1. Who we are
Fati Market is a student marketplace app where you can offer items for sale, buy listed items, pay in cash or through GCash, earn loyalty points, and pick up your orders on campus. In this policy, “we” means the operator of Fati Market, who is responsible for your information.
Fati Market is an independent project. It is not owned, operated, sponsored, or endorsed by Our Lady of Fatima University or any other school. We use school email addresses only to confirm that you are a student. The school does not receive your data from us.
2. What we collect
We collect only what the app needs in order to work. Nothing here is used for advertising.
| Information | Why we need it |
|---|---|
| Your name — first and last | To identify you to the admin when you place an order or offer an item. |
| Your school email address | This is your login, and how we confirm you are a student. |
| A personal email address, if you add one | So you can still recover your account after you graduate and lose access to your school inbox. Optional. |
| Your password | Stored only as a scrambled (hashed) value. We cannot read it, and neither can anyone who obtains the database. |
| Google account name and email, if you use “Continue with Google” | To create or sign you into your account. We receive a one-time sign-in token from Google. We never see or store your Google password. |
| Photos of items you list | So buyers can see what is for sale. Other users can see these. |
| Your orders and transactions | Items bought and sold, prices, order status, receipt numbers, and your loyalty point balance. |
| GCash reference number and payment screenshot | To manually confirm that a payment actually arrived. See section 5. |
| Messages you send | Chat about a specific item goes to the Fati Market admin so they can answer you. Admins can read these. |
| Pickup codes | The QR code shown at pickup, so staff can confirm the right person collected the right order. |
| A notification token for your device | An identifier issued by Google that lets us send you order and chat notifications. It does not identify you personally. |
What we do not collect
We do not collect your location, your contacts, your calendar, your call or SMS history, files other than the photos you deliberately pick, or a list of the other apps on your phone. The app contains no advertising and no analytics or tracking software.
3. Device permissions
The app asks for these Android permissions, and only for these reasons:
- Camera — to scan the pickup QR code and to take photos of items you are listing. The camera runs only while a scanner or photo screen is open. We do not record video or audio, and nothing is captured in the background.
- Notifications — to tell you when your order status changes or when the admin replies to your message. You can turn these off in your phone's settings and keep using the app.
- Internet and network access — to communicate with our server, and to tell you when you are offline.
You can withdraw any of these permissions at any time in your device settings.
4. How we use your information
- To create your account and sign you in.
- To show your listings to other students and process orders.
- To confirm payment and hand over the right order at pickup.
- To calculate and apply your loyalty points and discounts.
- To let you and the admin message each other about an item.
- To send you notifications about your own orders and messages.
- To keep the records the admin needs to run the marketplace and settle disputes.
- To investigate fraud, abuse, or misuse of the service.
We do not sell your personal information, rent it, trade it, or share it with advertisers or data brokers. We do not use it to build advertising profiles.
5. Payments
Fati Market does not process payments electronically and has no payment system built into it. Cash is handled in person. GCash payments are made outside the app, in the GCash app, and are then confirmed manually.
This means we never see and never store your card number, bank details, GCash PIN, or GCash login. The only payment information that reaches us is the reference number you type in and the screenshot you choose to upload as proof. If you would rather keep the rest of your GCash activity private, crop the screenshot so it shows only the transaction, not your balance or other transfers.
7. How long we keep your information
- Account details — for as long as your account exists.
- Order and transaction records — kept after an order finishes, because they are the marketplace's financial records and are needed to settle disputes.
- Payment proof screenshots — kept while the order can still be disputed, then deleted.
- Messages — kept for as long as the related item record exists.
- Notification tokens — removed when you sign out or uninstall the app.
8. Your rights
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to:
- Know what personal information we hold about you, and ask for a copy of it.
- Correct anything that is wrong or out of date.
- Object to how we use your information, or ask us to stop.
- Have your information erased or blocked where the law allows it.
- Complain to the National Privacy Commission if you believe your rights were violated.
To exercise any of these, email us at admin@fatimarket.com. We will respond within 30 days. We may ask you to confirm your identity first, so that nobody else can request your data.
9. Deleting your account and data
You can ask us to delete your account at any time. Email admin@fatimarket.com from the email address on your account, with the subject line “Delete my account”.
Once we confirm the request:
- Your name, email addresses, password, listings, photos, messages, and notification token are permanently deleted within 30 days.
- Completed order and payment records are kept but anonymised, so they can no longer be traced back to you. We keep these because they are the marketplace's financial records.
- Any unused loyalty points are forfeited and cannot be restored.
Deletion is permanent. We cannot bring an account back once it has been removed.
10. Children
Fati Market is intended for university students. It is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it. If you are under 18, please use the app with the knowledge and consent of a parent or guardian.
11. How we protect your information
Traffic between the app and our server is encrypted with HTTPS. Passwords are stored only as hashes and are never readable, even by us. The admin console requires a separate login, and admin sessions expire.
No system is perfectly secure, and we cannot promise absolute safety. If a breach ever affects your personal information, we will notify you and the National Privacy Commission as the Data Privacy Act requires.
12. Changes to this policy
We may update this policy as the app changes. The “last updated” date at the top always reflects the current version. If a change materially affects how we handle your information, we will tell you in the app or by email before it takes effect. Continuing to use Fati Market after that means you accept the updated policy.
13. Contact us
For any question about this policy, your data, or a deletion request:
- Email: admin@fatimarket.com
- Subject line for data requests: “Data request” or “Delete my account”
- We reply within: 30 days
You may also raise a concern directly with the National Privacy Commission of the Philippines at privacy.gov.ph.