent when you sign in and MISA's legitimate interest in running its member-engagement program. We do not sell your data or use it for advertising.

Your stamps and submissions are visible to you and to authorized MISA HR officers who administer the program. Other members cannot see your records.

We rely on service providers to run the app: Google (sign-in), Convex (database), Cloudflare R2 (file storage), and Vercel (hosting). They process data only on MISA's behalf.

We keep your data only as long as needed for the current academic year's program and any reward or audit questions that follow. Afterward, proof photos and import files are deleted, and remaining records are deleted or anonymized unless the university or the law requires us to keep them longer.

Access requires an Ateneo Google account that matches MISA's member list. HR tools require an explicitly assigned admin role. Uploaded files are stored privately and shared only through short-lived links.

Under the Data Privacy Act, you have the right to:

• be informed about how your data is processed;
• access a copy of your data;
• correct inaccurate or incomplete data;
• object to processing or withdraw consent;
• have your data deleted or blocked;
• receive your data in a portable format;
• file a complaint with the National Privacy Commission (privacy.gov.ph).

You can view and download your data, or request its deletion, from your profile page.

Withdrawing consent or requesting deletion means MISA can no longer track your stamps or include you in rewards.

For questions or requests about your data, contact MISA Human Resources at misa.college.org@student.ateneo.edu.

We may update this notice. We will post changes here and update the date above.